This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft File: xW0hVO1TtinYcrKjjZzQQb20sSg.mft (raw, json) Hash identifier: wMTle07CzXW3oRz7/S/2b05tT+X4ckDucckhHQsWnSM= Subject key identifier: 75:45:58:53:F9:2F:87:18:CF:E5:77:44:4A:93:79:ED:50:EA:B6:C3 Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Certificate serial: 019B34C526A92F3CBFFFF9376C73980253D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft Manifest number: 0AF7 Signing time: Fri 19 Dec 2025 04:01:34 +0000 Manifest this update: Fri 19 Dec 2025 04:01:34 +0000 Manifest next update: Sat 20 Dec 2025 04:01:34 +0000 Files and hashes: 1: LGIjR37T32om32PNGVlywqITYQM.roa (hash: PDrBaXBEFkBMQXE+r+pZdqQOvhiNvqlNo622ZzA4QS0=) 2: h3E3zuaVe9Fd-K2eeSfreUoqzxE.roa (hash: zkBB1N0MG6XqITCSMbDyxtWFtXhvrbfgV/J1jxkBcRM=) 3: xW0hVO1TtinYcrKjjZzQQb20sSg.crl (hash: HnfYVESDH9s6a5mQUESj40Zjx1l0e/rkN3Tlx99Bx4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:26:a9:2f:3c:bf:ff:f9:37:6c:73:98:02:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Validity Not Before: Dec 19 04:01:34 2025 GMT Not After : Dec 20 04:01:34 2025 GMT Subject: CN=75455853f92f8718cfe577444a9379ed50eab6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:26:3e:7b:ea:e1:6b:5c:f7:10:ae:ae:5b: 10:50:35:bc:3c:bb:08:ce:7c:e8:cc:b6:fa:e6:ab: e4:47:15:20:09:6b:61:ba:f8:28:5c:b9:2a:15:57: 75:78:1a:c6:9e:1a:1e:49:6e:68:c0:18:d6:bf:99: f3:86:42:e8:45:1b:3a:e3:a9:82:b6:b0:16:cf:3b: 8e:90:17:71:c4:85:5f:fa:7f:e9:d4:77:63:3a:1c: cf:9b:23:f4:28:fa:64:9b:79:ff:78:78:a9:d9:06: 50:15:44:ee:d9:7d:66:b2:05:9d:d6:c2:2a:7f:93: 5c:47:82:1c:51:c3:0d:b7:dd:68:27:ab:39:53:02: 48:ad:08:e2:48:92:d6:db:9c:8f:9a:57:ac:5c:68: 5b:31:50:4e:59:82:bd:0a:58:53:32:ac:5e:61:fd: a4:27:6c:bf:85:e2:3d:8e:34:fb:17:8b:8b:dc:ce: 4c:4f:f3:e1:b3:00:cc:5f:44:fa:d8:e0:46:2a:33: ba:1f:f7:f6:2d:a4:ac:5e:99:bb:dd:d1:29:b9:99: 7c:89:06:e5:74:fa:83:fa:92:6f:78:2d:ad:8d:06: bd:70:62:3b:69:88:db:f6:7c:61:aa:26:2a:62:21: f6:96:96:ad:8a:3d:9c:1b:d9:ea:7b:c8:6a:45:87: 70:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:58:53:F9:2F:87:18:CF:E5:77:44:4A:93:79:ED:50:EA:B6:C3 X509v3 Authority Key Identifier: keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6e:4f:7d:0b:a1:f6:d1:b3:5e:43:ef:46:5a:04:86:aa:2b: 03:4f:3d:7d:cd:f4:6f:66:1e:4e:f3:26:08:ed:03:90:6c:35: da:0b:4b:07:6d:1f:b3:37:24:a6:64:32:2c:cd:89:25:b9:37: 5f:ef:22:6f:20:19:36:d4:5a:8f:5c:b5:ec:b2:dd:d6:2b:82: 82:bc:3e:e7:e3:3e:c0:e1:b1:a1:d7:0f:ba:00:e3:f0:aa:ac: cd:d7:dd:65:52:7a:19:f1:7c:3e:93:3c:eb:94:b5:20:70:34: 4e:76:48:20:f5:15:56:61:54:63:1e:15:f9:6f:68:8b:7c:0b: 78:bd:c4:5b:a4:23:cc:3e:ce:64:07:aa:fb:e0:cb:58:2b:26: 71:cf:d0:18:07:1b:ed:02:12:f7:03:18:d7:99:ef:1d:ad:10: 00:0e:ba:cd:26:d5:7f:82:61:88:17:69:03:50:c1:e2:c7:44: 5d:4a:ab:2d:09:7d:bd:68:bf:22:04:c7:ad:45:4b:ed:61:c0: 83:aa:86:a1:b2:73:7a:4b:09:3b:4a:84:59:a3:9b:8e:a0:57: 94:b4:36:db:43:30:18:95:4e:65:36:80:98:a9:b0:8f:8b:ed: 8e:91:8d:88:b4:7c:fb:3b:ec:88:24:35:0d:cd:4f:82:9c:bf: 7b:de:b6:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xSapLzy///k3bHOYAlPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi NGIxMjgwHhcNMjUxMjE5MDQwMTM0WhcNMjUxMjIwMDQwMTM0WjAzMTEwLwYDVQQD Eyg3NTQ1NTg1M2Y5MmY4NzE4Y2ZlNTc3NDQ0YTkzNzllZDUwZWFiNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXUmPnvq4Wtc9xCurlsQUDW8PLsI znzozLb65qvkRxUgCWthuvgoXLkqFVd1eBrGnhoeSW5owBjWv5nzhkLoRRs646mC trAWzzuOkBdxxIVf+n/p1HdjOhzPmyP0KPpkm3n/eHip2QZQFUTu2X1msgWd1sIq f5NcR4IcUcMNt91oJ6s5UwJIrQjiSJLW25yPmlesXGhbMVBOWYK9ClhTMqxeYf2k J2y/heI9jjT7F4uL3M5MT/PhswDMX0T62OBGKjO6H/f2LaSsXpm73dEpuZl8iQbl dPqD+pJveC2tjQa9cGI7aYjb9nxhqiYqYiH2lpatij2cG9nqe8hqRYdwpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVFWFP5L4cYz+V3REqTee1Q6rbDMB8GA1UdIwQY MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt N2I0MTBiNzgxZGVmLzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG5PfQuh 9tGzXkPvRloEhqorA089fc30b2YeTvMmCO0DkGw12gtLB20fszckpmQyLM2JJbk3 X+8ibyAZNtRaj1y17LLd1iuCgrw+5+M+wOGxodcPugDj8KqszdfdZVJ6GfF8PpM8 65S1IHA0TnZIIPUVVmFUYx4V+W9oi3wLeL3EW6QjzD7OZAeq++DLWCsmcc/QGAcb 7QIS9wMY15nvHa0QAA66zSbVf4JhiBdpA1DB4sdEXUqrLQl9vWi/IgTHrUVL7WHA g6qGobJzeksJO0qEWaObjqBXlLQ220MwGJVOZTaAmKmwj4vtjpGNiLR8+zvsiCQ1 Dc1Pgpy/e962xg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:58:39 2025 by rpki-client