This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft File: xFpgEca3YVjA9sXCctgtgCf4j6M.mft (raw, json) Hash identifier: lrY66kJCilos7qbBF2L1+ohWY1sdHt3FAjMfMXO8+4I= Subject key identifier: D5:4A:23:09:51:F0:25:96:32:F0:EF:9F:6C:82:75:F6:73:D9:4F:B6 Authority key identifier: C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3 Certificate issuer: /CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3 Certificate serial: 019B593EC48ABBB8BDAA601A2714552B6631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft Manifest number: 83 Signing time: Fri 26 Dec 2025 06:00:44 +0000 Manifest this update: Fri 26 Dec 2025 06:00:44 +0000 Manifest next update: Sat 27 Dec 2025 06:00:44 +0000 Files and hashes: 1: TDwx2WmFrMdexoGeE59PEmpc9rM.roa (hash: 28BE4l6J/5v8RjnKxtTkUCzhfcWaJj8sY8Y3wzlLglI=) 2: xFpgEca3YVjA9sXCctgtgCf4j6M.crl (hash: zcqLKmL5h4Kecc2azrD5mQcSVcFidp1Ne0J6oNW1bwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:c4:8a:bb:b8:bd:aa:60:1a:27:14:55:2b:66:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45a6011c6b76158c0f6c5c272d82d8027f88fa3 Validity Not Before: Dec 26 06:00:44 2025 GMT Not After : Dec 27 06:00:44 2025 GMT Subject: CN=d54a230951f0259632f0ef9f6c8275f673d94fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e7:58:c9:8f:12:01:13:c2:b3:f9:bf:e9:24: 68:b5:bf:2a:9e:18:97:67:40:10:e0:02:48:6f:58: 51:97:20:4e:66:64:5f:ed:5f:c3:86:23:10:0c:b2: b7:a5:73:dd:0b:bf:fb:3c:fb:56:d0:99:fc:55:4c: 00:77:78:6f:73:a4:a5:1b:7e:2b:97:8b:bd:89:2d: 30:3e:81:e4:4f:fe:a1:24:52:d1:3e:4a:ab:c9:f0: fe:00:4a:cb:7b:ea:16:b6:cc:c8:b0:8c:95:dc:95: aa:fe:c4:36:8b:78:4f:e5:0e:a8:47:f3:6a:95:0a: d9:3e:9d:d0:ba:ad:2d:16:ce:a5:0d:64:c8:db:62: 6c:01:eb:55:27:eb:64:dd:0f:15:12:4e:4f:ba:89: d1:00:f8:19:ce:1f:80:ee:3a:b7:f0:7e:66:3c:fd: 97:b7:35:15:3a:ec:e1:4f:8d:5b:ea:e2:80:d7:38: 43:7d:af:14:94:ef:58:eb:29:18:a1:a8:c3:c2:81: 13:ba:ca:de:27:d6:c0:32:33:83:8f:41:7c:90:9b: 38:54:6d:04:a3:ee:f6:28:16:56:dc:ae:c1:2d:00: 05:63:52:12:4e:0a:65:7c:ad:b7:94:a4:11:f4:cc: 50:ee:5d:26:90:a7:81:1a:6d:ee:96:a9:9a:a5:f0: 69:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4A:23:09:51:F0:25:96:32:F0:EF:9F:6C:82:75:F6:73:D9:4F:B6 X509v3 Authority Key Identifier: keyid:C4:5A:60:11:C6:B7:61:58:C0:F6:C5:C2:72:D8:2D:80:27:F8:8F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFpgEca3YVjA9sXCctgtgCf4j6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0bfe8-9a3e-4000-adf8-ff287c062b61/1/xFpgEca3YVjA9sXCctgtgCf4j6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:dc:32:83:04:03:78:d0:46:4a:6a:f5:1f:5c:07:ec:5a:3c: