This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json) Hash identifier: eJ2oi/MELI+Gou3/YTK+CPjPrW4RsNUtiaqTyjC4+/8= Subject key identifier: 2D:84:7F:0C:E4:FD:8B:8B:33:A5:4B:55:98:C4:C9:C1:2F:37:7A:E3 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B2219E4165DFBFD3D7618A7B2482B8193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft Manifest number: 148B Signing time: Mon 15 Dec 2025 13:01:20 +0000 Manifest this update: Mon 15 Dec 2025 13:01:20 +0000 Manifest next update: Tue 16 Dec 2025 13:01:20 +0000 Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: xJlug/m2e/TANuSkSCyeFESbHkIszw5uU+u8WDfgzd0=) 2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=) 3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=) 4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:e4:16:5d:fb:fd:3d:76:18:a7:b2:48:2b:81:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Dec 15 13:01:20 2025 GMT Not After : Dec 16 13:01:20 2025 GMT Subject: CN=2d847f0ce4fd8b8b33a54b5598c4c9c12f377ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:70:66:b1:2c:90:95:28:0d:1e:26:f9:dd:66: cc:37:3e:44:21:d4:61:0e:0b:71:7f:f5:4a:b3:77: 25:95:75:bf:84:50:fd:65:44:b9:67:b9:26:9b:c4: 0d:84:3b:76:c0:6f:69:09:ae:24:bc:6d:3a:16:06: 9c:47:b6:ac:e4:b2:10:70:42:dc:a1:8f:a0:7f:4c: cb:d3:29:63:44:15:98:65:da:f3:08:e4:1d:8b:85: d2:71:46:33:ed:a8:b7:05:5a:5d:58:1a:fb:41:c6: f8:ef:2e:26:20:6e:0b:71:39:3c:7d:f5:83:2a:50: f2:95:c5:01:ea:fc:2b:20:38:38:d0:ba:78:f6:92: cd:65:04:70:7b:c6:ac:1a:ec:f3:57:72:bb:f2:23: a9:36:2b:06:ff:f9:69:4b:e7:ef:4d:39:74:d3:00: 6e:76:9e:17:22:16:59:66:44:99:2c:e1:48:6f:d0: 96:84:f8:e7:29:55:de:23:70:13:b3:67:2b:a5:80: 59:68:28:74:59:8b:7e:fb:07:b0:44:e2:f3:a0:4a: c6:8f:7b:17:10:91:b9:e7:69:62:c3:2a:c3:d2:c5: ae:e4:84:35:da:71:64:7b:75:9b:8c:95:18:73:4a: 2b:1d:de:2a:69:dd:fe:eb:77:0a:a9:2a:fd:ff:fb: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:7F:0C:E4:FD:8B:8B:33:A5:4B:55:98:C4:C9:C1:2F:37:7A:E3 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:51:06:53:91:98:81:5c:05:4e:37:2e:61:b4:5f:30:2d: d7:62:d1:b8:ae:0c:f8:ad:6a:37:d6:4a:36:ef:07:75:8b:2a: 99:8c:d0:39:bf:69:14:6d:2a:6b:d5:2f:c4:8f:08:33:6c:e6: c8:06:77:4a:47:c4:84:92:1b:45:71:40:5a:77:0c:3b:0b:f4: 0d:71:94:a9:aa:d9:37:6c:f7:0c:f8:90:37:7b:09:1e:19:74: 2a:a3:fd:de:8d:d6:9f:e6:64:be:9f:bc:69:61:41:81:e0:39: 80:47:dc:be:1e:18:72:00:6d:7b:d4:35:6e:46:11:d1:c4:67: 81:e9:ed:f3:a8:a9:0e:ed:22:87:f0:99:4b:6c:ad:f8:60:65: b8:fb:4d:4c:dc:db:b3:b7:3d:4e:db:fc:45:71:be:bd:71:18: b9:e1:db:db:be:9d:41:9f:b5:a6:68:87:e6:00:72:59:3f:73: dc:7d:2c:16:03:86:a0:5d:80:a6:2d:a2:5e:86:c9:a0:fd:ea: 69:32:be:31:23:22:61:7f:a6:4f:9a:9b:3b:11:e7:db:ab:8f: 1b:76:62:b6:0a:47:29:27:09:c2:3c:30:4b:ef:6d:4e:42:bb: 4b:e9:d6:e7:bb:06:06:5d:51:bd:99:69:5c:ac:9c:2e:b8:0f: 4e:c7:58:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGeQWXfv9PXYYp7JIK4GTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjUxMjE1MTMwMTIwWhcNMjUxMjE2MTMwMTIwWjAzMTEwLwYDVQQD EygyZDg0N2YwY2U0ZmQ4YjhiMzNhNTRiNTU5OGM0YzljMTJmMzc3YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nBmsSyQlSgNHib53WbMNz5EIdRh Dgtxf/VKs3cllXW/hFD9ZUS5Z7kmm8QNhDt2wG9pCa4kvG06FgacR7as5LIQcELc oY+gf0zL0yljRBWYZdrzCOQdi4XScUYz7ai3BVpdWBr7Qcb47y4mIG4LcTk8ffWD KlDylcUB6vwrIDg40Lp49pLNZQRwe8asGuzzV3K78iOpNisG//lpS+fvTTl00wBu dp4XIhZZZkSZLOFIb9CWhPjnKVXeI3ATs2crpYBZaCh0WYt++wewROLzoErGj3sX EJG552liwyrD0sWu5IQ12nFke3WbjJUYc0orHd4qad3+63cKqSr9//v/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2Efwzk/YuLM6VLVZjEycEvN3rjMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo5RBlOR mIFcBU43LmG0XzAt12LRuK4M+K1qN9ZKNu8HdYsqmYzQOb9pFG0qa9UvxI8IM2zm yAZ3SkfEhJIbRXFAWncMOwv0DXGUqarZN2z3DPiQN3sJHhl0KqP93o3Wn+Zkvp+8 aWFBgeA5gEfcvh4YcgBte9Q1bkYR0cRngent86ipDu0ih/CZS2yt+GBluPtNTNzb s7c9Ttv8RXG+vXEYueHb276dQZ+1pmiH5gByWT9z3H0sFgOGoF2Api2iXobJoP3q aTK+MSMiYX+mT5qbOxHn26uPG3ZitgpHKScJwjwwS+9tTkK7S+nW57sGBl1RvZlp XKycLrgPTsdYpg== -----END CERTIFICATE-----Generated at Mon Dec 15 22:45:27 2025 by rpki-client