This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft File: xAGmSD3G9mt4p6QRLVhz3FZkehk.mft (raw, json) Hash identifier: 57SXNltlfi3sG696vMTrGatBcm9h2B6P4otHetVMXRM= Subject key identifier: 59:50:CA:5B:2D:41:76:32:31:ED:EF:CE:93:7D:E6:2C:61:D2:29:49 Authority key identifier: C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 Certificate issuer: /CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Certificate serial: 019B2BF871F275ABC5FE29DA3F03127DFF6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft Manifest number: 0546 Signing time: Wed 17 Dec 2025 11:01:00 +0000 Manifest this update: Wed 17 Dec 2025 11:01:00 +0000 Manifest next update: Thu 18 Dec 2025 11:01:00 +0000 Files and hashes: 1: Vu1Wz44tBW3Recvb-qbKbp0p19Y.roa (hash: tPI+cxeowqV5RgJALeFjFG5FAryHW0I6Zz9wqBq7kIA=) 2: xAGmSD3G9mt4p6QRLVhz3FZkehk.crl (hash: Aq5V7bglsA2EC9ooYIRo6speZF9WPAMW7+/eN0hTMxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:71:f2:75:ab:c5:fe:29:da:3f:03:12:7d:ff:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c401a6483dc6f66b78a7a4112d5873dc56647a19 Validity Not Before: Dec 17 11:01:00 2025 GMT Not After : Dec 18 11:01:00 2025 GMT Subject: CN=5950ca5b2d41763231edefce937de62c61d22949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:c8:4e:e6:2d:fa:51:cd:db:ff:04:92:a4: 97:69:e5:18:81:1b:8e:3b:bd:db:64:b2:01:f4:df: a5:83:0e:48:c2:d4:cb:36:03:09:b2:18:d1:9d:37: 92:b5:3b:fb:3a:a7:27:a7:1b:d1:fa:7b:d7:2a:b4: 95:6d:fc:ab:aa:15:6e:4a:cd:e1:e3:2b:7f:2c:ec: c7:f6:f2:b7:b8:e0:6c:22:68:76:5c:e9:fc:30:b5: d8:89:ca:d7:62:78:21:da:73:cb:68:e8:68:93:24: 1e:41:e6:bf:b7:e3:a8:2c:78:3a:66:ca:24:93:64: 25:ad:6b:62:90:9d:8c:68:03:c8:8b:11:2d:db:3d: 59:49:31:25:38:69:34:10:1c:4a:98:a9:75:11:e0: 60:a8:ef:fd:21:ec:24:34:f8:1c:e0:88:fa:67:38: 08:1a:98:85:b4:3d:11:61:50:a3:d6:66:db:73:7e: b0:e3:d4:d7:a9:13:c5:d4:6e:a9:0a:1c:4c:3a:89: f2:12:b3:72:4f:03:26:1c:b7:df:c8:34:7c:5a:b0: d6:37:8a:13:21:ae:6b:a4:eb:4c:51:5f:99:97:07: d2:eb:cd:3f:02:12:33:0e:42:67:58:a3:fe:50:1e: a0:a5:e5:22:e0:3c:9f:6d:a2:e8:72:b4:a3:e2:e9: 43:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:50:CA:5B:2D:41:76:32:31:ED:EF:CE:93:7D:E6:2C:61:D2:29:49 X509v3 Authority Key Identifier: keyid:C4:01:A6:48:3D:C6:F6:6B:78:A7:A4:11:2D:58:73:DC:56:64:7A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAGmSD3G9mt4p6QRLVhz3FZkehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a8a62-f54a-4150-adde-19d33e055857/1/xAGmSD3G9mt4p6QRLVhz3FZkehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:fa:d0:74:f1:6c:79:30:57:25:f0:d8:07:44:9a:9a:14:20: 