This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json) Hash identifier: Ki8HhkF+b6VlKMh1as6YXzAXrAGeRUYAryODZdyIb30= Subject key identifier: 34:D5:4B:CE:E6:15:07:DE:14:69:0C:13:6F:60:0D:95:C1:05:1E:3F Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d Certificate serial: 019B239A3D70D524B1B8F60ABBFCB705AB07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 20:01:09 +0000 Manifest this update: Mon 15 Dec 2025 20:01:09 +0000 Manifest next update: Tue 16 Dec 2025 20:01:09 +0000 Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: 5w89i+MndPsET+3ZQ3KUkgPanVPKC261hyvCgkJKL1g=) 2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:9a:3d:70:d5:24:b1:b8:f6:0a:bb:fc:b7:05:ab:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d Validity Not Before: Dec 15 20:01:09 2025 GMT Not After : Dec 16 20:01:09 2025 GMT Subject: CN=34d54bcee61507de14690c136f600d95c1051e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:4c:f3:8d:1c:8e:7a:24:4c:b1:b7:4b:92: 99:1c:1a:d0:c6:2a:e5:0f:bd:fb:ad:97:3d:9f:8f: a6:da:93:36:d8:ba:b4:a4:aa:61:dc:f6:7d:92:d8: b8:e6:4f:d1:87:7a:4c:03:47:a6:5f:36:80:2b:5e: 2f:9b:3d:78:32:67:b7:65:da:68:53:df:b8:b8:b4: 71:75:64:21:b2:ba:90:c8:46:db:e8:48:b4:8f:7f: fc:76:dd:83:45:eb:d6:f0:2e:04:d4:a2:45:54:c9: 02:fe:0d:d5:33:9d:8e:0a:bf:b2:9e:16:26:a7:5f: 4e:62:16:17:e9:35:37:71:57:02:56:39:06:33:46: 0a:f3:02:4a:23:0c:10:9f:4c:6b:9b:42:18:59:46: b9:6a:ba:5d:a3:7a:3e:19:1d:09:8a:92:8d:ca:b2: 94:f3:4f:25:ef:c8:67:78:fb:36:3c:33:0b:6d:e7: 50:e3:42:76:85:8c:53:28:e0:fc:cf:9b:7b:2f:97: 7c:9d:d4:f2:5d:e4:3a:a1:58:87:61:19:b0:3e:ae: 3e:54:22:8a:30:66:f7:f7:1c:60:4c:8e:c3:f7:f9: d4:36:56:d2:01:6b:22:5b:32:87:ed:81:da:c7:44: e6:d3:60:ff:31:14:66:e9:2c:18:d3:5a:57:a7:39: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:4B:CE:E6:15:07:DE:14:69:0C:13:6F:60:0D:95:C1:05:1E:3F X509v3 Authority Key Identifier: keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6a:e6:cd:ec:99:e3:44:41:0c:b3:b3:b6:0c:3b:ea:1c:ef: cc:96:a4:9e:a3:28:54:b7:3c:fc:79:41:d8:dc:d5:be:11:a3: d4:9a:96:6a:be:83:a5:59:46:e0:af:92:cc:15:da:05:01:c7: d7:88:b4:d7:1a:19:cb:ee:79:cf:b0:0a:da:d4:8d:a4:31:65: 71:02:7a:06:1f:62:8c:d5:82:0f:10:5a:91:c9:c1:8a:c2:1d: 4b:50:56:de:63:da:b0:74:51:12:7c:e9:d7:b9:98:58:3a:e8: 37:cb:88:1a:4e:c5:70:8f:12:3e:50:4a:67:82:07:9a:54:28: c6:a4:83:ec:ca:0e:8f:23:7d:ba:9f:44:f7:cd:cb:55:1f:59: 69:30:4c:2f:9c:df:43:81:e8:f6:b4:25:18:30:14:1e:11:64: 71:24:f7:85:c0:03:74:6f:06:0a:bf:ab:59:43:6a:ee:22:67: 30:32:b5:09:73:1c:4e:47:33:f2:e6:ec:3d:6d:38:ff:f0:d5: 92:3b:53:a4:5f:9f:18:f5:08:70:5e:0c:99:b0:af:43:69:1b: 77:5f:77:c3:31:a3:31:74:97:6b:3a:e8:8b:f8:30:ff:1d:46: d3:7b:56:da:2c:f1:c8:d0:01:ba:d5:50:c9:66:39:62:02:52: b6:4c:10:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmj1w1SSxuPYKu/y3BasHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjA4NThhMzhhZDVlMTFiN2IxODkzOTI4ODNiYzgzZWI2 YjM2MWQwHhcNMjUxMjE1MjAwMTA5WhcNMjUxMjE2MjAwMTA5WjAzMTEwLwYDVQQD EygzNGQ1NGJjZWU2MTUwN2RlMTQ2OTBjMTM2ZjYwMGQ5NWMxMDUxZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RtM840cjnokTLG3S5KZHBrQxirl D737rZc9n4+m2pM22Lq0pKph3PZ9kti45k/Rh3pMA0emXzaAK14vmz14Mme3Zdpo U9+4uLRxdWQhsrqQyEbb6Ei0j3/8dt2DRevW8C4E1KJFVMkC/g3VM52OCr+ynhYm p19OYhYX6TU3cVcCVjkGM0YK8wJKIwwQn0xrm0IYWUa5arpdo3o+GR0JipKNyrKU 808l78hnePs2PDMLbedQ40J2hYxTKOD8z5t7L5d8ndTyXeQ6oViHYRmwPq4+VCKK MGb39xxgTI7D9/nUNlbSAWsiWzKH7YHax0Tm02D/MRRm6SwY01pXpznUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTVS87mFQfeFGkME29gDZXBBR4/MB8GA1UdIwQY MBaAFMZghYo4rV4Rt7GJOSiDvIPrazYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEt ZmE1ZDdiNDhhYWU5LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEtZmE1ZDdiNDhhYWU5 LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2rmzeyZ 40RBDLOztgw76hzvzJaknqMoVLc8/HlB2NzVvhGj1JqWar6DpVlG4K+SzBXaBQHH 14i01xoZy+55z7AK2tSNpDFlcQJ6Bh9ijNWCDxBakcnBisIdS1BW3mPasHRREnzp 17mYWDroN8uIGk7FcI8SPlBKZ4IHmlQoxqSD7MoOjyN9up9E983LVR9ZaTBML5zf Q4Ho9rQlGDAUHhFkcST3hcADdG8GCr+rWUNq7iJnMDK1CXMcTkcz8ubsPW04//DV kjtTpF+fGPUIcF4MmbCvQ2kbd193wzGjMXSXazroi/gw/x1G03tW2izxyNAButVQ yWY5YgJStkwQBA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:38:02 2025 by rpki-client