This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft File: SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft (raw, json) Hash identifier: xX4SOV1X7hvhJWsjc8QS24IHN1+4Z/hyWzc28cmGVJg= Subject key identifier: E9:4A:F2:F6:68:55:F3:C9:DD:74:01:97:59:10:57:AE:A0:8E:3B:5C Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02 Certificate serial: 019B3A8FEF6F8CC6FE8DC096EF3032E0018A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 07:01:09 +0000 Manifest this update: Sat 20 Dec 2025 07:01:09 +0000 Manifest next update: Sun 21 Dec 2025 07:01:09 +0000 Files and hashes: 1: 2TabSpltHUMp_5ejqOpWZde5yuo.roa (hash: 3/hdPalq/aa4mw4O394+y1isU6rPiSjjsa/MhWeedzA=) 2: SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl (hash: WCKCgU47XJ4B4xQAUHW0IsfIPRwp75F92JJZhy+SbSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:ef:6f:8c:c6:fe:8d:c0:96:ef:30:32:e0:01:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02 Validity Not Before: Dec 20 07:01:09 2025 GMT Not After : Dec 21 07:01:09 2025 GMT Subject: CN=e94af2f66855f3c9dd740197591057aea08e3b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:09:7f:30:1e:fd:4b:92:8e:af:88:72:a0: 9e:19:18:53:5c:80:49:3c:bf:e7:4c:8d:8f:b4:84: 06:c5:01:bf:75:8e:cb:af:ab:71:f5:4f:d5:fa:b7: 79:eb:ee:b4:d0:17:d5:4c:1b:11:59:51:df:b6:d4: bb:3b:93:34:a7:08:0e:bc:b7:9a:e6:2f:21:3b:93: aa:b0:11:77:b6:00:f5:5d:85:59:4f:eb:56:57:02: 5b:72:c0:02:e6:7a:0c:19:18:97:32:2d:7e:e8:4f: 05:c4:38:33:b2:c5:92:b5:90:4a:53:af:b3:02:90: 77:8d:70:6d:33:51:62:76:76:c8:07:9d:62:27:e2: 66:a9:cc:c6:69:bf:34:89:11:34:5c:eb:13:52:84: 9e:4e:00:b1:b9:0d:98:31:50:de:1e:e9:65:92:88: eb:ea:a5:3f:4d:1e:22:07:e5:52:43:06:52:5c:84: cb:d2:02:b9:d9:6f:42:22:b5:2c:00:e0:2d:19:ad: e2:12:57:af:95:5f:e8:61:80:dc:4e:be:74:86:91: 8f:d7:d8:66:d3:f7:de:75:ad:c3:4b:78:84:71:dd: 8d:6d:02:3f:9b:d4:7b:95:81:fa:b3:c7:ed:bf:50: ca:2d:db:bb:e9:ac:da:d2:38:14:af:63:49:6e:77: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:4A:F2:F6:68:55:F3:C9:DD:74:01:97:59:10:57:AE:A0:8E:3B:5C X509v3 Authority Key Identifier: keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:05:19:c7:29:74:ad:a7:93:4d:ed:39:54:b6:e9:c6:59:e3: 2a:66:f3:cc:33:e3:a4:ca:41:90:a4:61:4c:d7:83:6f:ba:88: 25:a3:11:30:63:9b:92:6f:5f:5e:7f:1a:8b:f9:ae:71:e4:24: b1:d8:5d:cd:c2:24:5a:40:c2:db:4e:1a:09:2c:4b:4a:0d:2c: ff:8f:84:e7:78:c6:8f:2f:8c:a8:f7:c5:df:d4:bf:c1:9d:cd: 36:50:f0:fa:30:69:99:09:a3:b9:30:33:d1:6f:ee:e1:40:eb: 47:6b:52:e6:9b:93:7c:8d:4b:92:0b:18:2c:57:c2:64:d2:7d: c0:13:84:05:be:0e:f1:93:96:c5:36:ce:e0:7f:7a:c9:c5:95: e1:7f:4f:25:c7:81:32:ff:5e:b4:0d:45:12:b6:21:0c:a4:e7: 76:81:4e:35:bf:95:4b:d4:d3:2a:81:32:bf:ee:c1:be:20:21: 1f:c2:33:0e:70:85:3f:15:5f:9d:a0:5e:10:d5:93:c7:61:f0: f5:9e:d1:f6:11:b5:69:1d:d4:c3:35:8e:d5:59:65:67:7e:9f: 40:21:a0:0a:a9:33:3e:b5:3d:65:19:2d:5a:8a:af:92:07:a1: 1d:d8:fc:f9:fc:c1:9b:53:29:f6:5d:ae:39:5f:0a:bb:17:9d: de:e7:df:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+9vjMb+jcCW7zAy4AGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1 YjBmMDIwHhcNMjUxMjIwMDcwMTA5WhcNMjUxMjIxMDcwMTA5WjAzMTEwLwYDVQQD EyhlOTRhZjJmNjY4NTVmM2M5ZGQ3NDAxOTc1OTEwNTdhZWEwOGUzYjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW0JfzAe/UuSjq+IcqCeGRhTXIBJ PL/nTI2PtIQGxQG/dY7Lr6tx9U/V+rd56+600BfVTBsRWVHfttS7O5M0pwgOvLea 5i8hO5OqsBF3tgD1XYVZT+tWVwJbcsAC5noMGRiXMi1+6E8FxDgzssWStZBKU6+z ApB3jXBtM1FidnbIB51iJ+JmqczGab80iRE0XOsTUoSeTgCxuQ2YMVDeHullkojr 6qU/TR4iB+VSQwZSXITL0gK52W9CIrUsAOAtGa3iElevlV/oYYDcTr50hpGP19hm 0/feda3DS3iEcd2NbQI/m9R7lYH6s8ftv1DKLdu76aza0jgUr2NJbneGOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlK8vZoVfPJ3XQBl1kQV66gjjtcMB8GA1UdIwQY MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt OGM3ZDIwOTIzYjA4LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4 LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQUZxyl0 raeTTe05VLbpxlnjKmbzzDPjpMpBkKRhTNeDb7qIJaMRMGObkm9fXn8ai/muceQk sdhdzcIkWkDC204aCSxLSg0s/4+E53jGjy+MqPfF39S/wZ3NNlDw+jBpmQmjuTAz 0W/u4UDrR2tS5puTfI1LkgsYLFfCZNJ9wBOEBb4O8ZOWxTbO4H96ycWV4X9PJceB Mv9etA1FErYhDKTndoFONb+VS9TTKoEyv+7BviAhH8IzDnCFPxVfnaBeENWTx2Hw 9Z7R9hG1aR3UwzWO1VllZ36fQCGgCqkzPrU9ZRktWoqvkgehHdj8+fzBm1Mp9l2u OV8Kuxed3uffew== -----END CERTIFICATE-----Generated at Sat Dec 20 12:35:46 2025 by rpki-client