This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json) Hash identifier: jq2KFmzvXHowBh7vugMhZv+bNyihm1aBIAxALyF9GZo= Subject key identifier: 13:2A:D0:E5:EF:8E:03:A9:A6:05:3E:6A:FE:C1:99:44:94:BD:65:8E Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Certificate serial: 019B34C59E1F06AABBDB06EDFACDAF04752B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft Manifest number: 06D4 Signing time: Fri 19 Dec 2025 04:02:04 +0000 Manifest this update: Fri 19 Dec 2025 04:02:04 +0000 Manifest next update: Sat 20 Dec 2025 04:02:04 +0000 Files and hashes: 1: NfD0bu6CTOHFOwKX83vXlWW-BFM.roa (hash: E6orvDZyM/U63REesg6yOGTM6Hs+Hh2EKGVP0jWzDOg=) 2: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: fIsJX+aD183QkUTBnJTPgVs+UbNXVTFf2v45VvlSP64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:9e:1f:06:aa:bb:db:06:ed:fa:cd:af:04:75:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1 Validity Not Before: Dec 19 04:02:04 2025 GMT Not After : Dec 20 04:02:04 2025 GMT Subject: CN=132ad0e5ef8e03a9a6053e6afec1994494bd658e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:0b:68:e2:76:eb:1f:30:96:88:cc:db:fc: 02:82:35:85:40:75:55:cf:4a:be:ad:43:2c:6b:c2: d0:2f:8c:3e:42:f0:43:f0:f2:6c:d3:d2:49:e3:2a: 42:14:c9:b6:10:28:0e:49:55:3e:6f:86:4e:48:fa: be:57:53:12:27:fc:17:cf:03:d7:55:9b:52:01:f6: 6b:a9:2f:d6:bc:34:6c:a5:34:5f:b9:63:9d:e8:fc: 96:03:b2:8a:11:be:28:23:55:69:05:31:09:ee:93: 4a:ba:ee:b8:70:69:af:20:68:2d:36:3b:66:a0:bf: a1:e6:88:c8:d7:a1:b9:52:ce:ec:fa:ef:dc:17:89: ee:1b:c0:18:7c:9a:fc:e5:ab:e8:5f:83:0d:76:85: 27:bf:ce:8d:59:04:58:84:31:21:31:d3:e9:f9:f8: b2:a7:1f:ae:0b:99:2f:0f:8b:b5:77:6d:19:47:bd: 48:e4:46:1e:f4:f4:07:6c:32:32:b2:25:bc:41:33: b2:2a:8c:a9:d7:28:03:52:c5:dd:6b:83:aa:fe:8b: c0:bf:72:b4:e4:d3:48:a6:cf:c6:06:cf:d8:8d:0d: a4:3a:07:9a:79:6a:59:d4:77:44:d3:bd:21:89:44: 10:3a:70:33:2a:4c:7e:f1:10:35:47:4c:b6:83:cf: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2A:D0:E5:EF:8E:03:A9:A6:05:3E:6A:FE:C1:99:44:94:BD:65:8E X509v3 Authority Key Identifier: keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a0:1c:a1:77:1d:43:3e:de:c1:a2:3b:61:a3:a3:3d:5c:3b: 17:23:d4:de:0d:2a:93:07:6c:d3:33:b5:05:46:fa:47:4c:67: e5:15:4a:4f:57:c4:bb:9a:6d:5b:56:1c:12:eb:e8:60:16:da: a7:8e:59:f6:81:4b:b5:6c:ca:30:d4:1b:b1:1f:b6:a7:61:bb: 28:2d:1e:27:8e:5b:04:c3:48:a4:8f:c4:17:d3:07:74:9b:44: 5a:e7:00:9c:c7:1f:fd:06:8f:5e:54:0a:0f:3a:d6:e9:ec:60: 32:83:d2:ff:cc:a8:6a:d4:ee:92:d7:30:3a:75:9f:15:bc:71: 56:06:21:d6:a9:f2:91:9d:45:cc:7c:a9:cf:9c:68:b6:09:0e: 19:15:4b:32:02:56:c7:77:05:5a:9e:bc:9d:1c:fa:0d:90:f3: 93:5f:7e:5f:dd:59:a5:a2:6c:7e:f4:fb:8e:2b:26:ff:66:da: 40:9e:e8:7c:5c:e2:93:4b:b9:e4:65:99:c6:7e:0a:ed:1d:8c: 5a:50:f8:0f:8e:fa:c0:00:26:1e:7c:c8:df:52:52:ba:da:5b: 8f:e5:d1:51:30:06:8e:12:56:a0:83:76:1f:85:b1:f2:49:34: bc:34:d5:0c:73:bd:13:6c:fb:9c:0d:40:91:0a:ef:61:77:89: 80:40:4e:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZ4fBqq72wbt+s2vBHUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjMxN2Y2OTM2ZTZiNTc4YjM4YzNkZmIxOTgwMjU0OThm Y2FlYTEwHhcNMjUxMjE5MDQwMjA0WhcNMjUxMjIwMDQwMjA0WjAzMTEwLwYDVQQD EygxMzJhZDBlNWVmOGUwM2E5YTYwNTNlNmFmZWMxOTk0NDk0YmQ2NThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pkLaOJ26x8wlojM2/wCgjWFQHVV z0q+rUMsa8LQL4w+QvBD8PJs09JJ4ypCFMm2ECgOSVU+b4ZOSPq+V1MSJ/wXzwPX VZtSAfZrqS/WvDRspTRfuWOd6PyWA7KKEb4oI1VpBTEJ7pNKuu64cGmvIGgtNjtm oL+h5ojI16G5Us7s+u/cF4nuG8AYfJr85avoX4MNdoUnv86NWQRYhDEhMdPp+fiy px+uC5kvD4u1d20ZR71I5EYe9PQHbDIysiW8QTOyKoyp1ygDUsXda4Oq/ovAv3K0 5NNIps/GBs/YjQ2kOgeaeWpZ1HdE070hiUQQOnAzKkx+8RA1R0y2g8+N3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMq0OXvjgOppgU+av7BmUSUvWWOMB8GA1UdIwQY MBaAFF1jF/aTbmtXizjD37GYAlSY/K6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAt ZDU2NThkMGYzMjkyLzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8wMzQ5MGMtZWE0Ny00MDJhLThiYjAtZDU2NThkMGYzMjky LzEvWFdNWDlwTnVhMWVMT01QZnNaZ0NWSmo4cnFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqAcoXcd Qz7ewaI7YaOjPVw7FyPU3g0qkwds0zO1BUb6R0xn5RVKT1fEu5ptW1YcEuvoYBba p45Z9oFLtWzKMNQbsR+2p2G7KC0eJ45bBMNIpI/EF9MHdJtEWucAnMcf/QaPXlQK DzrW6exgMoPS/8yoatTuktcwOnWfFbxxVgYh1qnykZ1FzHypz5xotgkOGRVLMgJW x3cFWp68nRz6DZDzk19+X91ZpaJsfvT7jism/2baQJ7ofFzik0u55GWZxn4K7R2M WlD4D476wAAmHnzI31JSutpbj+XRUTAGjhJWoIN2H4Wx8kk0vDTVDHO9E2z7nA1A kQrvYXeJgEBOIA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:03:25 2025 by rpki-client