This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft File: XYbEfabZB5NHtg8E7VxVV_6YPrg.mft (raw, json) Hash identifier: 7kg1Dbf/bmXQxdMve49cQciAp0iPBuVSSkyg39Xuk3w= Subject key identifier: 90:E6:6B:D7:87:BC:8C:A1:81:88:47:F3:E0:10:A1:69:BB:5F:67:67 Authority key identifier: 5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 Certificate issuer: /CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Certificate serial: 019B47A66A0B357E2B4D0C772B463A4A6BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft Manifest number: 0857 Signing time: Mon 22 Dec 2025 20:00:46 +0000 Manifest this update: Mon 22 Dec 2025 20:00:46 +0000 Manifest next update: Tue 23 Dec 2025 20:00:46 +0000 Files and hashes: 1: 2P1yuhNiwzpuhAGqzfrj2lRnpyw.roa (hash: v8vqWZlajCWSPPZWElULKYnskyo39/+jmGLteoM9Mq8=) 2: XYbEfabZB5NHtg8E7VxVV_6YPrg.crl (hash: TZCrYh9Lry3tSDuH/h3WqtdFWIocTQfC/d+pwb06tUU=) 3: YxZAW7xYuuoItNSxZUB_Jyv54M8.roa (hash: ZHkpmuH04xDfiHb0nZigSHP0TijTWcHxuOKkj3BJQR4=) 4: i6uCG0Q2AD4SRLu8l3KF_dDGZzk.roa (hash: jFpYwIwpWfR9hcM4AjV3+9gVDn6oo25N3yT8niBuGDs=) 5: wJUlaRUICcG98jFoJrBOPCJA9K0.roa (hash: C8JFs0EQ+NjuY81C+W4nNxPlVGGKOiRDa/0xgVpCyR4=) 6: yM87hDn48G9pC2uXeNqB6MxDyyY.roa (hash: m4eQad2ewLgQnWmXHQewt9Vc5wlc0Xqlxo4fhTztW/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:6a:0b:35:7e:2b:4d:0c:77:2b:46:3a:4a:6b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d86c47da6d9079347b60f04ed5c5557fe983eb8 Validity Not Before: Dec 22 20:00:46 2025 GMT Not After : Dec 23 20:00:46 2025 GMT Subject: CN=90e66bd787bc8ca1818847f3e010a169bb5f6767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:84:c6:d6:5b:ac:c0:33:2f:65:0c:bd:7b: e3:af:d7:68:d3:2a:7a:e8:9a:57:b7:dd:56:73:2d: 96:53:41:c7:78:4a:3b:33:af:19:40:21:10:f4:eb: c6:e6:8a:58:9b:97:5c:e4:bd:a8:67:a5:9c:d1:59: 99:96:48:d4:b6:02:af:1e:ff:9a:d4:18:3c:07:77: 36:bf:53:66:0f:18:1d:b9:98:d1:99:db:46:33:22: 51:4a:d0:74:54:21:39:54:fe:7a:fb:ff:ba:b3:59: 01:a1:b4:22:c4:9d:4f:e1:ca:3d:63:9b:d1:cb:39: 07:76:fc:1e:0d:29:9c:ba:0d:f7:2e:24:7b:ea:29: 71:8a:7d:fc:da:d5:ca:dc:58:1e:37:b4:a4:75:4d: d4:0e:f4:8c:ac:23:93:0f:c1:94:58:3d:b1:bd:1e: 55:9b:9a:16:13:ea:15:38:68:a6:4a:a0:bc:a0:36: b8:a7:2e:7a:7c:91:33:2c:19:c0:35:3b:93:9b:bb: 56:13:b9:92:70:5f:95:6e:de:6b:c9:b4:06:6c:35: 83:07:85:c8:e0:ae:db:17:52:04:79:e7:c2:61:bc: 4a:38:f2:db:24:47:ef:c4:6f:55:d7:07:00:56:2b: 1b:85:d5:57:60:a1:e5:99:a7:26:85:b5:f3:15:50: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E6:6B:D7:87:BC:8C:A1:81:88:47:F3:E0:10:A1:69:BB:5F:67:67 X509v3 Authority Key Identifier: