This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft File: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json) Hash identifier: JywEuJ+zLzGInGSTzZjjE/4I92U4SGcBbr6SsS1J+eA= Subject key identifier: BF:9C:D5:C3:F4:01:23:2F:6B:5E:47:A1:82:E5:AD:C3:56:19:80:70 Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 Certificate issuer: /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Certificate serial: 019B43CA175D40B2D7E5F8F42103807FEE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft Manifest number: 1162 Signing time: Mon 22 Dec 2025 02:01:16 +0000 Manifest this update: Mon 22 Dec 2025 02:01:16 +0000 Manifest next update: Tue 23 Dec 2025 02:01:16 +0000 Files and hashes: 1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: zPuil9Ni134GB1oS+V1PoOhReLIdYnzfdxMHACPKDoE=) 2: MMUTpzHJDvP8m90rkKx4rRT5Pvs.roa (hash: 0qwECbWF3VMGBC2LqqWsoaxdyHvDL7eVoZEYdOt0I84=) 3: NibkP4WwhFNgZ640yvtXLfFiJrg.roa (hash: a/esbL59f+nmLVH7R2fnAmETOkLcHJ2GIe7zJ0dWkJ0=) 4: rUM43ISndw5pYAQLWf2KHIAwsfw.roa (hash: KeqCps5BUoZfWz/djUGV6w2EVQtKO+PPXxPc78g2vTo=) 5: xi9oGHAZGsjdKybpmWD7Ku8W0ZM.roa (hash: 5sRqk+0ypVIu7UFoyuyrbtTdv9EciH6vt3GDL2ydd68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:17:5d:40:b2:d7:e5:f8:f4:21:03:80:7f:ee:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81 Validity Not Before: Dec 22 02:01:16 2025 GMT Not After : Dec 23 02:01:16 2025 GMT Subject: CN=bf9cd5c3f401232f6b5e47a182e5adc356198070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:ef:e7:c3:3c:10:60:e2:b3:1d:5d:a7:73: 81:e6:24:f0:d8:cf:bf:f2:93:de:05:98:d6:d7:ef: 63:f8:40:3f:7a:d0:ea:25:9c:c8:33:39:06:f6:8d: 21:79:d3:92:35:93:8e:53:fb:73:77:e3:ee:c4:51: c5:7e:bb:1d:c5:e6:fe:98:f4:60:b1:62:4a:66:e8: fc:78:97:7a:db:b9:b5:48:40:6b:49:84:a8:6c:9e: 23:05:57:2d:8d:25:f4:a0:7f:ba:c3:c9:1b:c4:67: 09:99:f0:77:68:5d:21:20:2f:c3:a0:b8:bf:6c:24: 4f:00:2a:95:4e:90:87:89:cd:1c:52:18:29:0c:2c: b4:b1:fe:e6:1c:32:67:5a:96:2e:2a:69:00:c8:40: e9:05:f2:b9:d5:18:52:23:f0:cd:b8:4b:15:70:27: 68:ce:53:b5:ef:f5:5e:3d:9e:d8:99:ee:0d:5a:01: 8a:5c:48:8b:f0:fd:7a:23:37:9f:f2:21:b6:fb:1e: 65:90:91:e4:9a:81:93:34:00:51:b8:3c:be:71:56: 5c:02:5b:a1:b1:68:4f:70:db:79:2a:5e:a7:1f:9a: c8:21:66:25:2a:6e:35:bd:b1:ca:d8:41:5a:15:4c: 82:10:a1:de:fd:6f:40:f6:7e:af:00:a0:df:14:97: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:9C:D5:C3:F4:01:23:2F:6B:5E:47:A1:82:E5:AD:C3:56:19:80:70 