This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json) Hash identifier: AbLCrKy3TXbmasxjJ1w1wS4giuY+RKSPQMRozqZqvxE= Subject key identifier: 09:3D:B0:28:1C:A5:18:F2:09:74:BD:85:46:72:2D:1C:85:05:A2:A4 Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5 Certificate serial: 019B72FE355ED5DB8F96134C12467A2BD899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft Manifest number: 17A1 Signing time: Wed 31 Dec 2025 06:00:20 +0000 Manifest this update: Wed 31 Dec 2025 06:00:20 +0000 Manifest next update: Thu 01 Jan 2026 06:00:20 +0000 Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=) 2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: O/mD5Gmd9n7NTuI+1Wy5kHKiKwophmakY2LZYyxp3nk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 06:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:fe:35:5e:d5:db:8f:96:13:4c:12:46:7a:2b:d8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5 Validity Not Before: Dec 31 06:00:20 2025 GMT Not After : Jan 1 06:00:20 2026 GMT Subject: CN=093db0281ca518f20974bd8546722d1c8505a2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:67:4f:24:fa:8b:df:0f:90:78:50:60:70: 1b:8f:05:a3:4d:ee:d1:3c:4e:b7:1c:47:c1:31:a3: 73:13:3a:54:61:45:bd:c5:e1:1b:85:78:70:ec:00: 6a:e2:bd:7f:aa:91:44:d0:7c:46:e9:6c:a2:2f:9e: 18:69:55:68:93:de:c8:28:2c:3a:31:4b:5c:0a:87: ef:81:f3:e5:94:39:17:e1:37:25:80:99:55:5c:88: c9:4c:0a:50:90:25:b9:3a:08:e6:d5:59:c3:e9:45: 2a:d8:e8:0e:00:31:12:25:26:66:1e:04:9a:a6:8e: 9f:b1:f1:af:f2:60:b6:e3:48:81:7f:ad:29:6c:3d: 1f:53:df:05:3c:dc:10:3d:1b:2f:ac:6b:f8:45:d2: 04:3d:0f:77:d1:eb:bb:83:0c:bc:a1:e7:ae:1f:43: 8e:c0:bb:53:ba:54:4a:09:26:06:d5:c3:68:67:68: e5:44:44:ff:97:05:d0:8d:90:fb:cb:58:12:1c:f7: 0f:27:08:79:38:e2:6d:7e:8d:e1:63:f2:bf:0b:fe: ae:0b:d7:ca:df:4e:0e:be:13:22:d8:da:db:15:80: 6c:41:68:2b:71:c7:ef:05:0b:23:3a:ea:38:30:35: 8d:c1:d6:75:a6:7b:a1:6b:f1:6e:10:0b:94:75:5c: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:B0:28:1C:A5:18:F2:09:74:BD:85:46:72:2D:1C:85:05:A2:A4 X509v3 Authority Key Identifier: keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:e2:7c:ef:77:b1:82:08:33:fa:72:f2:30:3d:a2:b1:66:9d: f1:4f:dd:63:d3:ea:ba:6c:c1:72:48:21:8d:e0:72:38:77:1d: 84:5f:a8:41:c5:80:2e:88:d5:84:31:38:65:30:4f:6f:34:e2: de:98:3f:2e:3e:99:c5:70:3e:b5:b9:d4:18:6e:09:25:67:07: e8:b0:9d:c7:c7:7c:b5:33:23:c3:1b:56:e8:54:1e:d4:43:ac: 70:da:11:36:75:ea:d6:68:c5:8f:16:04:e7:8e:4d:90:b6:f4: 93:a2:37:9f:bf:74:43:65:67:ae:eb:c7:dc:d3:e8:f3:91:9d: e8:9f:11:46:98:34:42:23:3e:56:ab:a0:b8:9f:a9:d7:e9:51: 25:fc:ea:49:b6:0f:14:18:42:91:b0:af:73:dd:20:dc:ea:2a: e0:aa:ea:c4:3a:07:44:27:3f:fe:47:07:29:08:86:29:84:4f: 5b:d9:a4:31:26:55:9b:06:40:25:86:1a:78:f3:cc:89:ec:4f: d9:19:5e:b1:02:99:67:2f:bc:21:2c:7e:c9:f9:26:a6:79:eb: f3:47:d6:a4:cf:2c:58:7f:d9:fa:2b:30:b8:db:52:c7:c3:1c: ff:00:48:fe:ef:f2:60:26:b4:98:34:6e:7e:a0:b2:dd:f8:23: 0b:dc:d8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZty/jVe1duPlhNMEkZ6K9iZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjIyMDNiYzAyODY3MDIzNDVhYzQ2NTUwMGI0NDg4YzAz MWM2YjUwHhcNMjUxMjMxMDYwMDIwWhcNMjYwMTAxMDYwMDIwWjAzMTEwLwYDVQQD EygwOTNkYjAyODFjYTUxOGYyMDk3NGJkODU0NjcyMmQxYzg1MDVhMmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouZnTyT6i98PkHhQYHAbjwWjTe7R PE63HEfBMaNzEzpUYUW9xeEbhXhw7ABq4r1/qpFE0HxG6WyiL54YaVVok97IKCw6 MUtcCofvgfPllDkX4TclgJlVXIjJTApQkCW5Ogjm1VnD6UUq2OgOADESJSZmHgSa po6fsfGv8mC240iBf60pbD0fU98FPNwQPRsvrGv4RdIEPQ930eu7gwy8oeeuH0OO wLtTulRKCSYG1cNoZ2jlRET/lwXQjZD7y1gSHPcPJwh5OOJtfo3hY/K/C/6uC9fK 304OvhMi2NrbFYBsQWgrccfvBQsjOuo4MDWNwdZ1pnuha/FuEAuUdVxNdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk9sCgcpRjyCXS9hUZyLRyFBaKkMB8GA1UdIwQY MBaAFMXyIDvAKGcCNFrEZVALRIjAMca1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYt MjQ0NWY2MzRlOTI4LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYtMjQ0NWY2MzRlOTI4 LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouJ873ex gggz+nLyMD2isWad8U/dY9PqumzBckghjeByOHcdhF+oQcWALojVhDE4ZTBPbzTi 3pg/Lj6ZxXA+tbnUGG4JJWcH6LCdx8d8tTMjwxtW6FQe1EOscNoRNnXq1mjFjxYE 545NkLb0k6I3n790Q2VnruvH3NPo85Gd6J8RRpg0QiM+VquguJ+p1+lRJfzqSbYP FBhCkbCvc90g3Ooq4KrqxDoHRCc//kcHKQiGKYRPW9mkMSZVmwZAJYYaePPMiexP 2RlesQKZZy+8ISx+yfkmpnnr80fWpM8sWH/Z+iswuNtSx8Mc/wBI/u/yYCa0mDRu fqCy3fgjC9zYNQ== -----END CERTIFICATE-----Generated at Wed Dec 31 11:03:07 2025 by rpki-client