keyid:5D:86:C4:7D:A6:D9:07:93:47:B6:0F:04:ED:5C:55:57:FE:98:3E:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYbEfabZB5NHtg8E7VxVV_6YPrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/df66a0-c958-4e5c-a6df-fc632841ba3e/1/XYbEfabZB5NHtg8E7VxVV_6YPrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:00:ec:85:60:53:97:1f:de:e5:be:41:38:c1:37:4b:38:b2: 47:b7:d4:a6:8c:fa:0a:45:f7:e6:f9:27:8c:06:44:9c:ff:7a: 06:6b:07:de:76:b9:9c:d2:a8:35:b8:de:45:66:29:15:8a:73: 78:6d:fc:16:13:05:18:a5:8e:05:de:55:3d:fb:9f:0b:83:42: 1e:80:8c:17:cb:27:2b:51:74:8a:74:fc:aa:1d:58:73:04:e7: 36:dc:c4:81:91:10:2a:95:b0:51:04:7e:ae:13:cd:26:f6:44: 66:83:ef:da:66:c2:7a:0a:30:97:1d:da:b6:33:91:59:73:9d: 9f:82:1b:41:c4:b1:06:cf:a0:1c:24:fc:b8:39:91:6d:17:32: fa:45:7c:69:2d:0b:28:88:70:00:e0:db:ae:75:c3:4e:e2:4d: 63:5a:b0:30:04:43:32:94:95:aa:e4:44:e9:5a:6b:3a:e5:44: 75:83:87:38:bd:8b:38:da:3f:fa:aa:1d:90:44:74:84:96:64: bb:9f:91:a4:b8:69:54:0e:fd:98:55:d9:60:43:34:8f:1c:0f: f6:b8:21:67:a5:46:c0:60:3c:41:ea:13:10:30:b9:12:41:f7: c0:b9:c3:f6:df:16:2d:e8:2e:54:25:21:3e:ef:64:68:cb:10: ea:10:1d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpmoLNX4rTQx3K0Y6SmvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODZjNDdkYTZkOTA3OTM0N2I2MGYwNGVkNWM1NTU3ZmU5 ODNlYjgwHhcNMjUxMjIyMjAwMDQ2WhcNMjUxMjIzMjAwMDQ2WjAzMTEwLwYDVQQD Eyg5MGU2NmJkNzg3YmM4Y2ExODE4ODQ3ZjNlMDEwYTE2OWJiNWY2NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+ExtZbrMAzL2UMvXvjr9do0yp6 6JpXt91Wcy2WU0HHeEo7M68ZQCEQ9OvG5opYm5dc5L2oZ6Wc0VmZlkjUtgKvHv+a 1Bg8B3c2v1NmDxgduZjRmdtGMyJRStB0VCE5VP56+/+6s1kBobQixJ1P4co9Y5vR yzkHdvweDSmcug33LiR76ilxin382tXK3FgeN7SkdU3UDvSMrCOTD8GUWD2xvR5V m5oWE+oVOGimSqC8oDa4py56fJEzLBnANTuTm7tWE7mScF+Vbt5rybQGbDWDB4XI 4K7bF1IEeefCYbxKOPLbJEfvxG9V1wcAVisbhdVXYKHlmacmhbXzFVCHyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDma9eHvIyhgYhH8+AQoWm7X2dnMB8GA1UdIwQY MBaAFF2GxH2m2QeTR7YPBO1cVVf+mD64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYt ZmM2MzI4NDFiYTNlLzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9kZjY2YTAtYzk1OC00ZTVjLWE2ZGYtZmM2MzI4NDFiYTNl LzEvWFliRWZhYlpCNU5IdGc4RTdWeFZWXzZZUHJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwDshWBT lx/e5b5BOME3SziyR7fUpoz6CkX35vknjAZEnP96BmsH3na5nNKoNbjeRWYpFYpz eG38FhMFGKWOBd5VPfufC4NCHoCMF8snK1F0inT8qh1YcwTnNtzEgZEQKpWwUQR+ rhPNJvZEZoPv2mbCegowlx3atjORWXOdn4IbQcSxBs+gHCT8uDmRbRcy+kV8aS0L KIhwAODbrnXDTuJNY1qwMARDMpSVquRE6VprOuVEdYOHOL2LONo/+qodkER0hJZk u5+RpLhpVA79mFXZYEM0jxwP9rghZ6VGwGA8QeoTEDC5EkH3wLnD9t8WLeguVCUh Pu9kaMsQ6hAdPA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:50:52 2025 by rpki-client