This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft File: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft (raw, json) Hash identifier: VHGbUHnGNchQWi5PWhQT3t3TBJpkKCYm36JqxEDtLiY= Subject key identifier: A8:89:D2:23:59:C7:12:A8:BF:9B:0D:D5:78:1A:6F:69:0C:E1:A7:C1 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019AF3C0A27C478FB3AA10AFBDA8133C8349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft Manifest number: 1644 Signing time: Sat 06 Dec 2025 13:01:19 +0000 Manifest this update: Sat 06 Dec 2025 13:01:19 +0000 Manifest next update: Sun 07 Dec 2025 13:01:19 +0000 Files and hashes: 1: 3b4Fq6_bIamsudbItbqhSpD_K9w.roa (hash: Vh901Zhx3OCDgeqedfZ/abhYR9Rhwc8dnd6e61mW9to=) 2: CtcGrjprY92ynub5uVjfYjoVoQE.roa (hash: 7WR2arN6K4NgLaBcrUnNbllaflz0OooqzR4Ho5GGi+o=) 3: HdVVZLbcoOAO4PiWc-obCuKDmNE.roa (hash: XU01kOa7ngfXBMm0kjCiqgIm2wt2KRZaYU+QR9KHP7o=) 4: Ks2E1N23FL1JlkaeAWsDQ0VTeMA.roa (hash: t0ikCKjSARWk2IVi/g7K6CXdDGiaZQEnFkAP2udGzsQ=) 5: O9epNS0NrOI-bOL5KKfYRX4De8A.roa (hash: G611SXA/jC4vDIlVwFGLwWk81ZAiML9tAZ+IqKvstVo=) 6: VKWObPFDBc-jGCeYU56YA-6t1Cw.roa (hash: KPhyop9Bdu13gG3nAoBktF8fNM6NO652iDQfc8w2K04=) 7: XD3pFL9Q_FZXp8mNCcZObqRMVXg.roa (hash: g5/ZHa0TuYu8Xziy6YKoSXXXe+7v69Kf3qZJF69vu/k=) 8: XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl (hash: DCRSKU2trCE2KVekrG3AoI/7M2q2nmCPVvRDSeZF7fk=) 9: b4M2RVAScTVc0rLcQWS2TUKBQVg.roa (hash: JAXZVAloSHKdDJuVLx42Yx5DyOaYH17Fr5xV9qxOaFU=) 10: bHywZIpT6KePzqd-y04f9_gubE4.roa (hash: t+U3j3yQlSyR3lx2MZ9I+FTCYrv0GnN+ja0QXS2Zfac=) 11: nxY9K3hs4eW9wiyd2zfVyuMPTZ8.roa (hash: kvygY+cOmoK64hnXWrmGQdyj1Eanlt8CEQUra7ZV1bE=) 12: sKeEH8goKxahgJVyVEdbhgJ7n7Y.roa (hash: uvOsVNDxwiKqJjLFyenb/M2w5Vt3m+sOy2/sHUQrtIc=) 13: w5BxPGkpdUOoj6KfnZEduZETjuE.roa (hash: JPKkhDje+63ounlQ9s1rDQVa+hGWwYxm1Bd6pam4P0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:a2:7c:47:8f:b3:aa:10:af:bd:a8:13:3c:83:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Dec 6 13:01:19 2025 GMT Not After : Dec 7 13:01:19 2025 GMT Subject: CN=a889d22359c712a8bf9b0dd5781a6f690ce1a7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:40:f9:85:dd:20:b7:a1:ab:c2:83:e3:0e: 1f:ab:a7:0f:2a:7e:ea:c1:f5:56:f1:34:78:32:06: 45:f8:62:c0:c2:3a:2b:be:6f:4b:e9:24:c5:94:75: 32:34:9a:4f:31:d3:50:bd:f7:ff:8a:16:23:d8:6e: 3f:aa:82:a0:26:4c:18:97:1e:79:98:05:f7:d0:7b: ac:51:5e:fb:47:6e:5a:69:ea:54:34:86:8a:a1:73: 90:19:e7:f8:67:3d:9e:76:a7:b9:c0:ea:bb:2e:42: 5c:18:aa:d3:91:4a:5d:db:e0:ff:a9:90:f5:b5:3e: e7:9b:7c:0b:95:3d:fb:11:9a:92:37:48:b1:3e:37: 