This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft File: xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft (raw, json) Hash identifier: x93XhHQ6RjeCaI5cpYeoD8gQp+zV0/YPodMZNe23WuY= Subject key identifier: F4:8F:A6:3C:C2:A9:4B:66:98:1B:9E:E3:83:CE:BB:6E:D3:29:AB:07 Authority key identifier: C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 Certificate issuer: /CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9 Certificate serial: 019B3AC6D5123E088AA8C040631E1BAA4440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft Manifest number: 06F3 Signing time: Sat 20 Dec 2025 08:01:07 +0000 Manifest this update: Sat 20 Dec 2025 08:01:07 +0000 Manifest next update: Sun 21 Dec 2025 08:01:07 +0000 Files and hashes: 1: XtEdAEEop3HSdnOxibG98C_uMCU.roa (hash: +p4FtnANqp2tZpv3Dmdn2vhOEqjGwMWFA5juiZbc568=) 2: xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl (hash: TIB/SkIRBITNEzRqEjPBqY2V5o5tSDw0QQFGN6v3iRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:d5:12:3e:08:8a:a8:c0:40:63:1e:1b:aa:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5538693167afd4c5aae51dea7e5f3f99ba65be9 Validity Not Before: Dec 20 08:01:07 2025 GMT Not After : Dec 21 08:01:07 2025 GMT Subject: CN=f48fa63cc2a94b66981b9ee383cebb6ed329ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:75:9d:37:91:73:64:c7:68:b1:89:ca:02: 07:55:ad:39:19:15:6c:6e:f2:27:4b:be:77:51:54: 7f:d5:2c:e9:74:4d:2c:43:f9:ca:35:bd:5f:c2:10: c5:6d:89:7d:7b:5d:16:d3:7a:57:f3:ef:c2:3d:5f: 88:fe:1a:b1:b1:77:86:86:0e:05:a9:8b:21:8c:e0: 92:ec:c1:ce:c8:a2:d3:83:50:51:c7:21:d3:3b:04: 8a:0b:b2:ce:c6:b3:a7:b2:5a:9d:11:03:5f:f9:0a: a3:c0:bb:8b:78:3d:05:43:0f:48:2b:65:10:d9:cd: 8d:66:58:a1:3e:da:26:09:6f:47:cf:8a:dc:14:e6: ca:c6:1b:98:6b:b6:92:52:b8:ca:ad:e8:73:54:1a: 12:85:09:72:7d:a9:0a:5d:b4:06:29:9f:a6:c2:da: b0:7d:60:ed:8a:c9:58:1e:47:d7:9c:3c:ac:cd:ec: 7c:67:5a:42:62:bb:b1:9c:a6:3c:4d:8f:f0:c9:03: 31:62:e5:35:4d:30:57:b2:84:da:88:31:46:ef:02: a9:41:3f:77:9c:9c:1a:3e:4d:c3:f2:e0:b3:e9:fa: 22:ef:61:a4:bf:a7:b5:d6:d4:bd:82:47:5f:45:00: d8:c5:ab:c7:6c:78:93:24:85:93:4f:db:81:24:a6: eb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8F:A6:3C:C2:A9:4B:66:98:1B:9E:E3:83:CE:BB:6E:D3:29:AB:07 X509v3 Authority Key Identifier: keyid:C5:53:86:93:16:7A:FD:4C:5A:AE:51:DE:A7:E5:F3:F9:9B:A6:5B:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVOGkxZ6_UxarlHep-Xz-ZumW-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/5def0f-40a4-4071-a602-bc2b7e6f1ca4/1/xVOGkxZ6_UxarlHep-Xz-ZumW-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:02:b8:09:88:b6:fe:a6:c9:a0:6f:70:38:49:7a:b1:f3:c7: 