This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft File: xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft (raw, json) Hash identifier: CR2bLAiMJ5hVsB6qP2XE1WZAb6PCh/GY9Oo8BABMwKk= Subject key identifier: 14:2A:5A:7D:52:D6:AC:33:E0:F1:35:D2:B5:07:8E:1D:59:56:57:E8 Authority key identifier: C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B Certificate issuer: /CN=c59c41daf0092b703bc059ba1353f071ed12199b Certificate serial: 019B397DB1ACD146847829482B272AD4DCDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 02:01:37 +0000 Manifest this update: Sat 20 Dec 2025 02:01:37 +0000 Manifest next update: Sun 21 Dec 2025 02:01:37 +0000 Files and hashes: 1: cGueQe1h8duehogXBQfbjMf187c.roa (hash: SeygR9MEl7TBvHViQ7GiY7qErcMbLwgXcJ9lbMPWx3c=) 2: xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl (hash: AA9kNj3tWn/3Y0vORNbewO+SzViiP0b+/H5UX4oIrXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:b1:ac:d1:46:84:78:29:48:2b:27:2a:d4:dc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59c41daf0092b703bc059ba1353f071ed12199b Validity Not Before: Dec 20 02:01:37 2025 GMT Not After : Dec 21 02:01:37 2025 GMT Subject: CN=142a5a7d52d6ac33e0f135d2b5078e1d595657e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:2a:83:35:83:ee:47:fd:e1:d2:89:aa:56: 43:12:73:df:34:e6:33:b4:d1:5a:5e:6b:ac:50:0e: ad:b4:87:ce:82:e7:b4:1c:6c:f9:fa:dd:e8:68:20: 4d:0d:5b:90:dd:20:44:b4:f6:0b:b5:be:28:70:c2: 1d:3b:21:33:41:fc:f6:ab:d0:51:00:67:59:64:80: 10:63:db:5c:0a:c5:db:f2:13:30:6f:b6:07:3d:67: 47:42:a0:f1:92:11:f7:42:fa:52:78:3f:8f:e8:57: 53:de:3d:f7:cd:52:85:01:9d:6d:db:a3:d8:9e:c1: a0:26:8f:18:d1:d5:16:b0:8b:2c:dd:4b:46:3e:54: fa:39:e2:a0:6c:2e:cd:12:6c:e9:a0:de:5c:7a:60: 99:36:8c:1b:4b:62:1c:39:12:30:9b:7a:1a:20:48: 4e:ef:4a:a9:ea:c4:f6:d3:e7:bd:07:30:13:e5:96: c7:d8:82:78:cc:c1:84:a5:95:cd:90:3e:17:c0:51: 8a:4c:7e:69:92:42:89:31:63:23:53:1c:9e:88:34: 90:20:4e:c3:01:19:c7:7c:5f:8f:d8:1a:6d:0c:37: 34:b8:89:1b:48:68:2d:f9:4b:8a:1a:01:ea:e9:e2: f7:1e:b4:2d:3b:f6:39:43:25:d3:77:90:2a:fe:63: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:5A:7D:52:D6:AC:33:E0:F1:35:D2:B5:07:8E:1D:59:56:57:E8 X509v3 Authority Key Identifier: keyid:C5:9C:41:DA:F0:09:2B:70:3B:C0:59:BA:13:53:F0:71:ED:12:19:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZxB2vAJK3A7wFm6E1Pwce0SGZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d54d2b-2126-4542-a5e4-c5493fe82e26/1/xZxB2vAJK3A7wFm6E1Pwce0SGZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b3:81:6f:57:63:77:bd:5a:56:82:20:fd:1c:ea:5e:36:e2: 