This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json) Hash identifier: jpOWu9VaOkoK5r4To8dS5UwcZKayyQ6D0XgK6XexW68= Subject key identifier: 4C:B0:12:E6:4B:59:09:DB:D3:FB:0C:C1:9E:67:F7:16:2E:3F:11:71 Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Certificate serial: 019B262D33F0260F7130BFF6F16DD38DEDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 08:00:55 +0000 Manifest this update: Tue 16 Dec 2025 08:00:55 +0000 Manifest next update: Wed 17 Dec 2025 08:00:55 +0000 Files and hashes: 1: 5XDYqOGZ0RBBKO0tNQVtQfCS9Wg.roa (hash: 8v0kYzcJWu+TAkPVdBOzyNTyiBLW9zT8UuMidU5kl/I=) 2: g9JYtF8ph5GLoyu-Nq2vbYm-D1I.roa (hash: Cvh5BPuE+knEynT2OCQwuxH59fgMDl8/lGUoeYUQxFY=) 3: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: /LO8Wo2afnGaswC7YgGZ7l/kRK0cfCggnJlZREUAeeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:33:f0:26:0f:71:30:bf:f6:f1:6d:d3:8d:ed:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35 Validity Not Before: Dec 16 08:00:55 2025 GMT Not After : Dec 17 08:00:55 2025 GMT Subject: CN=4cb012e64b5909dbd3fb0cc19e67f7162e3f1171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a0:69:d2:c2:66:dd:c8:d5:4a:a0:a9:3e:94: cc:7a:37:a4:db:da:cb:37:63:16:d6:69:4a:49:af: 8e:1c:0f:61:77:6a:e5:a5:4e:41:62:6e:fe:96:0d: 70:08:8b:01:a2:ba:b3:af:fb:b9:76:e8:84:f4:18: 40:6b:d6:a1:52:19:88:79:45:54:f7:61:49:2e:2e: 30:6a:d5:e5:5c:18:89:e6:49:a2:87:c8:37:58:bf: 24:cd:ed:69:4c:88:19:1d:9d:58:e4:f8:bc:f9:7b: 8a:82:45:ee:12:e1:dc:1f:1a:d6:5d:46:23:e8:c0: 25:a2:25:6f:3d:35:e7:c1:70:a3:c3:b3:6a:ba:8e: 20:b1:9d:5b:29:50:a8:45:08:b6:eb:39:8a:33:2d: a8:cb:94:5b:3a:3a:17:8b:7a:40:b3:55:dc:96:1f: 0f:16:f7:20:e5:ee:cd:a5:75:4b:f2:11:e2:4c:64: dc:05:9a:b6:bc:8f:35:09:51:9a:4e:50:e1:4f:6c: 5e:6c:b3:e5:cf:3f:eb:f1:53:04:a2:48:98:1e:52: 60:d1:aa:6a:f6:21:03:bf:b2:33:53:1b:79:3a:8a: 96:a4:46:22:68:09:2c:89:ec:a5:1d:e3:5d:c1:68: 01:b5:ef:57:c3:53:42:a9:1d:d8:f4:43:db:fb:a3: 20:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:12:E6:4B:59:09:DB:D3:FB:0C:C1:9E:67:F7:16:2E:3F:11:71 X509v3 Authority Key Identifier: keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:63:b1:71:4a:f8:ca:6c:be:e0:8a:ac:1d:a2:68:57:90:26: ff:8e:a8:83:82:56:14:2a:53:98:ce:5d:71:71:5e:10:e5:73: 38:5f:12:93:88:d1:a2:a4:0f:78:58:c7:f2:b3:6c:4d:b8:d8: 75:70:d4:51:ef:f0:e9:18:c2:38:80:71:86:3a:4b:84:7e:53: 4a:ab:8a:ad:4e:c6:a3:30:0d:65:c5:41:88:9f:6b:dd:2f:d5: 97:56:09:27:a2:f1:ca:6d:41:c4:cc:ff:c2:0a:b6:bf:67:17: 67:9c:b9:df:8b:df:6c:04:04:97:22:36:21:56:bb:1d:61:27: ed:70:8e:03:50:d3:a9:33:34:9d:26:e7:da:8a:32:54:24:57: 8d:dc:8f:9b:1a:d0:11:97:fb:6c:f9:02:30:c6:5b:36:8c:c2: 97:a0:74:50:ca:44:46:b6:58:6a:e8:33:04:66:e3:67:05:e6: 47:03:a3:4f:4a:08:24:21:25:8a:54:e1:63:ab:b0:3c:0f:91: 48:9a:98:cc:fa:bb:8e:d5:f8:c4:3d:40:e3:47:a1:4e:14:83: 45:ff:93:b4:ac:27:ff:d5:ef:2f:56:9b:3b:b9:94:0c:4a:d9: 6b:64:11:90:31:e1:82:2a:12:90:0c:a4:68:63:87:d2:90:60: 9a:90:89:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLTPwJg9xML/28W3Tje3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl OTZjMzUwHhcNMjUxMjE2MDgwMDU1WhcNMjUxMjE3MDgwMDU1WjAzMTEwLwYDVQQD Eyg0Y2IwMTJlNjRiNTkwOWRiZDNmYjBjYzE5ZTY3ZjcxNjJlM2YxMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qBp0sJm3cjVSqCpPpTMejek29rL N2MW1mlKSa+OHA9hd2rlpU5BYm7+lg1wCIsBorqzr/u5duiE9BhAa9ahUhmIeUVU 92FJLi4watXlXBiJ5kmih8g3WL8kze1pTIgZHZ1Y5Pi8+XuKgkXuEuHcHxrWXUYj 6MAloiVvPTXnwXCjw7Nquo4gsZ1bKVCoRQi26zmKMy2oy5RbOjoXi3pAs1Xclh8P Fvcg5e7NpXVL8hHiTGTcBZq2vI81CVGaTlDhT2xebLPlzz/r8VMEokiYHlJg0apq 9iEDv7IzUxt5OoqWpEYiaAksieylHeNdwWgBte9Xw1NCqR3Y9EPb+6MgtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEywEuZLWQnb0/sMwZ5n9xYuPxFxMB8GA1UdIwQY MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4 LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmOxcUr4 ymy+4IqsHaJoV5Am/46og4JWFCpTmM5dcXFeEOVzOF8Sk4jRoqQPeFjH8rNsTbjY dXDUUe/w6RjCOIBxhjpLhH5TSquKrU7GozANZcVBiJ9r3S/Vl1YJJ6Lxym1BxMz/ wgq2v2cXZ5y534vfbAQElyI2IVa7HWEn7XCOA1DTqTM0nSbn2ooyVCRXjdyPmxrQ EZf7bPkCMMZbNozCl6B0UMpERrZYaugzBGbjZwXmRwOjT0oIJCElilThY6uwPA+R SJqYzPq7jtX4xD1A40ehThSDRf+TtKwn/9XvL1abO7mUDErZa2QRkDHhgioSkAyk aGOH0pBgmpCJQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 15:26:35 2025 by rpki-client