This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft File: xk-grYmHFJ8FU0cktFovTV6_R10.mft (raw, json) Hash identifier: bFN0UWtB0QxXaYCpQ1VX1loKylgdLlLXcEY17J6e/oY= Subject key identifier: F0:1C:BE:47:F4:EE:10:7A:38:0C:92:6A:AC:FC:92:84:CE:DC:DA:0A Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Certificate serial: 019AF16469198D623F39CA3E3E09DA00F5F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft Manifest number: 0F65 Signing time: Sat 06 Dec 2025 02:01:20 +0000 Manifest this update: Sat 06 Dec 2025 02:01:20 +0000 Manifest next update: Sun 07 Dec 2025 02:01:20 +0000 Files and hashes: 1: 1-h5OCB8JpMYjopLDVkrKQwK2dpM.roa (hash: d3AbXN4lYtYyEUM8E0v7gWJmAkvZX7xtSRa43xkdCaQ=) 2: 4BRf9QEM8HRGBLk-AoS4Oo-qwJE.roa (hash: 5AHXjtuq+kTYWfnBOXLhKcC6BCQTDutSSrluB2da0xU=) 3: AlG9a-wnZAaNJx4JRcNy6108vy0.roa (hash: rW0OCFxv2iZOns3RdhlBfU6Txlo4gEd4MAjshROZlio=) 4: CE1f-YmOt3cbqlraaC6IGn8dNx8.roa (hash: hC8+uGsl40jWrUT8KIzrEqF0aoiSCTeNkiDU1uFCjGI=) 5: JaK5nEHPaQ0eg4QVia6pq3nQtT8.asa (hash: zedp2dasOOuQWUFRKt1kDWC26clgR3XYNTuR7fBJPis=) 6: V2_sT2jDOr8MNnfYkhj5mMdvMaM.asa (hash: wVzZdXFDBv7mOQErQUozopppuOlT1ZjyUfEdZpNO8vQ=) 7: W2igZCKEosi-mfbhRXPXIOTNq9g.roa (hash: ttgFPCRGHj86SopPcwo8WI2fNU1bbHVqZycyehToXcM=) 8: gNCJ8z6bSBl79SrK62vAHCtFifE.roa (hash: 5lVMuSAwDoqshdP9Y7JZNMl5MLW2JG2HjKrm1W7wP30=) 9: hMydcbetvC8tmVard7inOTsJrKg.roa (hash: l5ZgoP9gkbhu9PWnFl16dpbIegVWhzcazk4u45t7sUU=) 10: k-o-zmp6E6M3w6lzVcLiVZ5iVV4.asa (hash: Uz7NKhkWs+9EDYle9gncDdJ37LyWdJWLb6DGxc1DGk4=) 11: sBswLDnyePuF7Wb4bNeFEX6khaA.roa (hash: q527iz5VwNMqqpTHR8opQ9UxQkOaCpJMBwKrLwpuxmM=) 12: t1mwU24RWx_QtHlt8VAyAaicScc.asa (hash: qul+FoGF3pEOmc/vqfxBeRQ9gtI1SffvAcYIByELYPs=) 13: xk-grYmHFJ8FU0cktFovTV6_R10.crl (hash: xGi9nk4lRmfg8B62PeZVf1O8kGAhwFnOaU09yWQmilA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:69:19:8d:62:3f:39:ca:3e:3e:09:da:00:f5:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d Validity Not Before: Dec 6 02:01:20 2025 GMT Not After : Dec 7 02:01:20 2025 GMT Subject: CN=f01cbe47f4ee107a380c926aacfc9284cedcda0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:21:ed:61:68:b8:19:0d:1e:8a:ef:6c:76: 49:e8:8b:42:d0:f6:be:8b:06:5f:13:0e:5b:09:2f: 06:39:b8:49:d0:eb:33:72:f4:c2:be:85:de:f1:d9: 85:a4:30:92:e0:11:0c:01:25:6d:3e:72:40:0f:b3: 40:a7:44:9a:b4:6f:51:e0:d7:fb:66:53:a2:b0:3b: 59:0b:4b:70:b8:e9:dd:9a:c8:84:4e:30:93:9c:3b: 54:56:74:bc:23:67:62:b7:08:ae:f0:dd:ca:b2:15: 18:e7:d3:c9:05:56:ac:c8:b5:d2:44:08:80:aa:b2: 16:3f:7e:c3:69:bc:2f:41:78:5e:1e:5b:31:cb:40: 1e:e2:b5:2f:ad:9d:88:68:57:f8:1e:ad:02:c8:44: 75:67:5d:5e:45:2f:b2:7e:59:af:ef:e6:37:fc:71: c2:4b:f5:51:db:d6:9a:f3:19:cf:23:36:39:60:fa: c0:1a:42:86:db:9e:82:fa:5a:46:0e:0f:67:79:2a: 