This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft File: x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json) Hash identifier: lInIbrai2xpKpSe54QXaVg1dNp5AODp+f32782yZupU= Subject key identifier: 18:FD:9C:4B:A4:04:E2:BB:B9:EC:D1:FC:7C:28:8A:0D:49:E8:13:11 Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 Certificate issuer: /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Certificate serial: 019B4ADE629D4F17027EF9215221E7AECD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft Manifest number: 1712 Signing time: Tue 23 Dec 2025 11:00:46 +0000 Manifest this update: Tue 23 Dec 2025 11:00:46 +0000 Manifest next update: Wed 24 Dec 2025 11:00:46 +0000 Files and hashes: 1: Fv4x63T3ojikq-5UgMnJdELk8sc.roa (hash: aEkLecdA0DcIECx9dg4mdlZcrGEzKCgWB2xD42hEp5g=) 2: TMkhKaPUJB4LI1mMmf3sccZhBEE.roa (hash: SQD8a+jFccoVxuuqM1aTazg815YSaiMZNjfARcco9Jw=) 3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: doNOwoijH6cMVk8Fe0NgnLRktQIPDxHkmb3Rp4xxTbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:62:9d:4f:17:02:7e:f9:21:52:21:e7:ae:cd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216 Validity Not Before: Dec 23 11:00:46 2025 GMT Not After : Dec 24 11:00:46 2025 GMT Subject: CN=18fd9c4ba404e2bbb9ecd1fc7c288a0d49e81311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:cf:8e:e9:65:fb:2d:41:eb:ed:6d:5c:a2: 99:cb:54:fe:fd:6e:7c:67:67:39:aa:32:d4:0a:95: 06:39:0b:d7:91:09:96:4c:76:d8:21:43:03:be:7b: f9:43:5e:00:be:64:c8:45:e7:f1:9d:ef:79:8d:36: c6:af:c0:b2:06:2f:c2:49:1b:56:05:09:c6:b4:1c: 9e:63:93:5e:82:a5:58:07:08:ab:e0:8b:e5:68:76: 39:1a:b6:75:68:5b:d6:16:fe:34:13:e4:73:0e:96: 9c:f1:1a:e4:ea:13:c8:54:e5:6f:31:c9:a6:ae:6d: 91:06:34:c9:eb:55:dc:80:da:dd:f4:0f:a4:a4:26: 6d:e5:51:1a:85:ad:b6:aa:72:ab:c0:3d:35:54:bc: 9c:b7:7d:7f:5d:55:86:79:cd:38:3c:66:59:5b:56: 9e:e8:f2:d4:ed:b2:05:ee:24:b3:71:d2:5b:56:cf: 92:d4:77:53:76:8e:85:6b:20:cc:53:92:a4:a0:f4: 33:4d:8a:8a:f5:a7:6a:9e:d9:93:0d:bb:9b:43:af: b5:f9:58:de:e8:9c:52:86:f7:f7:ac:fa:ec:0f:f9: ea:b6:53:11:65:f7:96:38:62:58:bb:29:be:9c:b1: 38:1a:b8:ea:18:2f:bc:b1:7d:b4:b3:af:76:fe:32: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FD:9C:4B:A4:04:E2:BB:B9:EC:D1:FC:7C:28:8A:0D:49:E8:13:11 X509v3 Authority Key Identifier: keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:dc:82:12:19:d0:09:cc:ed:9d:41:17:90:fe:09:6a:29:da: e5:69:cd:18:7d:f9:55:61:58:7c:70:33:27:2e:c9:c6:59:01: 86:b9:fb:c5:06:89:f9:9e:5c:ad:b3:e1:9d:9c:b2:c1:87:95: de:c9:a6:fb:4e:30:f7:3c:02:f7:7d:15:72:8d:98:99:f1:ea: 5f:4e:d0:6f:eb:0b:54:49:c1:ee:d9:ac:cb:70:a3:6a:73:76: d1:46:65:01:a2:aa:78:e0:a7:be:b3:d6:0e:57:1f:e9:cc:3b: 96:cf:e2:94:58:51:88:44:76:51:8f:73:c7:d6:62:0f:25:d9: 74:0c:fc:4d:36:eb:b5:c5:62:5f:8b:7e:67:f4:e2:31:41:ef: 09:ca:75:89:d1:b6:4f:11:f1:d6:df:b4:70:9b:c0:fc:83:75: 8a:5b:18:8c:30:62:21:bc:ba:de:19:e6:19:06:06:d4:f9:6c: 98:82:99:4d:64:56:aa:f9:a7:9a:54:cd:9f:06:a0:ad:29:fb: 37:58:c4:00:1b:22:e9:29:ed:69:b5:bd:5a:d1:db:fb:53:60: 5e:6b:60:65:e6:fb:58:7f:08:92:1a:af:25:9f:77:aa:80:fa: 1b:0c:de:c6:39:07:bf:9c:3f:0d:f9:cb:8f:e6:9d:3e:62:7c: d6:b5:75:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3mKdTxcCfvkhUiHnrs0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz ZWIyMTYwHhcNMjUxMjIzMTEwMDQ2WhcNMjUxMjI0MTEwMDQ2WjAzMTEwLwYDVQQD EygxOGZkOWM0YmE0MDRlMmJiYjllY2QxZmM3YzI4OGEwZDQ5ZTgxMzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmnPjull+y1B6+1tXKKZy1T+/W58 Z2c5qjLUCpUGOQvXkQmWTHbYIUMDvnv5Q14AvmTIRefxne95jTbGr8CyBi/CSRtW BQnGtByeY5NegqVYBwir4IvlaHY5GrZ1aFvWFv40E+RzDpac8Rrk6hPIVOVvMcmm rm2RBjTJ61XcgNrd9A+kpCZt5VEaha22qnKrwD01VLyct31/XVWGec04PGZZW1ae 6PLU7bIF7iSzcdJbVs+S1HdTdo6FayDMU5KkoPQzTYqK9adqntmTDbubQ6+1+Vje 6JxShvf3rPrsD/nqtlMRZfeWOGJYuym+nLE4GrjqGC+8sX20s692/jLfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBj9nEukBOK7uezR/Hwoig1J6BMRMB8GA1UdIwQY MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNyCEhnQ CcztnUEXkP4Jaina5WnNGH35VWFYfHAzJy7JxlkBhrn7xQaJ+Z5crbPhnZyywYeV 3smm+04w9zwC930Vco2YmfHqX07Qb+sLVEnB7tmsy3CjanN20UZlAaKqeOCnvrPW Dlcf6cw7ls/ilFhRiER2UY9zx9ZiDyXZdAz8TTbrtcViX4t+Z/TiMUHvCcp1idG2 TxHx1t+0cJvA/IN1ilsYjDBiIby63hnmGQYG1PlsmIKZTWRWqvmnmlTNnwagrSn7 N1jEABsi6SntabW9WtHb+1NgXmtgZeb7WH8IkhqvJZ93qoD6GwzexjkHv5w/DfnL j+adPmJ81rV1aw== -----END CERTIFICATE-----Generated at Tue Dec 23 16:23:20 2025 by rpki-client