4c:a0:50:11:c6:f8:fa:b0:bc:b0:fa:bf:f5:ae:73:68:c2:1d: 62:90:fc:70:3b:a1:8f:d5:7e:9a:b8:5e:73:62:22:ee:45:58: ab:31:41:24:5e:a8:6d:1e:9d:ca:6d:da:a2:95:13:69:8e:5f: 51:1e:ac:f6:a8:4c:57:8b:49:25:5f:83:e2:64:0a:e5:0f:a9: 42:3d:e5:c7:93:ae:6b:fb:6a:23:49:06:67:99:bf:d5:e0:f6: d7:c4:27:d1:ff:5d:13:00:eb:5b:c5:84:d5:c9:c3:93:9d:de: 52:b4:46:07:60:18:71:3e:a2:99:65:eb:00:e5:14:83:c7:72: 8d:db:09:5b:29:b0:cb:c3:70:d5:bb:d8:21:7e:1a:f9:d8:25: 93:96:cd:8a:f7:2d:48:dd:24:f1:0b:c2:65:78:b8:b6:e3:fc: 6f:a6:06:8a:30:dd:75:1d:96:1d:19:20:48:c5:35:66:21:c0: 99:35:e9:32:46:33:7a:f3:a4:ec:d2:db:4d:47:72:a1:0f:0b: 8d:e7:0f:f2:e5:ce:f2:02:33:9e:32:82:0f:2b:5f:91:55:bc: a1:df:4b:e4:ba:52:a9:31:95:cd:18:e8:62:eb:71:15:ee:c8: b6:e6:53:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HHydavF/inaPwMSff9tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDFhNjQ4M2RjNmY2NmI3OGE3YTQxMTJkNTg3M2RjNTY2 NDdhMTkwHhcNMjUxMjE3MTEwMTAwWhcNMjUxMjE4MTEwMTAwWjAzMTEwLwYDVQQD Eyg1OTUwY2E1YjJkNDE3NjMyMzFlZGVmY2U5MzdkZTYyYzYxZDIyOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR/ITuYt+lHN2/8EkqSXaeUYgRuO O73bZLIB9N+lgw5IwtTLNgMJshjRnTeStTv7OqcnpxvR+nvXKrSVbfyrqhVuSs3h 4yt/LOzH9vK3uOBsImh2XOn8MLXYicrXYngh2nPLaOhokyQeQea/t+OoLHg6Zsok k2QlrWtikJ2MaAPIixEt2z1ZSTElOGk0EBxKmKl1EeBgqO/9IewkNPgc4Ij6ZzgI GpiFtD0RYVCj1mbbc36w49TXqRPF1G6pChxMOonyErNyTwMmHLffyDR8WrDWN4oT Ia5rpOtMUV+ZlwfS680/AhIzDkJnWKP+UB6gpeUi4DyfbaLocrSj4ulDiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlQylstQXYyMe3vzpN95ixh0ilJMB8GA1UdIwQY MBaAFMQBpkg9xvZreKekES1Yc9xWZHoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUt MTlkMzNlMDU1ODU3LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YThhNjItZjU0YS00MTUwLWFkZGUtMTlkMzNlMDU1ODU3 LzEveEFHbVNEM0c5bXQ0cDZRUkxWaHozRlprZWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfrQdPFs eTBXJfDYB0SamhQgTKBQEcb4+rC8sPq/9a5zaMIdYpD8cDuhj9V+mrhec2Ii7kVY qzFBJF6obR6dym3aopUTaY5fUR6s9qhMV4tJJV+D4mQK5Q+pQj3lx5Oua/tqI0kG Z5m/1eD218Qn0f9dEwDrW8WE1cnDk53eUrRGB2AYcT6imWXrAOUUg8dyjdsJWymw y8Nw1bvYIX4a+dglk5bNivctSN0k8QvCZXi4tuP8b6YGijDddR2WHRkgSMU1ZiHA mTXpMkYzevOk7NLbTUdyoQ8LjecP8uXO8gIznjKCDytfkVW8od9L5LpSqTGVzRjo YutxFe7ItuZTaQ== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:07 2025 by rpki-client