This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json) Hash identifier: XPYhk/SwHzSo3J8EwHkxIoFR4limGOa3yGyBZGawm9Y= Subject key identifier: E1:D1:CD:1C:5C:DC:63:D8:20:10:FC:06:20:5B:B5:62:E1:4E:1C:3E Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f Certificate serial: 019AF0BFA235C078ABBE4EDFA16ECD841D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft Manifest number: 1798 Signing time: Fri 05 Dec 2025 23:01:21 +0000 Manifest this update: Fri 05 Dec 2025 23:01:21 +0000 Manifest next update: Sat 06 Dec 2025 23:01:21 +0000 Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=) 2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=) 3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=) 4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=) 5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=) 6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=) 7: MFsAIGGhjwkS7QqCImE8k8j0fHE.roa (hash: agrbR9N2CmVo23L0pspB3pCZ8XyUH28RrwKnFVhuak4=) 8: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=) 9: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=) 10: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=) 11: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=) 12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: YFIJ/ZpcHul9B1HeJrRNKQxzUCf01AuHj8fbgXiNhW0=) 13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a2:35:c0:78:ab:be:4e:df:a1:6e:cd:84:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f Validity Not Before: Dec 5 23:01:21 2025 GMT Not After : Dec 6 23:01:21 2025 GMT Subject: CN=e1d1cd1c5cdc63d82010fc06205bb562e14e1c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:03:f2:6d:3d:e9:d4:54:11:8f:cf:4a:68: 8b:71:9c:02:43:d4:b9:46:af:de:b6:0e:64:9a:2d: 4b:d4:06:cf:1d:7c:bd:a9:61:80:18:b3:17:32:80: 6b:fb:12:44:a1:97:c4:a7:d0:45:c3:74:0b:10:c6: 98:8b:7b:12:1f:72:77:50:9d:67:ce:41:66:50:b2: bc:a2:ee:b0:a4:00:fa:ff:9d:73:00:4a:f3:69:44: 52:de:96:76:92:d2:ef:c8:08:98:dd:b8:18:21:01: 27:a2:ab:7e:4b:70:46:40:d7:e3:37:f4:61:93:14: 85:4d:d9:6b:f0:d0:67:51:8c:81:d8:f6:76:b0:28: ce:8e:e8:ae:06:c1:bf:2b:86:a0:29:c3:07:63:9a: 0b:bb:ab:85:49:43:8b:5a:f7:02:ea:f4:ba:9b:6d: f2:5b:7e:98:43:bf:b3:a9:dc:56:8a:66:49:96:4c: 24:25:dd:72:75:45:58:fa:89:66:96:60:ca:99:86: 2f:21:31:28:8d:51:9f:a6:11:dd:2f:9b:89:f7:e6: cd:85:5a:cc:a2:19:58:d7:fc:e6:18:b2:9b:51:0b: 26:82:2e:1b:10:fb:1f:7a:c7:f4:91:6d:93:6e:e1: 5e:0b:d5:cd:07:47:41:a6:5e:bd:27:83:32:23:a9: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:CD:1C:5C:DC:63:D8:20:10:FC:06:20:5B:B5:62:E1:4E:1C:3E X509v3 Authority Key Identifier: keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3b:32:23:e6:8f:38:20:39:8a:64:74:4e:ac:ab:73:32:1b: c2:6f:f1:95:d4:10:31:fd:eb:8d:7c:d9:4d:19:39:47:5e:f2: cd:fe:02:b4:87:46:d5:cd:1c:bb:2e:c5:be:f8:25:57:e6:a5: e3:fa:22:44:4b:e6:e2:8a:0f:c1:05:ea:f9:9f:0f:01:f4:9f: c1:73:b4:33:b8:d0:d6:b6:06:5c:c2:9d:43:23:3d:c2:bf:a2: 7b:ed:6b:65:2a:c9:7d:de:be:89:24:f0:57:4b:73:81:59:f0: b1:c5:cb:1a:d0:dd:9d:d2:10:b5:11:05:e5:2a:aa:57:b8:3e: dc:df:0c:9d:7c:4f:ea:08:c1:82:12:77:be:1f:83:db:2b:1b: b4:54:17:a0:e8:d6:c2:42:2a:b7:0c:40:91:53:c4:9e:16:fa: bf:4c:e4:a6:cc:30:4b:bc:83:28:9d:fb:b6:d9:e0:f4:71:5d: c0:49:20:2b:03:93:47:23:5a:67:0d:18:3c:8f:e0:3a:0e:3a: 4f:87:43:21:41:34:52:15:5c:ac:dc:32:2a:53:08:20:3d:d9: 78:81:2b:b8:69:be:16:57:12:35:eb:16:e8:d5:52:84:1e:1e: 10:1a:c7:e2:2b:7f:4a:1e:c4:fb:9e:60:81:8f:44:28:eb:59: 12:7f:ce:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6I1wHirvk7foW7NhB2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1 ZmIwMmYwHhcNMjUxMjA1MjMwMTIxWhcNMjUxMjA2MjMwMTIxWjAzMTEwLwYDVQQD EyhlMWQxY2QxYzVjZGM2M2Q4MjAxMGZjMDYyMDViYjU2MmUxNGUxYzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXsD8m096dRUEY/PSmiLcZwCQ9S5 Rq/etg5kmi1L1AbPHXy9qWGAGLMXMoBr+xJEoZfEp9BFw3QLEMaYi3sSH3J3UJ1n zkFmULK8ou6wpAD6/51zAErzaURS3pZ2ktLvyAiY3bgYIQEnoqt+S3BGQNfjN/Rh kxSFTdlr8NBnUYyB2PZ2sCjOjuiuBsG/K4agKcMHY5oLu6uFSUOLWvcC6vS6m23y W36YQ7+zqdxWimZJlkwkJd1ydUVY+olmlmDKmYYvITEojVGfphHdL5uJ9+bNhVrM ohlY1/zmGLKbUQsmgi4bEPsfesf0kW2TbuFeC9XNB0dBpl69J4MyI6nyiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHRzRxc3GPYIBD8BiBbtWLhThw+MB8GA1UdIwQY MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzsyI+aP OCA5imR0TqyrczIbwm/xldQQMf3rjXzZTRk5R17yzf4CtIdG1c0cuy7FvvglV+al 4/oiREvm4ooPwQXq+Z8PAfSfwXO0M7jQ1rYGXMKdQyM9wr+ie+1rZSrJfd6+iSTw V0tzgVnwscXLGtDdndIQtREF5SqqV7g+3N8MnXxP6gjBghJ3vh+D2ysbtFQXoOjW wkIqtwxAkVPEnhb6v0zkpswwS7yDKJ37ttng9HFdwEkgKwOTRyNaZw0YPI/gOg46 T4dDIUE0UhVcrNwyKlMIID3ZeIEruGm+FlcSNesW6NVShB4eEBrH4it/Sh7E+55g gY9EKOtZEn/OCw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:59 2025 by rpki-client