This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json) Hash identifier: DheRqaFu+OGNhXKtArclUAheu24N+dD39qrToVV2SqE= Subject key identifier: 8B:2E:B0:E5:15:AB:AB:7D:94:7E:36:0E:94:99:34:4C:97:22:CC:E1 Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Certificate serial: 019B2106DAB318A0A37706E0956F469AF80B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 08:00:55 +0000 Manifest this update: Mon 15 Dec 2025 08:00:55 +0000 Manifest next update: Tue 16 Dec 2025 08:00:55 +0000 Files and hashes: 1: W0bin1f1CMvgpKtT56TjILo2VZA.roa (hash: X82YsEeg1Z/7Sd+F8cKgkMOl6JvYCwSgMvIizshjpZc=) 2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: c9/pX3PpthEsirn/00jc0p/LW2y5YSMP/LlyYwky2ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:da:b3:18:a0:a3:77:06:e0:95:6f:46:9a:f8:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40 Validity Not Before: Dec 15 08:00:55 2025 GMT Not After : Dec 16 08:00:55 2025 GMT Subject: CN=8b2eb0e515abab7d947e360e9499344c9722cce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:55:49:d2:5f:8a:44:a1:0c:ef:21:61:b5:ab: 59:d7:7b:66:06:ee:77:78:5c:33:7f:b2:e7:ea:09: e1:77:08:0e:bc:72:7a:1e:3c:e4:f7:95:3f:fe:bf: 27:90:aa:c5:3d:56:cc:6d:ee:0d:03:c3:af:e0:a4: 83:c5:ca:25:51:a6:3d:28:cc:1d:ff:80:4e:2a:61: 73:ff:e1:c6:46:d0:01:4f:e0:a1:6d:af:3b:63:0f: a6:bd:26:ef:02:92:68:33:c6:ba:32:a7:da:14:f8: 49:68:0a:f3:c8:ab:12:f6:77:63:29:18:ef:b5:79: 9f:45:e1:06:39:cb:1c:8e:df:ee:80:1e:d2:e5:bb: 1e:fd:e9:0d:0c:d5:77:36:46:3c:ac:ea:7d:50:a4: 57:2e:c6:db:f8:9c:6b:e6:dc:2b:2e:e2:11:80:12: 30:8a:2b:13:00:f2:43:45:c2:a4:e1:46:68:b1:c8: a7:98:05:d1:d6:c9:48:fc:f5:f3:56:94:07:97:40: ec:23:d5:26:69:0f:87:b5:ee:b4:b0:60:fa:09:c0: fd:84:37:a8:29:4c:92:94:11:80:04:b9:50:d8:9c: 66:9c:55:1c:df:48:db:21:a6:05:0f:f2:c0:19:9e: be:f0:63:53:83:0f:6b:80:7c:c4:95:97:34:b8:7d: f7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2E:B0:E5:15:AB:AB:7D:94:7E:36:0E:94:99:34:4C:97:22:CC:E1 X509v3 Authority Key Identifier: keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:97:81:1a:98:e8:2b:f7:0a:04:47:9f:09:41:9c:f1:28:6b: 7c:5b:22:7a:e6:b7:a8:c5:56:6a:55:f2:8a:44:1e:ea:e8:22: 45:47:35:6b:51:fe:16:1b:e8:0c:e9:05:d1:df:cc:94:39:b8: b5:ad:48:0b:d2:46:00:71:b8:93:dc:28:6b:47:55:0a:bc:33: 44:2c:b6:75:82:dd:3a:4b:41:af:e6:68:b2:4c:33:56:00:a6: bb:d3:0a:f9:df:3d:e1:e8:e1:4c:e9:65:10:dc:9f:ae:8e:08: d4:bf:f8:79:3b:78:5f:2c:7f:72:62:f9:9b:11:6c:c9:94:08: af:27:c2:29:9c:a0:24:35:46:74:d4:56:7c:02:aa:4f:19:fe: d4:ff:4e:3a:57:7d:6e:9e:b5:7f:be:40:8d:f4:2e:56:1f:0b: 1d:cb:dd:19:56:af:65:73:fa:9b:d8:56:54:c3:c6:fa:e2:f3: 56:f8:f6:3c:d3:85:b2:e6:4c:88:53:bc:ad:9c:e1:d9:e7:74: 76:7d:f7:2b:2f:c3:57:22:ae:c2:17:de:51:08:4b:bc:fb:b1: 09:76:1f:84:84:0a:98:e4:2a:63:bd:94:8f:7e:4c:3d:c5:7a: d0:15:4c:bc:4e:cd:91:2a:0f:98:30:c1:39:f0:06:45:a0:73: 7d:d2:e8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBtqzGKCjdwbglW9GmvgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2M2Q5NmFlZmM1NDgwMjRmYTM2ZmE1Y2U4MDRhNDhiZjdj YTNhNDAwHhcNMjUxMjE1MDgwMDU1WhcNMjUxMjE2MDgwMDU1WjAzMTEwLwYDVQQD Eyg4YjJlYjBlNTE1YWJhYjdkOTQ3ZTM2MGU5NDk5MzQ0Yzk3MjJjY2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVJ0l+KRKEM7yFhtatZ13tmBu53 eFwzf7Ln6gnhdwgOvHJ6Hjzk95U//r8nkKrFPVbMbe4NA8Ov4KSDxcolUaY9KMwd /4BOKmFz/+HGRtABT+Chba87Yw+mvSbvApJoM8a6MqfaFPhJaArzyKsS9ndjKRjv tXmfReEGOcscjt/ugB7S5bse/ekNDNV3NkY8rOp9UKRXLsbb+Jxr5twrLuIRgBIw iisTAPJDRcKk4UZoscinmAXR1slI/PXzVpQHl0DsI9UmaQ+Hte60sGD6CcD9hDeo KUySlBGABLlQ2JxmnFUc30jbIaYFD/LAGZ6+8GNTgw9rgHzElZc0uH33swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsusOUVq6t9lH42DpSZNEyXIszhMB8GA1UdIwQY MBaAFMY9lq78VIAk+jb6XOgEpIv3yjpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDct OTcxZDI4ZDQzYzE0LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lZGQ2YjgtYWJiZC00YjgxLTk3MDctOTcxZDI4ZDQzYzE0 LzEveGoyV3J2eFVnQ1Q2TnZwYzZBU2tpX2ZLT2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJeBGpjo K/cKBEefCUGc8ShrfFsieua3qMVWalXyikQe6ugiRUc1a1H+FhvoDOkF0d/MlDm4 ta1IC9JGAHG4k9woa0dVCrwzRCy2dYLdOktBr+ZoskwzVgCmu9MK+d894ejhTOll ENyfro4I1L/4eTt4Xyx/cmL5mxFsyZQIryfCKZygJDVGdNRWfAKqTxn+1P9OOld9 bp61f75AjfQuVh8LHcvdGVavZXP6m9hWVMPG+uLzVvj2PNOFsuZMiFO8rZzh2ed0 dn33Ky/DVyKuwhfeUQhLvPuxCXYfhIQKmOQqY72Uj35MPcV60BVMvE7NkSoPmDDB OfAGRaBzfdLoCA== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:32 2025 by rpki-client