This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json) Hash identifier: J3UE2UV/WeFuLydZMh7hQPinAH7+uwGzxiyQe5H/mfw= Subject key identifier: 17:14:99:6B:3A:0C:90:50:F5:0B:D8:5D:F0:FF:18:E3:52:4B:30:FF Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9 Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9 Certificate serial: 019B5ABF8FFDF014BA8E8982C82717F48BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 13:01:02 +0000 Manifest this update: Fri 26 Dec 2025 13:01:02 +0000 Manifest next update: Sat 27 Dec 2025 13:01:02 +0000 Files and hashes: 1: R0Y_8680398wT7CzR2ae2QTPR2w.roa (hash: T+VBi4m8dsst25C1j7+k5KuFCU7EfyAt7PpnICFW3s0=) 2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: TwH7PDgFZroaqIKzcgnIdSL218lgo6IzsfKfIe+fQvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:8f:fd:f0:14:ba:8e:89:82:c8:27:17:f4:8b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9 Validity Not Before: Dec 26 13:01:02 2025 GMT Not After : Dec 27 13:01:02 2025 GMT Subject: CN=1714996b3a0c9050f50bd85df0ff18e3524b30ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:40:55:86:d8:84:1b:49:32:31:9a:29:96: fb:e5:37:40:ad:c8:85:c4:d3:79:29:d7:b5:63:2e: cd:17:85:b1:28:46:7a:b1:45:3e:7a:a4:8a:85:ba: 39:e7:16:7c:48:ee:c1:03:e4:c3:77:1a:dd:70:5d: d7:3c:af:68:28:63:85:b6:08:58:86:c5:e6:1f:21: bd:67:e3:0b:81:fc:27:07:c2:55:28:08:16:d3:97: 06:38:f3:73:35:45:46:2f:1d:5a:19:11:59:ac:22: 63:71:3b:17:97:97:84:43:b4:b8:26:60:a3:14:7c: 7b:18:37:bc:9c:82:ef:dd:36:4e:3e:f1:7e:e7:84: 7a:1b:f4:ef:ec:2b:41:f3:50:f5:18:7a:a3:5c:6e: b0:17:b2:3b:1e:77:fa:10:e4:3d:a9:b7:33:31:90: d9:84:8c:99:4d:d6:74:94:03:66:1d:32:6e:18:b7: 93:6b:8c:62:ba:f2:a4:1a:e3:0c:1d:a7:74:1d:09: 72:b4:e1:d3:d5:36:4e:84:4e:cd:d5:7c:58:34:30: 3b:1c:15:4c:8f:a7:09:3c:b7:b0:f6:ac:03:4d:42: 9d:30:a2:02:42:6d:3c:a0:61:b4:f9:46:c8:f3:e4: 10:83:84:89:8f:20:df:ad:93:07:b2:86:c5:d3:74: 30:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:14:99:6B:3A:0C:90:50:F5:0B:D8:5D:F0:FF:18:E3:52:4B:30:FF X509v3 Authority Key Identifier: keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d5:d4:e0:dd:6e:52:e7:04:b2:88:bd:f4:af:4f:5c:78:a6: 26:9f:01:41:1d:30:75:78:d0:80:2f:d1:3a:86:05:44:cf:24: 41:a1:7c:28:3f:01:dd:70:23:d4:00:68:fb:f1:6a:31:8d:a1: 29:4b:c6:04:55:02:3d:c4:01:13:d5:69:bb:4b:36:b6:b3:83: f4:e3:7f:35:0f:8b:69:e4:91:ce:39:8d:d4:f0:c3:ab:68:0f: 41:64:b8:6c:63:52:73:7b:1c:86:9d:fa:ec:b8:46:76:1b:54: bc:70:8d:82:52:2a:19:4a:cc:f8:11:98:45:40:22:d7:06:1f: 70:39:c1:2f:7f:a4:de:3d:73:20:48:a8:41:c2:58:08:e6:8e: 43:5e:ef:8f:bd:5d:b7:cf:b5:c8:58:c9:08:5d:e7:f0:8f:24: e3:97:00:ae:9d:6c:63:54:c7:3b:4e:eb:b5:08:e5:09:ec:85: 32:79:1a:4a:5d:4c:04:9c:07:7d:8b:3a:63:80:8d:33:a5:a6: 92:4a:cf:00:f1:bb:53:61:79:00:eb:72:79:02:4c:e7:32:17: a0:64:94:42:4b:9d:47:88:50:27:fe:b2:d4:ac:05:70:88:8b: c6:3e:92:51:8d:02:72:78:1f:79:0d:ff:79:20:0f:49:d2:43: ed:a6:83:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav4/98BS6jomCyCcX9IumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjVlZDA0MGVmZTJlNTgxNzU0ZGViNWMzY2Q4MmQ5OWRm ZWU4ZDkwHhcNMjUxMjI2MTMwMTAyWhcNMjUxMjI3MTMwMTAyWjAzMTEwLwYDVQQD EygxNzE0OTk2YjNhMGM5MDUwZjUwYmQ4NWRmMGZmMThlMzUyNGIzMGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R1AVYbYhBtJMjGaKZb75TdArciF xNN5Kde1Yy7NF4WxKEZ6sUU+eqSKhbo55xZ8SO7BA+TDdxrdcF3XPK9oKGOFtghY hsXmHyG9Z+MLgfwnB8JVKAgW05cGOPNzNUVGLx1aGRFZrCJjcTsXl5eEQ7S4JmCj FHx7GDe8nILv3TZOPvF+54R6G/Tv7CtB81D1GHqjXG6wF7I7Hnf6EOQ9qbczMZDZ hIyZTdZ0lANmHTJuGLeTa4xiuvKkGuMMHad0HQlytOHT1TZOhE7N1XxYNDA7HBVM j6cJPLew9qwDTUKdMKICQm08oGG0+UbI8+QQg4SJjyDfrZMHsobF03QwzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcUmWs6DJBQ9QvYXfD/GONSSzD/MB8GA1UdIwQY MBaAFF317QQO/i5YF1TetcPNgtmd/ujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMt YmVmZTRiMzRjNmYwLzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iM2Q3NmYtNmVmOS00YzRhLTgxMmMtYmVmZTRiMzRjNmYw LzEvWGZYdEJBNy1MbGdYVk42MXc4MkMyWjMtNk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtXU4N1u UucEsoi99K9PXHimJp8BQR0wdXjQgC/ROoYFRM8kQaF8KD8B3XAj1ABo+/FqMY2h KUvGBFUCPcQBE9Vpu0s2trOD9ON/NQ+LaeSRzjmN1PDDq2gPQWS4bGNSc3schp36 7LhGdhtUvHCNglIqGUrM+BGYRUAi1wYfcDnBL3+k3j1zIEioQcJYCOaOQ17vj71d t8+1yFjJCF3n8I8k45cArp1sY1THO07rtQjlCeyFMnkaSl1MBJwHfYs6Y4CNM6Wm kkrPAPG7U2F5AOtyeQJM5zIXoGSUQkudR4hQJ/6y1KwFcIiLxj6SUY0CcngfeQ3/ eSAPSdJD7aaD+w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:58 2025 by rpki-client