This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft File: X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json) Hash identifier: HHMIsAlwPxtmsuqXLbj0orF/5PBKfeGWthRhPwAFMho= Subject key identifier: C0:DB:3F:40:58:FD:5D:60:42:D6:ED:E2:F4:49:CD:05:57:2C:4B:30 Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Certificate serial: 019B1983DEBE3ADBB80BC77635D5DAA8FE08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft Manifest number: 0F Signing time: Sat 13 Dec 2025 21:00:31 +0000 Manifest this update: Sat 13 Dec 2025 21:00:31 +0000 Manifest next update: Sun 14 Dec 2025 21:00:31 +0000 Files and hashes: 1: VfDN-59FccxOvqATmPxAuatKHT0.roa (hash: nf9NPBl15MZ7mxxQFnZKJvDsjqw0S5Ttoo609OQKOSw=) 2: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: 1j97hI6Ds5b939xQ5a4pQ/KXeEYnmRCS0UpPvM7E46I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:83:de:be:3a:db:b8:0b:c7:76:35:d5:da:a8:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Validity Not Before: Dec 13 21:00:31 2025 GMT Not After : Dec 14 21:00:31 2025 GMT Subject: CN=c0db3f4058fd5d6042d6ede2f449cd05572c4b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:55:a3:ed:3d:d4:24:5e:15:49:1a:3f:ff:dd: 82:91:7b:52:ca:fc:a0:69:2c:ff:93:ce:00:3a:92: 4e:55:50:38:44:b7:89:db:44:37:14:dc:32:d7:c5: 6a:71:5a:fe:a5:48:ef:aa:91:51:9f:5a:33:33:80: 5a:a2:fb:c2:bb:d1:c4:49:57:3a:bb:19:b5:d0:cf: df:e7:2b:0e:c3:0f:f1:1b:1c:8a:8e:0a:14:1c:6a: 26:9c:a8:53:f2:78:c7:2a:69:cb:15:eb:5d:8e:5a: 62:c3:e5:38:4c:81:85:f3:9f:00:73:f9:a6:6f:82: c0:1e:81:b6:8b:64:ec:ed:95:cc:12:61:25:22:35: 72:b5:cd:25:a5:5e:40:d6:e4:30:9b:fc:7b:01:70: e5:31:3a:0a:28:2a:ac:e1:c6:dc:69:20:3e:a7:5c: e3:4b:ea:c5:24:50:14:9e:2d:d4:b1:e8:d3:3b:a4: 2e:34:1f:17:39:59:94:b9:12:46:eb:6c:34:52:ef: 3e:1e:52:b1:8e:37:43:5f:67:6c:5e:9c:74:15:54: 09:1d:c5:5e:35:dd:04:44:3b:40:42:8a:c9:d5:20: d6:db:b7:20:36:58:68:33:3b:e7:bd:11:cc:7c:0f: f1:4e:a0:92:b5:e1:2b:d0:86:da:14:0a:e8:9c:47: b4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DB:3F:40:58:FD:5D:60:42:D6:ED:E2:F4:49:CD:05:57:2C:4B:30 X509v3 Authority Key Identifier: keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9d:5e:73:80:69:ed:a4:da:99:3e:69:b8:13:0b:82:fa:be: cd:08:fd:fd:db:3e:ad:69:85:b3:20:3d:41:1d:24:97:b2:89: a1:6f:41:9a:71:5b:df:b5:7f:6c:8e:04:6b:df:e1:3d:02:bd: 57:80:1d:e7:3e:ff:f4:04:e1:94:67:f7:72:2b:ff:db:66:84: ae:44:11:cc:a0:fe:17:94:ef:2d:12:3b:94:a4:ed:84:90:91: a0:0a:d4:e1:ce:19:d4:2a:05:c8:4c:08:da:81:7e:eb:2d:d6: 30:a2:3a:90:f9:93:b1:96:0c:9a:98:10:56:c2:71:f5:1d:39: 06:04:9b:db:28:ba:fc:ce:fd:86:33:4d:07:ae:10:5f:d8:5e: a6:27:a2:09:e6:8b:1f:a2:b6:4b:e6:17:49:7f:1b:b6:aa:47: 4e:8e:10:b2:81:06:c3:be:62:80:89:36:e4:d6:23:b3:b3:9d: 81:83:37:54:85:32:e1:5a:1e:44:03:fc:e1:92:60:32:9f:1a: 87:1b:c4:bd:60:63:07:d1:32:45:d5:73:51:7f:60:57:ba:dd: ec:6b:3f:05:24:f4:4f:3e:a8:2b:fd:93:9f:a4:b3:c2:66:c3: 8a:11:ad:f5:32:c2:47:24:98:ad:ef:b1:b8:f5:c1:69:90:79: 73:77:f8:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZg96+Otu4C8d2NdXaqP4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw ZTQwN2MwHhcNMjUxMjEzMjEwMDMxWhcNMjUxMjE0MjEwMDMxWjAzMTEwLwYDVQQD EyhjMGRiM2Y0MDU4ZmQ1ZDYwNDJkNmVkZTJmNDQ5Y2QwNTU3MmM0YjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1Wj7T3UJF4VSRo//92CkXtSyvyg aSz/k84AOpJOVVA4RLeJ20Q3FNwy18VqcVr+pUjvqpFRn1ozM4BaovvCu9HESVc6 uxm10M/f5ysOww/xGxyKjgoUHGomnKhT8njHKmnLFetdjlpiw+U4TIGF858Ac/mm b4LAHoG2i2Ts7ZXMEmElIjVytc0lpV5A1uQwm/x7AXDlMToKKCqs4cbcaSA+p1zj S+rFJFAUni3UsejTO6QuNB8XOVmUuRJG62w0Uu8+HlKxjjdDX2dsXpx0FVQJHcVe Nd0ERDtAQorJ1SDW27cgNlhoMzvnvRHMfA/xTqCSteEr0IbaFAronEe0QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDbP0BY/V1gQtbt4vRJzQVXLEswMB8GA1UdIwQY MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt MjNmMGMwNGQyYzE3LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3 LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGp1ec4Bp 7aTamT5puBMLgvq+zQj9/ds+rWmFsyA9QR0kl7KJoW9BmnFb37V/bI4Ea9/hPQK9 V4Ad5z7/9AThlGf3civ/22aErkQRzKD+F5TvLRI7lKTthJCRoArU4c4Z1CoFyEwI 2oF+6y3WMKI6kPmTsZYMmpgQVsJx9R05BgSb2yi6/M79hjNNB64QX9hepieiCeaL H6K2S+YXSX8btqpHTo4QsoEGw75igIk25NYjs7OdgYM3VIUy4VoeRAP84ZJgMp8a hxvEvWBjB9EyRdVzUX9gV7rd7Gs/BST0Tz6oK/2Tn6SzwmbDihGt9TLCRySYre+x uPXBaZB5c3f4sg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:42 2025 by rpki-client