This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json) Hash identifier: vIvi542KaFjL9hIwVsFdrlhVIK/5XMgs7JyAcH3jVjM= Subject key identifier: 74:51:18:D9:8D:29:C2:A6:4B:38:60:49:B0:3C:7A:4E:E5:90:09:AC Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87 Certificate serial: 019AF0BED91810A72CE7A9E3B697D8DED2C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: 4EBLQiUigXa_kHRgKUQlBdf2vQs.roa (hash: jB+fJelPc+bKwLGuPQtWiTZOTzyJjm6S+9AcmCEgdhI=) 2: BkoOf_uIORKFRdieYZeXGcLC6dQ.roa (hash: xIbcujmFBa2hNw0aSpYX+/p8gEohM1cZhtEYemHWSZY=) 3: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: rajczs5GenRRFgfI5hN9bYQowpEwi5ofBnJW+OKr+D8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d9:18:10:a7:2c:e7:a9:e3:b6:97:d8:de:d2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c612adfabf915df33198935808cf0df9738dca87 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=745118d98d29c2a64b386049b03c7a4ee59009ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:0d:e6:33:ca:62:a2:8b:98:62:28:f2:68: 64:52:06:45:f1:41:e4:21:08:3d:31:32:5b:ce:73: 9e:67:00:7a:57:0f:8f:0a:7c:f3:de:d7:39:01:ff: fa:8b:44:da:cb:99:eb:e3:c4:49:56:52:f9:69:0d: b5:6a:13:4f:d3:9f:7e:b2:26:88:d7:82:ca:37:31: b9:9e:e7:29:01:94:21:2d:b7:79:6d:ed:99:d0:2f: 61:5c:87:9b:9c:f6:ea:78:eb:da:59:ce:c1:d8:df: 7f:e2:d8:bb:7b:be:a1:84:47:bd:1d:aa:ce:ee:d9: 70:ef:72:ce:7b:d6:6f:80:ff:2a:07:14:59:58:60: 41:f2:f6:e6:ac:c3:1b:44:41:fa:0c:44:b6:14:c6: 18:15:38:c0:cb:d6:b8:2b:e1:4f:0f:1d:cd:1a:36: 01:8f:90:8e:17:0c:78:b8:c6:c3:1c:37:0b:68:05: 17:b5:4f:fd:fb:6d:8b:92:d0:4c:6f:17:a3:9c:3c: 1b:e0:73:f7:52:c8:4a:6e:11:12:b0:cb:ce:a6:74: 67:7c:82:7b:47:b9:c6:44:17:37:9a:8f:1a:85:28: 20:e2:e1:99:19:d4:74:af:44:a7:58:a6:60:e1:af: f2:98:54:cf:48:5e:62:40:41:81:c5:d0:0c:77:a9: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:51:18:D9:8D:29:C2:A6:4B:38:60:49:B0:3C:7A:4E:E5:90:09:AC X509v3 Authority Key Identifier: keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:6f:f4:11:3e:ce:ca:81:27:b4:a8:ff:c8:72:9f:67:fa:82: b6:ab:a2:85:b1:ea:14:5d:a4:08:5d:8a:d1:bf:32:50:9d:49: 2e:2f:a1:10:33:bd:f8:dc:df:b3:0d:34:a8:00:0e:18:01:22: 13:d2:7a:18:63:38:da:b2:5a:e2:c0:1f:0d:c1:c8:b7:1d:21: e9:54:8a:8c:85:a6:fd:3d:51:31:6a:b6:23:b4:1c:d2:26:4a: d5:51:fa:4e:fe:e1:7f:42:f2:25:91:65:be:e9:48:e6:93:77: c1:c0:df:5b:33:61:ab:ca:ae:53:1b:cf:0e:37:3c:cc:67:ff: 3f:50:96:a3:76:5d:7b:cb:ab:51:5c:d7:a7:30:1f:68:7f:d6: 7c:a9:67:bd:62:d3:09:1e:64:5f:89:53:40:2b:7b:36:be:69: ed:ae:99:8e:64:07:a7:ec:eb:3c:e2:79:ae:03:3f:86:a7:80: 33:69:6a:d2:fc:c6:ff:bc:f2:e2:51:7a:4c:ef:61:ed:b4:88: 31:b3:43:e9:b4:dd:1d:3d:2b:a9:79:01:10:03:9c:04:12:00: 0d:7f:ac:47:fa:38:6e:4e:64:e4:d4:d3:2f:84:2b:e6:15:73: b5:07:05:8c:6d:28:19:a3:70:26:aa:6a:0b:0a:94:e7:2d:31: 83:ff:30:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtkYEKcs56njtpfY3tLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTJhZGZhYmY5MTVkZjMzMTk4OTM1ODA4Y2YwZGY5NzM4 ZGNhODcwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD Eyg3NDUxMThkOThkMjljMmE2NGIzODYwNDliMDNjN2E0ZWU1OTAwOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqYN5jPKYqKLmGIo8mhkUgZF8UHk IQg9MTJbznOeZwB6Vw+PCnzz3tc5Af/6i0Tay5nr48RJVlL5aQ21ahNP059+siaI 14LKNzG5nucpAZQhLbd5be2Z0C9hXIebnPbqeOvaWc7B2N9/4ti7e76hhEe9HarO 7tlw73LOe9ZvgP8qBxRZWGBB8vbmrMMbREH6DES2FMYYFTjAy9a4K+FPDx3NGjYB j5COFwx4uMbDHDcLaAUXtU/9+22LktBMbxejnDwb4HP3UshKbhESsMvOpnRnfIJ7 R7nGRBc3mo8ahSgg4uGZGdR0r0SnWKZg4a/ymFTPSF5iQEGBxdAMd6mwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRRGNmNKcKmSzhgSbA8ek7lkAmsMB8GA1UdIwQY MBaAFMYSrfq/kV3zMZiTWAjPDflzjcqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgt ODFhNDZmNGY2ZDVhLzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zMGFiMTgtZDM3OS00YWM3LWE5MDgtODFhNDZmNGY2ZDVh LzEveGhLdC1yLVJYZk14bUpOWUNNOE4tWE9OeW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0m/0ET7O yoEntKj/yHKfZ/qCtquihbHqFF2kCF2K0b8yUJ1JLi+hEDO9+Nzfsw00qAAOGAEi E9J6GGM42rJa4sAfDcHItx0h6VSKjIWm/T1RMWq2I7Qc0iZK1VH6Tv7hf0LyJZFl vulI5pN3wcDfWzNhq8quUxvPDjc8zGf/P1CWo3Zde8urUVzXpzAfaH/WfKlnvWLT CR5kX4lTQCt7Nr5p7a6ZjmQHp+zrPOJ5rgM/hqeAM2lq0vzG/7zy4lF6TO9h7bSI MbND6bTdHT0rqXkBEAOcBBIADX+sR/o4bk5k5NTTL4Qr5hVztQcFjG0oGaNwJqpq CwqU5y0xg/8w6g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:08 2025 by rpki-client