This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json) Hash identifier: 31QlMm5FJP/Upw6vkf7YUwg42J/3JFMoypj/Rp0vRLE= Subject key identifier: 1F:4A:C4:51:C5:FD:D0:55:49:8B:CD:0D:22:A1:27:BE:6E:5B:58:22 Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Certificate serial: 019B2362FD49AC7538F29029C67473511EF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 19:00:48 +0000 Manifest this update: Mon 15 Dec 2025 19:00:48 +0000 Manifest next update: Tue 16 Dec 2025 19:00:48 +0000 Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=) 2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: D/QgZkuHL2UNCNyqlyUthL+nyTtG4HUusj2GbNNAuoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:fd:49:ac:75:38:f2:90:29:c6:74:73:51:1e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Validity Not Before: Dec 15 19:00:48 2025 GMT Not After : Dec 16 19:00:48 2025 GMT Subject: CN=1f4ac451c5fdd055498bcd0d22a127be6e5b5822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:93:d4:4d:4c:a1:04:f5:a5:fe:c5:6a:c8:7d: b3:34:53:d5:0f:b0:7c:e9:f2:39:67:27:15:d1:28: b5:46:a8:1e:f7:fa:2b:70:b7:88:2e:4a:94:29:ed: f2:4d:f0:d4:67:6a:aa:b4:f8:9e:6a:73:1f:97:58: 59:df:41:5a:e9:11:14:c3:de:86:91:2a:0a:58:ca: fc:47:6e:33:00:c7:d8:81:78:ea:d9:6d:8e:c5:0a: de:68:b9:7b:df:d6:f2:d9:ca:24:65:79:cf:1b:c0: 26:5b:19:89:45:6f:b9:b8:2d:69:89:77:1b:44:b8: 7c:1e:25:21:7a:cf:78:54:a4:9a:ce:28:f2:92:de: 09:be:a3:07:1c:a2:3b:51:69:88:0c:0c:38:b9:58: b3:0f:28:1f:ac:b2:a3:f9:80:fc:31:01:5f:67:f8: 6f:bc:13:2e:49:18:e4:bb:77:0f:97:11:f6:26:d3: b3:45:99:1a:05:0e:30:0a:d0:29:44:6c:14:26:ce: 9b:90:fc:cc:f7:c8:05:28:fd:f6:c4:43:23:2d:c4: 96:b3:3f:01:2d:a6:0b:cc:a9:21:95:b9:90:57:b8: 0f:a0:b9:aa:7c:4c:17:19:7c:cd:02:f8:c9:84:b8: c0:19:75:e5:7c:9b:2b:f5:6e:f8:73:ca:40:c0:3a: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4A:C4:51:C5:FD:D0:55:49:8B:CD:0D:22:A1:27:BE:6E:5B:58:22 X509v3 Authority Key Identifier: keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:c3:ac:14:11:90:6c:8c:ad:fe:c4:69:44:c9:2e:22:a3: af:12:f2:49:ce:fc:fa:d2:97:fe:59:da:83:8d:86:ac:d8:36: 75:aa:f1:82:2d:ba:52:42:ff:99:99:01:3d:33:48:6f:62:d3: 8c:47:5d:96:26:19:51:4f:df:df:89:ab:f6:ac:c5:60:f1:29: 32:6b:98:78:7e:c0:ae:ff:06:a8:ff:22:ee:f1:bc:4d:16:9b: 1a:68:75:e1:03:4f:a7:8c:e9:80:4b:9b:af:51:d2:3b:a8:d3: 75:29:d9:5b:71:a3:03:79:cd:3f:88:1c:aa:42:b2:a2:5d:1c: 90:5b:83:85:22:54:4d:ef:4c:32:dc:8e:88:2a:13:05:4f:e7: 34:c7:09:f1:ad:16:ad:67:29:b2:ac:b0:1a:d4:80:17:21:f7: d9:d1:7f:0d:5c:06:d2:d5:80:34:c9:f7:18:07:21:06:3d:11: 8a:59:89:65:66:02:f9:ae:10:3d:b4:79:2c:b8:65:f3:2a:ec: 12:e7:57:e8:1a:10:8d:3e:cc:df:fd:7c:d2:7d:f1:a8:fd:c2: 36:97:fd:b5:34:24:7f:2d:56:9e:69:70:1c:fd:2b:fe:34:3b: db:c6:22:06:40:ef:e8:02:74:51:52:ea:63:de:14:a7:64:fe: 3c:47:a3:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYv1JrHU48pApxnRzUR75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4 OWQ3ZmIwHhcNMjUxMjE1MTkwMDQ4WhcNMjUxMjE2MTkwMDQ4WjAzMTEwLwYDVQQD EygxZjRhYzQ1MWM1ZmRkMDU1NDk4YmNkMGQyMmExMjdiZTZlNWI1ODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZPUTUyhBPWl/sVqyH2zNFPVD7B8 6fI5ZycV0Si1Rqge9/orcLeILkqUKe3yTfDUZ2qqtPieanMfl1hZ30Fa6REUw96G kSoKWMr8R24zAMfYgXjq2W2OxQreaLl739by2cokZXnPG8AmWxmJRW+5uC1piXcb RLh8HiUhes94VKSazijykt4JvqMHHKI7UWmIDAw4uVizDygfrLKj+YD8MQFfZ/hv vBMuSRjku3cPlxH2JtOzRZkaBQ4wCtApRGwUJs6bkPzM98gFKP32xEMjLcSWsz8B LaYLzKkhlbmQV7gPoLmqfEwXGXzNAvjJhLjAGXXlfJsr9W74c8pAwDrGdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9KxFHF/dBVSYvNDSKhJ75uW1giMB8GA1UdIwQY MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyTDrBQR kGyMrf7EaUTJLiKjrxLySc78+tKX/lnag42GrNg2darxgi26UkL/mZkBPTNIb2LT jEddliYZUU/f34mr9qzFYPEpMmuYeH7Arv8GqP8i7vG8TRabGmh14QNPp4zpgEub r1HSO6jTdSnZW3GjA3nNP4gcqkKyol0ckFuDhSJUTe9MMtyOiCoTBU/nNMcJ8a0W rWcpsqywGtSAFyH32dF/DVwG0tWANMn3GAchBj0RilmJZWYC+a4QPbR5LLhl8yrs EudX6BoQjT7M3/180n3xqP3CNpf9tTQkfy1WnmlwHP0r/jQ728YiBkDv6AJ0UVLq Y94Up2T+PEejCg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:48:19 2025 by rpki-client