This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft File: xVnUaTVVufKtaAe6ztxLWi5wGkg.mft (raw, json) Hash identifier: LRruqCLRVEjfVwn+pf0+6xZWrXV3aTQK8iKlYpb1a5s= Subject key identifier: D3:C7:7A:1C:C0:1A:39:98:92:6A:77:D4:27:5F:65:6F:B9:F5:D2:EF Authority key identifier: C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 Certificate issuer: /CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Certificate serial: 019B71EC0C7D17923D051F7F4123492357AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft Manifest number: 0AD2 Signing time: Wed 31 Dec 2025 01:00:53 +0000 Manifest this update: Wed 31 Dec 2025 01:00:53 +0000 Manifest next update: Thu 01 Jan 2026 01:00:53 +0000 Files and hashes: 1: xPJn9HaU4t51hbW5OBuJoCsPyo4.roa (hash: uz1JqEO2ZedJ66isTlXBDY0hlcT6/Q49MhmsWTQhugM=) 2: xVnUaTVVufKtaAe6ztxLWi5wGkg.crl (hash: BP95hXJyX2boPQa7S2WwB4rrBH+Zdn0hVHWW8/vJjlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:0c:7d:17:92:3d:05:1f:7f:41:23:49:23:57:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c559d4693555b9f2ad6807bacedc4b5a2e701a48 Validity Not Before: Dec 31 01:00:53 2025 GMT Not After : Jan 1 01:00:53 2026 GMT Subject: CN=d3c77a1cc01a3998926a77d4275f656fb9f5d2ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:14:8b:07:c7:a5:d8:c3:8f:c8:d5:44:a0: ca:b6:5d:ca:bb:b6:3d:99:68:05:aa:5c:da:03:99: 6f:a7:d8:14:97:62:2e:1c:39:e2:70:b1:2e:00:e5: f7:1c:1b:9f:12:47:ae:25:70:15:23:99:06:20:11: fa:48:cc:ed:a1:5c:79:9e:5e:6e:53:9f:1f:88:17: 89:e7:4e:e1:e1:ed:e0:78:49:03:dd:4b:f0:4d:e7: 9d:05:95:3c:bb:46:a4:28:27:ed:2e:94:bd:d8:bc: 13:2e:e8:13:97:6f:fe:23:a3:4b:b8:f8:31:c3:94: b1:9d:86:d7:9a:e7:61:7d:8c:36:96:8a:5e:31:c2: 24:65:a7:ab:b8:c9:d4:72:ff:6e:03:b1:cd:62:33: bb:cd:37:b3:28:f2:1e:7a:74:c4:7f:f4:a4:7e:51: dc:d0:0e:d1:73:8b:c9:53:83:84:e3:36:d8:70:6c: 50:58:28:d7:2b:66:28:2c:2f:c1:f2:09:81:d9:1a: 82:97:b2:72:d3:3e:14:72:b9:7f:96:1b:62:aa:be: 6c:eb:5a:56:cd:b4:81:72:9f:c3:13:6f:95:22:c7: 47:4c:b8:46:e8:40:f7:0e:11:46:54:20:84:e0:62: a8:3f:2b:29:78:19:50:4d:17:a1:fd:5e:e2:9b:69: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C7:7A:1C:C0:1A:39:98:92:6A:77:D4:27:5F:65:6F:B9:F5:D2:EF X509v3 Authority Key Identifier: keyid:C5:59:D4:69:35:55:B9:F2:AD:68:07:BA:CE:DC:4B:5A:2E:70:1A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVnUaTVVufKtaAe6ztxLWi5wGkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3f0f8b-af93-423b-bea5-d2e351609759/1/xVnUaTVVufKtaAe6ztxLWi5wGkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:35:66:cb:b4:6c:03:77:9a:1b:fa:79:15:96:d5:3e:6d:3c: