This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json) Hash identifier: vmD79kxp81Z2Bx4t5VKWZxnMOHX6/FAm5XlMon1ucjk= Subject key identifier: 29:9B:40:95:B3:4D:13:62:11:56:BB:BC:E9:7D:90:76:F5:CD:34:91 Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d Certificate serial: 019B0F004032B351A08F35BC0090B64656AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 20:00:33 +0000 Manifest this update: Thu 11 Dec 2025 20:00:33 +0000 Manifest next update: Fri 12 Dec 2025 20:00:33 +0000 Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=) 2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=) 3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: Wsxq7hyK9KtDGCf3bEu5zmKxj+J9Qo93DBea5ZC2L9Q=) 4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:40:32:b3:51:a0:8f:35:bc:00:90:b6:46:56:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d Validity Not Before: Dec 11 20:00:33 2025 GMT Not After : Dec 12 20:00:33 2025 GMT Subject: CN=299b4095b34d13621156bbbce97d9076f5cd3491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:16:cd:0b:b4:fd:e4:35:7c:67:38:c7:03:2d: 4d:39:ea:35:f0:88:69:12:25:c8:fd:77:1d:6c:72: 83:5a:d5:66:97:7c:b0:81:75:d0:41:94:c0:a9:c6: 8b:07:03:ff:58:ff:77:9c:ea:27:ab:d2:4c:3a:27: 11:c2:b7:c0:35:a2:2c:6d:18:47:f2:09:96:69:c3: 18:1a:b4:70:34:86:7e:39:73:f4:f9:e3:85:71:41: 52:c0:06:01:66:ae:1d:f5:a7:ee:68:55:b1:40:c8: af:03:a6:da:fc:f3:cd:28:95:55:52:ba:15:0e:36: d8:cb:8c:03:ea:d5:f6:6b:3b:a0:28:91:98:52:30: 93:52:09:d7:f1:d1:b6:31:57:b0:1a:ae:87:bd:f8: b1:98:fc:af:4c:a5:ce:eb:f7:7b:7c:3a:82:8c:da: 62:9d:5f:39:22:14:bf:a9:f1:77:fe:70:ff:7a:2b: dd:d1:50:c3:df:3f:3b:57:d2:47:22:ba:ad:2f:3c: c6:66:f7:7d:b6:7e:0d:30:85:cb:71:bd:2d:ed:8a: 98:6d:a0:27:86:8a:52:ca:0d:da:9b:55:24:eb:fb: 74:b5:5e:47:c3:8f:8f:dd:49:2a:20:31:f3:22:8c: db:6f:6b:8f:3b:b3:d5:12:a2:a8:06:3b:16:58:0c: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9B:40:95:B3:4D:13:62:11:56:BB:BC:E9:7D:90:76:F5:CD:34:91 X509v3 Authority Key Identifier: keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a2:5c:7d:10:7b:90:e9:27:b3:f5:2d:bb:66:b4:04:f9:6d: a8:07:85:e9:21:37:c4:8a:e7:74:d7:f5:07:d0:e7:b1:1c:fa: 26:43:6e:07:7a:61:85:d7:b2:23:54:19:d6:a2:06:e5:0f:75: 63:ab:b5:8a:e9:61:6b:ba:8c:8c:ec:a2:a9:3c:77:53:42:87: fd:94:b7:11:b3:d8:ad:ac:06:f3:89:5b:87:4e:7e:6b:b4:ba: fb:34:ce:57:7e:cb:ba:5d:51:af:75:d7:d3:dd:ab:db:78:76: 66:d1:48:72:df:c4:de:b6:5b:36:a4:5c:c9:04:81:12:6d:47: a0:55:2b:a5:8a:96:74:d6:8e:24:22:b1:99:5a:8b:a9:f0:23: c4:79:ad:0d:03:f5:65:2d:75:8a:bb:00:bd:54:f7:9d:af:7d: f4:19:07:e9:98:f5:a8:b4:cf:56:01:dc:8a:d7:7c:5b:43:05: 87:6a:78:9c:c5:52:6c:32:06:31:02:39:a3:aa:e0:91:49:57: fd:29:83:37:91:9e:4d:9f:c2:74:25:62:26:88:70:02:b7:77: 08:ff:a8:5d:30:e3:4c:ae:65:dc:c8:be:fb:cc:96:13:17:63: 6d:80:43:bc:08:a4:c7:f4:ad:06:ac:92:3c:c0:13:2d:b5:4b: a3:99:13:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAEAys1GgjzW8AJC2RlauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm NjUyMGQwHhcNMjUxMjExMjAwMDMzWhcNMjUxMjEyMjAwMDMzWjAzMTEwLwYDVQQD EygyOTliNDA5NWIzNGQxMzYyMTE1NmJiYmNlOTdkOTA3NmY1Y2QzNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhbNC7T95DV8ZzjHAy1NOeo18Ihp EiXI/XcdbHKDWtVml3ywgXXQQZTAqcaLBwP/WP93nOonq9JMOicRwrfANaIsbRhH 8gmWacMYGrRwNIZ+OXP0+eOFcUFSwAYBZq4d9afuaFWxQMivA6ba/PPNKJVVUroV DjbYy4wD6tX2azugKJGYUjCTUgnX8dG2MVewGq6HvfixmPyvTKXO6/d7fDqCjNpi nV85IhS/qfF3/nD/eivd0VDD3z87V9JHIrqtLzzGZvd9tn4NMIXLcb0t7YqYbaAn hopSyg3am1Uk6/t0tV5Hw4+P3UkqIDHzIozbb2uPO7PVEqKoBjsWWAy93QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmbQJWzTRNiEVa7vOl9kHb1zTSRMB8GA1UdIwQY MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6JcfRB7 kOkns/Utu2a0BPltqAeF6SE3xIrndNf1B9DnsRz6JkNuB3phhdeyI1QZ1qIG5Q91 Y6u1iulha7qMjOyiqTx3U0KH/ZS3EbPYrawG84lbh05+a7S6+zTOV37Lul1Rr3XX 092r23h2ZtFIct/E3rZbNqRcyQSBEm1HoFUrpYqWdNaOJCKxmVqLqfAjxHmtDQP1 ZS11irsAvVT3na999BkH6Zj1qLTPVgHcitd8W0MFh2p4nMVSbDIGMQI5o6rgkUlX /SmDN5GeTZ/CdCViJohwArd3CP+oXTDjTK5l3Mi++8yWExdjbYBDvAikx/StBqyS PMATLbVLo5kToQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:17 2025 by rpki-client