X509v3 Authority Key Identifier: keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3e:d0:25:70:1f:50:0a:55:ba:0f:90:89:b7:5c:30:e9:5d: f5:02:6c:8b:3b:c8:fc:d6:dd:81:8c:2a:c7:79:10:c2:6d:57: af:1e:fd:d7:7a:07:64:3a:3a:0e:cc:25:02:5c:de:1a:4e:ca: 70:a0:15:64:82:d4:b7:8a:ac:94:02:c5:49:3b:af:d0:ae:6a: 12:d3:84:f7:73:9e:9f:db:cb:7c:74:64:fe:fe:5e:01:ed:d0: 99:a2:37:41:70:f4:4e:1b:1b:93:9f:d3:0a:08:b4:a0:b1:f5: 81:5e:a7:97:fc:2b:e5:f6:54:3e:01:82:3d:eb:dc:de:aa:3c: 1d:d4:c4:5a:17:41:0b:a2:f0:7a:64:61:2d:c3:90:5e:01:3d: f1:29:b2:e6:2b:ca:79:38:91:4b:d7:ae:33:21:81:12:07:a0: 6d:ab:64:00:d9:21:34:b5:f5:72:4a:5d:00:c7:87:ec:da:82: e6:9a:b3:dd:c3:02:cc:1d:32:60:ca:98:1d:c0:e3:31:7d:4f: e0:2e:4a:b8:7e:6a:e6:1e:6b:41:0d:85:82:32:a1:51:64:be: 43:6c:19:7f:44:e4:95:bd:20:0b:d2:33:32:7c:ad:18:61:28: da:f7:8b:45:46:36:e9:bf:ad:e4:88:c0:21:29:05:9d:75:08: f6:56:67:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyhddQLLX5fj0IQOAf+5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxN2JmNGZiZWE4OTRmNDNlZWIzZGIxYjIxNmU1Nzc2NmUw MWFiODEwHhcNMjUxMjIyMDIwMTE2WhcNMjUxMjIzMDIwMTE2WjAzMTEwLwYDVQQD EyhiZjljZDVjM2Y0MDEyMzJmNmI1ZTQ3YTE4MmU1YWRjMzU2MTk4MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcfv58M8EGDisx1dp3OB5iTw2M+/ 8pPeBZjW1+9j+EA/etDqJZzIMzkG9o0hedOSNZOOU/tzd+PuxFHFfrsdxeb+mPRg sWJKZuj8eJd627m1SEBrSYSobJ4jBVctjSX0oH+6w8kbxGcJmfB3aF0hIC/DoLi/ bCRPACqVTpCHic0cUhgpDCy0sf7mHDJnWpYuKmkAyEDpBfK51RhSI/DNuEsVcCdo zlO17/VePZ7Yme4NWgGKXEiL8P16Izef8iG2+x5lkJHkmoGTNABRuDy+cVZcAluh sWhPcNt5Kl6nH5rIIWYlKm41vbHK2EFaFUyCEKHe/W9A9n6vAKDfFJdSNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+c1cP0ASMva15HoYLlrcNWGYBwMB8GA1UdIwQY MBaAFNF79PvqiU9D7rPbGyFuV3ZuAauBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDIt MmMyMDFkMzBhZTA1LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy80MjE1MjktNzNlMi00OTE2LThiZDItMmMyMDFkMzBhZTA1 LzEvMFh2MC0tcUpUMFB1czlzYklXNVhkbTRCcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARD7QJXAf UApVug+QibdcMOld9QJsizvI/NbdgYwqx3kQwm1Xrx7913oHZDo6DswlAlzeGk7K cKAVZILUt4qslALFSTuv0K5qEtOE93Oen9vLfHRk/v5eAe3QmaI3QXD0Thsbk5/T Cgi0oLH1gV6nl/wr5fZUPgGCPevc3qo8HdTEWhdBC6LwemRhLcOQXgE98Smy5ivK eTiRS9euMyGBEgegbatkANkhNLX1ckpdAMeH7NqC5pqz3cMCzB0yYMqYHcDjMX1P 4C5KuH5q5h5rQQ2FgjKhUWS+Q2wZf0Tklb0gC9IzMnytGGEo2veLRUY26b+t5IjA ISkFnXUI9lZntQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:31:58 2025 by rpki-client