This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft File: xpZo80fFWt13rFF-kzHd5_w1VqY.mft (raw, json) Hash identifier: goVNO5MjmQMBH4zDYurE5PlaMQ1YOWSbJqPBoqofjXM= Subject key identifier: 36:13:E7:D5:27:34:1F:2D:11:BA:B5:AC:61:A4:E9:A0:DC:59:24:5E Authority key identifier: C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6 Certificate issuer: /CN=c69668f347c55add77ac517e9331dde7fc3556a6 Certificate serial: 019B3FB5AEC25DBC8A26177C587B7C823282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 07:00:29 +0000 Manifest this update: Sun 21 Dec 2025 07:00:29 +0000 Manifest next update: Mon 22 Dec 2025 07:00:29 +0000 Files and hashes: 1: BXeoSIu-_SRx3A6HaJlOPOszvDk.roa (hash: GGULqsTNy/97TMMZdfL/fue1ku/lCYDFj0fY/D6J2uE=) 2: xpZo80fFWt13rFF-kzHd5_w1VqY.crl (hash: uQUmZRYENVQnlP6w+URXzvRzX3oicdQj68vnQ9aJ288=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:ae:c2:5d:bc:8a:26:17:7c:58:7b:7c:82:32:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c69668f347c55add77ac517e9331dde7fc3556a6 Validity Not Before: Dec 21 07:00:29 2025 GMT Not After : Dec 22 07:00:29 2025 GMT Subject: CN=3613e7d527341f2d11bab5ac61a4e9a0dc59245e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:13:64:1c:85:99:a6:83:bf:3f:46:ac:8d: 54:7d:25:32:51:fb:5f:42:44:08:52:13:9a:6e:cf: 35:2d:3b:73:c3:a2:26:39:01:0c:44:d8:e4:4d:a6: 6a:b3:5c:76:5b:8a:04:eb:83:ab:d5:c5:69:f8:88: 04:4d:d4:36:52:e5:f8:8c:b3:07:97:e7:4e:4c:ae: 56:72:11:5b:e1:44:3e:f9:31:32:e1:91:09:97:d0: e1:2a:02:fa:75:b0:86:31:e7:76:6b:69:60:7f:13: 3a:6c:91:21:48:79:6c:cf:7b:61:82:1c:79:17:eb: fe:b2:98:4b:49:b0:42:39:ba:7b:a5:09:d3:c5:08: 20:4b:a3:18:db:eb:65:3c:dd:56:fd:96:34:db:96: b4:fb:8f:d6:3a:b7:43:e4:50:2a:e5:72:ef:23:07: 98:b5:c9:e2:22:03:ff:f2:0c:35:37:43:9e:cd:9e: bf:8d:a5:fe:50:23:28:fd:f6:f4:e9:12:12:57:e6: 23:6d:18:6d:d8:28:a3:d1:8d:ef:43:ef:c0:36:4c: 59:35:c0:92:43:84:e8:f5:37:9b:3a:ea:a5:44:dc: 60:17:2b:08:5a:11:37:23:60:c6:e3:81:da:45:48: 6b:24:6e:32:e3:76:a7:58:9e:1b:1f:62:35:b4:d7: a8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:E7:D5:27:34:1F:2D:11:BA:B5:AC:61:A4:E9:A0:DC:59:24:5E X509v3 Authority Key Identifier: keyid:C6:96:68:F3:47:C5:5A:DD:77:AC:51:7E:93:31:DD:E7:FC:35:56:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpZo80fFWt13rFF-kzHd5_w1VqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/060969-5caf-418f-8c25-acb2723a5076/1/xpZo80fFWt13rFF-kzHd5_w1VqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:95:3e:4d:89:1e:73:4b:b5:cc:0b:cf:41:51:99:b3:07:7e: d9:8a:78:6c:90:b1:7d:ec:e6:a1:36:a9:bc:79:fe:49:66:9f: 45:6b:60:8d:d8:6b:91:1c:f4:27:fc:47:60:e6:5a:dc:6a:81: eb:d3:42:7f:b7:da:cd:2a:96:ee:e1:f7:8b:01:e3:41:67:f9: 3a:69:79:30:de:2a:28:cc:9d:7f:ee:82:33:0c:9b:97:45:ee: a8:85:95:55:e0:6a:cf:81:f5:fe:29:4e:8c:13:4a:d2:ad:14: 10:4b:40:7e:cd:4b:b6:fb:78:7d:4d:f8:8c:e3:e2:7e:6b:f5: e6:2c:44:99:bb:00:d6:50:ce:56:92:25:49:ab:28:7c:2a:07: 28:89:d6:0b:48:af:18:d7:42:ae:92:a9:9c:16:f3:7a:7c:f6: b6:76:a1:f4:2e:df:40:68:a2:5c:11:b9:c8:d7:c1:e8:75:32: 52:55:bd:7a:24:ed:98:28:eb:7f:3b:ef:43:1a:9f:40:5a:3d: e1:32:f4:25:98:9e:89:5f:5f:40:c3:4c:19:2e:43:e1:b0:5e: 15:f8:56:61:75:27:2f:6b:29:e8:a9:07:90:05:e8:75:13:9a: 60:a0:ec:34:40:e4:5f:22:ec:cb:78:26:c0:6e:35:42:bf:10: 9b:fd:e5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ta7CXbyKJhd8WHt8gjKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTY2OGYzNDdjNTVhZGQ3N2FjNTE3ZTkzMzFkZGU3ZmMz NTU2YTYwHhcNMjUxMjIxMDcwMDI5WhcNMjUxMjIyMDcwMDI5WjAzMTEwLwYDVQQD EygzNjEzZTdkNTI3MzQxZjJkMTFiYWI1YWM2MWE0ZTlhMGRjNTkyNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0TZByFmaaDvz9GrI1UfSUyUftf QkQIUhOabs81LTtzw6ImOQEMRNjkTaZqs1x2W4oE64Or1cVp+IgETdQ2UuX4jLMH l+dOTK5WchFb4UQ++TEy4ZEJl9DhKgL6dbCGMed2a2lgfxM6bJEhSHlsz3thghx5 F+v+sphLSbBCObp7pQnTxQggS6MY2+tlPN1W/ZY025a0+4/WOrdD5FAq5XLvIweY tcniIgP/8gw1N0OezZ6/jaX+UCMo/fb06RISV+YjbRht2Cij0Y3vQ+/ANkxZNcCS Q4To9TebOuqlRNxgFysIWhE3I2DG44HaRUhrJG4y43anWJ4bH2I1tNeotwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYT59UnNB8tEbq1rGGk6aDcWSReMB8GA1UdIwQY MBaAFMaWaPNHxVrdd6xRfpMx3ef8NVamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUt YWNiMjcyM2E1MDc2LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wNjA5NjktNWNhZi00MThmLThjMjUtYWNiMjcyM2E1MDc2 LzEveHBabzgwZkZXdDEzckZGLWt6SGQ1X3cxVnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJU+TYke c0u1zAvPQVGZswd+2Yp4bJCxfezmoTapvHn+SWafRWtgjdhrkRz0J/xHYOZa3GqB 69NCf7fazSqW7uH3iwHjQWf5Oml5MN4qKMydf+6CMwybl0XuqIWVVeBqz4H1/ilO jBNK0q0UEEtAfs1Ltvt4fU34jOPifmv15ixEmbsA1lDOVpIlSasofCoHKInWC0iv GNdCrpKpnBbzenz2tnah9C7fQGiiXBG5yNfB6HUyUlW9eiTtmCjrfzvvQxqfQFo9 4TL0JZieiV9fQMNMGS5D4bBeFfhWYXUnL2sp6KkHkAXodROaYKDsNEDkXyLsy3gm wG41Qr8Qm/3luw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:49:52 2025 by rpki-client