This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json) Hash identifier: qe65qqgdBwPvgblR9m/RPjfJuTmBtBPaZJt8dw1G1AA= Subject key identifier: 22:BE:A0:AF:5E:C7:6A:B6:B9:79:61:71:D6:6A:A2:85:86:55:D0:E6 Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Certificate serial: 019B5A1AC6F3FCCF5890BB088331F9B0BE23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft Manifest number: 05B0 Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: 4MImsvY0/BgDp8lYTAGThvliC4d40a7HV4Ib1jf1lds=) 2: ysZqYOzY1kNFh1sIOpeYsbxT0Fs.roa (hash: LkPu7W8d8SU9QHrC15AzmgPhWHRle+7DN15uGWx+c9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c6:f3:fc:cf:58:90:bb:08:83:31:f9:b0:be:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95 Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=22bea0af5ec76ab6b9796171d66aa2858655d0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:25:8d:02:69:36:4f:a8:95:3a:d1:c7:be: 97:36:f8:c3:ac:18:75:77:27:5c:44:19:ec:5a:ac: 1b:31:c3:1b:a8:1d:12:3a:c6:73:50:f1:8e:c5:98: 5b:11:4a:b6:1b:48:5e:44:29:f8:0a:33:4d:e9:8a: 6d:65:ee:63:85:e1:5f:6d:5a:4c:d4:80:26:98:a4: 30:a5:c5:47:49:c6:9d:40:d9:f3:10:8c:d3:fd:32: 7e:53:6f:ae:7d:cd:14:e2:35:6b:32:3d:03:a8:e1: 62:d3:4b:12:83:c3:ab:f2:a5:03:3e:63:32:8a:c0: 1e:91:fe:8e:e6:00:64:85:41:f2:9d:e3:fe:c3:30: 33:db:6b:3e:3a:af:97:7c:ff:06:32:27:ca:ab:73: bf:89:dd:0e:2c:f7:e6:6d:98:b3:cf:1b:a4:85:7d: df:d9:99:78:5d:b1:57:06:a6:5a:ef:d4:ab:3a:09: cd:48:cf:5f:dd:53:06:6a:3f:43:db:68:1f:29:e9: c9:6c:e8:30:39:c0:0b:df:c0:40:4d:ea:b2:f8:89: b5:c6:d5:db:09:53:22:29:74:88:60:4c:b5:a5:4d: 9e:6a:af:8c:45:3b:3a:33:1e:e4:e2:11:4a:fd:72: 5a:16:a6:06:21:8e:fa:83:47:4c:42:a4:a1:5f:f5: a7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:A0:AF:5E:C7:6A:B6:B9:79:61:71:D6:6A:A2:85:86:55:D0:E6 X509v3 Authority Key Identifier: keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:87:41:bc:ab:ca:cb:84:b4:8d:64:d0:06:16:49:3a:cf:1a: f7:06:19:e3:e6:a1:25:79:e2:19:1a:ba:02:a3:fa:c7:62:fb: 7a:eb:dd:07:fe:db:a5:48:cd:80:04:a6:b0:8c:81:7f:d2:62: 24:2f:34:9f:df:fe:f3:14:ce:9b:cd:ab:b0:f0:ac:a0:ec:a7: 43:8e:54:5b:95:20:12:c8:3e:41:ac:9b:c8:bf:c0:00:37:cf: 96:54:92:5a:65:4a:fc:e3:e8:03:ec:9c:d1:7d:38:85:a3:f7: a6:7a:f0:fd:0b:93:13:6e:99:9d:27:49:22:d6:a5:5d:8f:51: bb:34:31:af:dc:eb:aa:97:4e:c5:6d:24:af:b7:2d:e0:8d:48: d0:db:20:2a:92:ca:88:1c:21:28:79:32:98:33:6a:90:77:63: 50:d5:27:12:f0:2e:13:a1:d1:2f:cb:83:a5:73:48:b4:38:68: c2:40:d2:a2:f6:53:6f:3f:20:b3:9f:b2:70:cc:72:a1:c9:6e: 11:9d:00:b0:a4:32:84:f2:70:8b:1a:d2:9b:67:bb:33:1d:86: bb:6b:8d:60:13:6d:fc:cf:fa:af:b3:f4:b4:c7:e3:d8:36:43: 50:2a:af:45:70:0c:ff:eb:08:6a:a3:d9:b5:97:03:16:b3:95: 56:77:60:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsbz/M9YkLsIgzH5sL4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWEwYTc1NTQzODU3MDM5NzRhZTE1ZWY5NDdiYzU0YzBi ODljOTUwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EygyMmJlYTBhZjVlYzc2YWI2Yjk3OTYxNzFkNjZhYTI4NTg2NTVkMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGEljQJpNk+olTrRx76XNvjDrBh1 dydcRBnsWqwbMcMbqB0SOsZzUPGOxZhbEUq2G0heRCn4CjNN6YptZe5jheFfbVpM 1IAmmKQwpcVHScadQNnzEIzT/TJ+U2+ufc0U4jVrMj0DqOFi00sSg8Or8qUDPmMy isAekf6O5gBkhUHyneP+wzAz22s+Oq+XfP8GMifKq3O/id0OLPfmbZizzxukhX3f 2Zl4XbFXBqZa79SrOgnNSM9f3VMGaj9D22gfKenJbOgwOcAL38BATeqy+Im1xtXb CVMiKXSIYEy1pU2eaq+MRTs6Mx7k4hFK/XJaFqYGIY76g0dMQqShX/WnKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK+oK9ex2q2uXlhcdZqooWGVdDmMB8GA1UdIwQY MBaAFP8aCnVUOFcDl0rhXvlHvFTAuJyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAt Mjc1NTBiMjE5NTA3LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8yNjkyOTAtNTlmZi00MjMzLThmYTAtMjc1NTBiMjE5NTA3 LzEvX3hvS2RWUTRWd09YU3VGZS1VZThWTUM0bkpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4dBvKvK y4S0jWTQBhZJOs8a9wYZ4+ahJXniGRq6AqP6x2L7euvdB/7bpUjNgASmsIyBf9Ji JC80n9/+8xTOm82rsPCsoOynQ45UW5UgEsg+QaybyL/AADfPllSSWmVK/OPoA+yc 0X04haP3pnrw/QuTE26ZnSdJItalXY9RuzQxr9zrqpdOxW0kr7ct4I1I0NsgKpLK iBwhKHkymDNqkHdjUNUnEvAuE6HRL8uDpXNItDhowkDSovZTbz8gs5+ycMxyoclu EZ0AsKQyhPJwixrSm2e7Mx2Gu2uNYBNt/M/6r7P0tMfj2DZDUCqvRXAM/+sIaqPZ tZcDFrOVVndgKg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:57:35 2025 by rpki-client