This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft File: xk0ihrXMe-Qviuuutqrlfnzn2is.mft (raw, json) Hash identifier: 4LW22lfdjy5V7eGxftPRSTB+1zpFzym7zi/fT5MH984= Subject key identifier: 22:A9:DC:A9:85:DD:2A:EA:C4:2E:B4:93:95:C4:60:95:59:D0:E4:3F Authority key identifier: C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B Certificate issuer: /CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b Certificate serial: 019AF4656868514C40819629283D669F365F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft Manifest number: 1463 Signing time: Sat 06 Dec 2025 16:01:17 +0000 Manifest this update: Sat 06 Dec 2025 16:01:17 +0000 Manifest next update: Sun 07 Dec 2025 16:01:17 +0000 Files and hashes: 1: kR9L0FG1sHus996EjzOxHeu0FXE.roa (hash: UCFmwyRMlD4Wx3VXNW0aEuOECURhEH5R/h4nsdT+Qoc=) 2: xk0ihrXMe-Qviuuutqrlfnzn2is.crl (hash: YoIOGdOWw42DhfFY5q9XidhhV/HnJ0ZhTmhyd6zgG1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:68:68:51:4c:40:81:96:29:28:3d:66:9f:36:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c64d2286b5cc7be42f8aebaeb6aae57e7ce7da2b Validity Not Before: Dec 6 16:01:17 2025 GMT Not After : Dec 7 16:01:17 2025 GMT Subject: CN=22a9dca985dd2aeac42eb49395c4609559d0e43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:37:a0:1d:64:84:67:c1:39:70:aa:1f:1c:30: ba:04:b5:11:5e:2a:70:da:fb:c2:09:ab:ef:ee:2e: 3d:89:c1:3d:5a:53:a7:1f:b9:0d:99:ae:de:74:7f: ab:92:26:20:eb:c5:d3:6e:72:7e:7e:2a:dc:4a:7e: cd:bc:9c:c9:35:d4:86:dc:2a:f8:9d:2a:8e:0f:5c: a0:31:4e:6b:2e:db:13:68:e7:4d:32:79:85:11:53: 0a:51:dd:7a:78:9d:1e:01:e6:65:8b:c8:eb:2d:f6: e8:2b:32:1f:f4:de:d9:50:73:02:be:7e:0e:95:09: 10:c8:47:90:56:a9:1b:ff:48:e4:9a:46:c5:79:b5: 9a:70:36:58:f5:00:c9:88:d6:e6:9d:bc:ad:30:13: 30:4d:37:ac:79:cd:56:e4:b4:8f:48:2a:90:4e:d5: 98:a1:d6:90:87:14:e5:bb:59:23:00:0d:5e:ee:cc: 0a:25:80:0a:df:13:b1:1c:2e:89:f1:52:73:7b:90: 34:7d:4f:1c:8f:04:30:84:8e:f2:77:82:50:2a:6c: 08:ba:6c:f6:aa:d9:33:fe:fe:fe:c4:05:e6:5e:2a: 58:8a:e4:6a:fb:01:6a:38:e1:b0:2e:e9:99:d4:a5: dd:4b:49:b8:13:8e:f7:7a:b3:8b:e1:90:63:34:ab: d6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A9:DC:A9:85:DD:2A:EA:C4:2E:B4:93:95:C4:60:95:59:D0:E4:3F X509v3 Authority Key Identifier: keyid:C6:4D:22:86:B5:CC:7B:E4:2F:8A:EB:AE:B6:AA:E5:7E:7C:E7:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk0ihrXMe-Qviuuutqrlfnzn2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a3c055-b25a-425f-8d99-e5a7003e10de/1/xk0ihrXMe-Qviuuutqrlfnzn2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:c3:b9:44:12:6f:07:05:eb:56:9a:6b:6e:15:71:cf:0b:04: 