This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json) Hash identifier: 4X3fHWGKPjwmojtXUT9FcWEiQhZ2y4NT6fonKOtZEio= Subject key identifier: 7D:27:97:AA:BA:60:2B:68:C7:63:1D:0A:9B:15:A7:E1:8E:92:00:83 Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Certificate serial: 019B2B8A80B9788603B13B4E55AD785188E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft Manifest number: 15CC Signing time: Wed 17 Dec 2025 09:00:55 +0000 Manifest this update: Wed 17 Dec 2025 09:00:55 +0000 Manifest next update: Thu 18 Dec 2025 09:00:55 +0000 Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=) 2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: qWzjmLVpKVGbYgpXXkC6t48qWqrVHS1eTEVk/cUnaVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:80:b9:78:86:03:b1:3b:4e:55:ad:78:51:88:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Validity Not Before: Dec 17 09:00:55 2025 GMT Not After : Dec 18 09:00:55 2025 GMT Subject: CN=7d2797aaba602b68c7631d0a9b15a7e18e920083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cd:45:d3:7a:89:04:73:6f:7e:bc:b2:64:59: 67:d3:51:fb:4d:9b:49:f4:3f:72:3e:1e:d4:a4:88: 66:71:b2:e6:3d:17:ba:b9:40:64:b6:7d:41:ae:5e: 6d:1b:ab:48:51:ba:cf:b4:60:c7:2b:50:0f:a8:fb: 25:3d:02:20:37:3a:35:37:8f:60:da:bf:9f:90:85: 86:b6:27:6c:dd:e4:e2:6b:e2:76:f5:79:30:0e:1e: 78:d0:9d:5f:3f:5d:ea:06:99:44:fe:02:2d:2e:33: 85:1e:12:6c:26:19:62:5d:c8:c8:f9:e2:8d:c2:46: 50:69:fa:f3:fd:f5:14:5b:47:d0:1d:f6:ef:f5:f9: 41:27:19:44:ed:43:1c:87:a2:3c:21:0d:74:6b:b4: 1a:c2:34:63:cc:50:94:ac:2b:03:9c:51:9c:db:fc: cb:6c:bd:58:66:bc:3a:32:f9:73:ad:ee:24:46:74: 52:98:e7:c2:62:a2:d2:5e:91:17:67:28:94:26:4f: c2:0c:65:7b:9e:8d:4a:87:01:64:84:31:4b:87:4f: 6b:11:41:f6:6b:94:99:82:ac:6c:14:9e:43:fd:2f: 7b:0c:02:2a:d6:30:7c:39:38:21:bd:9d:cb:ee:0c: 44:da:39:be:b1:d2:f8:94:6e:36:8e:1b:37:e9:33: f5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:27:97:AA:BA:60:2B:68:C7:63:1D:0A:9B:15:A7:E1:8E:92:00:83 X509v3 Authority Key Identifier: keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:49:5b:b5:aa:b3:88:21:a3:c8:4b:64:ba:be:b7:b8:1a:8b: fd:31:b4:76:7b:33:84:69:7a:5c:8f:87:29:a0:82:7f:14:ef: 6b:f9:8d:77:be:22:ff:02:c1:2b:46:a1:a3:ef:e8:65:b1:c9: 7d:fc:fe:92:17:d8:8d:2c:d8:59:21:bd:16:bf:bb:81:eb:14: f9:8f:31:59:cb:bb:db:41:05:42:37:76:14:8a:de:26:5b:76: 0f:1c:91:44:60:ab:c4:2c:33:b4:f4:fb:11:82:a6:36:f9:dc: a0:4b:f3:69:0e:a8:30:6a:6e:c3:67:63:f7:f3:b4:ae:c6:ab: b8:94:c5:e1:7c:90:82:50:93:f6:32:65:7b:6d:59:a9:4f:71: ed:d8:2b:1a:61:89:9c:b6:5d:d7:46:1e:78:e3:34:82:ca:2d: 02:05:91:e6:c8:38:e1:3d:e7:b3:4d:87:0d:27:c6:46:0d:36: c8:7c:bd:31:a7:8a:0f:79:35:b4:f4:02:6e:c4:b6:9b:e6:e5: 24:7f:89:8c:ad:41:8a:0b:f6:43:0d:f7:55:66:9e:30:01:cd: c8:ea:e3:44:19:54:bc:09:0e:28:b3:27:e2:84:35:27:eb:69: 83:f2:b3:e0:93:5a:49:f1:bd:ab:df:dc:e5:59:43:47:0b:80: 6b:4a:0d:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrioC5eIYDsTtOVa14UYjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj ZmJmYWYwHhcNMjUxMjE3MDkwMDU1WhcNMjUxMjE4MDkwMDU1WjAzMTEwLwYDVQQD Eyg3ZDI3OTdhYWJhNjAyYjY4Yzc2MzFkMGE5YjE1YTdlMThlOTIwMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk81F03qJBHNvfryyZFln01H7TZtJ 9D9yPh7UpIhmcbLmPRe6uUBktn1Brl5tG6tIUbrPtGDHK1APqPslPQIgNzo1N49g 2r+fkIWGtids3eTia+J29XkwDh540J1fP13qBplE/gItLjOFHhJsJhliXcjI+eKN wkZQafrz/fUUW0fQHfbv9flBJxlE7UMch6I8IQ10a7QawjRjzFCUrCsDnFGc2/zL bL1YZrw6Mvlzre4kRnRSmOfCYqLSXpEXZyiUJk/CDGV7no1KhwFkhDFLh09rEUH2 a5SZgqxsFJ5D/S97DAIq1jB8OTghvZ3L7gxE2jm+sdL4lG42jhs36TP1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0nl6q6YCtox2MdCpsVp+GOkgCDMB8GA1UdIwQY MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1 LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlElbtaqz iCGjyEtkur63uBqL/TG0dnszhGl6XI+HKaCCfxTva/mNd74i/wLBK0aho+/oZbHJ ffz+khfYjSzYWSG9Fr+7gesU+Y8xWcu720EFQjd2FIreJlt2DxyRRGCrxCwztPT7 EYKmNvncoEvzaQ6oMGpuw2dj9/O0rsaruJTF4XyQglCT9jJle21ZqU9x7dgrGmGJ nLZd10YeeOM0gsotAgWR5sg44T3ns02HDSfGRg02yHy9MaeKD3k1tPQCbsS2m+bl JH+JjK1Bigv2Qw33VWaeMAHNyOrjRBlUvAkOKLMn4oQ1J+tpg/Kz4JNaSfG9q9/c 5VlDRwuAa0oN5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 17:47:11 2025 by rpki-client