This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft File: XjmfupqunS1v_lKujHSuOPxsGvE.mft (raw, json) Hash identifier: PrC6W8dwb7lsO8I6cZ3VRqhj/kWBnu1oNEhQrr1bfD8= Subject key identifier: CF:00:6F:4D:25:03:48:E9:95:B4:5F:0B:3D:C9:34:CB:4A:BC:DD:2D Authority key identifier: 5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 Certificate issuer: /CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Certificate serial: 019B3DFF154012402C709C3F234315B88F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft Manifest number: 11EA Signing time: Sat 20 Dec 2025 23:01:25 +0000 Manifest this update: Sat 20 Dec 2025 23:01:25 +0000 Manifest next update: Sun 21 Dec 2025 23:01:25 +0000 Files and hashes: 1: XjmfupqunS1v_lKujHSuOPxsGvE.crl (hash: FAO6lwzxxtWl7o2w6TqAq2+m1qdIUJXIkDIuIsG9Auo=) 2: a15ql9whSmA7v8PDlzobAKStIYU.roa (hash: i4JQTq1d7soOmwMqfdiIR8FwyHTrIMo+VQIkB92oIzE=) 3: qT5tUrp0ieWxjsIH98IvAEwbuX8.roa (hash: fpGji62FSVsBApBvHfHEB5ApQmyXJQRF9R2Di5FougI=) 4: tars8J2v-8N6JtB2suJ6nsAGhgI.roa (hash: VKSpLn3FB2L/sDLR9l5iJR3MIMweqN1CpStbR7qOoA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:ff:15:40:12:40:2c:70:9c:3f:23:43:15:b8:8f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e399fba9aae9d2d6ffe52ae8c74ae38fc6c1af1 Validity Not Before: Dec 20 23:01:25 2025 GMT Not After : Dec 21 23:01:25 2025 GMT Subject: CN=cf006f4d250348e995b45f0b3dc934cb4abcdd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:be:2e:02:4d:ae:0b:ce:e8:b6:67:3d:02:d4: bc:c7:3b:f2:70:6c:80:27:a5:0b:25:92:c1:85:5c: 85:f3:dd:8c:5b:2d:df:16:50:63:3f:09:7c:89:8c: 60:bc:42:10:5a:cc:10:c2:58:2e:08:cb:77:f2:07: af:12:83:b1:ae:77:e3:29:92:6b:0a:29:2e:e3:67: 7c:fb:f7:44:02:3f:ad:23:1b:87:6b:19:c4:ed:d3: f3:bf:ac:83:07:27:45:55:76:37:09:e0:f8:d2:12: d5:17:bb:cd:fd:ba:68:dd:8a:dd:6b:e3:db:ee:e4: 5a:9b:1d:5b:c9:1b:af:b5:9b:d5:24:81:2d:ef:01: 3a:12:8b:e9:36:53:b7:43:aa:05:ad:1a:8d:e2:59: f2:84:bf:1e:93:d1:3d:aa:60:d7:e9:d1:ba:5b:e0: 98:46:49:be:db:92:14:17:13:da:ba:a7:8e:e3:7f: 0a:2e:ff:42:70:2f:1b:11:45:49:d3:61:07:70:93: 6e:c3:99:b4:b6:a5:32:0e:3e:aa:a1:40:1d:67:8d: 92:bf:86:d0:7d:dc:54:f4:d7:be:11:12:ea:a9:ef: 6f:b3:f8:29:ea:60:a6:07:40:f5:14:de:37:f3:e1: de:99:c5:23:72:0a:bc:53:75:dd:7d:76:07:f9:fd: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:00:6F:4D:25:03:48:E9:95:B4:5F:0B:3D:C9:34:CB:4A:BC:DD:2D X509v3 Authority Key Identifier: