This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft File: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft (raw, json) Hash identifier: lH/3xE1izBd/NOuf0iME4MNJUPrU5/bcny7v+XlIFoU= Subject key identifier: 78:26:A0:90:A3:3E:3B:4C:9C:1B:E8:03:2A:D2:4F:CB:89:D3:D7:82 Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a Certificate serial: 019B25BFCCA8AD0238EB1B9963912184431F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 06:01:25 +0000 Manifest this update: Tue 16 Dec 2025 06:01:25 +0000 Manifest next update: Wed 17 Dec 2025 06:01:25 +0000 Files and hashes: 1: Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl (hash: 0XerS3Ww3NiMOg4G/HdUVNJPT9JXKfNmlRzn/UF27FE=) 2: da7wWDdQpE5i6DJox7FoD-QEnrA.roa (hash: 93ok4fdBSnjw6qTtlazVRgZjQmCRM/yDSLFq6NFZNeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:cc:a8:ad:02:38:eb:1b:99:63:91:21:84:43:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a Validity Not Before: Dec 16 06:01:25 2025 GMT Not After : Dec 17 06:01:25 2025 GMT Subject: CN=7826a090a33e3b4c9c1be8032ad24fcb89d3d782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ce:35:90:bd:07:3a:31:3e:d0:81:d2:5f:11: 57:cc:35:8c:20:c7:90:d3:3f:f8:ff:be:5d:f4:25: 4c:80:d2:2e:bf:d7:0d:b4:4c:36:47:83:9b:2a:af: e4:4a:f4:75:92:15:d0:d2:68:45:f0:8b:27:61:ce: 90:4f:26:9c:c3:e8:5f:fa:48:bb:9e:30:2c:9c:ba: cd:50:c3:09:56:58:d5:d9:3a:3b:29:6a:72:92:bb: b8:ee:98:a4:9d:00:0c:01:b4:04:ac:94:39:93:90: 4c:a3:60:30:28:fb:ed:09:2e:67:5d:6b:15:d7:69: 55:fb:df:51:27:96:c8:46:7d:38:a0:d8:af:f4:e6: a3:bd:05:c5:49:c6:32:e4:43:01:cc:fc:a9:12:07: fc:38:e4:e4:f8:5e:b4:8c:b3:af:57:7e:e1:ca:8a: 94:8e:79:0f:45:bf:49:21:44:85:0e:63:68:32:b5: 1f:f6:1a:60:4e:27:a2:b6:82:95:ec:4b:3e:ce:47: 19:c8:51:2a:ed:02:da:85:52:ba:42:f3:4e:d9:13: 3d:68:be:8a:a5:77:1c:eb:6e:c3:aa:6c:d7:6c:d6: bb:54:2b:29:78:a6:0a:4d:c9:44:ea:5d:2c:eb:c9: ef:17:69:5c:0f:ab:4e:80:cc:55:0a:c8:51:42:f3: 78:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:A0:90:A3:3E:3B:4C:9C:1B:E8:03:2A:D2:4F:CB:89:D3:D7:82 X509v3 Authority Key Identifier: keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:32:6b:81:14:d0:d2:0b:7a:09:6f:f8:64:ef:d1:ea:e4:e1: 2d:0f:ba:ca:90:ea:ba:10:43:12:53:ee:df:07:8f:d8:5b:bb: e8:a6:d3:b3:b9:fe:96:12:b2:cc:67:ae:aa:4c:94:ff:4d:61: 49:93:f4:e4:92:49:3f:5e:98:74:3f:da:60:93:84:eb:d4:02: 2f:e0:da:35:3e:ad:90:0d:37:a3:51:a6:dd:c3:42:d4:2f:9d: ba:59:78:e8:a9:ac:58:03:22:f3:f5:b4:48:6c:1a:ee:19:d0: 28:26:6a:bc:88:ec:92:09:bc:c9:6c:53:71:ce:c6:37:b0:71: 0a:aa:c0:fe:84:b5:77:80:ab:50:c7:af:91:4a:93:90:97:28: 12:d6:9e:e9:68:9b:c7:92:3b:74:2c:f7:40:64:c3:a2:6f:e2: 60:99:4d:a6:5f:97:17:b4:45:d0:f2:12:e4:8c:0b:ac:89:ec: e7:d2:07:e6:e5:39:8a:ed:4d:b6:bd:5f:43:e6:7f:45:e6:d4: b9:c3:52:aa:0e:85:2e:ea:c9:b0:34:98:d6:05:e5:50:5d:aa: e4:b0:d2:99:8e:5a:f6:15:61:bd:7d:bd:83:c7:eb:54:5b:e8: a1:ec:43:6b:dc:ae:01:4f:02:96:d1:06:a8:6e:22:83:2d:3c: 78:52:7f:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv8yorQI46xuZY5EhhEMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2UxMGYxM2M0NjgwNjkyNmE2Nzk0NmNjNmExMTAyYWEw OTAzMWEwHhcNMjUxMjE2MDYwMTI1WhcNMjUxMjE3MDYwMTI1WjAzMTEwLwYDVQQD Eyg3ODI2YTA5MGEzM2UzYjRjOWMxYmU4MDMyYWQyNGZjYjg5ZDNkNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz841kL0HOjE+0IHSXxFXzDWMIMeQ 0z/4/75d9CVMgNIuv9cNtEw2R4ObKq/kSvR1khXQ0mhF8IsnYc6QTyacw+hf+ki7 njAsnLrNUMMJVljV2To7KWpykru47piknQAMAbQErJQ5k5BMo2AwKPvtCS5nXWsV 12lV+99RJ5bIRn04oNiv9OajvQXFScYy5EMBzPypEgf8OOTk+F60jLOvV37hyoqU jnkPRb9JIUSFDmNoMrUf9hpgTieitoKV7Es+zkcZyFEq7QLahVK6QvNO2RM9aL6K pXcc627DqmzXbNa7VCspeKYKTclE6l0s68nvF2lcD6tOgMxVCshRQvN4ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgmoJCjPjtMnBvoAyrST8uJ09eCMB8GA1UdIwQY MBaAFF7OEPE8RoBpJqZ5RsxqEQKqCQMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUt YjZmN2FlZDg1NmMwLzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hZTMzMjMtMGE0OS00ZDdhLTg5NTUtYjZmN2FlZDg1NmMw LzEvWHM0UThUeEdnR2ttcG5sR3pHb1JBcW9KQXhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjJrgRTQ 0gt6CW/4ZO/R6uThLQ+6ypDquhBDElPu3weP2Fu76KbTs7n+lhKyzGeuqkyU/01h SZP05JJJP16YdD/aYJOE69QCL+DaNT6tkA03o1Gm3cNC1C+dull46KmsWAMi8/W0 SGwa7hnQKCZqvIjskgm8yWxTcc7GN7BxCqrA/oS1d4CrUMevkUqTkJcoEtae6Wib x5I7dCz3QGTDom/iYJlNpl+XF7RF0PIS5IwLrIns59IH5uU5iu1Ntr1fQ+Z/RebU ucNSqg6FLurJsDSY1gXlUF2q5LDSmY5a9hVhvX29g8frVFvooexDa9yuAU8CltEG qG4igy08eFJ/PQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:06:38 2025 by rpki-client