This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json) Hash identifier: RrvXURHDC9A9/YeqbXrwgoMsYLzkVk9FMX6gQ41uRFU= Subject key identifier: 14:F9:03:06:30:53:84:F7:D4:E9:80:4C:C3:BC:DD:E4:83:74:BA:ED Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019B1014DD899E532BA5DDC1B18ECC07790F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:02:41 +0000 Manifest this update: Fri 12 Dec 2025 01:02:41 +0000 Manifest next update: Sat 13 Dec 2025 01:02:41 +0000 Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: odPtQ0Z9POHE4X67NDHtFFeaAUkdmPyvYztR8n6WZ6k=) 2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=) 3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:dd:89:9e:53:2b:a5:dd:c1:b1:8e:cc:07:79:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Dec 12 01:02:41 2025 GMT Not After : Dec 13 01:02:41 2025 GMT Subject: CN=14f90306305384f7d4e9804cc3bcdde48374baed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:92:bb:6c:69:b9:e5:7f:a5:b4:7c:af:38: 3e:55:5b:95:ee:17:e4:84:e2:e1:b7:da:37:35:04: a4:1a:e9:94:f1:e2:7e:e5:07:d6:ce:2b:0a:d9:0c: 29:f1:2e:da:82:b8:bf:67:0f:fc:3a:74:86:50:9e: d1:72:f5:91:b1:42:de:44:2f:9a:ee:07:51:ef:4e: 4a:a5:4f:70:bd:d4:ea:53:9b:69:d2:4a:77:ec:00: ee:67:c1:49:67:d1:d7:ed:ff:a5:ef:a1:24:ab:a7: 6a:f4:45:e2:3e:35:ea:71:3a:b9:e7:0e:24:70:72: 36:af:26:67:1d:6f:bb:24:fa:f3:45:6b:2c:7a:83: 04:28:30:d1:97:56:e7:91:f5:b7:f4:a9:af:25:bc: bb:c2:7e:a2:27:9b:51:18:03:1a:e9:b2:5c:34:13: 1d:b0:53:a7:85:ee:e1:b3:e2:92:71:b2:cd:ea:23: ba:df:82:7b:8f:60:8a:ed:2d:aa:f0:51:75:90:b7: b1:f4:27:d0:75:76:e4:ff:6a:99:55:6d:91:4a:b7: dd:2e:95:55:e9:a3:ad:d9:1f:ed:97:2c:d3:a2:9b: d3:30:08:62:e0:ae:7e:cf:e1:d6:9b:47:1a:2e:3d: 4e:db:4b:32:8b:79:89:79:77:09:20:c4:29:1c:16: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F9:03:06:30:53:84:F7:D4:E9:80:4C:C3:BC:DD:E4:83:74:BA:ED X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ea:50:6a:ca:80:94:90:ae:a8:1b:09:bd:38:1c:ab:58:d7: 19:69:32:5c:47:a1:a9:2e:43:7e:b4:70:90:7b:3c:e4:21:7b: d3:bd:a2:fd:80:fb:05:31:9c:04:4a:57:54:79:50:6e:ab:c1: 45:f6:17:7c:a4:eb:1a:0c:30:f3:a8:20:a6:5b:4b:fe:4e:8a: c0:19:f5:bb:04:fc:e4:9d:f9:e0:46:57:20:42:87:44:b3:e2: 89:6e:d6:b6:30:c1:3f:b7:93:3a:58:5f:b9:ec:2e:05:1b:9f: dc:0a:66:10:8c:83:b4:91:21:92:ff:7a:4e:6a:58:1f:0a:b3: 66:1e:7a:e9:78:ee:65:1b:72:f2:83:ce:a3:f7:b4:df:f4:ab: 9e:73:00:2a:b9:bf:7b:c6:2d:96:fa:4a:5a:e8:4d:e6:00:d2: f5:e6:5d:58:6b:f2:6b:08:e7:57:3b:fc:e2:6d:2d:b5:c5:dc: 69:40:23:4e:18:ee:7e:e9:c1:61:4a:a7:37:d5:52:d3:84:8e: 42:28:c8:20:9b:34:c6:19:38:b4:6e:af:9a:d4:81:d1:3d:31: 68:54:16:75:79:13:3e:3d:67:4b:21:97:c0:3c:06:60:ba:44: dd:8a:4d:6d:e2:36:3b:95:27:30:00:aa:a9:eb:fb:00:25:89: 4b:e0:10:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFN2JnlMrpd3BsY7MB3kPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjUxMjEyMDEwMjQxWhcNMjUxMjEzMDEwMjQxWjAzMTEwLwYDVQQD EygxNGY5MDMwNjMwNTM4NGY3ZDRlOTgwNGNjM2JjZGRlNDgzNzRiYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTaSu2xpueV/pbR8rzg+VVuV7hfk hOLht9o3NQSkGumU8eJ+5QfWzisK2Qwp8S7agri/Zw/8OnSGUJ7RcvWRsULeRC+a 7gdR705KpU9wvdTqU5tp0kp37ADuZ8FJZ9HX7f+l76Ekq6dq9EXiPjXqcTq55w4k cHI2ryZnHW+7JPrzRWsseoMEKDDRl1bnkfW39KmvJby7wn6iJ5tRGAMa6bJcNBMd sFOnhe7hs+KScbLN6iO634J7j2CK7S2q8FF1kLex9CfQdXbk/2qZVW2RSrfdLpVV 6aOt2R/tlyzTopvTMAhi4K5+z+HWm0caLj1O20syi3mJeXcJIMQpHBZtYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT5AwYwU4T31OmATMO83eSDdLrtMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+pQasqA lJCuqBsJvTgcq1jXGWkyXEehqS5DfrRwkHs85CF7072i/YD7BTGcBEpXVHlQbqvB RfYXfKTrGgww86ggpltL/k6KwBn1uwT85J354EZXIEKHRLPiiW7WtjDBP7eTOlhf uewuBRuf3ApmEIyDtJEhkv96TmpYHwqzZh566XjuZRty8oPOo/e03/SrnnMAKrm/ e8YtlvpKWuhN5gDS9eZdWGvyawjnVzv84m0ttcXcaUAjThjufunBYUqnN9VS04SO QijIIJs0xhk4tG6vmtSB0T0xaFQWdXkTPj1nSyGXwDwGYLpE3YpNbeI2O5UnMACq qev7ACWJS+AQIw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:53:24 2025 by rpki-client