This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft File: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft (raw, json) Hash identifier: H9kW7iOEOn9Sb/6WQjNwu3YzqFuB9ggYzm665Mk8iWw= Subject key identifier: 93:10:01:DF:A4:7B:B9:59:45:29:20:A6:32:1B:0C:B6:1F:60:1A:15 Authority key identifier: 5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5 Certificate issuer: /CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5 Certificate serial: 019B5A1B1AD331F8C14FF20769D89B96E604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft Manifest number: 0EBF Signing time: Fri 26 Dec 2025 10:01:24 +0000 Manifest this update: Fri 26 Dec 2025 10:01:24 +0000 Manifest next update: Sat 27 Dec 2025 10:01:24 +0000 Files and hashes: 1: FjrlAXrbDvDS2HfDrOYX8s6VeoI.roa (hash: rrLNQtMJaYm4qKAUxLrF7WkgOLeuL0rvTXSBW6y9Fvw=) 2: X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl (hash: l1DUGYtdKGdgkClliNTqhLEbgLsZSE9iksybqU4Ld8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1a:d3:31:f8:c1:4f:f2:07:69:d8:9b:96:e6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f45b134c091410e31423eac2ccad0aedb8a6ec5 Validity Not Before: Dec 26 10:01:24 2025 GMT Not After : Dec 27 10:01:24 2025 GMT Subject: CN=931001dfa47bb959452920a6321b0cb61f601a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:73:b3:a5:c4:2b:7d:58:9b:e8:b2:91:89: 8c:95:4c:fb:f3:57:e7:a6:22:a6:8b:c6:79:23:05: eb:6f:5c:41:09:aa:8f:64:53:6d:a9:b1:60:1e:b2: ea:c7:e8:16:32:b1:59:ee:4e:1f:d9:70:63:f5:07: 47:23:c8:dc:71:a9:02:4e:5a:d1:db:6d:38:42:b7: cf:fe:07:b6:29:c4:d4:39:54:f6:30:c8:0b:e4:59: b5:1f:2d:3d:8e:f7:0d:46:a5:1c:b0:0f:7d:a5:ba: 79:c6:4b:2f:20:0b:7c:fe:87:22:49:cd:e8:3a:d7: 53:53:c2:c3:ad:9f:32:5e:ff:3c:cc:64:cf:91:f7: bc:e8:12:6f:4c:94:30:6a:91:c4:69:a0:87:08:62: 36:a8:90:68:4b:da:31:27:21:86:d8:57:01:25:85: a8:4d:76:fe:41:4c:71:54:da:9e:dc:91:c9:ff:d6: 16:0f:55:58:e4:fa:da:1a:fa:c0:10:01:9b:ff:58: f5:59:ad:ea:56:12:74:bf:d2:46:20:89:f3:a8:d8: fd:06:2d:2a:d4:a7:3f:ea:14:c4:9e:8d:bd:d7:f9: 7b:ae:3a:53:56:f6:05:75:d1:3b:c5:43:5c:e4:d6: 1c:18:97:21:85:7e:e1:91:1a:fb:62:c5:05:77:ba: 00:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:10:01:DF:A4:7B:B9:59:45:29:20:A6:32:1B:0C:B6:1F:60:1A:15 X509v3 Authority Key Identifier: keyid:5F:45:B1:34:C0:91:41:0E:31:42:3E:AC:2C:CA:D0:AE:DB:8A:6E:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1bd1be-cdde-45ae-a124-a7bd83a8f56c/1/X0WxNMCRQQ4xQj6sLMrQrtuKbsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:55:59:25:0f:12:e8:3e:43:61:87:15:a0:61:31:af:60:ef: 41:c4:47:7c:9a:7d:5b:a3:80:a7:97:11:fc:97:a9:66:70:2b: ee:9b:e1:3c:5d:35:e4:39:da:a3:67:dc:c0:41:b0:4a:ac:03: ce:38:66:58:4f:fc:f0:88:7b:11:e5:50:e7:47:61:82:03:ea: 0d:e0:de:b4:7a:fc:23:c3:84:98:1b:cc:ba:f0:e1:68:fe:75: 4d:c2:7e:ff:8d:50:34:39:65:7b:47:8d:5e:34:5a:60:96:ad: 43:78:1e:40:f0:f3:e1:85:70:82:e8:b7:01:0a:b7:ab:80:bb: 12:fd:98:37:ea:81:09:0d:76:2b:75:09:95:33:ee:28:c6:b5: 9b:6a:7f:59:93:cb:92:c9:9d:ae:f5:50:0d:71:01:fd:73:04: 57:b8:22:a5:a1:46:d4:69:e8:e1:79:e2:38:fc:9e:be:99:78: 11:01:17:01:33:7c:6f:e6:78:35:74:78:23:19:62:de:11:31: 46:b5:1e:85:79:bd:8a:c5:77:ed:ca:04:93:69:89:ae:0c:78: 22:e7:11:cb:05:4f:26:e4:6b:e5:88:f8:ca:17:3a:e1:9f:dc: 1a:90:b3:82:24:6a:8a:ed:3d:20:e0:fc:93:96:ae:c2:80:6a: fa:74:af:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxrTMfjBT/IHadibluYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDViMTM0YzA5MTQxMGUzMTQyM2VhYzJjY2FkMGFlZGI4 YTZlYzUwHhcNMjUxMjI2MTAwMTI0WhcNMjUxMjI3MTAwMTI0WjAzMTEwLwYDVQQD Eyg5MzEwMDFkZmE0N2JiOTU5NDUyOTIwYTYzMjFiMGNiNjFmNjAxYTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF1zs6XEK31Ym+iykYmMlUz781fn piKmi8Z5IwXrb1xBCaqPZFNtqbFgHrLqx+gWMrFZ7k4f2XBj9QdHI8jccakCTlrR 2204QrfP/ge2KcTUOVT2MMgL5Fm1Hy09jvcNRqUcsA99pbp5xksvIAt8/ociSc3o OtdTU8LDrZ8yXv88zGTPkfe86BJvTJQwapHEaaCHCGI2qJBoS9oxJyGG2FcBJYWo TXb+QUxxVNqe3JHJ/9YWD1VY5PraGvrAEAGb/1j1Wa3qVhJ0v9JGIInzqNj9Bi0q 1Kc/6hTEno291/l7rjpTVvYFddE7xUNc5NYcGJchhX7hkRr7YsUFd7oA8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMQAd+ke7lZRSkgpjIbDLYfYBoVMB8GA1UdIwQY MBaAFF9FsTTAkUEOMUI+rCzK0K7bim7FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQt YTdiZDgzYThmNTZjLzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8xYmQxYmUtY2RkZS00NWFlLWExMjQtYTdiZDgzYThmNTZj LzEvWDBXeE5NQ1JRUTR4UWo2c0xNclFydHVLYnNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFVZJQ8S 6D5DYYcVoGExr2DvQcRHfJp9W6OAp5cR/JepZnAr7pvhPF015Dnao2fcwEGwSqwD zjhmWE/88Ih7EeVQ50dhggPqDeDetHr8I8OEmBvMuvDhaP51TcJ+/41QNDlle0eN XjRaYJatQ3geQPDz4YVwgui3AQq3q4C7Ev2YN+qBCQ12K3UJlTPuKMa1m2p/WZPL ksmdrvVQDXEB/XMEV7gipaFG1Gno4XniOPyevpl4EQEXATN8b+Z4NXR4Ixli3hEx RrUehXm9isV37coEk2mJrgx4IucRywVPJuRr5Yj4yhc64Z/cGpCzgiRqiu09IOD8 k5auwoBq+nSv3A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:21 2025 by rpki-client