2d:eb:f8:d5:47:35:0f:fd:fe:82:e5:8d:a2:fc:f2: 8b:96:f7:62:0f:18:b8:f7:2b:83:0f:88:0f:3a:39: 89:25:e5:58:25:a6:35:e2:7a:65:6a:1c:16:95:c0: da:19:b8:c0:12:40:06:86:c8:27:48:5a:14:ac:e8: 4a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1C:BE:47:F4:EE:10:7A:38:0C:92:6A:AC:FC:92:84:CE:DC:DA:0A X509v3 Authority Key Identifier: keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:45:08:b9:6b:2d:e5:f5:f8:81:41:68:d3:73:14:aa:2c:47: 19:b6:10:94:58:2c:fc:ad:4c:e4:53:5f:1e:4f:59:f5:71:ea: ea:06:3f:f2:87:c4:9e:ee:21:52:ac:41:1f:94:c5:7e:ef:4e: cb:27:0c:d9:30:ca:4e:20:18:5d:50:4e:b5:f4:b9:74:ee:f8: 4a:56:28:a9:1a:9e:a4:80:8f:18:3d:87:77:a0:d8:40:96:e4: 97:3d:5d:c2:de:13:a3:88:15:fb:a5:8e:de:26:58:43:bc:23: ac:f2:b5:6a:d2:00:07:e0:25:86:72:0e:71:00:02:4b:02:f9: 34:e9:ab:c0:b2:4b:ed:ae:a3:1a:98:24:9b:8f:76:ef:50:da: bd:ec:f4:11:ec:ba:50:d7:e0:21:18:04:28:8d:3c:9c:91:88: 5f:5a:8a:ea:f2:73:9f:e9:56:0a:00:04:8c:41:39:2a:87:83: dc:37:e7:73:c3:d4:e3:2d:ac:f3:ea:2e:c9:e6:0f:6f:9e:51: 20:91:b6:28:58:ba:f0:df:dc:9d:ae:0a:be:4f:89:34:48:e0: 44:2b:3f:d6:b3:59:ea:9c:ad:17:81:ff:59:b4:01:dd:9f:df: ad:ef:cf:1d:9a:5d:45:5c:01:29:16:a3:a0:d3:e7:58:2a:71: e9:4e:09:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGkZjWI/Oco+PgnaAPX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGZhMGFkODk4NzE0OWYwNTUzNDcyNGI0NWEyZjRkNWVi ZjQ3NWQwHhcNMjUxMjA2MDIwMTIwWhcNMjUxMjA3MDIwMTIwWjAzMTEwLwYDVQQD EyhmMDFjYmU0N2Y0ZWUxMDdhMzgwYzkyNmFhY2ZjOTI4NGNlZGNkYTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sgh7WFouBkNHorvbHZJ6ItC0Pa+ iwZfEw5bCS8GObhJ0OszcvTCvoXe8dmFpDCS4BEMASVtPnJAD7NAp0SatG9R4Nf7 ZlOisDtZC0twuOndmsiETjCTnDtUVnS8I2ditwiu8N3KshUY59PJBVasyLXSRAiA qrIWP37DabwvQXheHlsxy0Ae4rUvrZ2IaFf4Hq0CyER1Z11eRS+yflmv7+Y3/HHC S/VR29aa8xnPIzY5YPrAGkKG256C+lpGDg9neSot6/jVRzUP/f6C5Y2i/PKLlvdi Dxi49yuDD4gPOjmJJeVYJaY14nplahwWlcDaGbjAEkAGhsgnSFoUrOhKAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAcvkf07hB6OAySaqz8koTO3NoKMB8GA1UdIwQY MBaAFMZPoK2JhxSfBVNHJLRaL01ev0ddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEt YmNmNzcwMjY5MzlkLzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8yNDAxNWYtMDkxYy00YzVkLWI1YzEtYmNmNzcwMjY5Mzlk LzEveGstZ3JZbUhGSjhGVTBja3RGb3ZUVjZfUjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUUIuWst 5fX4gUFo03MUqixHGbYQlFgs/K1M5FNfHk9Z9XHq6gY/8ofEnu4hUqxBH5TFfu9O yycM2TDKTiAYXVBOtfS5dO74SlYoqRqepICPGD2Hd6DYQJbklz1dwt4To4gV+6WO 3iZYQ7wjrPK1atIAB+AlhnIOcQACSwL5NOmrwLJL7a6jGpgkm49271Davez0Eey6 UNfgIRgEKI08nJGIX1qK6vJzn+lWCgAEjEE5KoeD3Dfnc8PU4y2s8+ouyeYPb55R IJG2KFi68N/cna4Kvk+JNEjgRCs/1rNZ6pytF4H/WbQB3Z/fre/PHZpdRVwBKRaj oNPnWCpx6U4JvA== -----END CERTIFICATE-----Generated at Sat Dec 6 05:52:26 2025 by rpki-client