This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json) Hash identifier: aAzT22tVFk0QHeJxfgEKKbixsy6LbAp6l2qhDuqjT+U= Subject key identifier: E0:28:32:36:07:E5:4A:1A:74:67:EA:7B:AF:72:D4:FB:82:E5:59:43 Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb Certificate serial: 019B5976876495C709BFB1E5FB51C391334B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 07:01:38 +0000 Manifest this update: Fri 26 Dec 2025 07:01:38 +0000 Manifest next update: Sat 27 Dec 2025 07:01:38 +0000 Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=) 2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: Q8kv4A1urudEf54ARde/f0cjv7yCT1aJtLKlWO0nerM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:87:64:95:c7:09:bf:b1:e5:fb:51:c3:91:33:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb Validity Not Before: Dec 26 07:01:38 2025 GMT Not After : Dec 27 07:01:38 2025 GMT Subject: CN=e028323607e54a1a7467ea7baf72d4fb82e55943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:fa:3e:87:4e:1d:98:95:e2:10:a7:6e:c3: 5c:3a:6f:74:44:db:63:8b:e5:d2:cf:72:6e:2f:54: 5e:a7:91:87:cd:46:c1:df:ca:60:32:ed:dd:6e:b6: 68:84:43:3c:54:36:27:d6:34:d4:2b:d0:63:aa:64: 06:16:e8:9a:fd:06:cf:16:f6:e3:f1:71:72:45:bb: d3:d6:fb:39:28:67:88:af:44:b8:f5:08:b3:6b:f9: ff:32:d0:2c:67:c7:78:36:e3:60:40:c5:21:44:8b: 24:0e:2b:c7:ff:e2:b1:79:4b:94:03:e5:16:7a:81: e5:57:59:14:df:3d:29:34:c2:4d:3c:4f:d0:39:92: a8:cf:ad:ea:2c:4d:d0:90:03:43:8a:8f:d4:36:13: 05:c4:8c:5c:53:a5:6f:9f:45:03:e2:cb:fa:16:3c: 82:6c:86:8a:86:f6:52:33:75:bd:fd:e2:97:e4:c4: fc:7c:77:05:41:05:cd:90:b0:b9:45:ed:df:a1:e4: 98:0a:00:25:ba:61:4e:68:04:c7:48:d0:a7:fd:d5: 27:f5:13:96:74:42:d3:68:d2:21:5e:75:94:68:68: c3:82:06:a0:75:e2:a1:41:02:de:08:0f:64:93:52: a3:a0:df:70:0a:fe:97:31:65:3b:66:b0:40:d4:ba: b0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:28:32:36:07:E5:4A:1A:74:67:EA:7B:AF:72:D4:FB:82:E5:59:43 X509v3 Authority Key Identifier: keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e7:60:d0:d8:9f:8c:ef:3f:27:b5:ba:14:fd:53:58:6b:0e: 18:6c:b2:b1:25:3a:46:6a:6f:c0:83:33:ed:77:82:b5:28:d3: 08:fa:8d:8d:d2:8f:99:ae:fd:77:6b:06:63:bc:f5:87:13:21: 96:39:7f:cf:99:7f:d8:cd:15:83:95:1b:a1:2d:3d:b2:ad:23: 0e:c4:63:a0:77:7c:50:50:98:32:0e:ea:ad:bc:b6:82:5d:37: 9b:13:3c:9d:b9:22:8c:c1:41:5f:6f:a1:9a:58:00:bb:b4:c9: 80:70:01:f3:e0:97:ee:fb:6d:21:e8:7a:e7:c1:a7:cc:4e:af: c1:22:0f:80:94:31:cf:04:ef:3e:da:00:c0:d2:90:e4:cf:46: 9c:0d:a9:e0:37:f8:ee:94:26:b2:52:f0:84:f9:57:30:85:2c: fb:d8:c6:62:8a:56:31:60:fd:ba:ff:58:15:a0:f4:dc:f4:68: 24:28:3e:92:b1:89:89:f8:e7:dc:7a:dc:78:a9:20:4a:bf:69: 6f:f8:e7:d8:ec:dc:d1:c0:c7:17:8d:02:09:b9:5e:7e:93:f9: 2b:9c:99:c1:5f:ee:dd:4f:5b:27:1e:87:7e:5a:78:de:ab:26: c0:2e:c6:58:ed:e5:a3:11:ee:ee:e7:d3:f4:d8:a0:37:05:52: 1c:1e:70:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdodklccJv7Hl+1HDkTNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx N2NhYmIwHhcNMjUxMjI2MDcwMTM4WhcNMjUxMjI3MDcwMTM4WjAzMTEwLwYDVQQD EyhlMDI4MzIzNjA3ZTU0YTFhNzQ2N2VhN2JhZjcyZDRmYjgyZTU1OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPn6PodOHZiV4hCnbsNcOm90RNtj i+XSz3JuL1Rep5GHzUbB38pgMu3dbrZohEM8VDYn1jTUK9BjqmQGFuia/QbPFvbj 8XFyRbvT1vs5KGeIr0S49Qiza/n/MtAsZ8d4NuNgQMUhRIskDivH/+KxeUuUA+UW eoHlV1kU3z0pNMJNPE/QOZKoz63qLE3QkANDio/UNhMFxIxcU6Vvn0UD4sv6FjyC bIaKhvZSM3W9/eKX5MT8fHcFQQXNkLC5Re3foeSYCgAlumFOaATHSNCn/dUn9ROW dELTaNIhXnWUaGjDggagdeKhQQLeCA9kk1KjoN9wCv6XMWU7ZrBA1LqwkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAoMjYH5UoadGfqe69y1PuC5VlDMB8GA1UdIwQY MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQudg0Nif jO8/J7W6FP1TWGsOGGyysSU6RmpvwIMz7XeCtSjTCPqNjdKPma79d2sGY7z1hxMh ljl/z5l/2M0Vg5UboS09sq0jDsRjoHd8UFCYMg7qrby2gl03mxM8nbkijMFBX2+h mlgAu7TJgHAB8+CX7vttIeh658GnzE6vwSIPgJQxzwTvPtoAwNKQ5M9GnA2p4Df4 7pQmslLwhPlXMIUs+9jGYopWMWD9uv9YFaD03PRoJCg+krGJifjn3HrceKkgSr9p b/jn2Ozc0cDHF40CCblefpP5K5yZwV/u3U9bJx6Hflp43qsmwC7GWO3loxHu7ufT 9NigNwVSHB5wEg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:20 2025 by rpki-client