This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json) Hash identifier: oeZN+SU/wAWtKJ0JLCI74wE5N8VE0/T2YuNVAKyKcGY= Subject key identifier: A0:FF:19:9F:71:2C:FC:3F:46:C6:11:27:32:79:E2:37:65:03:39:91 Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae Certificate serial: 019B2F67758CAF6FAE4636E1E64F23B81641 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:01:07 +0000 Manifest this update: Thu 18 Dec 2025 03:01:07 +0000 Manifest next update: Fri 19 Dec 2025 03:01:07 +0000 Files and hashes: 1: 3VwS8xn1dqlezDsMh8Sf9TR7g9g.roa (hash: MDTRApulTOvm2zrb3DRDrjk3d2nWoH+O6KEsT2PYF34=) 2: LAcLYgswdXBfgBZpgmI4v5l11G8.roa (hash: 4F279XlGd3FdMtCNdNRt8dMwroWFaHLg6v4i36Nk99c=) 3: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: JQWwmLO8hit/+lOh237m+sxO6GADbJ+MFksk+4kogiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:75:8c:af:6f:ae:46:36:e1:e6:4f:23:b8:16:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae Validity Not Before: Dec 18 03:01:07 2025 GMT Not After : Dec 19 03:01:07 2025 GMT Subject: CN=a0ff199f712cfc3f46c611273279e23765033991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:08:88:d4:62:ea:5b:2d:fd:91:a9:81:a0:4c: 86:65:d8:89:ec:42:01:0b:70:9f:96:c0:3f:82:38: 6e:0a:ba:d7:78:7e:1f:ac:d8:74:c7:52:05:5b:43: fc:27:0b:e8:05:66:7e:42:85:70:5b:b6:e3:f3:82: 19:5c:91:02:c0:ee:22:67:3f:3d:8d:1f:28:fa:7d: 73:6e:86:7d:54:54:8a:df:9f:cb:b4:2a:cc:ec:20: e4:ba:2c:8e:ff:11:ea:a7:00:6a:58:d8:bf:10:58: 51:82:0f:4b:65:04:fb:66:40:34:2f:8e:42:a6:1c: a6:e6:d4:92:76:12:f7:48:49:83:0a:7d:90:9e:b2: 9e:e9:22:b2:3f:d0:f3:8c:7d:ff:8d:45:0c:bc:67: fc:63:2a:e6:42:a1:e1:11:63:03:49:85:74:d4:6c: 31:ba:c8:f9:a3:a1:96:24:96:6a:12:e6:17:51:99: d4:51:dd:0e:30:37:8d:9c:a7:c5:0d:36:60:4c:5e: 20:0c:c7:53:74:3e:6d:34:b4:90:cc:7f:3f:56:07: f1:39:82:ac:7c:e5:53:0a:d6:f9:98:ed:c0:67:b3: 27:37:3b:50:52:31:0f:c9:77:23:07:38:82:03:96: 9c:d7:71:c4:5f:c8:f4:34:f6:3a:f0:ae:3c:5e:ce: d4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FF:19:9F:71:2C:FC:3F:46:C6:11:27:32:79:E2:37:65:03:39:91 X509v3 Authority Key Identifier: keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2b:27:4c:5f:a1:b9:c0:87:17:50:21:06:2b:fa:99:1b:14: 3c:ee:83:00:6a:ca:c1:86:99:a7:db:6c:fe:b7:5b:4c:a2:64: a4:05:a0:36:da:59:58:6e:85:a8:74:f0:09:f2:48:da:2b:8b: ed:78:c7:37:11:03:3e:0c:a5:40:04:d2:8e:34:d7:48:c8:c4: 31:b3:e9:41:b1:d0:0e:08:9d:65:91:1f:f2:1c:ae:26:9d:3d: e2:d2:66:56:88:e7:97:bc:c6:53:5c:93:77:dc:70:11:1d:80: 3f:d0:79:9f:b2:c5:ef:d5:73:ef:b8:94:6d:ec:cc:89:3d:96: 54:e9:d9:a3:9e:b4:33:64:c7:d7:a5:39:58:3c:fc:39:ab:fc: 0e:66:78:e1:ea:3d:72:94:e0:51:e4:4d:a3:3a:5e:3f:ed:f0: 0b:f5:09:97:17:4d:f9:b6:53:8b:5d:9e:dd:85:9d:af:31:8d: f6:b0:b7:d9:f2:8a:80:e7:93:08:c8:c4:16:ec:7c:67:6d:52: 7d:4f:7a:79:5e:62:23:ab:de:47:05:33:1b:70:89:ae:0a:45: 56:fd:42:50:a9:7c:ff:3a:85:9c:03:e6:07:83:0c:fd:a7:4d: ad:e7:15:09:6b:bc:ab:e3:40:ec:cc:52:a7:23:02:d1:14:ed: f6:04:f2:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3WMr2+uRjbh5k8juBZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5 ZTZlYWUwHhcNMjUxMjE4MDMwMTA3WhcNMjUxMjE5MDMwMTA3WjAzMTEwLwYDVQQD EyhhMGZmMTk5ZjcxMmNmYzNmNDZjNjExMjczMjc5ZTIzNzY1MDMzOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwiI1GLqWy39kamBoEyGZdiJ7EIB C3CflsA/gjhuCrrXeH4frNh0x1IFW0P8JwvoBWZ+QoVwW7bj84IZXJECwO4iZz89 jR8o+n1zboZ9VFSK35/LtCrM7CDkuiyO/xHqpwBqWNi/EFhRgg9LZQT7ZkA0L45C phym5tSSdhL3SEmDCn2QnrKe6SKyP9DzjH3/jUUMvGf8YyrmQqHhEWMDSYV01Gwx usj5o6GWJJZqEuYXUZnUUd0OMDeNnKfFDTZgTF4gDMdTdD5tNLSQzH8/VgfxOYKs fOVTCtb5mO3AZ7MnNztQUjEPyXcjBziCA5ac13HEX8j0NPY68K48Xs7UewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD/GZ9xLPw/RsYRJzJ54jdlAzmRMB8GA1UdIwQY MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt MDA1Y2I0ZGNhNjNmLzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFysnTF+h ucCHF1AhBiv6mRsUPO6DAGrKwYaZp9ts/rdbTKJkpAWgNtpZWG6FqHTwCfJI2iuL 7XjHNxEDPgylQATSjjTXSMjEMbPpQbHQDgidZZEf8hyuJp094tJmVojnl7zGU1yT d9xwER2AP9B5n7LF79Vz77iUbezMiT2WVOnZo560M2TH16U5WDz8Oav8DmZ44eo9 cpTgUeRNozpeP+3wC/UJlxdN+bZTi12e3YWdrzGN9rC32fKKgOeTCMjEFux8Z21S fU96eV5iI6veRwUzG3CJrgpFVv1CUKl8/zqFnAPmB4MM/adNrecVCWu8q+NA7MxS pyMC0RTt9gTyBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:55 2025 by rpki-client