This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json) Hash identifier: SPV8sb2YNV/K2syMXYLRAEFCyS9xS3LK3kpfnsI67Ac= Subject key identifier: 8E:50:9D:7E:09:58:60:16:51:17:1B:CE:10:65:D4:B6:AA:B1:FB:1C Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Certificate serial: 019B330D240C7F2877E9BA4F166E6D8149B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft Manifest number: 05CA Signing time: Thu 18 Dec 2025 20:00:57 +0000 Manifest this update: Thu 18 Dec 2025 20:00:57 +0000 Manifest next update: Fri 19 Dec 2025 20:00:57 +0000 Files and hashes: 1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=) 2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=) 3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: /zSJKXmPVtrvCAsbUJxwzTQ8C2mJ8ZMQakR/dQxp1sc=) 4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:24:0c:7f:28:77:e9:ba:4f:16:6e:6d:81:49:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Validity Not Before: Dec 18 20:00:57 2025 GMT Not After : Dec 19 20:00:57 2025 GMT Subject: CN=8e509d7e0958601651171bce1065d4b6aab1fb1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:ad:71:bf:ef:77:06:a3:1d:b2:a4:13:4e: fc:af:32:c1:be:64:01:95:63:96:4f:2d:f5:c6:18: 3e:8c:a0:d5:cf:87:03:65:4d:92:c1:c4:fe:bf:a7: ff:b2:12:15:8f:52:3d:29:3c:7b:d3:2c:6b:9d:31: 7f:9c:09:8a:47:14:1a:b7:24:90:30:36:de:00:ef: d0:31:ed:3b:d2:99:13:0d:ad:19:83:e5:5a:d6:34: 7a:6a:d9:8d:c1:7e:d7:90:9e:ac:a6:1e:d9:77:88: 65:d2:93:ab:43:aa:c8:be:21:42:5c:c5:af:58:06: 75:66:da:ca:1c:83:9e:44:ac:2c:e2:20:88:73:d0: a8:56:0f:94:c2:6f:24:38:ee:81:88:8d:44:e2:01: 15:dc:ed:71:0d:49:34:c8:e9:5c:35:af:f3:3e:d5: a9:76:53:b2:ed:86:88:e9:80:98:ef:8f:e3:ee:7e: b2:25:cf:c7:2f:59:9f:ad:67:bb:56:d7:ce:11:a1: ba:95:21:00:83:6c:89:4d:f5:4a:e1:c4:21:11:ae: 52:3f:44:ee:12:d7:0a:b8:4a:26:a4:28:60:5d:42: 9c:11:3c:b5:2a:18:50:b4:49:99:4a:e2:bf:d8:84: d8:48:1d:54:18:92:82:07:28:72:fa:53:cc:1e:f9: 82:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:50:9D:7E:09:58:60:16:51:17:1B:CE:10:65:D4:B6:AA:B1:FB:1C X509v3 Authority Key Identifier: keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:e5:49:1d:5a:51:67:32:ce:c1:27:98:db:1a:27:f7:b4: fd:92:3a:8a:93:a0:bc:91:7f:b6:84:c7:23:c0:5d:cc:7f:df: 88:ea:1f:5e:18:5d:f7:b5:95:5c:af:44:a3:46:d9:3d:86:4f: ba:df:cf:46:e9:83:36:60:f2:0c:52:85:52:36:6e:68:08:9a: b4:63:d7:66:0c:29:ee:d8:2f:72:5a:db:9d:5f:65:cc:88:0e: 1b:c8:dd:10:bb:30:08:97:ae:95:db:a9:e6:1c:41:f6:ea:c5: 03:c6:c3:2b:20:9f:93:72:d5:58:18:72:0b:06:d0:08:8f:23: e3:09:f4:d2:e5:d6:7b:19:e2:84:fd:a9:aa:67:47:52:18:ca: 52:fc:64:9b:71:ce:8c:e9:3c:96:b1:cf:82:63:61:38:6d:bb: 41:cd:d6:95:4d:ea:40:f2:6b:42:62:1c:52:9c:45:6c:d0:c7: bd:6d:44:65:30:41:bf:bc:97:df:ae:d4:31:b2:bf:6c:43:10: 4e:87:9b:c8:fb:51:43:89:8d:e2:32:68:d6:09:50:aa:01:9a: 9c:8f:cb:42:f4:3d:a3:b7:d0:17:f8:98:ec:17:27:e9:b2:6f: 27:a6:96:3f:ec:23:cd:a1:95:45:01:49:9a:d9:cc:63:5f:69: 29:73:5a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDSQMfyh36bpPFm5tgUmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx YjIyYjUwHhcNMjUxMjE4MjAwMDU3WhcNMjUxMjE5MjAwMDU3WjAzMTEwLwYDVQQD Eyg4ZTUwOWQ3ZTA5NTg2MDE2NTExNzFiY2UxMDY1ZDRiNmFhYjFmYjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r+tcb/vdwajHbKkE078rzLBvmQB lWOWTy31xhg+jKDVz4cDZU2SwcT+v6f/shIVj1I9KTx70yxrnTF/nAmKRxQatySQ MDbeAO/QMe070pkTDa0Zg+Va1jR6atmNwX7XkJ6sph7Zd4hl0pOrQ6rIviFCXMWv WAZ1ZtrKHIOeRKws4iCIc9CoVg+Uwm8kOO6BiI1E4gEV3O1xDUk0yOlcNa/zPtWp dlOy7YaI6YCY74/j7n6yJc/HL1mfrWe7VtfOEaG6lSEAg2yJTfVK4cQhEa5SP0Tu EtcKuEompChgXUKcETy1KhhQtEmZSuK/2ITYSB1UGJKCByhy+lPMHvmCTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5QnX4JWGAWURcbzhBl1LaqsfscMB8GA1UdIwQY MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt ZTdjYWY1ZTViY2JhLzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUzlSR1a UWcyzsEnmNsaJ/e0/ZI6ipOgvJF/toTHI8BdzH/fiOofXhhd97WVXK9Eo0bZPYZP ut/PRumDNmDyDFKFUjZuaAiatGPXZgwp7tgvclrbnV9lzIgOG8jdELswCJeuldup 5hxB9urFA8bDKyCfk3LVWBhyCwbQCI8j4wn00uXWexnihP2pqmdHUhjKUvxkm3HO jOk8lrHPgmNhOG27Qc3WlU3qQPJrQmIcUpxFbNDHvW1EZTBBv7yX367UMbK/bEMQ ToebyPtRQ4mN4jJo1glQqgGanI/LQvQ9o7fQF/iY7Bcn6bJvJ6aWP+wjzaGVRQFJ mtnMY19pKXNaDQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:06:25 2025 by rpki-client