This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json) Hash identifier: /Qy9mV4/IvUAOU6HMA7hwbfHdjUUskuMuXEsmipYWfY= Subject key identifier: FB:99:8E:96:BD:A4:1E:18:CB:E2:27:B8:17:7C:46:69:A0:98:AB:36 Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019B0DB6F709BCD8570968782A4CFA3F69E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft Manifest number: 06E9 Signing time: Thu 11 Dec 2025 14:00:52 +0000 Manifest this update: Thu 11 Dec 2025 14:00:52 +0000 Manifest next update: Fri 12 Dec 2025 14:00:52 +0000 Files and hashes: 1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=) 2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=) 3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: HA/J6jI4sW8pJeYr+q5GIUs5U2ljmQmImNRE7G9JXSA=) 4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=) 5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:f7:09:bc:d8:57:09:68:78:2a:4c:fa:3f:69:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Dec 11 14:00:52 2025 GMT Not After : Dec 12 14:00:52 2025 GMT Subject: CN=fb998e96bda41e18cbe227b8177c4669a098ab36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:61:b3:6a:c5:0c:c0:3a:4b:d2:fc:2f:09: fd:00:b3:02:2c:db:bb:81:a7:8e:d2:78:d2:5c:76: a8:10:88:57:6a:ca:dd:e3:5f:56:54:7d:40:70:d4: c6:23:65:65:ea:96:c9:82:cb:9d:9f:d4:1c:5b:63: 65:bc:c9:8b:50:6f:82:86:f9:41:21:9a:28:a1:4f: b8:91:be:18:91:61:d5:5b:d4:97:e3:42:ff:d3:e9: 8e:5b:31:a5:f7:52:bc:45:3f:49:7c:4e:f6:86:94: a9:68:f0:7c:4b:2d:bc:9d:b0:44:82:ac:d2:5a:ad: 06:a9:92:c3:5d:78:0a:68:83:ac:ea:49:95:71:77: 0d:6f:56:6b:7b:82:f3:8e:49:fd:55:67:b6:81:6b: 2d:ee:0c:ed:af:13:a9:32:e4:64:4f:e0:03:31:c5: 51:ba:78:2a:91:54:4f:8c:f1:04:48:d8:1c:8d:59: d6:72:87:e8:e8:4e:e1:c0:f1:fc:10:08:72:19:40: d5:91:53:bf:c1:3c:40:62:4f:56:b0:8d:95:db:da: e0:25:04:85:6b:a2:23:80:b5:a4:0a:33:a1:d7:21: f7:17:fd:d8:8f:e5:e8:07:77:f4:25:1e:f4:1a:3f: 15:d4:3f:1e:9f:6f:36:9e:15:27:cf:2b:c7:d6:cd: e8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:99:8E:96:BD:A4:1E:18:CB:E2:27:B8:17:7C:46:69:A0:98:AB:36 X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ee:e7:00:7d:d5:00:0f:28:3f:4c:b7:b9:b5:7f:6c:af:5c: 12:3f:20:b4:69:60:7f:5a:ce:a4:3a:b9:62:2c:ea:38:88:c0: 33:08:be:98:74:d9:a1:c2:da:1d:cf:1b:be:7c:63:25:7d:47: bf:64:f7:21:99:c3:d2:99:8a:e1:60:9f:4e:70:44:70:2c:5c: 16:b1:e1:2d:26:ec:6b:55:f1:f3:0b:37:7d:9f:3e:74:d8:1a: 50:7b:a6:58:2b:f0:8d:80:80:50:40:4c:5f:bd:59:15:ba:43: 77:94:05:11:3e:d0:51:9d:75:3e:a1:d7:c8:5e:66:25:db:f9: 73:e5:1c:2a:b4:f3:80:fb:84:b8:ea:8d:5a:d4:c1:22:80:54: 1f:79:af:1e:31:28:0d:3e:a0:f4:1e:00:13:e5:69:5b:e5:46: 72:39:6e:fd:86:cd:aa:ec:1e:e0:f1:8b:de:a1:63:c4:6b:f9: af:33:15:e3:b2:ee:23:55:70:d2:19:0e:f5:dc:5a:a5:06:32: c5:d1:87:7c:29:56:1f:ab:70:d6:14:a0:02:94:95:4e:09:7a: e0:8b:5d:68:12:a1:1d:63:86:c6:74:23:1b:2c:d2:b1:dd:c9: 53:21:a7:b2:6c:a1:f3:98:bc:55:71:b7:0c:7c:26:93:54:5b: f2:08:7c:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtvcJvNhXCWh4Kkz6P2nhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjUxMjExMTQwMDUyWhcNMjUxMjEyMTQwMDUyWjAzMTEwLwYDVQQD EyhmYjk5OGU5NmJkYTQxZTE4Y2JlMjI3YjgxNzdjNDY2OWEwOThhYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhxhs2rFDMA6S9L8Lwn9ALMCLNu7 gaeO0njSXHaoEIhXasrd419WVH1AcNTGI2Vl6pbJgsudn9QcW2NlvMmLUG+ChvlB IZoooU+4kb4YkWHVW9SX40L/0+mOWzGl91K8RT9JfE72hpSpaPB8Sy28nbBEgqzS Wq0GqZLDXXgKaIOs6kmVcXcNb1Zre4Lzjkn9VWe2gWst7gztrxOpMuRkT+ADMcVR ungqkVRPjPEESNgcjVnWcofo6E7hwPH8EAhyGUDVkVO/wTxAYk9WsI2V29rgJQSF a6IjgLWkCjOh1yH3F/3Yj+XoB3f0JR70Gj8V1D8en282nhUnzyvH1s3oGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuZjpa9pB4Yy+InuBd8RmmgmKs2MB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQO7nAH3V AA8oP0y3ubV/bK9cEj8gtGlgf1rOpDq5YizqOIjAMwi+mHTZocLaHc8bvnxjJX1H v2T3IZnD0pmK4WCfTnBEcCxcFrHhLSbsa1Xx8ws3fZ8+dNgaUHumWCvwjYCAUEBM X71ZFbpDd5QFET7QUZ11PqHXyF5mJdv5c+UcKrTzgPuEuOqNWtTBIoBUH3mvHjEo DT6g9B4AE+VpW+VGcjlu/YbNquwe4PGL3qFjxGv5rzMV47LuI1Vw0hkO9dxapQYy xdGHfClWH6tw1hSgApSVTgl64ItdaBKhHWOGxnQjGyzSsd3JUyGnsmyh85i8VXG3 DHwmk1Rb8gh8+Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:17 2025 by rpki-client