This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: B5Ci+go6u6gdonWsxHW6HUoEA4mguAzc1gDz9s4TSWw= Subject key identifier: 23:3D:CC:69:B7:3E:F7:97:43:D8:AD:12:69:0A:89:75:4B:06:B8:9A Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019B0FA54B3D1F6D7882B4E0262A1E7F5381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 033F Signing time: Thu 11 Dec 2025 23:00:49 +0000 Manifest this update: Thu 11 Dec 2025 23:00:49 +0000 Manifest next update: Fri 12 Dec 2025 23:00:49 +0000 Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: 9UvvMvVpoL74npxQLlaQ4STJja5VaXNal1u+9NHyi9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:4b:3d:1f:6d:78:82:b4:e0:26:2a:1e:7f:53:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Dec 11 23:00:49 2025 GMT Not After : Dec 12 23:00:49 2025 GMT Subject: CN=233dcc69b73ef79743d8ad12690a89754b06b89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b7:3e:eb:f8:3a:74:1f:e4:87:35:ed:8f:01: 0b:42:a5:5c:5b:a6:93:82:e3:aa:58:4a:14:6f:77: 70:8c:96:f3:1e:9f:d6:2f:41:89:f5:64:93:bc:54: 40:c4:75:52:1b:95:b2:7e:7a:1c:fe:a4:cb:a1:59: 0e:7a:4c:df:79:d4:f3:54:24:50:9f:1c:34:f2:45: cf:f3:9f:28:89:43:9a:56:4f:af:86:72:cc:23:63: 8e:0f:ab:b0:59:29:db:5c:13:f6:37:f8:f9:8e:c8: 3c:93:8d:ff:31:3d:71:de:5d:44:2a:1f:1d:d2:1e: 02:74:7d:22:7c:6a:3d:75:00:ac:77:bd:cd:85:bc: 54:3c:34:1f:1d:87:27:75:d4:e9:49:f3:b9:3c:8e: 88:8e:b2:84:bb:df:02:f1:22:d3:10:d1:87:d5:92: 6d:0c:83:2a:2a:5f:4c:53:89:7a:0a:71:af:ca:a2: 37:e5:d4:df:3f:83:53:09:50:59:48:67:f4:1d:a9: 8a:c9:b6:08:8e:5a:33:9f:78:09:7b:18:21:09:07: a2:2c:be:0f:26:e2:30:f5:b7:23:3c:0b:2b:29:c5: 41:14:42:f7:33:22:a1:04:ab:fc:20:4a:18:d8:63: 99:5e:6e:8b:dd:77:a4:29:3b:74:b2:14:17:28:aa: 52:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3D:CC:69:B7:3E:F7:97:43:D8:AD:12:69:0A:89:75:4B:06:B8:9A X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:16:7d:5d:d1:38:65:33:5c:94:fc:3d:00:6c:b0:00:7a:95: d6:97:57:63:d8:2b:4c:84:f3:48:81:fa:c1:b7:45:f5:25:69: 88:62:24:45:6d:58:00:a3:0d:a4:ce:ef:83:70:66:9e:76:25: 7c:ea:3f:58:87:86:fb:52:29:5a:db:5a:be:5c:99:98:94:a2: b0:2f:dc:19:cb:e1:3a:30:53:5d:44:72:c8:89:2e:8e:94:8b: 2c:7b:e4:bb:64:03:0c:16:f5:df:da:60:cb:28:d9:c6:ab:39: 17:0e:02:ea:34:58:40:73:5b:64:7f:0b:75:e4:d9:a9:17:c9: 30:75:02:b0:e4:d2:f7:24:1d:39:59:e6:08:fa:71:55:05:1b: 48:fb:89:65:35:6e:2b:ce:90:86:b3:7c:cb:2a:0f:b2:01:a9: 76:43:40:7f:f1:33:04:2e:3c:40:c3:21:b6:ec:97:fa:d4:d7: 5c:c6:45:a1:f0:fc:1c:12:bc:7d:72:bf:a7:fb:9e:1d:77:ea: 15:df:20:d3:0f:6e:17:dd:47:ec:07:fc:9a:56:4d:26:65:44: 18:39:e9:41:4d:f3:8b:5d:ad:87:bb:ba:ca:33:75:32:a9:90: f6:ae:5d:39:d8:67:f9:82:de:5e:39:cd:de:7e:a2:53:9d:bf: d3:12:5b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUs9H214grTgJioef1OBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjUxMjExMjMwMDQ5WhcNMjUxMjEyMjMwMDQ5WjAzMTEwLwYDVQQD EygyMzNkY2M2OWI3M2VmNzk3NDNkOGFkMTI2OTBhODk3NTRiMDZiODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7c+6/g6dB/khzXtjwELQqVcW6aT guOqWEoUb3dwjJbzHp/WL0GJ9WSTvFRAxHVSG5Wyfnoc/qTLoVkOekzfedTzVCRQ nxw08kXP858oiUOaVk+vhnLMI2OOD6uwWSnbXBP2N/j5jsg8k43/MT1x3l1EKh8d 0h4CdH0ifGo9dQCsd73NhbxUPDQfHYcnddTpSfO5PI6IjrKEu98C8SLTENGH1ZJt DIMqKl9MU4l6CnGvyqI35dTfP4NTCVBZSGf0HamKybYIjlozn3gJexghCQeiLL4P JuIw9bcjPAsrKcVBFEL3MyKhBKv8IEoY2GOZXm6L3XekKTt0shQXKKpSRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCM9zGm3PveXQ9itEmkKiXVLBriaMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsRZ9XdE4 ZTNclPw9AGywAHqV1pdXY9grTITzSIH6wbdF9SVpiGIkRW1YAKMNpM7vg3BmnnYl fOo/WIeG+1IpWttavlyZmJSisC/cGcvhOjBTXURyyIkujpSLLHvku2QDDBb139pg yyjZxqs5Fw4C6jRYQHNbZH8LdeTZqRfJMHUCsOTS9yQdOVnmCPpxVQUbSPuJZTVu K86QhrN8yyoPsgGpdkNAf/EzBC48QMMhtuyX+tTXXMZFofD8HBK8fXK/p/ueHXfq Fd8g0w9uF91H7Af8mlZNJmVEGDnpQU3zi12th7u6yjN1MqmQ9q5dOdhn+YLeXjnN 3n6iU52/0xJbHg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:01 2025 by rpki-client