This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json) Hash identifier: 6bpqSilZmyLDYE5te6ppgKLHB2cf1A68SHaGJl3LDUo= Subject key identifier: F7:E8:5C:06:9D:AB:8F:0C:2F:10:82:F5:D1:76:C7:F6:9D:C3:70:3E Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Certificate serial: 019B1B3B8BF3083744C9FE1E13EA1C141A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 05:00:45 +0000 Manifest this update: Sun 14 Dec 2025 05:00:45 +0000 Manifest next update: Mon 15 Dec 2025 05:00:45 +0000 Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=) 2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=) 3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 0cKcQn1Cqqp/sf7pCvxwBcGPNs5/gDdGZXEvh9j3YUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:8b:f3:08:37:44:c9:fe:1e:13:ea:1c:14:1a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Validity Not Before: Dec 14 05:00:45 2025 GMT Not After : Dec 15 05:00:45 2025 GMT Subject: CN=f7e85c069dab8f0c2f1082f5d176c7f69dc3703e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:78:05:d5:f3:a5:a9:7a:8f:d5:76:0e:99:c1: f3:b3:47:2e:42:a8:e9:c5:46:de:e8:f8:12:89:48: 88:18:da:bc:96:51:24:15:80:da:4d:3b:f6:0c:d2: 82:c8:69:1d:60:60:97:5c:fb:26:f1:06:47:60:fe: 81:91:4c:38:eb:ca:a7:55:ee:e5:d9:de:1b:14:a6: 87:06:ae:5e:b6:69:0f:72:0b:23:74:8d:fa:f2:fd: 66:72:fb:d8:a0:52:9f:b4:ac:ae:c8:df:cf:2d:94: 95:c7:28:c7:01:ea:42:82:f8:9e:c2:12:1b:6c:d0: b6:a9:ca:09:95:1e:05:65:b2:aa:38:3f:9b:4b:18: 5f:27:ea:b8:0d:b1:c9:c0:ff:c2:fd:0b:29:dc:a5: ca:3e:58:6e:b5:44:b9:12:c8:21:e4:3b:d8:e6:7b: 39:39:e6:e6:41:7f:82:d0:3e:9d:ec:d3:db:d2:86: 57:64:ae:56:f4:00:9f:1d:c2:e5:2e:a8:3e:b8:b4: 33:46:3f:54:a6:df:f1:45:0c:88:ba:5c:0e:69:53: 00:98:53:73:8b:0d:ea:6a:79:2d:db:52:1c:81:21: c7:a6:9b:27:a1:12:ef:af:2e:5e:ac:8b:9f:56:6c: 27:5e:11:9b:24:af:d2:12:cf:a3:9b:92:b2:e0:7b: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E8:5C:06:9D:AB:8F:0C:2F:10:82:F5:D1:76:C7:F6:9D:C3:70:3E X509v3 Authority Key Identifier: keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:96:8b:6a:58:d5:4a:04:30:6e:fe:fd:6b:1f:b8:d7:72:45: d6:a0:99:bb:9b:9a:3e:51:cd:3c:79:6b:dd:15:5a:ff:66:da: 52:ac:8f:54:32:df:d6:4c:66:4c:25:6b:00:6f:d6:5a:08:b0: ae:8b:14:de:1c:a1:ed:ef:27:d1:c7:a2:8e:5c:b9:c9:22:a9: 0c:82:19:a4:cf:44:a2:8c:65:f9:df:7b:bc:f3:7b:42:13:fa: 58:17:06:a4:92:4d:35:f2:76:c0:79:93:3c:6e:b3:af:9a:d5: e6:85:bb:9e:00:e5:8e:a0:e4:29:84:29:bb:4c:c2:02:c1:00: 77:17:55:c4:0a:35:6a:1e:ce:3f:54:f8:68:c6:9f:e6:1a:ed: ed:90:0e:fb:a4:61:45:17:d2:2d:10:de:59:83:d1:f7:62:d6: 8f:60:72:dc:86:fd:84:92:5e:2c:d5:62:47:bd:56:aa:68:0f: 33:79:50:b8:c0:73:5f:0b:8f:20:da:1b:12:f3:af:5e:33:b5: 5c:55:fe:03:4e:01:a5:58:cf:a2:dc:50:f8:39:9f:d2:96:52: a8:fb:49:6d:18:7f:44:4a:01:e4:1d:f5:92:0a:43:29:75:68: 55:d1:0e:52:91:8e:b3:c0:ed:ab:37:ed:d9:a9:c8:0a:37:ae: f6:3b:ad:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO4vzCDdEyf4eE+ocFBqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1 OWE0NWYwHhcNMjUxMjE0MDUwMDQ1WhcNMjUxMjE1MDUwMDQ1WjAzMTEwLwYDVQQD EyhmN2U4NWMwNjlkYWI4ZjBjMmYxMDgyZjVkMTc2YzdmNjlkYzM3MDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3gF1fOlqXqP1XYOmcHzs0cuQqjp xUbe6PgSiUiIGNq8llEkFYDaTTv2DNKCyGkdYGCXXPsm8QZHYP6BkUw468qnVe7l 2d4bFKaHBq5etmkPcgsjdI368v1mcvvYoFKftKyuyN/PLZSVxyjHAepCgviewhIb bNC2qcoJlR4FZbKqOD+bSxhfJ+q4DbHJwP/C/Qsp3KXKPlhutUS5Esgh5DvY5ns5 OebmQX+C0D6d7NPb0oZXZK5W9ACfHcLlLqg+uLQzRj9Upt/xRQyIulwOaVMAmFNz iw3qankt21IcgSHHppsnoRLvry5erIufVmwnXhGbJK/SEs+jm5Ky4Hss/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfoXAadq48MLxCC9dF2x/adw3A+MB8GA1UdIwQY MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt ZTRkZGZhMzJlNTJlLzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJaLaljV SgQwbv79ax+413JF1qCZu5uaPlHNPHlr3RVa/2baUqyPVDLf1kxmTCVrAG/WWgiw rosU3hyh7e8n0ceijly5ySKpDIIZpM9Eooxl+d97vPN7QhP6WBcGpJJNNfJ2wHmT PG6zr5rV5oW7ngDljqDkKYQpu0zCAsEAdxdVxAo1ah7OP1T4aMaf5hrt7ZAO+6Rh RRfSLRDeWYPR92LWj2By3Ib9hJJeLNViR71WqmgPM3lQuMBzXwuPINobEvOvXjO1 XFX+A04BpVjPotxQ+Dmf0pZSqPtJbRh/REoB5B31kgpDKXVoVdEOUpGOs8Dtqzft 2anICjeu9jutFA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:41:32 2025 by rpki-client