This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: ee7jnklX55ZlyHK+VDmUss4xU9O3Zq45ssfAMaAUQl8= Subject key identifier: 40:34:8B:46:A8:5D:47:F2:1E:9C:44:1D:06:48:7D:47:AD:98:45:A8 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B1727F28866E3AF05A0240707A5510E2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 134B Signing time: Sat 13 Dec 2025 10:00:52 +0000 Manifest this update: Sat 13 Dec 2025 10:00:52 +0000 Manifest next update: Sun 14 Dec 2025 10:00:52 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: aTfdlJSz1IKlsBVjnolvFA7pRSWTJ+lxP06tQCuZurQ=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:27:f2:88:66:e3:af:05:a0:24:07:07:a5:51:0e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Dec 13 10:00:52 2025 GMT Not After : Dec 14 10:00:52 2025 GMT Subject: CN=40348b46a85d47f21e9c441d06487d47ad9845a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0b:79:62:01:6f:5f:f6:17:4e:e9:fc:12:98: 16:8c:03:9e:2c:1b:b3:37:9e:b9:5f:1e:24:7c:e3: f2:ed:b1:0b:65:33:8b:a1:ac:f5:14:bd:4b:82:34: d5:0a:40:d7:d1:49:7a:3d:84:9a:ae:1f:7a:4a:87: ea:6b:cf:ad:98:f6:91:e9:75:9b:68:14:c5:af:25: d9:8c:8f:06:58:4c:e8:c2:1f:d4:b5:78:5b:ac:05: 53:31:28:9b:f7:67:f8:07:9b:4d:9d:d0:21:dd:6a: 0e:5d:4c:d6:18:86:3f:8d:95:47:66:29:74:c5:16: cb:bd:68:dc:55:d9:c2:24:3a:4e:44:6a:6c:dd:93: 06:e3:1d:18:c5:86:fc:37:84:59:0c:64:96:e8:e6: 15:5e:4c:9d:f0:26:10:78:78:62:72:47:ee:05:cd: 9b:17:31:ee:46:03:c7:5b:94:cb:91:27:45:59:d7: 26:02:3c:2e:52:7e:61:0a:e5:fc:88:ae:b8:ac:24: e4:60:94:4e:5e:01:f0:70:c2:f4:83:43:8d:9a:f0: 7a:a0:98:5a:1d:76:70:be:87:76:36:3e:26:70:da: d5:00:0d:91:e0:fa:04:18:1e:ec:4b:3d:b6:a2:29: 2c:a5:23:0c:cb:a4:9f:19:e8:4e:e2:04:d1:93:09: 62:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:34:8B:46:A8:5D:47:F2:1E:9C:44:1D:06:48:7D:47:AD:98:45:A8 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:98:9d:66:55:3d:5a:99:2c:47:7a:ac:0f:8b:cf:b9:0a:69: 46:35:7c:7d:86:98:d1:b5:38:a6:a2:56:72:34:c1:d0:e0:cf: 47:99:34:fd:ea:07:b8:c6:83:67:d9:e9:c6:4f:0f:bf:54:3a: 4a:4e:68:27:0d:ee:72:48:4b:8a:b6:47:f6:b5:c9:03:f3:b7: 7c:7c:55:f9:12:98:e9:67:e4:30:ff:cc:2f:ed:87:00:6a:73: 74:47:5f:73:2a:21:f6:8d:35:a0:89:9e:ea:78:fd:d4:25:87: 19:18:5d:ab:3b:ac:5a:9c:a1:99:7d:2b:ee:69:4b:fd:8f:79: f3:03:5f:4e:ba:24:c3:aa:fa:61:12:ce:f1:4d:b7:5a:28:c6: 2a:47:5f:c6:5f:90:09:df:8b:e0:70:69:27:e5:3d:c3:33:3f: a3:8c:af:e2:26:1e:9f:94:3e:b7:99:31:32:c9:4e:d3:6c:33: 54:3b:94:ce:ed:55:bd:07:d7:dc:f5:92:f9:eb:ec:b8:97:cf: 7e:9d:08:3a:da:ad:70:53:21:1b:99:6c:57:0f:de:d2:c2:e6: b6:ff:d5:0a:a6:40:de:8c:10:ed:24:63:e3:31:b0:4f:af:c4: b8:90:5b:ad:ef:98:88:2b:73:56:01:59:04:b8:28:01:26:02: bf:c6:bd:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXJ/KIZuOvBaAkBwelUQ4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMjEzMTAwMDUyWhcNMjUxMjE0MTAwMDUyWjAzMTEwLwYDVQQD Eyg0MDM0OGI0NmE4NWQ0N2YyMWU5YzQ0MWQwNjQ4N2Q0N2FkOTg0NWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQt5YgFvX/YXTun8EpgWjAOeLBuz N565Xx4kfOPy7bELZTOLoaz1FL1LgjTVCkDX0Ul6PYSarh96Sofqa8+tmPaR6XWb aBTFryXZjI8GWEzowh/UtXhbrAVTMSib92f4B5tNndAh3WoOXUzWGIY/jZVHZil0 xRbLvWjcVdnCJDpORGps3ZMG4x0YxYb8N4RZDGSW6OYVXkyd8CYQeHhickfuBc2b FzHuRgPHW5TLkSdFWdcmAjwuUn5hCuX8iK64rCTkYJROXgHwcML0g0ONmvB6oJha HXZwvod2Nj4mcNrVAA2R4PoEGB7sSz22oikspSMMy6SfGehO4gTRkwliiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA0i0aoXUfyHpxEHQZIfUetmEWoMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZidZlU9 WpksR3qsD4vPuQppRjV8fYaY0bU4pqJWcjTB0ODPR5k0/eoHuMaDZ9npxk8Pv1Q6 Sk5oJw3uckhLirZH9rXJA/O3fHxV+RKY6WfkMP/ML+2HAGpzdEdfcyoh9o01oIme 6nj91CWHGRhdqzusWpyhmX0r7mlL/Y958wNfTrokw6r6YRLO8U23WijGKkdfxl+Q Cd+L4HBpJ+U9wzM/o4yv4iYen5Q+t5kxMslO02wzVDuUzu1VvQfX3PWS+evsuJfP fp0IOtqtcFMhG5lsVw/e0sLmtv/VCqZA3owQ7SRj4zGwT6/EuJBbre+YiCtzVgFZ BLgoASYCv8a9zQ== -----END CERTIFICATE-----Generated at Sat Dec 13 12:05:08 2025 by rpki-client