This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft File: xVoeQFH2j-i3IOg92tM7dlHLfvk.mft (raw, json) Hash identifier: 9m30/smP3vipm9W2aS1lxKhAwzsijwaD+QXLSX3VWMc= Subject key identifier: DF:CD:62:97:AC:41:3E:2C:49:6B:0C:17:3D:3C:BE:7C:B4:D0:72:12 Authority key identifier: C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9 Certificate issuer: /CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9 Certificate serial: 019B35A0C73BFFF87FE2AB7EB3953102D99F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft Manifest number: 0E06 Signing time: Fri 19 Dec 2025 08:01:27 +0000 Manifest this update: Fri 19 Dec 2025 08:01:27 +0000 Manifest next update: Sat 20 Dec 2025 08:01:27 +0000 Files and hashes: 1: ZCz_B_c4Ab7TJ-Wdj6CNbe4vJM8.roa (hash: GKBVpj9NFqT4kWPy6LEsdkgiDMQ6Chmhcoso+7TmqfM=) 2: xVoeQFH2j-i3IOg92tM7dlHLfvk.crl (hash: jErixhvy9eSo5OZopAuZerN3poIGg0kyzEEE2aCd0EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:c7:3b:ff:f8:7f:e2:ab:7e:b3:95:31:02:d9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55a1e4051f68fe8b720e83ddad33b7651cb7ef9 Validity Not Before: Dec 19 08:01:27 2025 GMT Not After : Dec 20 08:01:27 2025 GMT Subject: CN=dfcd6297ac413e2c496b0c173d3cbe7cb4d07212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8b:43:57:1e:17:4d:7e:86:91:5c:08:d3:4d: fb:3a:c6:80:73:0e:bc:72:89:ba:58:0b:fe:3d:4a: a0:9d:53:0c:1c:51:62:22:c0:00:9f:f3:b1:7c:0f: fb:23:be:50:2c:ff:b5:1c:aa:65:b7:9a:38:f9:bc: a7:a0:82:64:6e:ec:38:05:be:f5:8b:e9:4a:d7:b6: f1:ac:4f:3c:42:c2:a2:c2:ca:6a:12:c7:89:6a:ee: 57:27:ea:3b:93:ac:8b:90:cf:61:2a:48:41:92:6b: 82:8b:02:97:d6:18:df:93:48:67:71:84:f7:38:36: 8c:19:ba:28:43:5d:5d:fc:90:44:18:fb:6e:16:d9: c7:56:88:3c:0b:eb:94:68:d5:a3:61:2a:ba:54:1d: 61:8c:fd:8b:19:32:1c:f6:5c:15:94:34:73:f8:13: 2c:ec:93:ef:e2:c6:e1:ac:4f:4a:6f:5d:f3:e3:c7: 02:74:2c:94:2e:ee:8d:3b:87:ec:d2:f6:7c:e5:46: 58:8e:92:37:df:74:1c:5e:04:06:6d:da:37:6e:42: b3:ac:16:95:ee:da:33:eb:a3:33:4e:02:b1:90:7e: 40:a1:09:b5:33:07:a1:a2:31:bb:1b:a4:a6:5f:d8: fc:02:a6:d8:ce:2b:1d:d1:23:39:05:10:da:15:11: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CD:62:97:AC:41:3E:2C:49:6B:0C:17:3D:3C:BE:7C:B4:D0:72:12 X509v3 Authority Key Identifier: keyid:C5:5A:1E:40:51:F6:8F:E8:B7:20:E8:3D:DA:D3:3B:76:51:CB:7E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVoeQFH2j-i3IOg92tM7dlHLfvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f55332-bacc-4b0f-b16f-03da7e74dcad/1/xVoeQFH2j-i3IOg92tM7dlHLfvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5e:67:33:b3:d0:8d:1f:8f:d6:21:23:e0:d1:77:48:df:f7: 