This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json) Hash identifier: VP1OTtVjUDhVOy3mAs0DjdX4u19SZvPeLwCJNKblXHA= Subject key identifier: B4:37:36:0E:CC:BD:1D:E3:45:8F:8B:21:7F:01:6F:BA:CB:DB:F4:14 Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d Certificate serial: 019B3F489F61CFD12F3CA96605D525F85E63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 05:01:22 +0000 Manifest this update: Sun 21 Dec 2025 05:01:22 +0000 Manifest next update: Mon 22 Dec 2025 05:01:22 +0000 Files and hashes: 1: 3AF9vTlPGn0LP4BTNbyIFClKdiE.roa (hash: ErhtxdYMFohKoMlTBF3cO6zqIkHAYZYYcv46l0Ht4TU=) 2: FEeoPiD21ay-PeH3iQ-gflQJ0UI.roa (hash: El+8B1KQ8rtMV0Fbf7tHPn5styqhe70y2ZAwIAOnKkU=) 3: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: t+nVEahujGY58iHq29+ys75+Su2UAWrH9afnemrA7ps=) 4: wpMWqws0Dpp8GOASm90aVo7qq2k.roa (hash: 1SPWjmebIHPEJohavvOHRjKSIv+zhB1rg2pQffIZDP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:9f:61:cf:d1:2f:3c:a9:66:05:d5:25:f8:5e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d Validity Not Before: Dec 21 05:01:22 2025 GMT Not After : Dec 22 05:01:22 2025 GMT Subject: CN=b437360eccbd1de3458f8b217f016fbacbdbf414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:f9:6d:62:26:3c:64:47:bd:a3:ca:d7:ac: ef:c5:eb:6f:f4:6a:48:90:53:12:fb:3a:e4:4c:c7: ef:57:66:8a:2b:4b:30:cf:70:7e:93:dd:62:be:26: d4:18:50:9b:f7:dd:c6:b9:c4:83:29:47:cb:45:e3: d8:15:65:03:af:04:b3:0c:ea:f0:d2:7b:a4:97:8a: ce:63:9d:2b:16:d6:f8:46:cb:a9:ab:45:a2:41:66: c9:8e:3e:c2:8e:40:49:22:db:5d:16:49:7e:8d:75: 91:65:1b:a8:4d:4a:17:9e:6d:89:24:24:1d:95:fc: 99:39:82:58:5b:85:6e:b4:64:bb:17:73:0d:35:89: 67:d2:4a:56:43:0f:84:9c:58:d1:69:b6:79:e8:a1: 35:c9:bd:52:e1:e9:72:b6:20:1a:0a:67:58:2f:bd: 82:15:9a:ae:b0:df:31:56:8c:d0:a6:93:a8:a9:84: c2:99:a1:a1:fb:75:ec:ed:d5:c3:49:6a:d2:ce:6a: 36:bf:ac:7f:4f:e2:99:a0:4e:43:f6:45:8b:50:02: c0:ca:65:db:75:2a:db:ea:4a:77:6d:e3:c7:f5:c5: c2:f2:cc:af:73:e8:83:71:06:2e:e1:e8:0f:8c:8d: 85:80:f5:d5:d4:95:ba:5b:e1:45:18:69:d0:10:d3: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:37:36:0E:CC:BD:1D:E3:45:8F:8B:21:7F:01:6F:BA:CB:DB:F4:14 X509v3 Authority Key Identifier: keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:5e:60:f0:0d:5f:39:12:ae:5d:47:4f:ac:5f:a8:90:a2:ae: c5:04:eb:76:56:7c:f1:eb:7d:d0:b6:f7:cd:9f:41:b7:eb:bd: f0:d7:7a:f9:35:2a:a1:bb:0b:93:64:18:c0:5f:17:01:26:03: fe:9c:b9:3c:73:c7:07:d5:a7:40:2b:0a:34:63:69:2f:63:15: 27:c2:02:71:90:0e:f3:dc:af:80:0e:e3:5c:f3:e9:48:37:e4: f2:8e:aa:4d:e6:12:8a:ad:8e:55:93:81:79:d2:f7:d3:e0:cc: fe:43:e5:3c:6c:59:a8:32:50:1c:28:b7:14:8e:2e:e8:5e:aa: 1d:88:5f:49:98:ec:e8:eb:11:94:8d:23:97:b6:b9:23:3c:0f: 35:53:0e:9e:8d:42:65:82:c7:08:4e:17:9d:e0:d0:dd:26:e8: d0:ea:b6:41:26:ea:23:dd:33:35:6f:04:e1:77:51:04:dc:af: 2c:a2:c1:91:ed:10:cb:73:b9:53:48:ca:f2:6d:86:1a:29:0c: 6c:54:41:f8:ae:92:99:7c:6f:75:3f:bf:66:8b:f9:0a:4a:be: 6b:61:ee:6e:51:8b:4f:3c:85:25:bb:01:3b:1c:6e:1e:70:84: b2:4c:47:e2:94:d3:45:98:41:79:51:6e:2f:fb:28:32:3f:dc: b3:9d:6a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SJ9hz9EvPKlmBdUl+F5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjczNTJkNDdkYjk3ODVmNDkxMTgwOTJkZTg3MDRhNjdm NjUyMGQwHhcNMjUxMjIxMDUwMTIyWhcNMjUxMjIyMDUwMTIyWjAzMTEwLwYDVQQD EyhiNDM3MzYwZWNjYmQxZGUzNDU4ZjhiMjE3ZjAxNmZiYWNiZGJmNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9b5bWImPGRHvaPK16zvxetv9GpI kFMS+zrkTMfvV2aKK0swz3B+k91ivibUGFCb993GucSDKUfLRePYFWUDrwSzDOrw 0nukl4rOY50rFtb4Rsupq0WiQWbJjj7CjkBJIttdFkl+jXWRZRuoTUoXnm2JJCQd lfyZOYJYW4VutGS7F3MNNYln0kpWQw+EnFjRabZ56KE1yb1S4elytiAaCmdYL72C FZqusN8xVozQppOoqYTCmaGh+3Xs7dXDSWrSzmo2v6x/T+KZoE5D9kWLUALAymXb dSrb6kp3bePH9cXC8syvc+iDcQYu4egPjI2FgPXV1JW6W+FFGGnQENO9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ3Ng7MvR3jRY+LIX8Bb7rL2/QUMB8GA1UdIwQY MBaAFF/3NS1H25eF9JEYCS3ocEpn9lINMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYt NTE3NDgxZDBmODUwLzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kNWQyYjMtN2M0Mi00Nzg1LTk1OTYtNTE3NDgxZDBmODUw LzEvWF9jMUxVZmJsNFgwa1JnSkxlaHdTbWYyVWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN15g8A1f ORKuXUdPrF+okKKuxQTrdlZ88et90Lb3zZ9Bt+u98Nd6+TUqobsLk2QYwF8XASYD /py5PHPHB9WnQCsKNGNpL2MVJ8ICcZAO89yvgA7jXPPpSDfk8o6qTeYSiq2OVZOB edL30+DM/kPlPGxZqDJQHCi3FI4u6F6qHYhfSZjs6OsRlI0jl7a5IzwPNVMOno1C ZYLHCE4XneDQ3Sbo0Oq2QSbqI90zNW8E4XdRBNyvLKLBke0Qy3O5U0jK8m2GGikM bFRB+K6SmXxvdT+/Zov5Ckq+a2HublGLTzyFJbsBOxxuHnCEskxH4pTTRZhBeVFu L/soMj/cs51qpg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:43 2025 by rpki-client