This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json) Hash identifier: ieSONUwkdG0n8m/DVnGTE7+O4SMrK7ej49iyjRzrbmY= Subject key identifier: 4B:2E:D0:8A:12:ED:7B:C8:F8:63:F2:B5:A6:4E:A5:5D:3C:79:45:38 Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019AFD3129FE79BD0E3701A85E8941B4AA8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft Manifest number: 0783 Signing time: Mon 08 Dec 2025 09:00:48 +0000 Manifest this update: Mon 08 Dec 2025 09:00:48 +0000 Manifest next update: Tue 09 Dec 2025 09:00:48 +0000 Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=) 2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: GrICp0xKWiCEbVzZZ8ypzw7geFK8okgLel6jQ8x6JV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:31:29:fe:79:bd:0e:37:01:a8:5e:89:41:b4:aa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Dec 8 09:00:48 2025 GMT Not After : Dec 9 09:00:48 2025 GMT Subject: CN=4b2ed08a12ed7bc8f863f2b5a64ea55d3c794538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:50:06:9f:6a:eb:67:09:a5:0d:7d:40:87: 0b:12:ce:b6:7b:56:95:54:e3:ce:67:c2:f4:c8:23: 34:64:06:cd:33:47:47:3c:fa:08:54:bf:b4:07:76: ee:6b:2a:23:6e:db:9d:25:16:a0:8a:0f:37:5d:f1: 41:4b:20:67:25:a7:c5:68:c7:94:0d:b7:00:d4:c8: a9:95:3d:4a:f8:af:16:5e:e7:f4:e3:56:97:fd:dc: fa:e0:b8:11:0e:db:3d:6a:34:c8:42:72:38:c7:85: 9b:80:be:1b:fa:07:1a:2c:a8:6a:cc:11:d0:a5:01: 20:10:3e:c0:59:12:5f:04:c5:d8:8b:70:b2:4e:d5: d5:02:89:14:2b:6c:e7:3b:59:2a:f3:09:ad:9a:f7: 93:37:6e:90:e2:13:19:be:b6:a8:b4:65:61:1e:b6: 62:a9:2d:2e:81:a3:67:f1:7f:90:85:da:0d:35:ce: f3:40:7b:c6:51:35:20:32:10:38:67:2d:7f:2b:37: 09:43:18:4d:da:95:a2:ee:cd:6b:6d:53:b6:1c:a0: 9e:28:9e:a3:07:f6:4c:8f:da:dd:dc:ed:42:cb:6c: da:f4:56:1d:4d:79:09:70:35:03:26:fb:3f:4b:85: c1:8d:5b:36:58:2b:1b:bc:7a:c2:df:f2:db:89:d6: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2E:D0:8A:12:ED:7B:C8:F8:63:F2:B5:A6:4E:A5:5D:3C:79:45:38 X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e7:f1:da:01:ae:35:40:e3:1b:6e:0d:83:f6:5a:35:3b:8b: b1:f0:62:79:2f:c6:91:7c:e6:7a:de:c3:54:5b:e6:50:59:ae: bd:7b:88:7f:01:97:d0:30:d6:54:91:48:54:3e:7b:e4:af:8d: 72:dd:2e:f0:34:77:6b:7a:14:8a:cb:5e:83:e8:73:f9:f7:85: fe:35:46:b3:3a:9e:44:d0:11:bc:f1:0c:73:a2:c8:05:48:5e: ff:ee:25:ca:4e:4d:43:42:60:5e:0d:d9:d3:8b:20:03:ac:ec: a2:4b:45:5e:da:91:c8:0c:46:d9:98:48:0a:61:39:d3:9e:ea: 17:2a:39:b1:00:26:7d:8c:e0:e6:80:e1:86:7b:16:0a:ea:9b: 13:a2:39:dc:67:35:15:f6:83:b1:f9:38:67:89:40:38:b5:e9: c4:cd:5b:73:a4:d4:9e:55:92:57:47:15:9c:cc:f4:fc:13:b0: d8:68:b7:af:91:6d:b3:6b:96:6d:ef:59:a7:1b:36:a3:5b:91: 27:16:e4:19:fe:fe:21:b8:5d:7b:60:11:a3:17:c3:cc:26:12: 25:f0:3a:de:46:71:b9:cb:92:da:e8:ac:bd:28:fc:cf:7c:bd: f1:0c:5a:ed:e0:ec:2e:62:00:7e:2b:b2:60:a5:28:f7:fe:7b: c7:3a:92:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr9MSn+eb0ONwGoXolBtKqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjUxMjA4MDkwMDQ4WhcNMjUxMjA5MDkwMDQ4WjAzMTEwLwYDVQQD Eyg0YjJlZDA4YTEyZWQ3YmM4Zjg2M2YyYjVhNjRlYTU1ZDNjNzk0NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmVQBp9q62cJpQ19QIcLEs62e1aV VOPOZ8L0yCM0ZAbNM0dHPPoIVL+0B3buayojbtudJRagig83XfFBSyBnJafFaMeU DbcA1MiplT1K+K8WXuf041aX/dz64LgRDts9ajTIQnI4x4WbgL4b+gcaLKhqzBHQ pQEgED7AWRJfBMXYi3CyTtXVAokUK2znO1kq8wmtmveTN26Q4hMZvraotGVhHrZi qS0ugaNn8X+QhdoNNc7zQHvGUTUgMhA4Zy1/KzcJQxhN2pWi7s1rbVO2HKCeKJ6j B/ZMj9rd3O1Cy2za9FYdTXkJcDUDJvs/S4XBjVs2WCsbvHrC3/LbidY5zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsu0IoS7XvI+GPytaZOpV08eUU4MB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcufx2gGu NUDjG24Ng/ZaNTuLsfBieS/GkXzmet7DVFvmUFmuvXuIfwGX0DDWVJFIVD575K+N ct0u8DR3a3oUisteg+hz+feF/jVGszqeRNARvPEMc6LIBUhe/+4lyk5NQ0JgXg3Z 04sgA6zsoktFXtqRyAxG2ZhICmE5057qFyo5sQAmfYzg5oDhhnsWCuqbE6I53Gc1 FfaDsfk4Z4lAOLXpxM1bc6TUnlWSV0cVnMz0/BOw2Gi3r5Fts2uWbe9Zpxs2o1uR JxbkGf7+Ibhde2ARoxfDzCYSJfA63kZxucuS2uisvSj8z3y98Qxa7eDsLmIAfiuy YKUo9/57xzqS1w== -----END CERTIFICATE-----Generated at Mon Dec 8 15:39:17 2025 by rpki-client