This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json) Hash identifier: gvm/cDLRGu25Df/FVQSa0/LSw4sJJwWQeufebZrPzvI= Subject key identifier: 8F:4E:43:76:D6:56:C4:22:75:76:7A:88:F9:36:0C:3B:9C:BA:93:E1 Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Certificate serial: 019B35696F8A4866B40FE6411BEA923BE93C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft Manifest number: 04 Signing time: Fri 19 Dec 2025 07:01:00 +0000 Manifest this update: Fri 19 Dec 2025 07:01:00 +0000 Manifest next update: Sat 20 Dec 2025 07:01:00 +0000 Files and hashes: 1: STZKxSbzUYyXUyydQBoeh7f5WSU.roa (hash: 2dXYIkhJ6cX4bMaIUv9yFeoHLF6wnyWKQlnhRKdn3WA=) 2: T6fpXr9wKGJ3aCznk32JPJaimhg.asa (hash: n722aK2AFEKdM2CPBPu9m4CBX/wUOMnKDrC8rZHOkMY=) 3: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: wywZ6Lon8QtodKfLJ41e2P/PHeNgWJ0pIi2ReWuGvpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:6f:8a:48:66:b4:0f:e6:41:1b:ea:92:3b:e9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Validity Not Before: Dec 19 07:01:00 2025 GMT Not After : Dec 20 07:01:00 2025 GMT Subject: CN=8f4e4376d656c42275767a88f9360c3b9cba93e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:99:56:e2:89:63:28:3e:54:1b:12:9f:9c:e4: be:6a:88:f8:51:0e:1b:52:eb:a2:05:ff:d3:70:a4: ff:b8:a8:7c:10:95:63:a2:6f:18:34:e2:84:0c:a1: dc:b9:46:13:ea:ad:fa:cc:b9:2a:b5:48:92:83:fa: 44:ba:73:6d:b1:fe:74:44:ac:8b:f3:e0:27:b9:2e: 9e:53:ac:60:2a:39:62:b5:f5:c6:af:f5:08:81:ca: 03:12:02:78:e3:93:38:5e:c8:08:78:96:c9:5b:fa: ae:5c:34:b9:8d:7d:00:c4:e0:0d:b8:a3:4d:9e:b5: 6c:b3:b4:cf:e8:75:71:0c:b3:28:4a:46:4e:8f:70: 1f:43:e6:19:c3:0a:2a:fa:55:c4:e5:91:df:b6:0f: d1:3b:22:ef:0b:c1:0c:38:68:8a:ac:0e:62:7f:f5: 11:be:36:07:6e:83:f1:07:a5:c0:02:66:8c:3a:7c: 70:ee:78:22:59:db:5f:b7:18:8a:50:fc:ce:4c:d8: b6:c0:5d:bd:1c:b2:53:0f:87:9c:14:49:56:a5:c3: ae:10:8b:b3:9e:76:75:75:32:a5:7c:bf:d0:35:1a: ac:e9:ac:2b:fd:51:c9:42:84:b8:75:55:51:be:d0: 9a:70:55:95:54:99:c8:c4:37:b8:7e:df:2b:33:09: 6c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4E:43:76:D6:56:C4:22:75:76:7A:88:F9:36:0C:3B:9C:BA:93:E1 X509v3 Authority Key Identifier: keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:7d:61:80:68:27:54:cf:0f:39:9c:4e:75:9d:34:d5:d9:ee: 46:e4:2e:fa:74:53:1e:fd:03:95:51:ba:53:99:24:7f:9f:3e: 2c:2c:f8:d8:64:2a:2c:db:f0:ae:cc:54:19:99:2c:66:38:c6: b7:0a:84:bd:09:8e:5f:e1:58:50:6f:f0:20:7f:f7:a8:49:b8: fe:93:18:33:e4:fc:bb:c7:ac:c4:70:d7:f1:31:5e:ea:ed:78: 17:35:69:a6:7f:1c:55:bf:02:ad:bb:e3:61:69:0b:18:77:ab: 48:fe:2c:27:eb:db:f1:1d:e1:3f:56:47:6b:d7:97:5e:f6:45: 12:db:cd:9a:f3:b7:43:77:6d:fd:72:2b:07:7a:f0:64:94:29: 3b:9b:81:8e:36:f8:a9:cc:4c:c0:37:03:b9:4e:b1:d8:79:0c: bc:81:2f:1c:a8:2d:15:82:2d:ee:98:0b:78:fa:50:e7:c5:b3: 5e:ba:e6:53:8f:b9:08:f6:7b:0e:45:78:2b:20:87:ac:d8:75: c5:cf:f6:b5:c8:26:91:60:e6:20:0b:38:9f:38:94:5a:f9:fa: 6b:55:bc:33:7c:58:37:46:13:26:b8:a2:30:b1:55:93:a5:6e: 36:96:6e:f3:1e:aa:3c:d6:1f:fb:4c:84:5b:ea:bb:8e:f0:e6: 40:2e:d2:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aW+KSGa0D+ZBG+qSO+k8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNDNiZGMwYmI1NGZiODY5ZWU4M2EyYmQ4YmQ4NzczOTg5 M2E0MmMwHhcNMjUxMjE5MDcwMTAwWhcNMjUxMjIwMDcwMTAwWjAzMTEwLwYDVQQD Eyg4ZjRlNDM3NmQ2NTZjNDIyNzU3NjdhODhmOTM2MGMzYjljYmE5M2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJlW4oljKD5UGxKfnOS+aoj4UQ4b UuuiBf/TcKT/uKh8EJVjom8YNOKEDKHcuUYT6q36zLkqtUiSg/pEunNtsf50RKyL 8+AnuS6eU6xgKjlitfXGr/UIgcoDEgJ445M4XsgIeJbJW/quXDS5jX0AxOANuKNN nrVss7TP6HVxDLMoSkZOj3AfQ+YZwwoq+lXE5ZHftg/ROyLvC8EMOGiKrA5if/UR vjYHboPxB6XAAmaMOnxw7ngiWdtftxiKUPzOTNi2wF29HLJTD4ecFElWpcOuEIuz nnZ1dTKlfL/QNRqs6awr/VHJQoS4dVVRvtCacFWVVJnIxDe4ft8rMwlskwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9OQ3bWVsQidXZ6iPk2DDucupPhMB8GA1UdIwQY MBaAFFxDvcC7VPuGnug6K9i9h3OYk6QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUt NDg5NmIyMjhmMTg3LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUtNDg5NmIyMjhmMTg3 LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlH1hgGgn VM8POZxOdZ001dnuRuQu+nRTHv0DlVG6U5kkf58+LCz42GQqLNvwrsxUGZksZjjG twqEvQmOX+FYUG/wIH/3qEm4/pMYM+T8u8esxHDX8TFe6u14FzVppn8cVb8Crbvj YWkLGHerSP4sJ+vb8R3hP1ZHa9eXXvZFEtvNmvO3Q3dt/XIrB3rwZJQpO5uBjjb4 qcxMwDcDuU6x2HkMvIEvHKgtFYIt7pgLePpQ58WzXrrmU4+5CPZ7DkV4KyCHrNh1 xc/2tcgmkWDmIAs4nziUWvn6a1W8M3xYN0YTJriiMLFVk6VuNpZu8x6qPNYf+0yE W+q7jvDmQC7SFQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:37:09 2025 by rpki-client