This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft File: XfsHTUe34LyJHtBuqPxn447PUKE.mft (raw, json) Hash identifier: T6BU5zquZorgfJuGM9u3+RyuTygVla8QecpU2ev2J2c= Subject key identifier: 8E:8F:96:AA:30:9B:9F:15:E0:C5:1B:31:EE:DB:64:08:76:B5:DE:AC Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Certificate serial: 019B3EA3AB7D2BE222358451E26B5618C602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft Manifest number: 15FD Signing time: Sun 21 Dec 2025 02:01:12 +0000 Manifest this update: Sun 21 Dec 2025 02:01:12 +0000 Manifest next update: Mon 22 Dec 2025 02:01:12 +0000 Files and hashes: 1: 6LvfCWQhJwJjQ7yfxm8_2iB8ajA.roa (hash: VVZpFqNQIGYIg2vRxvGNX/HI0x30XQ+fKGPR57+uciQ=) 2: XfsHTUe34LyJHtBuqPxn447PUKE.crl (hash: npFcwL2Nz9Asb87cGQahFMJVYWdmU1deaSddF0TztP0=) 3: av04jWa8rKYQ3nk3tcQ4QNzDf24.roa (hash: sB985eweguyIFZeDXj+lMH1jkA5cLTMNgeC7bZvuV5I=) 4: leWCgVUyxa4fF2Lv7Kr-Z7NPEos.roa (hash: qNmjf5Agy5lGUPR54BZFqLIkeuS1MkmGjj8lmstmC6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:ab:7d:2b:e2:22:35:84:51:e2:6b:56:18:c6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Validity Not Before: Dec 21 02:01:12 2025 GMT Not After : Dec 22 02:01:12 2025 GMT Subject: CN=8e8f96aa309b9f15e0c51b31eedb640876b5deac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6e:f7:06:bc:6e:33:09:37:7e:8d:67:03:c9: fb:3f:26:2c:91:0c:32:a1:63:e7:72:8f:8a:c1:02: 46:59:19:38:d7:d4:36:b7:2c:65:d6:dd:a9:39:26: e9:4b:6d:00:e4:9a:db:d8:6a:d5:21:92:8e:ba:c0: 46:56:6e:7d:bf:ac:a9:b5:a0:b7:93:06:2c:fb:39: 28:67:f3:2f:73:95:9c:cc:9a:1a:9a:21:e4:4c:02: 2d:80:bc:61:3d:e6:b2:10:30:ed:39:6d:25:27:ed: 26:48:b7:9f:07:53:6d:62:f3:0f:76:2a:a0:c4:97: ed:13:8b:83:ec:9e:96:e5:74:5f:80:a3:b1:e1:30: de:89:7a:c9:16:63:11:fd:83:cb:1b:54:47:0d:e0: 5e:20:bb:1c:50:26:3e:fd:cf:bd:b6:3d:a8:12:a6: d7:3a:da:80:d5:f5:27:df:8e:17:00:28:10:a0:17: 3f:f8:af:41:c3:f3:e3:92:d1:67:2d:85:5b:a9:6a: 37:52:6b:b5:5e:a9:21:ee:dd:52:13:9d:5b:3a:ed: 64:7b:d6:3c:5a:06:2d:27:b1:7b:5f:f5:c0:a9:93: 31:6b:4a:bb:50:f7:3e:ad:ac:65:df:01:f5:bf:4c: a7:9b:1b:67:94:f9:dd:09:1c:a8:e8:5e:70:fe:c4: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8F:96:AA:30:9B:9F:15:E0:C5:1B:31:EE:DB:64:08:76:B5:DE:AC X509v3 Authority Key Identifier: keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c3:ee:de:bd:92:13:44:4e:6f:c6:fd:f4:83:ef:8d:f0:07: d9:0f:47:70:cd:51:49:40:58:16:d8:5e:8c:cf:f3:26:d7:d8: 93:c7:5f:db:be:08:41:83:d2:81:4c:3d:2d:11:72:df:1f:87: dd:5d:43:3b:b6:e3:4f:69:58:9f:c3:ba:67:46:3f:b3:66:8a: 24:dc:45:4b:bf:57:1d:33:bd:14:b6:1a:55:39:f6:c8:ef:12: 43:e9:2f:40:13:9a:65:b1:6c:0e:8b:2c:13:48:bc:af:c5:7f: 37:44:29:f4:5d:3f:03:02:7b:ed:b4:d8:84:5a:e6:46:e0:d5: 54:17:a1:e2:83:eb:78:cf:1c:c7:38:42:a8:f0:b6:61:ba:ad: 0f:39:03:5b:9f:08:2f:c9:b4:58:81:4f:d4:70:e0:5a:da:25: d8:91:da:93:76:fd:b0:a1:cc:df:f6:32:60:ef:c2:fe:6c:f1: 68:81:5d:87:9c:93:b5:9a:f8:86:1f:04:74:2c:9b:39:67:c5: 00:00:c3:10:50:40:c7:05:86:53:58:75:07:b5:8a:50:a8:80: 0e:07:25:77:64:8f:c8:91:b5:93:b3:81:88:be:24:06:ad:c3: 06:ab:ae:2f:1e:db:be:23:d8:5d:5a:03:c6:23:c5:8c:f9:39: 11:0e:f4:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6t9K+IiNYRR4mtWGMYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj ZjUwYTEwHhcNMjUxMjIxMDIwMTEyWhcNMjUxMjIyMDIwMTEyWjAzMTEwLwYDVQQD Eyg4ZThmOTZhYTMwOWI5ZjE1ZTBjNTFiMzFlZWRiNjQwODc2YjVkZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs273BrxuMwk3fo1nA8n7PyYskQwy oWPnco+KwQJGWRk419Q2tyxl1t2pOSbpS20A5Jrb2GrVIZKOusBGVm59v6yptaC3 kwYs+zkoZ/Mvc5WczJoamiHkTAItgLxhPeayEDDtOW0lJ+0mSLefB1NtYvMPdiqg xJftE4uD7J6W5XRfgKOx4TDeiXrJFmMR/YPLG1RHDeBeILscUCY+/c+9tj2oEqbX OtqA1fUn344XACgQoBc/+K9Bw/PjktFnLYVbqWo3Umu1Xqkh7t1SE51bOu1ke9Y8 WgYtJ7F7X/XAqZMxa0q7UPc+raxl3wH1v0ynmxtnlPndCRyo6F5w/sStkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6Plqowm58V4MUbMe7bZAh2td6sMB8GA1UdIwQY MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt Y2Y2YTYzZTRlZmI2LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2 LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcPu3r2S E0ROb8b99IPvjfAH2Q9HcM1RSUBYFthejM/zJtfYk8df274IQYPSgUw9LRFy3x+H 3V1DO7bjT2lYn8O6Z0Y/s2aKJNxFS79XHTO9FLYaVTn2yO8SQ+kvQBOaZbFsDoss E0i8r8V/N0Qp9F0/AwJ77bTYhFrmRuDVVBeh4oPreM8cxzhCqPC2YbqtDzkDW58I L8m0WIFP1HDgWtol2JHak3b9sKHM3/YyYO/C/mzxaIFdh5yTtZr4hh8EdCybOWfF AADDEFBAxwWGU1h1B7WKUKiADgcld2SPyJG1k7OBiL4kBq3DBquuLx7bviPYXVoD xiPFjPk5EQ70zA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:51 2025 by rpki-client