17:8d:b9:e0:10:05:70:bf:c2:d4:13:56:ff:e0:b2:f0:b0:cf: 19:e8:fd:0f:60:37:46:cb:17:f9:fc:3c:0b:d0:8a:48:57:e0: 7e:c5:95:54:5b:1e:9c:0b:25:38:ad:68:70:e4:13:32:f3:a1: d1:c1:29:00:7c:e8:9d:54:14:90:42:3a:32:0f:19:71:30:57: eb:c1:d0:1c:9d:6f:7b:11:e9:59:a3:aa:a4:91:ea:ab:70:69: 02:3f:2a:12:5f:83:8a:80:21:8a:53:27:73:0d:9c:5b:1f:85: 75:13:42:51:b4:b9:79:6e:ad:e3:c6:09:44:93:6b:22:7a:2a: 39:fd:d8:12:76:41:54:b9:94:e4:87:c1:41:bf:82:f1:a0:d3: c1:aa:85:98:ca:26:d0:54:bc:3c:4a:0e:77:9b:10:24:f1:17: 3b:06:8b:cf:a6:5e:95:62:b2:80:24:02:f7:f2:53:63:77:65: cb:61:e3:a1:17:eb:e2:2a:2a:8c:7a:4a:a5:39:6a:2e:6a:41: 1f:29:47:97:86:06:69:96:fe:bb:55:28:ee:dd:9d:a7:c4:fb: 4d:21:c5:f3:ce:9c:20:aa:b6:d4:41:6a:a6:fd:60:4c:5c:d7: 66:89:57:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fbGs0UaEeClIKycq1NzaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWM0MWRhZjAwOTJiNzAzYmMwNTliYTEzNTNmMDcxZWQx MjE5OWIwHhcNMjUxMjIwMDIwMTM3WhcNMjUxMjIxMDIwMTM3WjAzMTEwLwYDVQQD EygxNDJhNWE3ZDUyZDZhYzMzZTBmMTM1ZDJiNTA3OGUxZDU5NTY1N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApywqgzWD7kf94dKJqlZDEnPfNOYz tNFaXmusUA6ttIfOgue0HGz5+t3oaCBNDVuQ3SBEtPYLtb4ocMIdOyEzQfz2q9BR AGdZZIAQY9tcCsXb8hMwb7YHPWdHQqDxkhH3QvpSeD+P6FdT3j33zVKFAZ1t26PY nsGgJo8Y0dUWsIss3UtGPlT6OeKgbC7NEmzpoN5cemCZNowbS2IcORIwm3oaIEhO 70qp6sT20+e9BzAT5ZbH2IJ4zMGEpZXNkD4XwFGKTH5pkkKJMWMjUxyeiDSQIE7D ARnHfF+P2BptDDc0uIkbSGgt+UuKGgHq6eL3HrQtO/Y5QyXTd5Aq/mPx2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQqWn1S1qwz4PE10rUHjh1ZVlfoMB8GA1UdIwQY MBaAFMWcQdrwCStwO8BZuhNT8HHtEhmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQt YzU0OTNmZTgyZTI2LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kNTRkMmItMjEyNi00NTQyLWE1ZTQtYzU0OTNmZTgyZTI2 LzEveFp4QjJ2QUpLM0E3d0ZtNkUxUHdjZTBTR1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbOBb1dj d71aVoIg/RzqXjbiF4254BAFcL/C1BNW/+Cy8LDPGej9D2A3RssX+fw8C9CKSFfg fsWVVFsenAslOK1ocOQTMvOh0cEpAHzonVQUkEI6Mg8ZcTBX68HQHJ1vexHpWaOq pJHqq3BpAj8qEl+DioAhilMncw2cWx+FdRNCUbS5eW6t48YJRJNrInoqOf3YEnZB VLmU5IfBQb+C8aDTwaqFmMom0FS8PEoOd5sQJPEXOwaLz6ZelWKygCQC9/JTY3dl y2HjoRfr4ioqjHpKpTlqLmpBHylHl4YGaZb+u1Uo7t2dp8T7TSHF886cIKq21EFq pv1gTFzXZolXew== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:58 2025 by rpki-client