This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft File: xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft (raw, json) Hash identifier: x1gXHW4WD87p1hEqQo6kR09dxMlRlu2C/goOCywOKkg= Subject key identifier: 2D:A2:74:77:6F:8F:F4:CE:A5:9A:88:41:EB:FA:88:C6:8F:1D:7D:FA Authority key identifier: C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 Certificate issuer: /CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Certificate serial: 019B2C2F1FFD2E4AD6CCA7F32B6FF7B0F8DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft Manifest number: 16D7 Signing time: Wed 17 Dec 2025 12:00:44 +0000 Manifest this update: Wed 17 Dec 2025 12:00:44 +0000 Manifest next update: Thu 18 Dec 2025 12:00:44 +0000 Files and hashes: 1: C3xZoR3LtseXs9YgZ15-hhPr18E.roa (hash: 1WbsEFbzKO5s8iSa/8CXV3aiHCeUKDOXCmds/8JgsxY=) 2: xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl (hash: voOKFZ1C8E6j1wkQWRxK9MfQa5pSUDn9n/cOF0TXpQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:1f:fd:2e:4a:d6:cc:a7:f3:2b:6f:f7:b0:f8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c625afb9ce335eed3e53128b4a9eb25fc495d6e0 Validity Not Before: Dec 17 12:00:44 2025 GMT Not After : Dec 18 12:00:44 2025 GMT Subject: CN=2da274776f8ff4cea59a8841ebfa88c68f1d7dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b2:35:5d:96:fb:77:11:f2:61:c7:82:86:27: 78:a6:b9:d6:9b:b1:32:17:d6:4c:75:4e:e5:b8:e9: ee:4a:fc:0f:9a:36:b2:f9:03:80:30:89:94:80:91: 56:5c:af:93:4a:f8:81:78:44:e4:6e:ce:20:18:e8: 50:78:c7:e8:27:ec:33:55:31:df:75:29:a7:cb:8f: 29:06:cf:52:61:ba:f7:f3:b2:fc:79:fd:fa:46:ca: 4f:d2:57:4b:f5:f5:d2:2f:9e:c1:d6:65:6e:10:88: b7:b8:dc:70:7a:cc:ff:90:99:88:56:df:d5:09:a7: e9:e4:26:9e:34:af:0a:b0:c2:00:2a:b7:80:8b:0c: 95:4d:13:f1:f5:3c:90:45:23:fb:e9:39:0a:d2:d0: c2:76:d7:be:64:9a:61:9f:91:3e:8e:64:d1:34:b6: 81:a1:4b:67:87:33:61:98:98:55:16:6e:4f:3e:e9: c3:3f:34:b1:21:03:da:fc:6c:ef:1b:5f:47:36:26: b8:e1:5c:6f:2e:f4:36:d7:f6:51:71:12:fb:a5:3b: ba:99:82:3f:11:43:89:b1:6d:62:81:ca:79:b3:36: 0e:54:55:04:ca:61:e3:19:cb:ce:f4:47:ef:e3:a8: 4c:b4:d7:87:2c:e6:55:73:9f:e0:ca:45:9c:53:16: ea:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A2:74:77:6F:8F:F4:CE:A5:9A:88:41:EB:FA:88:C6:8F:1D:7D:FA X509v3 Authority Key Identifier: keyid:C6:25:AF:B9:CE:33:5E:ED:3E:53:12:8B:4A:9E:B2:5F:C4:95:D6:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xiWvuc4zXu0-UxKLSp6yX8SV1uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0f9b50-4689-4cd8-ae6d-100c3e1be3a2/1/xiWvuc4zXu0-UxKLSp6yX8SV1uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:8e:4f:0c:c8:2e:ca:af:dc:5b:8c:91:45:15:8e:a6:2b:d2: 3e:8f:71:cf:d4:95:fa:6e:8d:17:37:24:44:62:44:5d:04:28: 3b:c0:34:41:c7:b7:de:ab:c8:49:78:5b:b6:74:43:be:8e:c7: be:48:c2:18:b9:fc:52:53:22:b0:01:5b:f9:fe:9a:4e:16:19: d9:1f:ff:83:56:a1:a6:7c:bd:33:60:45:91:85:d3:f6:86:ee: 4f:6e:17:44:95:ad:c5:24:41:2d:fe:be:fc:cf:fe:84:7b:a3: 33:ec:29:ff:59:e6:36:56:8d:51:60:d9:eb:17:79:22:4a:3b: 25:c4:2e:23:33:89:2a:62:48:1a:ad:c2:bf:97:41:37:32:1b: 45:cd:94:a3:8f:bb:d0:25:2e:87:30:60:a9:ba:d1:20:4b:58: 29:a6:72:7e:57:eb:df:ad:b0:ae:60:48:46:91:bb:c7:43:27: d4:42:85:9c:d6:72:be:f1:b7:5b:b5:19:08:f5:ec:69:88:cc: 91:b8:25:95:3d:e4:06:87:a6:75:e5:c2:8d:90:fa:45:51:66: 5c:78:2e:28:0a:79:55:2a:bc:b7:ea:50:df:e9:75:aa:48:f4: e0:56:e4:61:4d:2d:52:c6:bd:09:f2:bc:6e:38:8f:21:27:62: 0b:95:1b:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLx/9LkrWzKfzK2/3sPjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MjVhZmI5Y2UzMzVlZWQzZTUzMTI4YjRhOWViMjVmYzQ5 NWQ2ZTAwHhcNMjUxMjE3MTIwMDQ0WhcNMjUxMjE4MTIwMDQ0WjAzMTEwLwYDVQQD EygyZGEyNzQ3NzZmOGZmNGNlYTU5YTg4NDFlYmZhODhjNjhmMWQ3ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7I1XZb7dxHyYceChid4prnWm7Ey F9ZMdU7luOnuSvwPmjay+QOAMImUgJFWXK+TSviBeETkbs4gGOhQeMfoJ+wzVTHf dSmny48pBs9SYbr387L8ef36RspP0ldL9fXSL57B1mVuEIi3uNxwesz/kJmIVt/V Cafp5CaeNK8KsMIAKreAiwyVTRPx9TyQRSP76TkK0tDCdte+ZJphn5E+jmTRNLaB oUtnhzNhmJhVFm5PPunDPzSxIQPa/GzvG19HNia44VxvLvQ21/ZRcRL7pTu6mYI/ EUOJsW1igcp5szYOVFUEymHjGcvO9Efv46hMtNeHLOZVc5/gykWcUxbqywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2idHdvj/TOpZqIQev6iMaPHX36MB8GA1UdIwQY MBaAFMYlr7nOM17tPlMSi0qesl/EldbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQt MTAwYzNlMWJlM2EyLzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wZjliNTAtNDY4OS00Y2Q4LWFlNmQtMTAwYzNlMWJlM2Ey LzEveGlXdnVjNHpYdTAtVXhLTFNwNnlYOFNWMXVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlo5PDMgu yq/cW4yRRRWOpivSPo9xz9SV+m6NFzckRGJEXQQoO8A0Qce33qvISXhbtnRDvo7H vkjCGLn8UlMisAFb+f6aThYZ2R//g1ahpny9M2BFkYXT9obuT24XRJWtxSRBLf6+ /M/+hHujM+wp/1nmNlaNUWDZ6xd5Iko7JcQuIzOJKmJIGq3Cv5dBNzIbRc2Uo4+7 0CUuhzBgqbrRIEtYKaZyflfr362wrmBIRpG7x0Mn1EKFnNZyvvG3W7UZCPXsaYjM kbgllT3kBoemdeXCjZD6RVFmXHguKAp5VSq8t+pQ3+l1qkj04FbkYU0tUsa9CfK8 bjiPISdiC5Ub+A== -----END CERTIFICATE-----Generated at Wed Dec 17 17:53:33 2025 by rpki-client