14:63:87:de:49:6c:d1:80:c9:6c:ee:71:51:d7:c1:e9:c0:7f: 66:a6:6c:d7:29:a8:28:88:6b:ef:41:89:96:b9:62:94:6b:9a: f9:75:4f:d4:4e:7b:c4:5a:48:55:ef:85:bf:74:67:5f:94:87: 7b:3c:e1:87:a6:46:f7:a6:1b:58:14:a7:1d:b1:88:06:fc:36: ac:98:57:a4:83:ca:c0:88:fc:9f:07:32:0a:df:82:80:de:41: a0:1d:df:87:a5:9c:f9:34:20:06:41:9d:6d:68:52:68:15:56: 48:cc:85:54:d1:7a:58:71:6f:8d:9c:89:41:82:ec:d1:c1:1d: 94:9f:f3:a8:c5:9b:99:18:0c:2f:7a:3d:4a:be:07:0d:1e:c8: 0c:60:d6:ca:d9:e4:15:2b:3d:11:ab:65:1a:ed:a5:fc:34:26: 5a:88:19:08:57:b5:38:93:59:6d:cd:f0:fe:42:96:df:97:b7: f8:4f:a4:80:ee:8a:6d:cd:a4:35:10:4f:5d:cb:4c:1c:ed:a8: e5:ae:9b:aa:8a:18:7d:8c:3b:ec:60:0b:c5:1b:f4:22:4f:aa: 11:75:f4:71:01:9a:1f:05:11:82:16:c2:29:01:3a:39:0c:d3: 41:36:1c:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMc7//h/4qt+s5UxAtmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NWExZTQwNTFmNjhmZThiNzIwZTgzZGRhZDMzYjc2NTFj YjdlZjkwHhcNMjUxMjE5MDgwMTI3WhcNMjUxMjIwMDgwMTI3WjAzMTEwLwYDVQQD EyhkZmNkNjI5N2FjNDEzZTJjNDk2YjBjMTczZDNjYmU3Y2I0ZDA3MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24tDVx4XTX6GkVwI0037OsaAcw68 com6WAv+PUqgnVMMHFFiIsAAn/OxfA/7I75QLP+1HKplt5o4+bynoIJkbuw4Bb71 i+lK17bxrE88QsKiwspqEseJau5XJ+o7k6yLkM9hKkhBkmuCiwKX1hjfk0hncYT3 ODaMGbooQ11d/JBEGPtuFtnHVog8C+uUaNWjYSq6VB1hjP2LGTIc9lwVlDRz+BMs 7JPv4sbhrE9Kb13z48cCdCyULu6NO4fs0vZ85UZYjpI333QcXgQGbdo3bkKzrBaV 7toz66MzTgKxkH5AoQm1MwehojG7G6SmX9j8AqbYzisd0SM5BRDaFREJPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/NYpesQT4sSWsMFz08vny00HISMB8GA1UdIwQY MBaAFMVaHkBR9o/otyDoPdrTO3ZRy375MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYt MDNkYTdlNzRkY2FkLzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mNTUzMzItYmFjYy00YjBmLWIxNmYtMDNkYTdlNzRkY2Fk LzEveFZvZVFGSDJqLWkzSU9nOTJ0TTdkbEhMZnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl5nM7PQ jR+P1iEj4NF3SN/3FGOH3kls0YDJbO5xUdfB6cB/ZqZs1ymoKIhr70GJlrlilGua +XVP1E57xFpIVe+Fv3RnX5SHezzhh6ZG96YbWBSnHbGIBvw2rJhXpIPKwIj8nwcy Ct+CgN5BoB3fh6Wc+TQgBkGdbWhSaBVWSMyFVNF6WHFvjZyJQYLs0cEdlJ/zqMWb mRgML3o9Sr4HDR7IDGDWytnkFSs9EatlGu2l/DQmWogZCFe1OJNZbc3w/kKW35e3 +E+kgO6Kbc2kNRBPXctMHO2o5a6bqooYfYw77GALxRv0Ik+qEXX0cQGaHwURghbC KQE6OQzTQTYcOA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:25:51 2025 by rpki-client