This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json) Hash identifier: ZsDFqrMu2SVe9rZDKvtlOcF63S4regQ3EfL81VxvuXs= Subject key identifier: F5:10:A4:50:74:AA:85:55:27:EE:7F:BF:07:7C:4A:2A:0D:4F:13:24 Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Certificate serial: 019B3C7DFA105EA6F7E95C80EE2DFA4A89C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 16:00:47 +0000 Manifest this update: Sat 20 Dec 2025 16:00:47 +0000 Manifest next update: Sun 21 Dec 2025 16:00:47 +0000 Files and hashes: 1: OJBa-NiMuzOYAg4l6ZQbiaLRkSo.roa (hash: zWY5clqa55gDcmN1fPxGPLkXmjUJa6OG2BTGiJ7PAMw=) 2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: N8seI9786wCSzG9N399MRCqzrmhDs31afpQ6s5Oclvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:fa:10:5e:a6:f7:e9:5c:80:ee:2d:fa:4a:89:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb Validity Not Before: Dec 20 16:00:47 2025 GMT Not After : Dec 21 16:00:47 2025 GMT Subject: CN=f510a45074aa855527ee7fbf077c4a2a0d4f1324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:82:12:d1:69:3f:d9:29:23:76:0c:2e:b0: 03:2b:9f:a4:59:63:1f:d8:51:b4:6a:4d:59:a4:c6: 46:03:d2:d9:02:42:a3:63:e9:e2:e5:db:76:2e:13: f7:37:b5:2c:fc:b7:cb:39:5b:36:dc:06:2a:d1:44: 2e:10:d8:b8:64:99:85:6c:32:20:52:ac:ba:ee:27: 4c:f9:37:d5:cd:6b:e6:41:3f:86:61:cf:1c:12:2f: 23:02:a0:53:4b:0b:ae:c6:54:d0:77:8e:2f:ad:09: 17:60:d7:d5:cc:6a:6a:eb:d2:2d:55:c6:a5:e0:32: 16:14:67:9b:2b:0a:74:35:16:40:16:77:8c:ff:c0: d8:09:73:bf:14:eb:1e:bf:db:2a:98:14:b2:3b:5b: a9:62:70:95:82:c3:24:a9:71:2f:09:d8:06:77:2b: 1a:62:35:b9:3c:03:b2:e0:1f:27:d6:0b:db:14:b0: 2f:f6:7a:f7:fa:1e:61:af:33:21:be:a9:27:18:1b: 97:90:de:65:1c:25:b6:df:09:cb:4e:be:f4:95:25: 28:c3:54:6f:3f:ad:ae:db:b8:4d:eb:81:82:c3:2c: c3:1e:64:59:4c:72:86:0e:fe:b4:55:cf:f0:48:9b: b5:3e:df:52:bd:cc:00:8b:51:05:02:d1:04:bb:4d: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:10:A4:50:74:AA:85:55:27:EE:7F:BF:07:7C:4A:2A:0D:4F:13:24 X509v3 Authority Key Identifier: keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d5:9d:ee:d4:ef:ad:36:99:23:c3:27:74:66:57:37:aa:d8: de:ab:af:85:1c:e7:49:04:b5:b9:4b:26:4f:4a:ee:a0:89:96: c1:bc:63:1a:39:4a:c1:a9:37:a0:b4:02:ca:af:0a:c7:fa:44: 4d:23:b9:96:aa:e5:96:c8:7a:b6:f3:d6:29:d6:22:bb:90:25: 4d:03:10:81:59:03:2a:38:83:fd:32:ab:2f:dc:ca:3e:46:22: 27:fd:7e:7f:c9:76:af:b5:64:4d:8c:52:1d:1f:0e:05:04:a4: f7:32:22:d0:a0:74:e5:5b:f3:7f:09:1e:68:fe:02:cf:ec:78: 6b:ea:d6:a2:0d:4c:0e:25:aa:ef:6b:0b:e6:cb:b9:d8:06:ba: 2f:a6:23:d3:bb:ef:2b:29:17:aa:7e:06:ae:3f:9b:22:47:3a: 81:f7:3b:54:47:9a:24:63:1f:30:b2:1a:7a:57:25:55:27:ca: 88:25:9f:86:4d:52:20:ba:83:0c:97:27:e6:dc:b5:1f:37:ec: 09:06:5c:47:6a:d1:13:12:b5:07:39:c0:f8:01:12:13:9c:d4: e1:18:02:26:e3:a8:31:45:2b:69:8c:6c:7e:34:06:d4:c3:ce: 6d:cf:e6:90:45:3a:87:a5:e2:f6:4c:20:30:84:c7:81:fa:4f: 84:94:17:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffoQXqb36VyA7i36SonBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4 OWQ3ZmIwHhcNMjUxMjIwMTYwMDQ3WhcNMjUxMjIxMTYwMDQ3WjAzMTEwLwYDVQQD EyhmNTEwYTQ1MDc0YWE4NTU1MjdlZTdmYmYwNzdjNGEyYTBkNGYxMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WeCEtFpP9kpI3YMLrADK5+kWWMf 2FG0ak1ZpMZGA9LZAkKjY+ni5dt2LhP3N7Us/LfLOVs23AYq0UQuENi4ZJmFbDIg Uqy67idM+TfVzWvmQT+GYc8cEi8jAqBTSwuuxlTQd44vrQkXYNfVzGpq69ItVcal 4DIWFGebKwp0NRZAFneM/8DYCXO/FOsev9sqmBSyO1upYnCVgsMkqXEvCdgGdysa YjW5PAOy4B8n1gvbFLAv9nr3+h5hrzMhvqknGBuXkN5lHCW23wnLTr70lSUow1Rv P62u27hN64GCwyzDHmRZTHKGDv60Vc/wSJu1Pt9SvcwAi1EFAtEEu03UVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUQpFB0qoVVJ+5/vwd8SioNTxMkMB8GA1UdIwQY MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtWd7tTv rTaZI8MndGZXN6rY3quvhRznSQS1uUsmT0ruoImWwbxjGjlKwak3oLQCyq8Kx/pE TSO5lqrllsh6tvPWKdYiu5AlTQMQgVkDKjiD/TKrL9zKPkYiJ/1+f8l2r7VkTYxS HR8OBQSk9zIi0KB05VvzfwkeaP4Cz+x4a+rWog1MDiWq72sL5su52Aa6L6Yj07vv KykXqn4Grj+bIkc6gfc7VEeaJGMfMLIaelclVSfKiCWfhk1SILqDDJcn5ty1Hzfs CQZcR2rRExK1BznA+AESE5zU4RgCJuOoMUUraYxsfjQG1MPObc/mkEU6h6Xi9kwg MITHgfpPhJQXSg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:52:05 2025 by rpki-client