This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json) Hash identifier: aifX5zvvFakiJaf5nIb/fFD6oSPb4WrygxzYrPVFrE4= Subject key identifier: 1D:F6:DE:1B:CD:2D:C5:6E:B3:07:A1:D8:C3:8A:36:37:7F:68:B1:31 Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019B69C4A0BEBEBD705AAD9FB066031B888C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 11:00:52 +0000 Manifest this update: Mon 29 Dec 2025 11:00:52 +0000 Manifest next update: Tue 30 Dec 2025 11:00:52 +0000 Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=) 2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: jFfPXDBuIK9KnuG5MPe37csAuALJVBidOeW8jQEaZ2o=) 3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:a0:be:be:bd:70:5a:ad:9f:b0:66:03:1b:88:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Dec 29 11:00:52 2025 GMT Not After : Dec 30 11:00:52 2025 GMT Subject: CN=1df6de1bcd2dc56eb307a1d8c38a36377f68b131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:e2:d8:06:fd:a8:22:e6:1b:dc:23:53:4f: 88:9c:f5:96:2d:8d:b9:51:3e:39:81:08:c2:4b:48: 21:a4:51:39:69:6c:28:ff:aa:92:57:3b:d4:33:bc: a2:d1:09:a2:f6:51:0a:1a:35:a7:a2:75:91:fd:99: b1:33:a5:59:28:9c:eb:10:ec:84:c8:6c:b6:cc:d1: f5:a1:e8:46:a9:bf:22:90:a1:16:01:c5:d7:eb:3d: 6a:82:56:ed:10:d3:ce:d6:a8:89:6a:86:3b:57:4f: 43:3b:64:0d:fa:a7:e1:e3:6e:ef:89:5d:e0:0c:2e: 74:8a:3f:4a:70:ef:4f:62:d5:59:f7:49:cd:fc:20: c5:6f:ed:d5:fc:cf:39:42:96:0b:da:25:d3:45:5e: ae:a1:25:21:04:1c:26:2f:bc:92:f8:cb:c9:e4:2c: 14:b4:2c:e8:20:61:b2:6b:9c:14:a4:ab:eb:93:0c: 6e:4b:27:7f:08:67:82:a7:72:09:09:90:a8:d3:9f: e2:9e:16:99:fc:7b:ea:93:bf:20:fa:2f:e1:24:37: cc:39:61:45:8c:15:10:c8:ae:a8:97:65:61:38:73: b3:50:8d:61:58:c3:38:8b:c8:34:c2:3b:e2:9f:15: 53:d7:fe:e2:f6:3c:67:34:44:25:aa:1a:97:71:d2: 6e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F6:DE:1B:CD:2D:C5:6E:B3:07:A1:D8:C3:8A:36:37:7F:68:B1:31 X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:dd:10:1b:29:4f:f9:3f:32:c8:3e:15:3d:cd:e9:9d:e2:8d: 1d:01:0e:8a:38:45:80:d4:f5:34:4d:69:e5:6c:97:2c:92:0f: d4:13:38:81:2d:c9:c3:08:b3:2b:6a:43:ab:fd:19:c0:4a:57: 9e:b7:61:2c:8e:b8:db:3d:c9:ad:5b:18:4a:b7:4f:00:03:f3: 5b:13:6f:cb:ff:6c:0d:fd:53:e8:57:20:4c:72:21:95:b4:6f: 8e:06:1d:92:88:89:d5:6f:a1:4a:7c:eb:63:56:38:b0:61:02: f9:9f:1d:79:fa:0e:bf:ea:6c:6b:c5:36:c8:9b:30:0e:80:0a: 1e:94:38:16:fc:f9:f3:89:e4:8e:2a:72:60:b5:2f:8f:7e:f9: 80:e9:c2:32:c6:d2:03:3c:df:3a:19:5d:bb:a7:cd:d8:2b:8b: 4c:40:e5:80:8b:d6:b8:0c:59:28:9f:5f:09:c9:4b:fd:63:2c: 8d:16:65:10:aa:a5:3c:9a:48:3a:8e:90:b0:76:0e:77:4d:bb: c9:67:67:31:ee:4c:ad:85:f0:a8:7d:41:9b:02:ef:06:cf:4a: 02:4a:57:6a:fd:e5:f3:b0:a5:d7:3f:92:1e:e3:d8:b7:6d:07: b2:69:86:b7:c1:ed:ac:4a:a1:d5:56:71:a8:8f:c9:bc:d8:9a: ae:70:fb:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxKC+vr1wWq2fsGYDG4iMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjUxMjI5MTEwMDUyWhcNMjUxMjMwMTEwMDUyWjAzMTEwLwYDVQQD EygxZGY2ZGUxYmNkMmRjNTZlYjMwN2ExZDhjMzhhMzYzNzdmNjhiMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXvi2Ab9qCLmG9wjU0+InPWWLY25 UT45gQjCS0ghpFE5aWwo/6qSVzvUM7yi0Qmi9lEKGjWnonWR/ZmxM6VZKJzrEOyE yGy2zNH1oehGqb8ikKEWAcXX6z1qglbtENPO1qiJaoY7V09DO2QN+qfh427viV3g DC50ij9KcO9PYtVZ90nN/CDFb+3V/M85QpYL2iXTRV6uoSUhBBwmL7yS+MvJ5CwU tCzoIGGya5wUpKvrkwxuSyd/CGeCp3IJCZCo05/inhaZ/Hvqk78g+i/hJDfMOWFF jBUQyK6ol2VhOHOzUI1hWMM4i8g0wjvinxVT1/7i9jxnNEQlqhqXcdJuCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB323hvNLcVusweh2MOKNjd/aLExMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd0QGylP +T8yyD4VPc3pneKNHQEOijhFgNT1NE1p5WyXLJIP1BM4gS3JwwizK2pDq/0ZwEpX nrdhLI642z3JrVsYSrdPAAPzWxNvy/9sDf1T6FcgTHIhlbRvjgYdkoiJ1W+hSnzr Y1Y4sGEC+Z8defoOv+psa8U2yJswDoAKHpQ4Fvz584nkjipyYLUvj375gOnCMsbS AzzfOhldu6fN2CuLTEDlgIvWuAxZKJ9fCclL/WMsjRZlEKqlPJpIOo6QsHYOd027 yWdnMe5MrYXwqH1BmwLvBs9KAkpXav3l87Cl1z+SHuPYt20HsmmGt8HtrEqh1VZx qI/JvNiarnD75Q== -----END CERTIFICATE-----Generated at Mon Dec 29 16:39:54 2025 by rpki-client