This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json) Hash identifier: f4UrEVmdR1uFPOrCwaTrm0GPsuxV4xM0hXWuupu/UTY= Subject key identifier: E5:9D:D2:E8:80:B1:5F:B5:0E:E9:B1:07:F0:88:F6:7D:A0:40:A2:CC Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Certificate serial: 019B30E7F722BD9D56A8A8ADCCB89D85D60A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft Manifest number: 16BE Signing time: Thu 18 Dec 2025 10:01:07 +0000 Manifest this update: Thu 18 Dec 2025 10:01:07 +0000 Manifest next update: Fri 19 Dec 2025 10:01:07 +0000 Files and hashes: 1: n0PQVaq6lp0buyh71HmvCGJy3cY.roa (hash: QL9cb+VrnWZDKfgvQ3BKYLRd9xHYcd+B/V/qEKLIfgU=) 2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: L5jZg91NIqyk3uDzJ171CTLTmpvnH43e6TwD17KRZPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e7:f7:22:bd:9d:56:a8:a8:ad:cc:b8:9d:85:d6:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1 Validity Not Before: Dec 18 10:01:07 2025 GMT Not After : Dec 19 10:01:07 2025 GMT Subject: CN=e59dd2e880b15fb50ee9b107f088f67da040a2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1b:4e:e0:18:b7:d4:98:e2:51:ab:fb:1d:b2: f0:c6:dd:9b:48:cc:f5:7c:99:1b:61:6a:d4:e1:c7: f1:99:0a:15:f2:ca:94:5c:b1:91:d0:75:0d:cb:d7: 45:eb:2b:c6:07:fc:86:b6:9d:dd:e8:cb:b3:7c:3c: 05:53:2a:a8:db:e9:25:45:65:fc:17:ba:a4:50:97: 13:75:a0:fc:16:21:c1:a9:5c:ee:5c:fe:4f:fc:53: 74:e7:ec:ba:4b:c8:84:ea:53:2d:55:12:43:54:58: 6c:29:bf:3b:74:bf:bf:a1:23:d1:29:64:07:77:be: d7:a3:5b:7d:8d:9b:29:d4:68:0e:1f:1b:d3:59:59: 0f:c0:28:29:87:69:63:4d:df:a6:30:50:df:d9:af: 8d:ed:09:12:43:a2:21:9e:87:26:c6:ed:92:b5:11: e0:e2:f9:6a:98:6d:d6:4c:a1:8c:43:db:fd:49:50: 76:cb:b2:1c:e2:79:e7:c6:a6:78:05:ba:aa:d9:fc: c4:bc:07:dc:74:4d:c3:6b:50:fa:55:16:53:0c:c8: ce:22:0d:f5:57:23:17:e7:d2:d0:b1:36:65:15:4a: 3f:f9:f1:cf:38:96:ad:f1:e5:3b:69:5c:7a:3f:51: 28:ce:4c:b4:24:5d:57:9d:14:a4:15:2a:d5:48:11: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9D:D2:E8:80:B1:5F:B5:0E:E9:B1:07:F0:88:F6:7D:A0:40:A2:CC X509v3 Authority Key Identifier: keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:ce:0e:d3:50:1f:83:c0:0e:e8:6a:0d:9e:40:dc:48:2f: a1:9b:97:3a:ed:ae:78:48:05:0f:0a:e1:0a:cd:e3:b3:4f:26: e2:b2:f6:3f:64:b7:c9:11:3c:8b:d1:c6:b7:b8:d0:d7:ab:73: 1c:a2:47:a8:01:59:f7:ec:d7:9b:f3:ac:f2:8f:f2:17:d8:e6: f4:d1:0f:b1:08:6a:80:81:ef:e2:28:9b:f1:17:4e:d7:44:94: ec:cb:60:f0:b7:d4:18:f1:b2:61:8b:ec:08:ab:50:f3:8e:41: c5:29:6a:6b:95:7b:3f:ce:76:63:95:2f:14:1c:0f:be:9a:06: 8a:4c:39:0e:ce:92:21:96:c3:0e:c1:99:3d:a5:9c:22:bc:0d: 72:1d:07:47:9e:e4:9f:f5:73:82:d6:4b:cd:d2:80:48:5a:c7: a7:3d:12:ce:24:62:27:41:67:44:a7:48:62:e5:7a:de:cd:f5: c6:c7:b4:5f:87:6c:b7:a0:96:36:0f:ed:1d:49:8b:d0:18:d8: cd:4e:f1:9a:44:75:d9:15:06:34:6b:34:4e:e9:93:64:ac:33: 1c:e7:63:5f:67:f9:5d:ae:20:79:44:65:be:c9:54:77:a7:41: d5:38:b1:62:33:f9:86:da:09:46:9c:1c:d5:ad:34:c7:33:bd: 4d:34:e0:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw5/civZ1WqKitzLidhdYKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2MWMzMzljNWVkZjhkOGM0ODNmMDhlNDZiODQ4MGE4 MDVlZjEwHhcNMjUxMjE4MTAwMTA3WhcNMjUxMjE5MTAwMTA3WjAzMTEwLwYDVQQD EyhlNTlkZDJlODgwYjE1ZmI1MGVlOWIxMDdmMDg4ZjY3ZGEwNDBhMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRtO4Bi31JjiUav7HbLwxt2bSMz1 fJkbYWrU4cfxmQoV8sqUXLGR0HUNy9dF6yvGB/yGtp3d6MuzfDwFUyqo2+klRWX8 F7qkUJcTdaD8FiHBqVzuXP5P/FN05+y6S8iE6lMtVRJDVFhsKb87dL+/oSPRKWQH d77Xo1t9jZsp1GgOHxvTWVkPwCgph2ljTd+mMFDf2a+N7QkSQ6Ihnocmxu2StRHg 4vlqmG3WTKGMQ9v9SVB2y7Ic4nnnxqZ4Bbqq2fzEvAfcdE3Da1D6VRZTDMjOIg31 VyMX59LQsTZlFUo/+fHPOJat8eU7aVx6P1Eozky0JF1XnRSkFSrVSBHogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWd0uiAsV+1DumxB/CI9n2gQKLMMB8GA1UdIwQY MBaAFMZiYcM5xe342MSD8I5GuEgKgF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEt NzdjM2UxYzhmNmRlLzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81MjU5NTItN2FmYi00NDNkLWFmMGEtNzdjM2UxYzhmNmRl LzEveG1KaHd6bkY3ZmpZeElQd2prYTRTQXFBWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZm3ODtNQ H4PADuhqDZ5A3EgvoZuXOu2ueEgFDwrhCs3js08m4rL2P2S3yRE8i9HGt7jQ16tz HKJHqAFZ9+zXm/Os8o/yF9jm9NEPsQhqgIHv4iib8RdO10SU7Mtg8LfUGPGyYYvs CKtQ845BxSlqa5V7P852Y5UvFBwPvpoGikw5Ds6SIZbDDsGZPaWcIrwNch0HR57k n/VzgtZLzdKASFrHpz0SziRiJ0FnRKdIYuV63s31xse0X4dst6CWNg/tHUmL0BjY zU7xmkR12RUGNGs0TumTZKwzHOdjX2f5Xa4geURlvslUd6dB1TixYjP5htoJRpwc 1a00xzO9TTTgbQ== -----END CERTIFICATE-----Generated at Thu Dec 18 14:09:36 2025 by rpki-client