This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json) Hash identifier: xuRnet00VVPqEK9VvFqhPo5a65ODzXOuTvkOhr3MOCo= Subject key identifier: BD:27:F6:39:AD:95:EB:21:FF:BE:3C:48:72:34:1C:F8:7C:CE:54:F0 Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019B27AE10EBBB03733D5F0FD43104A8DB70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft Manifest number: 0799 Signing time: Tue 16 Dec 2025 15:01:17 +0000 Manifest this update: Tue 16 Dec 2025 15:01:17 +0000 Manifest next update: Wed 17 Dec 2025 15:01:17 +0000 Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=) 2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: naGm/s8a28Cp8b5hH3M4XzwFKK3VJE/gFBXhWcldSqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:10:eb:bb:03:73:3d:5f:0f:d4:31:04:a8:db:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Dec 16 15:01:17 2025 GMT Not After : Dec 17 15:01:17 2025 GMT Subject: CN=bd27f639ad95eb21ffbe3c4872341cf87cce54f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0b:d0:2c:86:52:30:d7:3e:11:ac:5e:5a:9e: 57:0f:63:16:64:6c:71:6c:e1:55:fc:96:62:de:8d: a3:00:7d:0b:8e:f5:8f:f4:87:47:98:65:4e:7d:1d: 4d:1b:9c:87:b4:3b:1b:bb:bd:29:73:e4:de:85:73: 53:d7:01:f1:3f:72:cf:3a:dc:eb:53:1c:50:57:9a: 03:6a:5a:01:d8:89:19:c0:88:4e:95:fe:56:5c:c8: 54:de:ca:a8:11:87:28:95:36:64:7c:53:23:e1:37: 35:20:0b:e4:21:19:e1:8d:84:f4:40:c7:d2:27:09: ce:c8:ad:8d:7b:d2:89:24:bc:8c:e3:7b:79:15:e2: c1:66:05:18:b4:7c:aa:cc:2f:7f:da:0b:4e:a9:a1: 25:99:74:68:67:63:ff:03:2b:f1:9d:20:a8:db:73: 21:15:35:69:eb:9f:29:6d:00:65:39:05:81:f7:73: 6c:2d:e0:cd:83:68:63:b1:9b:2e:79:d6:49:f8:0d: ab:aa:6c:57:d7:d6:c3:af:64:9a:38:86:f4:c0:f4: 5e:7a:39:bf:66:a6:bd:8c:d7:da:c5:80:3e:38:4f: d6:0e:2c:67:19:ad:50:6f:3f:4e:7d:7d:08:6a:8c: 2b:f2:5e:59:b2:2a:d4:af:72:1a:08:be:d0:b1:46: 32:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:27:F6:39:AD:95:EB:21:FF:BE:3C:48:72:34:1C:F8:7C:CE:54:F0 X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:fc:f8:92:a2:c4:f4:b1:9b:13:a2:5f:b3:e8:c0:42:0f:65: e9:f8:c7:9b:2d:35:31:19:fa:8b:40:ed:05:86:1f:07:33:c0: f9:78:6f:3d:ce:b3:cd:46:79:9d:34:be:27:60:ec:32:44:53: 83:e7:47:a6:8d:76:be:10:ab:44:94:0d:f4:70:11:0a:bb:c2: f7:97:5f:f7:b4:93:9b:ef:f7:d5:a5:a2:9e:76:40:b7:3d:a5: bd:70:60:95:f7:f1:a2:30:bc:34:58:05:4f:2a:58:11:a2:36: 4b:87:2f:56:14:0c:e1:da:13:87:de:a6:58:cf:44:40:fd:55: 45:98:42:ec:53:f1:c8:f1:28:dd:3c:b1:aa:d6:2a:7f:8f:63: 3c:ff:b2:13:b9:e2:c4:7c:e5:a1:59:2f:32:74:b4:19:3e:e3: 4b:0e:6b:65:dd:64:a2:2e:fb:43:1c:ef:37:96:c3:9d:64:76: 55:7b:96:fc:3e:97:ca:73:88:95:bc:46:46:92:57:e2:1d:52: 34:43:46:42:3b:79:81:58:ac:e7:fe:f4:07:5c:c0:ba:dd:9c: d5:f5:a4:a6:27:25:73:c4:d5:35:d3:d7:f0:d4:09:03:a8:46: b5:66:4b:40:cc:ef:b0:90:b9:18:90:34:2e:19:13:b7:e2:9c: 4c:cb:44:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrhDruwNzPV8P1DEEqNtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjUxMjE2MTUwMTE3WhcNMjUxMjE3MTUwMTE3WjAzMTEwLwYDVQQD EyhiZDI3ZjYzOWFkOTVlYjIxZmZiZTNjNDg3MjM0MWNmODdjY2U1NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAvQLIZSMNc+EaxeWp5XD2MWZGxx bOFV/JZi3o2jAH0LjvWP9IdHmGVOfR1NG5yHtDsbu70pc+TehXNT1wHxP3LPOtzr UxxQV5oDaloB2IkZwIhOlf5WXMhU3sqoEYcolTZkfFMj4Tc1IAvkIRnhjYT0QMfS JwnOyK2Ne9KJJLyM43t5FeLBZgUYtHyqzC9/2gtOqaElmXRoZ2P/AyvxnSCo23Mh FTVp658pbQBlOQWB93NsLeDNg2hjsZsuedZJ+A2rqmxX19bDr2SaOIb0wPReejm/ Zqa9jNfaxYA+OE/WDixnGa1Qbz9OfX0Iaowr8l5ZsirUr3IaCL7QsUYyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0n9jmtlesh/748SHI0HPh8zlTwMB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfz4kqLE 9LGbE6Jfs+jAQg9l6fjHmy01MRn6i0DtBYYfBzPA+XhvPc6zzUZ5nTS+J2DsMkRT g+dHpo12vhCrRJQN9HARCrvC95df97STm+/31aWinnZAtz2lvXBglffxojC8NFgF TypYEaI2S4cvVhQM4doTh96mWM9EQP1VRZhC7FPxyPEo3TyxqtYqf49jPP+yE7ni xHzloVkvMnS0GT7jSw5rZd1koi77QxzvN5bDnWR2VXuW/D6XynOIlbxGRpJX4h1S NENGQjt5gVis5/70B1zAut2c1fWkpiclc8TVNdPX8NQJA6hGtWZLQMzvsJC5GJA0 LhkTt+KcTMtEzw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:14:08 2025 by rpki-client