a8:bf:51:a8:ca:ca:de:2f:71:62:44:af:10:21:a0:cc:05:e6: b4:d8:65:94:a9:9a:56:1e:05:13:49:16:07:8b:5e:d7:72:5e: 1b:a1:a5:8c:27:35:8c:8a:8a:32:75:61:cf:e5:6e:7f:fb:44: 8d:b6:15:96:b0:fe:23:58:e9:7b:f7:a3:3f:e0:43:c5:4f:77: 5c:be:07:f0:c6:3f:ce:f7:3c:5b:cd:c1:56:14:3a:bd:c7:4a: c2:19:a1:bb:27:88:9e:5c:a5:79:3c:b1:9a:4e:cc:e3:cd:25: 65:93:c4:27:49:0b:a6:39:75:69:89:1d:78:54:a9:85:ec:eb: e5:bc:36:f5:16:0f:48:c0:93:40:9d:77:92:3a:77:5d:1b:a8: 56:f0:cb:19:42:34:92:fa:27:ae:4b:57:2f:43:c3:fe:61:6c: 99:5f:f0:62:5a:ec:5d:62:ca:0a:21:46:1c:6f:96:a2:9e:07: c2:6d:3a:3c:a5:3e:9f:94:55:d2:57:ad:f0:48:1b:93:91:13: 2b:8b:e8:75:78:09:38:dc:25:2f:f8:d1:19:f8:d6:0f:a4:f6: e7:ea:08:18:bb:d7:87:bd:a5:21:7d:de:3c:b5:c2:14:5f:61: 58:ac:48:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPsSKu7i9qmAaJxRVK2YxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWE2MDExYzZiNzYxNThjMGY2YzVjMjcyZDgyZDgwMjdm ODhmYTMwHhcNMjUxMjI2MDYwMDQ0WhcNMjUxMjI3MDYwMDQ0WjAzMTEwLwYDVQQD EyhkNTRhMjMwOTUxZjAyNTk2MzJmMGVmOWY2YzgyNzVmNjczZDk0ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5udYyY8SARPCs/m/6SRotb8qnhiX Z0AQ4AJIb1hRlyBOZmRf7V/DhiMQDLK3pXPdC7/7PPtW0Jn8VUwAd3hvc6SlG34r l4u9iS0wPoHkT/6hJFLRPkqryfD+AErLe+oWtszIsIyV3JWq/sQ2i3hP5Q6oR/Nq lQrZPp3Quq0tFs6lDWTI22JsAetVJ+tk3Q8VEk5PuonRAPgZzh+A7jq38H5mPP2X tzUVOuzhT41b6uKA1zhDfa8UlO9Y6ykYoajDwoETusreJ9bAMjODj0F8kJs4VG0E o+72KBZW3K7BLQAFY1ISTgplfK23lKQR9MxQ7l0mkKeBGm3ulqmapfBpjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVKIwlR8CWWMvDvn2yCdfZz2U+2MB8GA1UdIwQY MBaAFMRaYBHGt2FYwPbFwnLYLYAn+I+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGJmZTgtOWEzZS00MDAwLWFkZjgt ZmYyODdjMDYyYjYxLzEveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGJmZTgtOWEzZS00MDAwLWFkZjgtZmYyODdjMDYyYjYx LzEveEZwZ0VjYTNZVmpBOXNYQ2N0Z3RnQ2Y0ajZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9wygwQD eNBGSmr1H1wH7Fo8qL9RqMrK3i9xYkSvECGgzAXmtNhllKmaVh4FE0kWB4te13Je G6GljCc1jIqKMnVhz+Vuf/tEjbYVlrD+I1jpe/ejP+BDxU93XL4H8MY/zvc8W83B VhQ6vcdKwhmhuyeInlyleTyxmk7M480lZZPEJ0kLpjl1aYkdeFSphezr5bw29RYP SMCTQJ13kjp3XRuoVvDLGUI0kvonrktXL0PD/mFsmV/wYlrsXWLKCiFGHG+Wop4H wm06PKU+n5RV0let8Egbk5ETK4vodXgJONwlL/jRGfjWD6T25+oIGLvXh72lIX3e PLXCFF9hWKxIyQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:05 2025 by rpki-client