keyid:5E:39:9F:BA:9A:AE:9D:2D:6F:FE:52:AE:8C:74:AE:38:FC:6C:1A:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjmfupqunS1v_lKujHSuOPxsGvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b91d05-6a03-40ed-a983-bd809d9dedb9/1/XjmfupqunS1v_lKujHSuOPxsGvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d3:fb:39:4c:ea:e3:f8:5c:38:85:95:36:ec:b9:60:82:de: c2:78:5e:e3:e2:87:a6:3c:97:d8:21:22:fd:81:55:d1:99:88: 96:ac:2c:bc:72:1d:44:de:06:4e:bb:b2:68:5c:2b:f1:17:ed: 2e:7a:67:f8:59:55:ff:11:50:af:f5:3f:93:91:c4:1a:7c:8d: 65:b5:25:71:07:7c:8e:c1:ad:19:3b:ff:44:21:41:52:0f:8a: 3d:8e:a1:8f:d2:fd:4d:58:a5:6e:7f:ba:74:b4:01:00:d7:64: a6:2d:da:d3:56:83:ef:6c:8b:73:66:50:7c:7e:fd:9d:9f:f0: eb:88:04:86:f5:48:a3:16:3f:ba:ae:c5:4d:63:f8:5e:29:d1: eb:ae:e9:f9:bb:39:7e:e5:1e:f6:16:74:b0:e2:83:97:00:0f: 82:3b:89:67:25:41:b9:8a:03:20:7e:8d:7d:a1:6e:71:72:31: ee:a5:20:21:20:53:d6:35:01:17:2b:48:18:5b:ef:d1:e8:e1: 4f:ff:24:70:4f:87:e5:c5:be:d9:06:2e:ac:70:51:6e:ec:78: 71:b0:f8:59:5c:7a:0d:a6:e2:46:8e:7e:cf:0d:08:e1:2d:73: 94:ce:de:85:60:93:99:6e:5e:1e:b6:b2:9c:b5:43:7f:66:b4: 18:85:48:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/xVAEkAscJw/I0MVuI83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzk5ZmJhOWFhZTlkMmQ2ZmZlNTJhZThjNzRhZTM4ZmM2 YzFhZjEwHhcNMjUxMjIwMjMwMTI1WhcNMjUxMjIxMjMwMTI1WjAzMTEwLwYDVQQD EyhjZjAwNmY0ZDI1MDM0OGU5OTViNDVmMGIzZGM5MzRjYjRhYmNkZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74uAk2uC87otmc9AtS8xzvycGyA J6ULJZLBhVyF892MWy3fFlBjPwl8iYxgvEIQWswQwlguCMt38gevEoOxrnfjKZJr Ciku42d8+/dEAj+tIxuHaxnE7dPzv6yDBydFVXY3CeD40hLVF7vN/bpo3Yrda+Pb 7uRamx1byRuvtZvVJIEt7wE6EovpNlO3Q6oFrRqN4lnyhL8ek9E9qmDX6dG6W+CY Rkm+25IUFxPauqeO438KLv9CcC8bEUVJ02EHcJNuw5m0tqUyDj6qoUAdZ42Sv4bQ fdxU9Ne+ERLqqe9vs/gp6mCmB0D1FN438+HemcUjcgq8U3XdfXYH+f3DVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8Ab00lA0jplbRfCz3JNMtKvN0tMB8GA1UdIwQY MBaAFF45n7qarp0tb/5Srox0rjj8bBrxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMt YmQ4MDlkOWRlZGI5LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9iOTFkMDUtNmEwMy00MGVkLWE5ODMtYmQ4MDlkOWRlZGI5 LzEvWGptZnVwcXVuUzF2X2xLdWpIU3VPUHhzR3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONP7OUzq 4/hcOIWVNuy5YILewnhe4+KHpjyX2CEi/YFV0ZmIlqwsvHIdRN4GTruyaFwr8Rft Lnpn+FlV/xFQr/U/k5HEGnyNZbUlcQd8jsGtGTv/RCFBUg+KPY6hj9L9TVilbn+6 dLQBANdkpi3a01aD72yLc2ZQfH79nZ/w64gEhvVIoxY/uq7FTWP4XinR667p+bs5 fuUe9hZ0sOKDlwAPgjuJZyVBuYoDIH6NfaFucXIx7qUgISBT1jUBFytIGFvv0ejh T/8kcE+H5cW+2QYurHBRbux4cbD4WVx6DabiRo5+zw0I4S1zlM7ehWCTmW5eHray nLVDf2a0GIVInw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:31:20 2025 by rpki-client