This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft File: xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json) Hash identifier: y7DWReJh47mqEvrtl5hLkc0Ufgfh3weoEOwjgl1cBcY= Subject key identifier: 9B:13:F7:53:74:F6:52:B4:65:BF:8E:49:85:8F:B7:11:CA:5B:E1:03 Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 Certificate issuer: /CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Certificate serial: 019B0F37509681DEB7D9CF6125B62F51EA86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft Manifest number: 1478 Signing time: Thu 11 Dec 2025 21:00:41 +0000 Manifest this update: Thu 11 Dec 2025 21:00:41 +0000 Manifest next update: Fri 12 Dec 2025 21:00:41 +0000 Files and hashes: 1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=) 2: EnujZTa_xifqO1ApuBtNO607PMQ.roa (hash: lVv7SmdnXwh0GWr+88AXWNM4yuVtWqv+5v4P4182pMI=) 3: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=) 4: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=) 5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: JOkObAQGMSc1XbqKW20BEW6nfyEHCqu6p5O7aQZtBhY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:50:96:81:de:b7:d9:cf:61:25:b6:2f:51:ea:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1 Validity Not Before: Dec 11 21:00:41 2025 GMT Not After : Dec 12 21:00:41 2025 GMT Subject: CN=9b13f75374f652b465bf8e49858fb711ca5be103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0c:21:a4:bc:84:b5:78:a9:6f:ae:cd:05:db: 67:d1:55:9c:69:81:6f:da:04:65:e8:95:62:68:30: 4d:a7:73:3a:b5:cb:34:90:88:f4:6c:53:e6:93:35: c3:42:c4:7a:b0:2e:c8:e5:c1:c5:22:21:3b:d3:5a: e3:1f:8f:e1:f9:14:5d:df:ae:15:66:58:ba:79:79: 68:bd:51:64:e2:ed:2a:9d:77:1f:72:61:1b:41:52: 7a:6c:6d:33:64:de:f2:fe:cc:c7:f3:31:cb:9d:6a: ab:34:dd:ed:c8:16:bc:68:d0:15:c0:82:f0:b1:2b: 0d:1a:da:ca:93:84:1b:07:76:dc:13:bc:72:e7:6e: 78:7e:33:dd:af:aa:94:99:87:d8:f9:02:d2:1a:5d: c6:3d:ec:30:f4:be:41:87:23:1a:00:90:9b:f4:07: 28:a4:36:97:6c:f0:b0:eb:93:56:f1:e6:d0:7c:19: 8c:78:6e:0c:ba:6d:1b:0d:fb:0e:b6:ca:21:ea:38: 4c:49:36:44:9e:cd:0d:cf:10:a0:0e:54:62:b6:22: db:0b:9a:45:6a:4e:20:54:a9:36:f6:6c:bd:0d:98: 48:3c:1b:50:98:2a:32:bc:60:fd:22:3c:b5:9d:5d: e4:b0:d5:0b:6f:ed:dc:68:08:50:d2:d2:b4:70:41: 5b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:F7:53:74:F6:52:B4:65:BF:8E:49:85:8F:B7:11:CA:5B:E1:03 X509v3 Authority Key Identifier: keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ac:29:50:85:3a:92:37:7f:ba:10:20:35:c6:98:06:13:16: 23:25:4f:a2:e3:1a:d0:73:af:1a:60:bf:7a:84:34:15:1d:cc: 0d:f3:83:58:61:b4:a6:4f:08:1b:5a:74:5b:a9:79:91:75:ba: 4f:8c:cc:ef:3b:1c:dc:bb:1c:5c:69:1d:c1:ef:e9:04:0e:c8: 72:7a:7b:90:a8:21:72:98:28:3d:ff:19:c7:04:3e:dd:38:c7: 92:6d:3a:ab:93:21:58:c7:33:a7:cb:b4:13:45:55:48:92:92: 4c:12:25:c4:b8:6a:06:be:f4:ef:1c:88:6d:2e:99:12:b9:82: db:22:b7:43:90:74:ac:07:bb:53:21:c5:f6:42:c4:63:2b:46: 10:da:dc:65:06:f8:ff:72:34:1f:15:e7:9e:85:eb:9d:f7:47: 90:36:5e:2b:2d:ba:69:c5:0d:e5:9b:e5:c5:3d:0c:6c:34:ca: 68:23:bd:a7:73:25:59:b6:85:d7:ec:3a:81:a0:56:82:28:41: c3:63:b2:e2:56:c1:bb:a6:23:2b:a9:8a:b4:39:29:9d:f6:e3: 0e:02:e3:bc:30:3c:eb:b7:fb:0d:62:d9:7f:45:25:f6:44:b6: 63:54:be:7e:3a:25:b3:7e:a7:9a:e8:92:48:e3:d4:8e:42:08: 18:5d:1f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN1CWgd632c9hJbYvUeqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz NGI1ZDEwHhcNMjUxMjExMjEwMDQxWhcNMjUxMjEyMjEwMDQxWjAzMTEwLwYDVQQD Eyg5YjEzZjc1Mzc0ZjY1MmI0NjViZjhlNDk4NThmYjcxMWNhNWJlMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QwhpLyEtXipb67NBdtn0VWcaYFv 2gRl6JViaDBNp3M6tcs0kIj0bFPmkzXDQsR6sC7I5cHFIiE701rjH4/h+RRd364V Zli6eXlovVFk4u0qnXcfcmEbQVJ6bG0zZN7y/szH8zHLnWqrNN3tyBa8aNAVwILw sSsNGtrKk4QbB3bcE7xy5254fjPdr6qUmYfY+QLSGl3GPeww9L5BhyMaAJCb9Aco pDaXbPCw65NW8ebQfBmMeG4Mum0bDfsOtsoh6jhMSTZEns0NzxCgDlRitiLbC5pF ak4gVKk29my9DZhIPBtQmCoyvGD9Ijy1nV3ksNULb+3caAhQ0tK0cEFb8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsT91N09lK0Zb+OSYWPtxHKW+EDMB8GA1UdIwQY MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1 LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKwpUIU6 kjd/uhAgNcaYBhMWIyVPouMa0HOvGmC/eoQ0FR3MDfODWGG0pk8IG1p0W6l5kXW6 T4zM7zsc3LscXGkdwe/pBA7Icnp7kKghcpgoPf8ZxwQ+3TjHkm06q5MhWMczp8u0 E0VVSJKSTBIlxLhqBr707xyIbS6ZErmC2yK3Q5B0rAe7UyHF9kLEYytGENrcZQb4 /3I0HxXnnoXrnfdHkDZeKy26acUN5ZvlxT0MbDTKaCO9p3MlWbaF1+w6gaBWgihB w2Oy4lbBu6YjK6mKtDkpnfbjDgLjvDA867f7DWLZf0Ul9kS2Y1S+fjols36nmuiS SOPUjkIIGF0fuA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:37:39 2025 by rpki-client