This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json) Hash identifier: R5ijrNBC8cRmTN5aa07gGJFyLe74l7CPHSmUlz1Mx2g= Subject key identifier: 5E:51:FF:24:2F:6E:17:C6:FF:60:2A:AF:B7:A3:C0:4F:1A:B1:76:2D Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Certificate serial: 019B1DCF2D7E8A41A06ECBF85C346F27EF4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft Manifest number: 15EC Signing time: Sun 14 Dec 2025 17:01:15 +0000 Manifest this update: Sun 14 Dec 2025 17:01:15 +0000 Manifest next update: Mon 15 Dec 2025 17:01:15 +0000 Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=) 2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: 1HWJ+zHN5nL8AQVTaKv368dI6jWOcZPRZIzmrroas/g=) 3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=) 4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:cf:2d:7e:8a:41:a0:6e:cb:f8:5c:34:6f:27:ef:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Validity Not Before: Dec 14 17:01:15 2025 GMT Not After : Dec 15 17:01:15 2025 GMT Subject: CN=5e51ff242f6e17c6ff602aafb7a3c04f1ab1762d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:17:a8:42:5d:f6:f4:55:79:20:79:d3:5e:90: 49:94:4a:97:74:3c:9b:c3:f2:62:d3:3b:63:fd:b6: cc:2f:ff:e8:31:fd:f9:21:cd:98:40:01:d6:f7:12: 36:9a:cb:05:48:e6:0d:86:32:2e:d7:b9:95:0e:d1: cf:ff:8f:27:c5:1f:d4:2e:3a:a1:61:d2:ff:87:37: b1:b9:20:0e:65:b1:00:66:5c:9b:9b:51:67:f2:ee: 9c:70:cc:65:28:08:00:d9:e5:8f:98:40:17:e2:34: 34:be:4c:e4:f4:a4:cd:2f:53:95:d9:4a:27:42:58: 30:3b:84:ec:20:32:57:ce:8d:58:07:b9:8c:75:f5: 2c:4f:f5:c9:85:f5:8d:5d:a5:83:ec:3d:1f:bd:e9: 5d:a2:86:d0:7b:6b:0b:ac:e6:83:73:02:90:9d:ec: c5:1e:51:76:3e:43:60:22:2a:1c:27:95:c6:7f:b4: e1:90:5c:98:ef:98:9f:d5:5a:52:cf:b2:7c:86:54: 51:78:93:b8:f3:e7:4f:48:f5:71:7d:f1:d1:c3:27: 3b:ac:44:0e:30:2c:35:ff:dc:02:fd:5a:b6:36:bc: 48:e3:98:bd:aa:09:56:dc:23:68:d6:15:82:70:7a: 6f:da:6b:d6:71:28:66:b3:b2:86:2d:d8:ff:cd:86: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:51:FF:24:2F:6E:17:C6:FF:60:2A:AF:B7:A3:C0:4F:1A:B1:76:2D X509v3 Authority Key Identifier: keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ab:6a:43:1d:57:46:f1:30:9c:34:54:d2:5e:20:50:23:20: 52:b7:51:be:2d:5d:17:4a:28:d6:01:9c:8b:41:f9:3b:a2:bc: 45:a9:16:34:03:71:22:f3:75:c1:43:ef:7d:9d:8c:df:e3:33: 72:c7:63:9a:85:c3:ad:2e:5e:82:36:6a:36:9d:a0:91:64:da: ef:07:43:8e:fb:d2:dc:39:f5:50:fa:1c:01:9a:a6:10:08:d5: 40:3c:42:fb:81:58:71:3e:f1:86:68:c3:02:1a:2b:eb:2e:b6: b7:33:cb:99:74:98:74:e3:ae:90:ad:fa:fc:ee:74:68:60:4d: 35:a6:3d:cc:5b:ec:a3:d8:f1:42:9c:10:03:00:7d:90:ed:d5: 38:54:c2:18:95:c9:eb:69:98:fd:53:6c:a9:de:10:e0:8c:8c: 74:8f:5f:87:8c:13:af:72:b0:5b:0d:20:9e:77:c9:26:85:be: cb:7f:6d:2c:2e:d9:2d:86:ab:60:b0:13:bf:8f:00:a8:8e:37: b2:59:5d:49:40:53:0a:7c:ac:a7:ee:6d:bf:cc:4d:c8:54:7f: 05:81:53:02:e4:15:a6:d3:fa:1c:a9:4e:53:54:44:e7:5e:b2: 2d:18:82:ac:ae:4d:87:54:56:09:60:b6:38:39:66:d2:c9:21: ac:fe:53:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzy1+ikGgbsv4XDRvJ+9LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj ZjUwYTEwHhcNMjUxMjE0MTcwMTE1WhcNMjUxMjE1MTcwMTE1WjAzMTEwLwYDVQQD Eyg1ZTUxZmYyNDJmNmUxN2M2ZmY2MDJhYWZiN2EzYzA0ZjFhYjE3NjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxeoQl329FV5IHnTXpBJlEqXdDyb w/Ji0ztj/bbML//oMf35Ic2YQAHW9xI2mssFSOYNhjIu17mVDtHP/48nxR/ULjqh YdL/hzexuSAOZbEAZlybm1Fn8u6ccMxlKAgA2eWPmEAX4jQ0vkzk9KTNL1OV2Uon QlgwO4TsIDJXzo1YB7mMdfUsT/XJhfWNXaWD7D0fveldoobQe2sLrOaDcwKQnezF HlF2PkNgIiocJ5XGf7ThkFyY75if1VpSz7J8hlRReJO48+dPSPVxffHRwyc7rEQO MCw1/9wC/Vq2NrxI45i9qglW3CNo1hWCcHpv2mvWcShms7KGLdj/zYZnpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5R/yQvbhfG/2Aqr7ejwE8asXYtMB8GA1UdIwQY MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt Y2Y2YTYzZTRlZmI2LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2 LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsqtqQx1X RvEwnDRU0l4gUCMgUrdRvi1dF0oo1gGci0H5O6K8RakWNANxIvN1wUPvfZ2M3+Mz csdjmoXDrS5egjZqNp2gkWTa7wdDjvvS3Dn1UPocAZqmEAjVQDxC+4FYcT7xhmjD Ahor6y62tzPLmXSYdOOukK36/O50aGBNNaY9zFvso9jxQpwQAwB9kO3VOFTCGJXJ 62mY/VNsqd4Q4IyMdI9fh4wTr3KwWw0gnnfJJoW+y39tLC7ZLYarYLATv48AqI43 slldSUBTCnysp+5tv8xNyFR/BYFTAuQVptP6HKlOU1RE516yLRiCrK5Nh1RWCWC2 ODlm0skhrP5T1Q== -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:40 2025 by rpki-client