This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json) Hash identifier: AtiM2tPBjnLxIpi074aKf4gw0UDapoo+zTvYc5oNj8E= Subject key identifier: 1B:6E:FB:12:95:D7:77:AD:64:23:C3:D4:10:3C:7A:E0:01:FC:D8:EB Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Certificate serial: 019B0E2501CAAFB2F9A3C33473AC2BC3FF77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft Manifest number: 0E51 Signing time: Thu 11 Dec 2025 16:01:04 +0000 Manifest this update: Thu 11 Dec 2025 16:01:04 +0000 Manifest next update: Fri 12 Dec 2025 16:01:04 +0000 Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=) 2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=) 3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: 25U6bIE/z870R9K6uLOaR89cpvqfiAEqaqKAoO2B++I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:01:ca:af:b2:f9:a3:c3:34:73:ac:2b:c3:ff:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Validity Not Before: Dec 11 16:01:04 2025 GMT Not After : Dec 12 16:01:04 2025 GMT Subject: CN=1b6efb1295d777ad6423c3d4103c7ae001fcd8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:0f:1b:67:fc:8b:db:d2:c4:bf:16:ee:39: b6:19:5d:5a:ad:fd:4b:28:54:8b:09:8e:33:d6:a8: 5a:ea:e6:62:77:51:d2:9e:e7:e0:e8:25:5c:71:59: b8:82:4a:33:00:06:68:fb:f1:12:85:31:3b:28:30: 99:b8:92:eb:c4:d7:83:ed:20:a3:86:32:d6:c9:60: 5f:e5:4d:93:e6:ba:43:1e:5e:dd:39:a8:70:5e:cb: e7:99:77:3a:a0:22:64:17:50:c4:ec:2a:c6:55:4f: 7c:32:34:57:9e:35:2d:76:56:8e:4e:9a:66:06:88: c3:12:ed:1e:e4:e4:48:b4:82:ed:88:54:98:cc:3a: 8a:66:75:ca:d8:e7:59:2b:3d:03:c1:6a:26:83:ee: 06:b0:c9:39:98:73:4e:25:31:34:81:5e:7f:4a:9e: 46:ee:57:21:bf:5b:4c:47:68:9e:85:88:bb:c1:d0: 4c:c9:d0:78:91:a2:22:2f:74:e9:c3:4e:cc:11:ae: 67:90:50:35:cc:45:bd:ed:c7:69:6f:1c:98:28:e9: f7:3d:e3:02:83:9a:32:ad:64:88:b9:48:be:9b:b4: 48:9e:1b:58:40:41:96:ca:87:bc:34:18:51:68:cd: 9c:41:65:77:5b:2e:40:73:4b:cd:90:3b:cd:5a:26: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:FB:12:95:D7:77:AD:64:23:C3:D4:10:3C:7A:E0:01:FC:D8:EB X509v3 Authority Key Identifier: keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:bb:47:02:c5:83:35:ee:e8:20:ad:7c:d1:3c:9d:4e:8a:2d: 2d:19:d0:e2:61:fa:f9:27:0d:b2:e6:7e:35:00:19:28:5d:09: 05:d0:4d:4b:9c:6f:92:0d:2d:5e:4a:95:c0:b2:50:55:18:b1: 4a:e4:82:2e:9b:1d:9f:eb:b4:02:e8:9c:31:10:af:5b:2b:28: 69:f9:1d:3e:c0:78:db:b7:4c:f0:0e:92:29:97:6c:e6:47:d5: 12:fa:d1:a9:fa:3b:db:68:99:dc:9a:d8:75:15:a7:27:03:79: ec:4e:59:ad:35:38:c1:4d:ed:cc:8e:71:49:72:1a:c3:9b:6d: d1:eb:96:03:8b:bb:24:65:69:86:1f:76:a0:83:fc:c2:9e:93: 8e:fa:c8:70:2b:ed:27:5e:7d:a6:26:f3:13:31:36:40:af:98: ec:e7:0f:33:2a:03:8a:5e:53:9c:24:55:65:5f:27:cd:9b:83: de:6e:c5:93:bf:84:ea:c7:bc:7f:ac:a0:99:d6:ba:08:de:21: a4:ad:7c:3c:a2:a0:9d:77:a7:8f:5f:ce:62:81:43:0c:9e:81: 5e:5f:3c:44:bc:d8:2e:e1:20:90:54:60:8b:57:2a:4a:fb:79: 3e:ef:a2:71:2e:9e:cc:97:32:86:55:04:cd:45:84:03:c4:55: a0:67:54:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJQHKr7L5o8M0c6wrw/93MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDk5ZDQ5YzRiMGU0NmIyNzg2ODQyNzMxZTE1MzQ4NWM4 YWM0OGIwHhcNMjUxMjExMTYwMTA0WhcNMjUxMjEyMTYwMTA0WjAzMTEwLwYDVQQD EygxYjZlZmIxMjk1ZDc3N2FkNjQyM2MzZDQxMDNjN2FlMDAxZmNkOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqcPG2f8i9vSxL8W7jm2GV1arf1L KFSLCY4z1qha6uZid1HSnufg6CVccVm4gkozAAZo+/EShTE7KDCZuJLrxNeD7SCj hjLWyWBf5U2T5rpDHl7dOahwXsvnmXc6oCJkF1DE7CrGVU98MjRXnjUtdlaOTppm BojDEu0e5ORItILtiFSYzDqKZnXK2OdZKz0DwWomg+4GsMk5mHNOJTE0gV5/Sp5G 7lchv1tMR2iehYi7wdBMydB4kaIiL3Tpw07MEa5nkFA1zEW97cdpbxyYKOn3PeMC g5oyrWSIuUi+m7RInhtYQEGWyoe8NBhRaM2cQWV3Wy5Ac0vNkDvNWiYZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtu+xKV13etZCPD1BA8euAB/NjrMB8GA1UdIwQY MBaAFF7ZnUnEsORrJ4aEJzHhU0hcisSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEt OTBjM2FmYzdjOTQ3LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEtOTBjM2FmYzdjOTQ3 LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAObtHAsWD Ne7oIK180TydTootLRnQ4mH6+ScNsuZ+NQAZKF0JBdBNS5xvkg0tXkqVwLJQVRix SuSCLpsdn+u0AuicMRCvWysoafkdPsB427dM8A6SKZds5kfVEvrRqfo722iZ3JrY dRWnJwN57E5ZrTU4wU3tzI5xSXIaw5tt0euWA4u7JGVphh92oIP8wp6TjvrIcCvt J159pibzEzE2QK+Y7OcPMyoDil5TnCRVZV8nzZuD3m7Fk7+E6se8f6ygmda6CN4h pK18PKKgnXenj1/OYoFDDJ6BXl88RLzYLuEgkFRgi1cqSvt5Pu+icS6ezJcyhlUE zUWEA8RVoGdU9Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:37 2025 by rpki-client