This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft File: xx85HWDhoTnMxCsXoyqVNj31z7A.mft (raw, json) Hash identifier: 5zLddPTSL3xX791hQXD70xJ+xReAPrRJCJwoMT4O6bQ= Subject key identifier: B4:31:0C:67:6D:48:1C:9E:59:A5:C1:90:FC:9D:51:B1:9B:5F:2C:F1 Authority key identifier: C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 Certificate issuer: /CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Certificate serial: 019B5AF615A80F48FF3AFFF272120BF2744D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft Manifest number: B5 Signing time: Fri 26 Dec 2025 14:00:35 +0000 Manifest this update: Fri 26 Dec 2025 14:00:35 +0000 Manifest next update: Sat 27 Dec 2025 14:00:35 +0000 Files and hashes: 1: huTpztbsQALNaxE7iUdUxmvpFuk.roa (hash: sMf2UqH7zZTc0SKWY1HAbVuZYKZQgSMeRF7P6Xn93AA=) 2: xx85HWDhoTnMxCsXoyqVNj31z7A.crl (hash: M4b7MNG5GyMwo/lRdeEDZ3a22bc4u4wBq5BxwPuUxbo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:15:a8:0f:48:ff:3a:ff:f2:72:12:0b:f2:74:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71f391d60e1a139ccc42b17a32a95363df5cfb0 Validity Not Before: Dec 26 14:00:35 2025 GMT Not After : Dec 27 14:00:35 2025 GMT Subject: CN=b4310c676d481c9e59a5c190fc9d51b19b5f2cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:8b:68:41:d9:bd:cc:a7:c3:14:27:af:57: f7:37:82:7d:07:a8:34:69:66:e1:67:fc:2b:59:d6: ba:62:01:bc:86:46:0e:3f:1b:98:e6:ca:a1:c3:1f: 0a:8a:e3:ad:e8:92:37:f5:cc:fd:ab:fa:7f:cc:60: f5:46:52:dc:1c:66:d8:fb:04:ce:70:b4:de:b3:ff: 89:20:b0:13:73:29:18:e5:e6:49:c4:55:e6:e6:c7: c4:69:6d:8f:8f:ea:d6:e3:88:e8:22:34:f7:a2:a0: 5d:31:d2:36:33:ac:06:24:ef:c5:54:b4:31:9a:ad: 23:43:14:29:86:07:a2:26:b3:68:e4:10:76:47:6f: 38:cd:ae:95:f7:4e:62:09:66:3b:bd:2e:d3:89:9f: 38:1f:00:95:da:7a:a2:3b:0d:9e:d3:67:45:4d:24: 03:36:c3:aa:c5:97:2e:44:f9:11:45:34:d6:8c:95: 0e:1d:4e:71:9f:16:67:6e:35:bd:a8:ae:7d:1e:bf: 06:51:9e:34:9c:01:cb:62:cd:0d:aa:39:5b:30:3e: bf:98:46:a3:a8:a1:e7:37:be:d2:18:52:c8:9b:ca: e5:b3:68:a9:42:f5:5b:42:c6:06:cc:58:a7:69:54: 22:dd:c0:5e:08:f3:2e:fb:db:d2:49:f8:9f:13:83: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:31:0C:67:6D:48:1C:9E:59:A5:C1:90:FC:9D:51:B1:9B:5F:2C:F1 X509v3 Authority Key Identifier: keyid:C7:1F:39:1D:60:E1:A1:39:CC:C4:2B:17:A3:2A:95:36:3D:F5:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xx85HWDhoTnMxCsXoyqVNj31z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/de9ffc-4477-4e30-9570-6541cc006eac/1/xx85HWDhoTnMxCsXoyqVNj31z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8e:3b:7e:e9:6f:86:78:31:43:76:9a:32:5a:93:71:4a:68: 