This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json) Hash identifier: OPGO0P6NBwYf9/a6MTy4qnaqZX92j+uWEqlaVGhhh14= Subject key identifier: 18:D5:10:DA:41:9B:D4:9B:F3:D1:CB:4B:24:A5:3B:A9:68:9D:AC:5E Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e Certificate serial: 019B3156476A05C707F2F4178BDDFB3BBACC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft Manifest number: 1009 Signing time: Thu 18 Dec 2025 12:01:36 +0000 Manifest this update: Thu 18 Dec 2025 12:01:36 +0000 Manifest next update: Fri 19 Dec 2025 12:01:36 +0000 Files and hashes: 1: 5stymyV2VXExRNfPDRHs0SsKv84.roa (hash: LAJy81D8Y1W3Al27GIYu76cE8aqvZvfTwIjGsrUN8O8=) 2: wX4zTXXZMo2WWHOKinMvyAiRYeE.roa (hash: dkBnWGmwxThQE3RCE6xz1EoswQLwUBpuloKrWzo2tUE=) 3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: 1FAnE+TjGB7cHV3gYIEeU/ah88xymH5DYggqrt8fEIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:47:6a:05:c7:07:f2:f4:17:8b:dd:fb:3b:ba:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e Validity Not Before: Dec 18 12:01:36 2025 GMT Not After : Dec 19 12:01:36 2025 GMT Subject: CN=18d510da419bd49bf3d1cb4b24a53ba9689dac5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c6:ff:e0:9d:48:2b:30:d2:4f:b3:b9:3e:2a: 5e:42:b3:a3:e4:a5:f0:ba:ab:5b:c2:fc:fb:cf:62: 6b:f7:f0:b3:12:a4:96:94:84:94:ec:b1:7b:e3:dd: 0a:68:fa:e1:fd:80:5d:ab:61:36:6f:9a:0b:11:04: b0:43:3c:fc:df:88:de:d7:a3:fc:dd:6d:30:de:9e: 82:2c:54:19:47:23:d7:0d:0c:8e:1e:12:64:66:4a: 95:d1:59:79:af:81:6e:f8:60:a8:5b:5e:c9:9f:9c: bf:a3:9e:cb:d4:0e:e6:0c:0d:13:9c:c1:26:c6:3b: 5a:8c:d3:d2:5c:5b:40:63:6a:be:ae:f3:65:3e:95: 02:36:96:e4:b7:48:df:b5:4b:eb:e5:a5:69:88:ee: 40:36:ad:88:b3:38:10:be:c8:8d:5b:6e:8c:5a:d6: f7:89:d3:92:65:99:b9:12:d0:bc:58:37:61:5c:4f: dc:f4:f1:c4:df:ea:5a:0f:07:a4:c9:3b:8b:34:2f: 18:73:be:0b:71:45:d8:73:76:9e:37:cf:31:e5:d4: 0e:d6:75:2d:b6:98:f5:18:81:f9:f2:c1:83:5d:62: c1:1a:b5:4d:ac:9b:67:a5:89:d5:27:18:77:53:f0: eb:00:0e:03:c3:dd:c8:f9:b9:ab:2a:dd:e4:28:57: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D5:10:DA:41:9B:D4:9B:F3:D1:CB:4B:24:A5:3B:A9:68:9D:AC:5E X509v3 Authority Key Identifier: keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7e:91:b9:92:8a:d0:0c:c9:60:5b:d0:13:57:12:8e:cc:a1: 29:54:05:41:fe:34:43:35:34:b4:c2:e0:2a:b1:99:dc:45:9d: c1:b4:72:3c:a3:26:6a:88:97:0c:ef:56:cb:89:5c:fc:22:13: 31:20:b5:3e:8b:cc:9b:45:0e:77:37:14:d1:bf:50:e1:af:b9: 41:8b:50:b0:5f:87:4c:ed:04:51:e1:e6:37:77:a4:55:c8:f3: 3d:be:31:01:24:c6:21:77:e3:7d:15:bb:c2:de:cc:11:b7:d2: f1:55:bb:81:58:b9:16:fe:ed:02:fb:48:e5:32:6a:a1:94:87: b2:3f:bc:3b:6d:a0:1c:f6:97:d8:5f:46:dc:6f:66:94:40:b6: 0f:7f:20:d3:05:c2:ba:d2:a6:f1:84:57:3a:06:ff:8d:b6:18: 28:8c:b6:92:2b:74:61:31:0a:20:c2:b7:9d:a1:83:a1:88:c3: 15:81:7c:d7:c0:9e:71:0d:e3:b6:f6:99:1a:43:1e:7a:21:6c: 17:b5:59:65:1f:86:c2:44:a6:f2:bb:c9:3d:a5:f1:00:2a:64: 51:72:ac:cb:5b:9b:79:87:05:54:13:d9:41:e3:70:98:10:f8: c7:de:21:88:74:2c:7f:19:31:c0:1c:c5:ef:64:4b:11:9a:52: 05:46:44:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVkdqBccH8vQXi937O7rMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZDExYjY0ZmZlMThlZmE0MmY0M2E2Yzc2NTYzOWRlZTM4 ZDAyN2UwHhcNMjUxMjE4MTIwMTM2WhcNMjUxMjE5MTIwMTM2WjAzMTEwLwYDVQQD EygxOGQ1MTBkYTQxOWJkNDliZjNkMWNiNGIyNGE1M2JhOTY4OWRhYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cb/4J1IKzDST7O5PipeQrOj5KXw uqtbwvz7z2Jr9/CzEqSWlISU7LF7490KaPrh/YBdq2E2b5oLEQSwQzz834je16P8 3W0w3p6CLFQZRyPXDQyOHhJkZkqV0Vl5r4Fu+GCoW17Jn5y/o57L1A7mDA0TnMEm xjtajNPSXFtAY2q+rvNlPpUCNpbkt0jftUvr5aVpiO5ANq2IszgQvsiNW26MWtb3 idOSZZm5EtC8WDdhXE/c9PHE3+paDwekyTuLNC8Yc74LcUXYc3aeN88x5dQO1nUt tpj1GIH58sGDXWLBGrVNrJtnpYnVJxh3U/DrAA4Dw93I+bmrKt3kKFdr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBjVENpBm9Sb89HLSySlO6lonaxeMB8GA1UdIwQY MBaAFMbRG2T/4Y76QvQ6bHZWOd7jjQJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjct NjgzNTg1MjE1OGQ4LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80Y2FjNmItOGUwNS00NDhhLTgzZjctNjgzNTg1MjE1OGQ4 LzEveHRFYlpQX2hqdnBDOURwc2RsWTUzdU9OQW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbH6RuZKK 0AzJYFvQE1cSjsyhKVQFQf40QzU0tMLgKrGZ3EWdwbRyPKMmaoiXDO9Wy4lc/CIT MSC1PovMm0UOdzcU0b9Q4a+5QYtQsF+HTO0EUeHmN3ekVcjzPb4xASTGIXfjfRW7 wt7MEbfS8VW7gVi5Fv7tAvtI5TJqoZSHsj+8O22gHPaX2F9G3G9mlEC2D38g0wXC utKm8YRXOgb/jbYYKIy2kit0YTEKIMK3naGDoYjDFYF818CecQ3jtvaZGkMeeiFs F7VZZR+GwkSm8rvJPaXxACpkUXKsy1ubeYcFVBPZQeNwmBD4x94hiHQsfxkxwBzF 72RLEZpSBUZENA== -----END CERTIFICATE-----Generated at Thu Dec 18 21:47:12 2025 by rpki-client