This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json) Hash identifier: om6VMIE4NXqsMbgTmeWzlXHndetXpCwnoLTanD2yaPg= Subject key identifier: B4:68:47:B2:34:EF:B2:FE:83:92:CB:5E:64:51:D3:6F:96:5B:9B:6E Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27 Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27 Certificate serial: 019B620B5229570C8360470B3E2845DA34F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft Manifest number: 0707 Signing time: Sat 27 Dec 2025 23:01:07 +0000 Manifest this update: Sat 27 Dec 2025 23:01:07 +0000 Manifest next update: Sun 28 Dec 2025 23:01:07 +0000 Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=) 2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: 7V5XZqFWBSGzIpF3ofZKjN4nG1ZBkkGT2csJM4vZsF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:52:29:57:0c:83:60:47:0b:3e:28:45:da:34:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27 Validity Not Before: Dec 27 23:01:07 2025 GMT Not After : Dec 28 23:01:07 2025 GMT Subject: CN=b46847b234efb2fe8392cb5e6451d36f965b9b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:95:1c:64:ee:bc:9d:60:0d:0f:ea:8f:19: ed:14:55:cc:eb:a4:22:f9:da:e0:f9:d8:90:c6:ee: e8:8e:63:12:17:f7:0b:d5:01:6b:aa:30:c5:d6:aa: 49:94:7a:92:69:6c:d8:df:96:9c:17:7d:80:6e:0a: ce:f5:6b:d0:28:88:39:4a:39:73:be:86:6e:04:be: 93:08:b1:02:82:03:d3:b6:64:4e:3d:eb:e5:21:db: 4f:67:06:79:51:bf:78:ef:7b:6b:44:c7:bd:f5:28: 27:84:26:01:75:54:d7:a2:f1:f0:55:e9:78:db:20: 0b:db:12:4f:a2:1a:00:dc:5b:78:ba:0d:84:6b:c8: 6f:5e:ba:68:b4:e2:f0:83:02:d0:a6:79:82:43:d7: f5:ab:af:e3:30:44:01:18:1c:e6:fe:75:d8:63:52: 3a:48:a3:2d:38:ef:f5:c7:ac:10:bf:35:4c:02:60: 60:d7:ce:7a:4d:56:de:15:80:fb:ed:0a:d4:dc:a3: 8c:5c:22:35:2c:04:52:30:a0:b6:2f:ee:60:65:0a: dd:ef:d3:25:d2:9d:c6:2a:3a:92:36:53:d7:47:dc: 3a:97:a2:6f:90:49:e2:32:c5:8a:90:60:c2:53:05: 94:01:9a:c1:18:f6:e4:63:75:58:a2:91:db:94:f0: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:47:B2:34:EF:B2:FE:83:92:CB:5E:64:51:D3:6F:96:5B:9B:6E X509v3 Authority Key Identifier: keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5d:77:68:a8:56:ad:95:12:a3:fd:35:75:db:82:5c:bd:00: a5:2c:28:d8:0d:ad:1c:14:60:67:49:73:06:33:b0:d6:26:2c: c3:be:fe:13:fb:35:be:06:8d:ab:8c:8c:f9:bd:91:55:da:a6: 84:24:3d:8b:47:91:5d:6b:78:88:3f:5c:50:97:47:fa:f7:95: 3b:1d:cd:c1:12:b4:2a:a1:82:f4:8a:b0:e1:9d:c4:a2:43:3c: ad:0d:0a:fe:99:6c:cf:ad:e1:93:0c:81:ac:07:20:d3:82:a5: c5:f9:62:0d:d6:f1:02:19:82:5d:9a:b7:78:3f:85:c3:04:80: 22:a4:8d:01:71:15:19:dc:8a:74:03:a7:2d:3b:cd:39:0c:7e: 97:18:d8:db:60:55:7c:92:e9:03:be:c6:fc:92:13:c3:2b:6c: 63:a3:e6:f7:4f:f9:6a:9b:5a:cb:d6:69:a7:2b:de:43:99:e4: 83:e7:d3:ef:fa:6c:cd:bf:c2:e4:b5:b5:5f:ab:ce:ef:37:4c: 5c:98:9b:99:7c:5b:fa:18:71:c4:08:2c:ea:73:6c:be:64:01: 4d:1b:3a:2a:de:93:5a:e0:75:a0:e6:9d:b5:01:e0:fe:a5:ff: b3:0b:39:6d:ca:fe:22:64:a0:09:dd:f2:01:ed:68:03:de:c8: c4:2c:08:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC1IpVwyDYEcLPihF2jT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2M2JlNzUzNzQ2NzhkYjNhMDQ5ZjZhM2VmMmFmYWI3MGQ0 ZjZmMjcwHhcNMjUxMjI3MjMwMTA3WhcNMjUxMjI4MjMwMTA3WjAzMTEwLwYDVQQD EyhiNDY4NDdiMjM0ZWZiMmZlODM5MmNiNWU2NDUxZDM2Zjk2NWI5YjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/KVHGTuvJ1gDQ/qjxntFFXM66Qi +drg+diQxu7ojmMSF/cL1QFrqjDF1qpJlHqSaWzY35acF32AbgrO9WvQKIg5Sjlz voZuBL6TCLECggPTtmROPevlIdtPZwZ5Ub9473trRMe99SgnhCYBdVTXovHwVel4 2yAL2xJPohoA3Ft4ug2Ea8hvXrpotOLwgwLQpnmCQ9f1q6/jMEQBGBzm/nXYY1I6 SKMtOO/1x6wQvzVMAmBg1856TVbeFYD77QrU3KOMXCI1LARSMKC2L+5gZQrd79Ml 0p3GKjqSNlPXR9w6l6JvkEniMsWKkGDCUwWUAZrBGPbkY3VYopHblPDeNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLRoR7I077L+g5LLXmRR02+WW5tuMB8GA1UdIwQY MBaAFMY751N0Z42zoEn2o+8q+rcNT28nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQt NmIzYjg2N2JkMjMyLzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQtNmIzYjg2N2JkMjMy LzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF13aKhW rZUSo/01dduCXL0ApSwo2A2tHBRgZ0lzBjOw1iYsw77+E/s1vgaNq4yM+b2RVdqm hCQ9i0eRXWt4iD9cUJdH+veVOx3NwRK0KqGC9Iqw4Z3EokM8rQ0K/plsz63hkwyB rAcg04KlxfliDdbxAhmCXZq3eD+FwwSAIqSNAXEVGdyKdAOnLTvNOQx+lxjY22BV fJLpA77G/JITwytsY6Pm90/5aptay9ZppyveQ5nkg+fT7/pszb/C5LW1X6vO7zdM XJibmXxb+hhxxAgs6nNsvmQBTRs6Kt6TWuB1oOadtQHg/qX/sws5bcr+ImSgCd3y Ae1oA97IxCwI0w== -----END CERTIFICATE-----Generated at Sun Dec 28 03:12:44 2025 by rpki-client