88:73:2e:0d:4f:01:40:25:49:7e:59:dc:13:86:ea: 5b:71:64:de:63:e0:d2:f8:05:43:92:70:ef:46:5c: 5c:15:bc:19:25:ab:db:97:ed:3f:d4:4c:46:c9:52: 4c:3b:11:8d:f9:2a:77:08:f4:ab:e0:0a:3a:32:68: b0:10:14:10:c9:63:ca:e0:c5:77:4c:97:fe:ca:eb: 57:1d:6f:36:f0:db:7c:30:fd:a4:41:a0:fa:b9:f3: e8:b7:a0:1d:58:46:1a:aa:c7:cb:0e:6b:7a:4d:68: de:f0:f6:2d:be:d0:83:11:1e:76:aa:fc:b8:54:49: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:89:D2:23:59:C7:12:A8:BF:9B:0D:D5:78:1A:6F:69:0C:E1:A7:C1 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:10:64:a5:42:e5:3e:58:fb:c2:d5:25:fe:4b:7e:bf:94:5a: 5b:29:7c:a5:b8:58:bb:f3:82:59:d0:8f:ae:75:4a:a4:99:ad: 2e:21:16:d6:5f:e9:56:46:28:1e:4a:b9:81:6c:c9:c9:25:13: ee:b3:4a:7e:08:14:4c:5f:07:02:c0:44:ae:1f:f4:46:e1:f4: 44:18:1d:5a:c3:0a:3f:8e:a7:e0:77:0a:3a:da:08:72:da:dc: 2d:14:d6:b9:8c:73:b9:35:86:17:86:c0:93:f2:76:86:10:39: 9d:e0:6a:46:b1:12:0a:b2:bf:1b:a9:98:15:7f:f7:38:35:99: 86:89:69:8d:2b:ba:d6:2c:b0:3f:0b:c1:3b:b2:7f:0a:85:13: d0:9a:83:82:58:db:23:7e:d6:5e:47:83:40:87:b1:bb:18:8f: 8c:1e:38:43:ab:d3:3e:a0:99:13:80:38:88:be:18:d9:d3:d5: 7f:1d:9d:94:09:97:74:b4:0f:5d:35:5e:0c:ac:16:e2:b5:17: 6c:98:bf:67:8b:cf:95:57:b0:8b:63:dd:26:57:af:dc:55:3c: 69:f3:d7:4c:cd:84:6c:82:9f:23:13:20:c7:6e:3d:23:cf:20: d5:3c:dc:2b:1d:b8:02:a8:30:d7:35:a5:92:56:25:38:87:0a: 8c:a3:ec:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKJ8R4+zqhCvvagTPINJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMjA2MTMwMTE5WhcNMjUxMjA3MTMwMTE5WjAzMTEwLwYDVQQD EyhhODg5ZDIyMzU5YzcxMmE4YmY5YjBkZDU3ODFhNmY2OTBjZTFhN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y5A+YXdILehq8KD4w4fq6cPKn7q wfVW8TR4MgZF+GLAwjorvm9L6STFlHUyNJpPMdNQvff/ihYj2G4/qoKgJkwYlx55 mAX30HusUV77R25aaepUNIaKoXOQGef4Zz2edqe5wOq7LkJcGKrTkUpd2+D/qZD1 tT7nm3wLlT37EZqSN0ixPjeIcy4NTwFAJUl+WdwThupbcWTeY+DS+AVDknDvRlxc FbwZJavbl+0/1ExGyVJMOxGN+Sp3CPSr4Ao6MmiwEBQQyWPK4MV3TJf+yutXHW82 8Nt8MP2kQaD6ufPot6AdWEYaqsfLDmt6TWje8PYtvtCDER52qvy4VEm1RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiJ0iNZxxKov5sN1Xgab2kM4afBMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhBkpULl Plj7wtUl/kt+v5RaWyl8pbhYu/OCWdCPrnVKpJmtLiEW1l/pVkYoHkq5gWzJySUT 7rNKfggUTF8HAsBErh/0RuH0RBgdWsMKP46n4HcKOtoIctrcLRTWuYxzuTWGF4bA k/J2hhA5neBqRrESCrK/G6mYFX/3ODWZholpjSu61iywPwvBO7J/CoUT0JqDgljb I37WXkeDQIexuxiPjB44Q6vTPqCZE4A4iL4Y2dPVfx2dlAmXdLQPXTVeDKwW4rUX bJi/Z4vPlVewi2PdJlev3FU8afPXTM2EbIKfIxMgx249I88g1TzcKx24Aqgw1zWl klYlOIcKjKPsCg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:13 2025 by rpki-client