This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json) Hash identifier: ql/dMZiYCS2mhZ5P/cSN3T6L+w9SkQtj2KdiI/eHRT8= Subject key identifier: 62:6E:A5:C7:3E:71:10:BA:FA:6E:A1:93:F9:42:7E:F6:58:A9:8C:0B Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019B06D9271F012009DAEF952CCAA60A3C16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft Manifest number: 176E Signing time: Wed 10 Dec 2025 06:00:53 +0000 Manifest this update: Wed 10 Dec 2025 06:00:53 +0000 Manifest next update: Thu 11 Dec 2025 06:00:53 +0000 Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=) 2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: RH4YLLRLhrzgqaMw1FkOIaPnfEx+nWDTDiCojkDllao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:27:1f:01:20:09:da:ef:95:2c:ca:a6:0a:3c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Dec 10 06:00:53 2025 GMT Not After : Dec 11 06:00:53 2025 GMT Subject: CN=626ea5c73e7110bafa6ea193f9427ef658a98c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d1:51:21:7f:b6:66:de:59:02:6e:d0:6c:3c: 74:bc:55:ab:95:55:3e:c3:aa:4e:d7:d9:7a:b7:ba: ca:ca:c3:5b:eb:e4:77:04:0d:99:54:63:e6:fc:77: 27:b2:a8:17:d9:0b:92:d1:dd:61:69:95:7e:ab:2c: 28:c3:03:10:7c:55:12:11:f5:c8:d2:be:8b:de:ad: d4:63:69:fe:8a:33:a3:b9:d9:2c:c4:4a:80:32:a9: a4:97:aa:b8:ee:9a:a7:b5:d3:c8:f1:14:9d:1a:06: f0:ea:e4:90:57:4b:c1:17:c1:00:ba:22:22:ec:f8: 64:d4:68:76:5c:06:25:4a:8a:4e:66:7d:ec:22:0e: 20:c7:0f:a2:09:54:1b:59:1c:1c:9c:8f:b2:34:23: 08:29:df:ba:71:30:f2:be:bf:41:91:de:de:40:cf: c0:02:3e:02:c0:26:50:05:84:08:eb:f1:76:72:18: 9b:da:75:2a:cc:ef:bd:27:a9:59:5f:0e:d8:a6:82: 62:a1:36:0a:b7:b2:31:24:cb:f8:15:54:2d:f2:1c: bd:b7:f1:5d:00:11:e4:c4:a9:1e:f6:96:49:80:e7: 16:14:e3:18:3f:40:d3:4d:2e:6e:f8:2f:9b:76:03: 31:b2:fe:4e:4e:bb:ef:95:fe:e7:14:da:29:9f:6d: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6E:A5:C7:3E:71:10:BA:FA:6E:A1:93:F9:42:7E:F6:58:A9:8C:0B X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:f8:66:b1:28:d9:11:7c:7a:bc:7b:12:7b:b1:76:4c:f9: 30:b5:53:c1:a4:32:e1:90:ee:dc:f4:c3:19:ae:4a:7c:46:8f: 04:03:36:b9:44:ac:69:6d:b5:89:13:1a:af:5e:55:4c:73:c6: 22:2d:2d:4a:7c:bf:54:68:7c:ab:35:bd:76:d8:76:7a:d7:4f: a2:1d:7a:df:26:ce:1c:7f:d2:2a:28:78:3b:27:6b:93:f4:35: bb:c7:83:85:a5:2a:82:36:89:cf:f2:4f:d1:e3:92:e5:b1:06: 7b:f4:9d:08:c1:f9:74:44:8f:be:34:4d:d2:76:f3:01:f0:3c: 20:4f:b4:ab:c2:d1:df:cf:0e:4e:b1:39:df:3d:4e:c6:d7:e0: 2d:f4:9d:6a:ae:33:49:46:92:9b:68:71:f8:0e:3a:42:a1:98: 79:5d:06:cc:64:77:a9:a4:aa:8e:f4:5a:62:3d:3f:94:85:1d: 7d:b0:dc:7b:c4:16:2b:f1:25:cb:fb:04:c3:40:04:97:b8:24: be:0f:0d:1c:fb:ef:6e:ef:fb:19:a0:9d:8b:fc:0f:73:84:ff: 74:0a:43:aa:27:39:37:93:42:bb:c3:1f:16:6e:ad:7f:63:37: d3:4a:9b:77:15:9e:b0:94:46:a1:46:cb:b3:f8:27:35:58:c1: d1:44:04:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2ScfASAJ2u+VLMqmCjwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjUxMjEwMDYwMDUzWhcNMjUxMjExMDYwMDUzWjAzMTEwLwYDVQQD Eyg2MjZlYTVjNzNlNzExMGJhZmE2ZWExOTNmOTQyN2VmNjU4YTk4YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdFRIX+2Zt5ZAm7QbDx0vFWrlVU+ w6pO19l6t7rKysNb6+R3BA2ZVGPm/HcnsqgX2QuS0d1haZV+qywowwMQfFUSEfXI 0r6L3q3UY2n+ijOjudksxEqAMqmkl6q47pqntdPI8RSdGgbw6uSQV0vBF8EAuiIi 7Phk1Gh2XAYlSopOZn3sIg4gxw+iCVQbWRwcnI+yNCMIKd+6cTDyvr9Bkd7eQM/A Aj4CwCZQBYQI6/F2chib2nUqzO+9J6lZXw7YpoJioTYKt7IxJMv4FVQt8hy9t/Fd ABHkxKke9pZJgOcWFOMYP0DTTS5u+C+bdgMxsv5OTrvvlf7nFNopn22jpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJupcc+cRC6+m6hk/lCfvZYqYwLMB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyT4ZrEo 2RF8erx7Enuxdkz5MLVTwaQy4ZDu3PTDGa5KfEaPBAM2uUSsaW21iRMar15VTHPG Ii0tSny/VGh8qzW9dth2etdPoh163ybOHH/SKih4Oydrk/Q1u8eDhaUqgjaJz/JP 0eOS5bEGe/SdCMH5dESPvjRN0nbzAfA8IE+0q8LR388OTrE53z1OxtfgLfSdaq4z SUaSm2hx+A46QqGYeV0GzGR3qaSqjvRaYj0/lIUdfbDce8QWK/Ely/sEw0AEl7gk vg8NHPvvbu/7GaCdi/wPc4T/dApDqic5N5NCu8MfFm6tf2M300qbdxWesJRGoUbL s/gnNVjB0UQEZA== -----END CERTIFICATE-----Generated at Wed Dec 10 12:55:48 2025 by rpki-client