88:ac:13:5c:25:24:af:30:b0:5e:0e:b8:b9:c8:08:4e:86:1a: ca:76:b6:4d:f4:b4:05:10:af:ac:ed:72:ac:38:98:10:2d:ef: 61:5f:c5:f0:f2:6a:82:08:03:ff:b5:a5:a0:68:1b:b2:65:c9: 41:38:58:e2:88:1c:b4:f6:af:f3:b7:92:7e:38:18:9f:63:81: 19:37:2a:af:e6:a4:5b:e6:51:6e:ad:77:f0:51:64:24:30:52: f6:4b:44:23:5b:84:04:22:a5:f0:e4:67:6d:1e:25:1d:fd:51: d9:fb:6f:b7:9a:0d:38:e0:83:30:d0:21:cf:91:be:e2:be:20: 09:5c:8f:ab:f9:50:76:2c:8d:04:71:28:11:6e:23:dc:41:f4: cc:e8:03:05:52:96:86:a4:74:e9:b5:a4:4e:e5:8e:0d:7b:8b: 8b:a6:e8:94:46:92:90:ea:7e:ff:23:b5:c1:c2:07:57:87:30: 30:02:13:87:a6:8d:bd:ab:28:bc:89:18:e7:f7:8f:d6:0e:b3: 47:10:40:df:ac:f7:f1:a3:dd:79:27:c3:01:a6:c9:8b:8e:f4: fe:4e:72:96:17:82:cf:a8:7a:0a:e0:ff:cb:29:f0:13:a5:2f: 14:8c:f3:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9hWoD0j/Ov/ychIL8nRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MWYzOTFkNjBlMWExMzljY2M0MmIxN2EzMmE5NTM2M2Rm NWNmYjAwHhcNMjUxMjI2MTQwMDM1WhcNMjUxMjI3MTQwMDM1WjAzMTEwLwYDVQQD EyhiNDMxMGM2NzZkNDgxYzllNTlhNWMxOTBmYzlkNTFiMTliNWYyY2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwKLaEHZvcynwxQnr1f3N4J9B6g0 aWbhZ/wrWda6YgG8hkYOPxuY5sqhwx8KiuOt6JI39cz9q/p/zGD1RlLcHGbY+wTO cLTes/+JILATcykY5eZJxFXm5sfEaW2Pj+rW44joIjT3oqBdMdI2M6wGJO/FVLQx mq0jQxQphgeiJrNo5BB2R284za6V905iCWY7vS7TiZ84HwCV2nqiOw2e02dFTSQD NsOqxZcuRPkRRTTWjJUOHU5xnxZnbjW9qK59Hr8GUZ40nAHLYs0NqjlbMD6/mEaj qKHnN77SGFLIm8rls2ipQvVbQsYGzFinaVQi3cBeCPMu+9vSSfifE4N/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQxDGdtSByeWaXBkPydUbGbXyzxMB8GA1UdIwQY MBaAFMcfOR1g4aE5zMQrF6MqlTY99c+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAt NjU0MWNjMDA2ZWFjLzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kZTlmZmMtNDQ3Ny00ZTMwLTk1NzAtNjU0MWNjMDA2ZWFj LzEveHg4NUhXRGhvVG5NeENzWG95cVZOajMxejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY47fulv hngxQ3aaMlqTcUpoiKwTXCUkrzCwXg64ucgIToYayna2TfS0BRCvrO1yrDiYEC3v YV/F8PJqgggD/7WloGgbsmXJQThY4ogctPav87eSfjgYn2OBGTcqr+akW+ZRbq13 8FFkJDBS9ktEI1uEBCKl8ORnbR4lHf1R2ftvt5oNOOCDMNAhz5G+4r4gCVyPq/lQ diyNBHEoEW4j3EH0zOgDBVKWhqR06bWkTuWODXuLi6bolEaSkOp+/yO1wcIHV4cw MAITh6aNvasovIkY5/eP1g6zRxBA36z38aPdeSfDAabJi470/k5ylheCz6h6CuD/ yynwE6UvFIzzWw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client