b2:70:13:77:90:3d:2b:e8:93:35:97:77:9a:3c:ed:51:e0:2a: ec:b1:70:5b:c4:27:14:23:2b:3a:9b:60:42:bf:56:27:62:a4: 9e:66:0c:46:81:17:37:93:ff:53:38:b0:ec:19:23:e3:18:b8: ab:3d:1a:cc:82:f7:2c:ff:f8:16:e7:68:2a:9e:76:72:b1:a3: 6d:1e:34:61:48:c1:7b:c1:8c:b2:97:73:fe:5a:9e:82:f4:26: c8:db:c0:a1:33:55:4a:8e:44:28:89:89:da:c2:0d:67:ef:d6: 3c:51:3d:e8:c7:2d:13:c8:04:a1:49:6d:e9:f1:56:71:1d:c9: 62:4a:57:02:8e:06:f7:e5:5d:73:be:ad:9d:c6:dc:25:f5:28: 2c:ef:d2:ed:9c:0d:34:ed:00:cc:ca:81:e4:10:d1:0f:b7:3e: 83:a4:c9:a1:39:e3:0a:da:ce:23:c3:60:82:29:32:c9:3e:92: 5e:12:73:a2:fb:34:0f:11:3c:6c:06:bd:0d:72:33:bd:8e:61: 2e:63:e5:25:6b:16:0d:d2:ae:29:ff:08:6f:50:d5:1d:cf:6a: df:8e:2b:a0:79:fd:8b:f6:f9:c5:8d:79:50:3e:b1:a3:f4:8c: 51:d6:1e:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7Ax9F5I9BR9/QSNJI1euMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTlkNDY5MzU1NWI5ZjJhZDY4MDdiYWNlZGM0YjVhMmU3 MDFhNDgwHhcNMjUxMjMxMDEwMDUzWhcNMjYwMTAxMDEwMDUzWjAzMTEwLwYDVQQD EyhkM2M3N2ExY2MwMWEzOTk4OTI2YTc3ZDQyNzVmNjU2ZmI5ZjVkMmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG4UiwfHpdjDj8jVRKDKtl3Ku7Y9 mWgFqlzaA5lvp9gUl2IuHDnicLEuAOX3HBufEkeuJXAVI5kGIBH6SMztoVx5nl5u U58fiBeJ507h4e3geEkD3UvwTeedBZU8u0akKCftLpS92LwTLugTl2/+I6NLuPgx w5SxnYbXmudhfYw2lopeMcIkZaeruMnUcv9uA7HNYjO7zTezKPIeenTEf/SkflHc 0A7Rc4vJU4OE4zbYcGxQWCjXK2YoLC/B8gmB2RqCl7Jy0z4Ucrl/lhtiqr5s61pW zbSBcp/DE2+VIsdHTLhG6ED3DhFGVCCE4GKoPyspeBlQTReh/V7im2lzPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPHehzAGjmYkmp31CdfZW+59dLvMB8GA1UdIwQY MBaAFMVZ1Gk1VbnyrWgHus7cS1oucBpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUt ZDJlMzUxNjA5NzU5LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8zZjBmOGItYWY5My00MjNiLWJlYTUtZDJlMzUxNjA5NzU5 LzEveFZuVWFUVlZ1Zkt0YUFlNnp0eExXaTV3R2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDVmy7Rs A3eaG/p5FZbVPm08snATd5A9K+iTNZd3mjztUeAq7LFwW8QnFCMrOptgQr9WJ2Kk nmYMRoEXN5P/Uziw7Bkj4xi4qz0azIL3LP/4FudoKp52crGjbR40YUjBe8GMspdz /lqegvQmyNvAoTNVSo5EKImJ2sINZ+/WPFE96MctE8gEoUlt6fFWcR3JYkpXAo4G 9+Vdc76tncbcJfUoLO/S7ZwNNO0AzMqB5BDRD7c+g6TJoTnjCtrOI8NggikyyT6S XhJzovs0DxE8bAa9DXIzvY5hLmPlJWsWDdKuKf8Ib1DVHc9q344roHn9i/b5xY15 UD6xo/SMUdYejw== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:55 2025 by rpki-client