8f:ab:83:57:28:5f:b8:a6:11:9b:a6:02:a2:8b:8c:da:f2:53: 61:bd:1d:9a:f1:0f:4b:df:77:0a:d6:96:64:d7:1d:03:5a:d0: 02:52:d1:36:ed:a5:48:c6:c6:28:24:84:f7:d0:63:c5:e5:53: 23:1d:52:e7:8f:01:a7:08:90:36:78:6e:d5:c4:b4:e2:e4:12: a8:b0:8a:3b:ad:dc:92:d5:82:0b:55:70:8e:77:33:47:40:ef: a7:6d:d1:de:52:d2:ac:5d:df:cb:aa:b7:c5:f1:24:a5:be:97: a8:e8:11:45:1c:f5:60:3e:bc:c7:c5:4d:57:94:76:6b:97:6e: 8e:c9:9e:c1:1a:06:da:14:5a:5a:44:e1:33:b5:68:5d:36:70: 78:cd:85:36:77:6b:3c:13:19:bb:1a:00:32:60:ef:1a:84:31: 52:c7:1d:79:cb:34:d0:be:46:b8:f9:72:67:fe:71:23:b3:be: eb:f7:e5:41:73:6f:9f:af:7f:69:3f:f2:56:4f:7c:d9:a1:60: 1e:40:c5:ee:24:c9:60:99:4c:ad:8d:03:4f:b8:e1:28:5c:0b: 77:14:74:ae:c7:e8:f5:9c:a6:6a:50:a1:d8:6e:aa:80:d8:d3: 62:91:fc:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xtUSPgiKqMBAYx4bqkRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTM4NjkzMTY3YWZkNGM1YWFlNTFkZWE3ZTVmM2Y5OWJh NjViZTkwHhcNMjUxMjIwMDgwMTA3WhcNMjUxMjIxMDgwMTA3WjAzMTEwLwYDVQQD EyhmNDhmYTYzY2MyYTk0YjY2OTgxYjllZTM4M2NlYmI2ZWQzMjlhYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIt1nTeRc2THaLGJygIHVa05GRVs bvInS753UVR/1SzpdE0sQ/nKNb1fwhDFbYl9e10W03pX8+/CPV+I/hqxsXeGhg4F qYshjOCS7MHOyKLTg1BRxyHTOwSKC7LOxrOnslqdEQNf+QqjwLuLeD0FQw9IK2UQ 2c2NZlihPtomCW9Hz4rcFObKxhuYa7aSUrjKrehzVBoShQlyfakKXbQGKZ+mwtqw fWDtislYHkfXnDyszex8Z1pCYruxnKY8TY/wyQMxYuU1TTBXsoTaiDFG7wKpQT93 nJwaPk3D8uCz6foi72Gkv6e11tS9gkdfRQDYxavHbHiTJIWTT9uBJKbr3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSPpjzCqUtmmBue44POu27TKasHMB8GA1UdIwQY MBaAFMVThpMWev1MWq5R3qfl8/mbplvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDIt YmMyYjdlNmYxY2E0LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My81ZGVmMGYtNDBhNC00MDcxLWE2MDItYmMyYjdlNmYxY2E0 LzEveFZPR2t4WjZfVXhhcmxIZXAtWHotWnVtVy1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgK4CYi2 /qbJoG9wOEl6sfPHj6uDVyhfuKYRm6YCoouM2vJTYb0dmvEPS993CtaWZNcdA1rQ AlLRNu2lSMbGKCSE99BjxeVTIx1S548BpwiQNnhu1cS04uQSqLCKO63cktWCC1Vw jnczR0Dvp23R3lLSrF3fy6q3xfEkpb6XqOgRRRz1YD68x8VNV5R2a5dujsmewRoG 2hRaWkThM7VoXTZweM2FNndrPBMZuxoAMmDvGoQxUscdecs00L5GuPlyZ/5xI7O+ 6/flQXNvn69/aT/yVk982aFgHkDF7iTJYJlMrY0DT7jhKFwLdxR0rsfo9ZymalCh 2G6qgNjTYpH82w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:06:00 2025 by rpki-client