This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json) Hash identifier: ynmNFDD77qbZqX85ivOAIRbEnAY2T1lJ30hoiMf5Vks= Subject key identifier: B1:C2:6C:7F:C6:57:69:16:30:CB:BF:F3:09:20:1E:50:6C:CA:B4:B9 Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Certificate serial: 019B33B1C6574644CAC16FE6693CB9B0C15E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft Manifest number: 0FEA Signing time: Thu 18 Dec 2025 23:00:47 +0000 Manifest this update: Thu 18 Dec 2025 23:00:47 +0000 Manifest next update: Fri 19 Dec 2025 23:00:47 +0000 Files and hashes: 1: 5tqPEp3EliYZS2xI-t2SOYASA6Q.roa (hash: rrWZ9V7KWJ4Q+nTEuZg3LRcJ0iLHgZLsCePpW9vxZts=) 2: CFHgd4L73NmnKwbNZX4Ea5xUqNI.roa (hash: 1vwfxPtMAo6Ane/X/c4BMzTm00LQJy+F2i0HA+2GRDU=) 3: FNknYOM-2Xofk1XbcOJNM1rObAg.roa (hash: FASTd9f7x4x3qa5aRCBcwSFhMWBiMZ3cOy9OdE4lRwc=) 4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: /suPEqQzZYGcZT/UWSI5ZCXP+PULFsO8/AoVsQUo7kA=) 5: eQGWfTu9bqp5iwzvWwAuNDQ4N3I.roa (hash: hzDVmxrumNi1ZIRQoc0ZsLrFlPxpdn6MZXTqnc7Rq58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:c6:57:46:44:ca:c1:6f:e6:69:3c:b9:b0:c1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93 Validity Not Before: Dec 18 23:00:47 2025 GMT Not After : Dec 19 23:00:47 2025 GMT Subject: CN=b1c26c7fc657691630cbbff309201e506ccab4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:47:e8:4d:07:6f:94:7e:40:73:23:9b:aa: ee:78:86:bc:80:cc:fd:72:2f:ac:c1:76:21:e6:9a: 17:42:e9:b9:75:a2:e8:4c:fb:ce:50:d6:78:a0:88: 44:93:02:c0:02:4a:02:36:71:9c:38:fe:e9:a9:c7: bc:e2:24:7e:90:0d:e3:ba:e0:69:89:0a:bc:fb:e5: 01:31:ab:6a:66:e9:bf:ff:c7:86:48:fc:72:9c:2e: dd:f9:8d:a4:f1:98:5b:29:49:37:21:5a:d7:3a:6e: 71:f6:c6:68:9a:a3:67:a6:b8:9c:be:88:04:fb:78: fd:44:f6:bf:cb:ca:1b:fa:c1:52:ef:94:b5:9c:6c: cd:2f:a3:38:cd:40:61:c5:3b:44:53:75:4d:c7:0e: dd:79:70:f8:33:8f:5b:9f:b3:49:4c:37:d7:c4:be: 38:13:79:43:ec:f9:5a:7d:16:3e:88:59:45:23:9c: 66:01:4e:b5:2d:91:84:49:80:b0:9b:b5:ee:ca:e9: bb:94:f1:23:4b:68:a8:ad:cd:d3:e4:92:07:4b:11: 0e:87:45:f5:8d:dd:6e:13:ef:85:3a:a5:9f:02:04: 9b:90:d7:42:df:21:37:5c:48:3a:9a:07:27:1e:55: c5:40:6e:ca:15:3a:90:f5:61:b2:af:d3:6a:9b:1a: 10:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C2:6C:7F:C6:57:69:16:30:CB:BF:F3:09:20:1E:50:6C:CA:B4:B9 X509v3 Authority Key Identifier: keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:20:53:68:5f:45:27:a8:ff:97:3f:cc:02:12:c9:db:46:ae: b9:78:69:25:bf:e4:f5:95:03:52:06:53:d7:fc:e8:58:97:f0: 35:b9:00:93:65:ba:06:d9:1d:48:b2:f3:e6:68:c3:c6:ca:a0: df:fd:d7:d1:fd:b2:d9:c4:10:62:70:80:04:60:61:40:c3:b8: c5:0f:3d:9f:d5:70:ef:65:bf:d9:2c:50:a1:e5:1e:6e:0c:27: 8c:95:58:bf:96:8f:d4:86:17:f3:d6:40:8e:c3:d5:9e:d0:40: f0:bf:0e:09:fb:15:85:5a:26:a9:a5:4e:d2:16:88:de:bc:7c: 94:78:de:f7:aa:60:18:6a:08:1c:c0:c9:68:c0:d3:cc:7a:cb: 62:6e:a4:f9:b9:f7:5c:fb:99:95:c4:73:64:8f:01:d5:1b:a0: 67:d1:95:e9:e0:2f:3b:3a:d7:77:8a:01:a4:a0:81:14:a5:ad: 34:48:2c:0b:97:da:00:07:12:b8:e8:56:39:7c:b8:88:6f:3b: 43:5e:2d:4e:8b:38:16:c4:58:89:b5:b2:02:72:0f:3b:99:76: 33:b6:c3:04:5c:a9:98:88:78:28:f9:b0:32:ae:fe:75:76:05: 7b:42:5b:95:fc:5d:02:d3:56:8d:06:ab:de:c8:8b:6b:9c:a4: 5c:04:b4:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscZXRkTKwW/maTy5sMFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTAwNGJlZmE1NTNkZGIzNTU2NGZiNzc2MmIwNWViMjIy ZWNmOTMwHhcNMjUxMjE4MjMwMDQ3WhcNMjUxMjE5MjMwMDQ3WjAzMTEwLwYDVQQD EyhiMWMyNmM3ZmM2NTc2OTE2MzBjYmJmZjMwOTIwMWU1MDZjY2FiNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWBH6E0Hb5R+QHMjm6rueIa8gMz9 ci+swXYh5poXQum5daLoTPvOUNZ4oIhEkwLAAkoCNnGcOP7pqce84iR+kA3juuBp iQq8++UBMatqZum//8eGSPxynC7d+Y2k8ZhbKUk3IVrXOm5x9sZomqNnpricvogE +3j9RPa/y8ob+sFS75S1nGzNL6M4zUBhxTtEU3VNxw7deXD4M49bn7NJTDfXxL44 E3lD7PlafRY+iFlFI5xmAU61LZGESYCwm7Xuyum7lPEjS2iorc3T5JIHSxEOh0X1 jd1uE++FOqWfAgSbkNdC3yE3XEg6mgcnHlXFQG7KFTqQ9WGyr9NqmxoQwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHCbH/GV2kWMMu/8wkgHlBsyrS5MB8GA1UdIwQY MBaAFF7gBL76VT3bNVZPt3YrBesiLs+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjIt ZTIyOGFhYjQ1MDE0LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zYzM1ZWEtN2M5YS00OGUyLWIzYjItZTIyOGFhYjQ1MDE0 LzEvWHVBRXZ2cFZQZHMxVmstM2Rpc0Y2eUl1ejVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyBTaF9F J6j/lz/MAhLJ20auuXhpJb/k9ZUDUgZT1/zoWJfwNbkAk2W6BtkdSLLz5mjDxsqg 3/3X0f2y2cQQYnCABGBhQMO4xQ89n9Vw72W/2SxQoeUebgwnjJVYv5aP1IYX89ZA jsPVntBA8L8OCfsVhVomqaVO0haI3rx8lHje96pgGGoIHMDJaMDTzHrLYm6k+bn3 XPuZlcRzZI8B1RugZ9GV6eAvOzrXd4oBpKCBFKWtNEgsC5faAAcSuOhWOXy4iG87 Q14tTos4FsRYibWyAnIPO5l2M7bDBFypmIh4KPmwMq7+dXYFe0JblfxdAtNWjQar 3siLa5ykXAS04Q== -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:05 2025 by rpki-client