51:b7:10:1c:39:de:58:37:77:17:17:2b:e2:c1:56:45:14:ec: 8e:eb:e8:a3:b2:97:fa:0a:c1:2c:63:36:ca:40:ab:eb:aa:9c: 2d:c3:80:d1:4e:ea:03:08:a1:35:98:2f:e0:1c:61:01:f2:58: c2:40:88:ea:99:ec:8f:50:43:0d:43:48:51:7a:7d:88:68:88: 4c:7d:d4:99:1f:b2:80:3e:c8:d1:d1:71:95:91:aa:9f:e9:bd: 3b:3a:86:6e:91:d9:3b:16:3e:ac:21:d4:89:60:3b:fd:c8:c4: 65:ab:83:ce:0c:e2:2a:71:af:aa:73:75:7c:a3:07:d9:c5:7a: 29:cd:ae:61:13:02:02:ad:04:a7:4b:6f:ac:b9:46:4e:5e:86: 35:04:fb:0a:b9:aa:60:8b:bc:a3:47:aa:83:e7:29:87:64:84: 32:b8:df:0c:df:6f:12:2b:de:32:4b:f1:77:6b:21:77:88:8f: b8:55:39:c6:51:82:17:d2:f1:01:e2:81:01:67:3e:4d:c8:b9: 04:aa:2a:ba:0f:c7:4d:53:90:ca:b5:4f:a1:36:45:55:db:10: 84:98:6d:08:7a:67:36:82:09:62:10:0d:0c:90:3f:77:41:44: 54:f8:df:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWhoUUxAgZYpKD1mnzZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NGQyMjg2YjVjYzdiZTQyZjhhZWJhZWI2YWFlNTdlN2Nl N2RhMmIwHhcNMjUxMjA2MTYwMTE3WhcNMjUxMjA3MTYwMTE3WjAzMTEwLwYDVQQD EygyMmE5ZGNhOTg1ZGQyYWVhYzQyZWI0OTM5NWM0NjA5NTU5ZDBlNDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjegHWSEZ8E5cKofHDC6BLURXipw 2vvCCavv7i49icE9WlOnH7kNma7edH+rkiYg68XTbnJ+fircSn7NvJzJNdSG3Cr4 nSqOD1ygMU5rLtsTaOdNMnmFEVMKUd16eJ0eAeZli8jrLfboKzIf9N7ZUHMCvn4O lQkQyEeQVqkb/0jkmkbFebWacDZY9QDJiNbmnbytMBMwTTesec1W5LSPSCqQTtWY odaQhxTlu1kjAA1e7swKJYAK3xOxHC6J8VJze5A0fU8cjwQwhI7yd4JQKmwIumz2 qtkz/v7+xAXmXipYiuRq+wFqOOGwLumZ1KXdS0m4E473erOL4ZBjNKvWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKp3KmF3SrqxC60k5XEYJVZ0OQ/MB8GA1UdIwQY MBaAFMZNIoa1zHvkL4rrrraq5X5859orMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTkt ZTVhNzAwM2UxMGRlLzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9hM2MwNTUtYjI1YS00MjVmLThkOTktZTVhNzAwM2UxMGRl LzEveGswaWhyWE1lLVF2aXV1dXRxcmxmbnpuMmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcO5RBJv BwXrVpprbhVxzwsEUbcQHDneWDd3Fxcr4sFWRRTsjuvoo7KX+grBLGM2ykCr66qc LcOA0U7qAwihNZgv4BxhAfJYwkCI6pnsj1BDDUNIUXp9iGiITH3UmR+ygD7I0dFx lZGqn+m9OzqGbpHZOxY+rCHUiWA7/cjEZauDzgziKnGvqnN1fKMH2cV6Kc2uYRMC Aq0Ep0tvrLlGTl6GNQT7CrmqYIu8o0eqg+cph2SEMrjfDN9vEiveMkvxd2shd4iP uFU5xlGCF9LxAeKBAWc+Tci5BKoqug/HTVOQyrVPoTZFVdsQhJhtCHpnNoIJYhAN DJA/d0FEVPjfpw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:26 2025 by rpki-client