This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json) Hash identifier: n6cR08cET8tMECc5/3dXXMMecKl1geFew4J/4AgLsak= Subject key identifier: 14:9F:ED:92:17:AA:6F:D9:89:A0:63:37:41:85:32:4F:7A:5D:5D:FE Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb Certificate serial: 019B58D16D49DCF7A6C48F079D81FCF31691 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 04:01:18 +0000 Manifest this update: Fri 26 Dec 2025 04:01:18 +0000 Manifest next update: Sat 27 Dec 2025 04:01:18 +0000 Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=) 2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: qlsDHYYv70HfKtKzSc5xEc9mfo7t3NErPZWgxuHTU20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:6d:49:dc:f7:a6:c4:8f:07:9d:81:fc:f3:16:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb Validity Not Before: Dec 26 04:01:18 2025 GMT Not After : Dec 27 04:01:18 2025 GMT Subject: CN=149fed9217aa6fd989a063374185324f7a5d5dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:95:90:34:c1:0c:56:54:b9:10:bb:b8:61: cf:7d:ef:dc:e5:a6:41:55:7a:54:57:0c:98:3f:99: 6d:6f:5f:9f:a5:d4:88:86:11:e2:ca:d4:66:d6:cf: 8f:5a:e6:9c:4d:26:1d:16:0f:38:34:0f:a5:8d:4f: 84:ee:39:47:16:b2:8d:a5:e1:90:75:c8:da:49:e8: a6:95:5d:09:25:fa:a0:ae:f9:7b:3c:7f:0c:07:c8: 13:c2:33:b4:84:57:f0:48:35:4c:5f:4e:48:11:1d: 04:ea:5f:da:a9:2f:e4:ee:0c:ad:30:23:cf:34:11: ae:4b:a2:52:12:10:6f:fe:d5:11:9c:f9:f8:a8:8c: be:3d:d0:4a:90:f7:02:a5:e1:73:27:d0:98:e3:06: 32:2d:85:56:8b:89:76:2d:a0:11:4f:11:b1:d6:c2: ac:d1:f6:ba:5b:75:39:20:1d:5a:65:98:37:46:bc: 42:49:96:26:2e:b8:1d:7b:5a:53:e7:28:42:ef:54: c0:c0:7d:16:01:df:ca:c1:3e:3e:ce:d2:7f:99:92: b0:76:0a:5d:f8:0e:a9:14:ba:92:59:bc:85:54:61: da:2b:02:cf:56:d4:10:63:1c:b7:56:5c:a0:37:de: b3:89:b0:a7:07:2f:6c:cc:a6:b0:4f:e3:d6:2a:79: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9F:ED:92:17:AA:6F:D9:89:A0:63:37:41:85:32:4F:7A:5D:5D:FE X509v3 Authority Key Identifier: keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:c9:fb:2d:b2:3c:c7:7e:06:ba:4c:cc:39:e6:7a:51:d5: c0:96:f5:6d:96:4a:5d:41:51:84:1e:24:1d:a8:f1:0b:7d:2b: aa:b4:a9:d3:cd:cf:23:e3:59:d9:08:a3:fe:a4:d9:96:89:b4: 01:e2:a5:6b:44:d2:92:74:20:33:c2:a1:43:70:1b:01:a2:82: 7d:fb:db:97:c9:e9:b8:14:6f:c5:17:30:bc:67:c1:66:64:b7: 31:01:ab:ed:eb:f6:79:d6:cc:90:7d:6c:e2:3a:a9:93:a2:ce: ca:e0:5e:d4:21:97:33:1b:77:8b:6d:61:49:ff:b9:bb:73:61: 94:1c:f0:bf:5f:58:4e:3d:98:07:45:8c:b3:5c:86:49:3b:18: 85:ef:b3:34:6b:23:fd:25:fa:26:4a:01:2b:a3:d0:b6:93:a4: e9:96:5d:31:95:98:c8:11:32:6d:22:87:42:46:9b:9a:1a:fc: 3b:ed:9e:25:ec:d3:91:ec:46:03:76:81:d0:a2:be:96:be:af: df:61:a6:16:e3:91:e5:c6:01:96:7c:2a:5c:44:fe:0b:1e:a0: 81:e5:c7:e3:0e:25:13:45:e8:42:64:d3:d8:0e:23:b4:2c:79: 17:2b:9c:8d:87:cf:c5:07:3d:d1:e6:97:d5:2c:f4:33:f7:56: 66:40:09:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0W1J3PemxI8HnYH88xaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1 NzQ2Y2IwHhcNMjUxMjI2MDQwMTE4WhcNMjUxMjI3MDQwMTE4WjAzMTEwLwYDVQQD EygxNDlmZWQ5MjE3YWE2ZmQ5ODlhMDYzMzc0MTg1MzI0ZjdhNWQ1ZGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0CVkDTBDFZUuRC7uGHPfe/c5aZB VXpUVwyYP5ltb1+fpdSIhhHiytRm1s+PWuacTSYdFg84NA+ljU+E7jlHFrKNpeGQ dcjaSeimlV0JJfqgrvl7PH8MB8gTwjO0hFfwSDVMX05IER0E6l/aqS/k7gytMCPP NBGuS6JSEhBv/tURnPn4qIy+PdBKkPcCpeFzJ9CY4wYyLYVWi4l2LaARTxGx1sKs 0fa6W3U5IB1aZZg3RrxCSZYmLrgde1pT5yhC71TAwH0WAd/KwT4+ztJ/mZKwdgpd +A6pFLqSWbyFVGHaKwLPVtQQYxy3VlygN96zibCnBy9szKawT+PWKnn1TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSf7ZIXqm/ZiaBjN0GFMk96XV3+MB8GA1UdIwQY MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt NWUyMzY3MjY3M2QyLzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF3J+y2y PMd+BrpMzDnmelHVwJb1bZZKXUFRhB4kHajxC30rqrSp083PI+NZ2Qij/qTZlom0 AeKla0TSknQgM8KhQ3AbAaKCffvbl8npuBRvxRcwvGfBZmS3MQGr7ev2edbMkH1s 4jqpk6LOyuBe1CGXMxt3i21hSf+5u3NhlBzwv19YTj2YB0WMs1yGSTsYhe+zNGsj /SX6JkoBK6PQtpOk6ZZdMZWYyBEybSKHQkabmhr8O+2eJezTkexGA3aB0KK+lr6v 32GmFuOR5cYBlnwqXET+Cx6ggeXH4w4lE0XoQmTT2A4jtCx5FyucjYfPxQc90eaX 1Sz0M/dWZkAJNg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client