This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: tZ+a8TKmGsYmOLwpTpW0wt6gSGa4OfdJ9jqAahGTYvE=
Subject key identifier: A5:95:25:B4:B4:6F:D1:51:E4:C5:C5:50:83:B7:E8:B3:4C:AF:DE:D4
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019B5ABFD2EB57D32AF757E1DE45D5AA7055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: 0C
Signing time: Fri 26 Dec 2025 13:01:19 +0000
Manifest this update: Fri 26 Dec 2025 13:01:19 +0000
Manifest next update: Sat 27 Dec 2025 13:01:19 +0000
Files and hashes: 1: cfwDDgU0VXlqDlZ7nqhniKeG3U8.asa (hash: SiTquxMiNkR26hu+hk9hwsuht0hbOHCfqXuGNIDTcE0=)
2: wLZ0om1eYNLk8iWLT7545pgbjxE.roa (hash: TXnCxZRiHoJiBAQHrsXiscr2ci35Zx8pHJgDDr7XC4o=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: 5pQCzIqemPWuRTjl+DoK0d8CaURaC3w/plOfVJicpFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Dec 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:5a:bf:d2:eb:57:d3:2a:f7:57:e1:de:45:d5:aa:70:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: Dec 26 13:01:19 2025 GMT
Not After : Dec 27 13:01:19 2025 GMT
Subject: CN=a59525b4b46fd151e4c5c55083b7e8b34cafded4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:39:73:f8:98:72:5d:2f:3c:6e:5a:5e:0f:
79:3d:ec:c0:10:aa:bf:76:fe:85:55:13:81:b6:81:
5e:be:7a:26:f4:0a:f9:b4:5c:9b:e2:c5:3f:99:4a:
21:6b:51:af:2f:bf:b8:f7:93:7c:f9:d6:8a:6c:bb:
ed:58:28:2c:38:1c:46:a9:78:70:83:d4:ab:ba:08:
33:b1:f8:8f:2a:c4:ff:8a:4b:bc:19:1d:a7:b5:b4:
bc:bc:6f:9f:74:1f:d9:16:80:42:7a:f7:b8:05:48:
83:e8:2d:f9:ad:7f:f5:19:8e:56:d0:4a:0a:6a:8b:
34:25:45:c7:86:a1:67:98:52:50:0f:3b:6f:8c:a4:
d5:3c:ae:bf:02:fd:c5:9b:54:97:0b:0f:c2:48:c5:
38:6b:5a:72:c5:7a:5f:4d:fe:c3:6e:dd:d6:ab:42:
f8:d3:a4:35:73:4d:b0:4f:7c:24:00:c3:60:2d:2e:
82:1d:ae:7a:b5:5a:18:12:49:d8:ec:86:60:f7:b9:
5c:48:0a:ac:31:94:30:15:33:99:67:30:48:db:a9:
74:04:b7:a4:8b:95:65:f1:c2:9c:4b:24:f2:69:ab:
ab:f9:b0:43:39:0e:f7:5a:8f:db:8c:04:41:5f:40:
03:14:62:a9:fd:e1:30:b0:40:9f:d0:30:21:f4:05:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:95:25:B4:B4:6F:D1:51:E4:C5:C5:50:83:B7:E8:B3:4C:AF:DE:D4
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:b6:a0:76:99:1c:d8:55:8c:21:8a:ae:d8:2c:c8:a2:df:fe:
7c:45:e2:a4:0f:77:06:d0:0d:c0:64:5a:a2:22:03:12:c6:d1:
c4:9d:a8:a1:a0:cb:71:ad:c3:c1:99:3d:30:16:60:23:00:8b:
b1:c5:66:c8:2a:45:48:09:62:9a:e3:44:2b:79:18:70:37:0f:
95:fc:4a:cb:8b:b5:25:2e:cf:78:8f:51:e1:c6:65:8a:b6:77:
6e:da:16:10:dd:46:36:f5:1f:42:9f:e4:cc:1e:41:9f:4b:ca:
38:e9:2f:86:e1:c0:63:fd:27:29:af:04:7e:1f:14:b3:02:f0:
32:93:af:8c:a8:b0:c9:75:e7:10:94:0b:52:b3:a1:40:9c:e4:
1c:12:20:d8:88:58:4a:f6:4c:23:1f:f1:3b:e9:ab:29:5b:10:
a7:9c:24:fc:b3:de:57:49:3e:6c:40:56:2a:30:2d:e7:81:4d:
b1:64:b2:5b:a2:45:eb:5b:26:91:7f:ed:7a:68:f5:b2:b2:be:
b6:8c:82:07:8f:4e:82:3e:0e:cf:ad:94:b9:53:cc:16:d5:a5:
d0:e8:50:62:28:88:62:7e:2f:ae:6d:fe:bc:7a:ea:fa:f0:77:
62:47:a6:a0:a5:6a:cd:4b:46:7c:6e:28:27:02:8c:dd:e0:be:
85:e2:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 15:43:35 2025 by rpki-client