This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft File: Xx-gbV262kPeRPTksdyUkrsofJ0.mft (raw, json) Hash identifier: 6z5MtXYRAavs2pjHZ5GFPMeXTQC88viOy66Jlk6C9Xw= Subject key identifier: 75:69:A7:76:60:FE:FD:14:D9:0A:BD:43:1E:E6:E8:D7:21:2B:EA:EA Authority key identifier: 5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D Certificate issuer: /CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Certificate serial: 019B4D3A7DC839A6B31BBFEBEEED1940B541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft Manifest number: 16FD Signing time: Tue 23 Dec 2025 22:00:37 +0000 Manifest this update: Tue 23 Dec 2025 22:00:37 +0000 Manifest next update: Wed 24 Dec 2025 22:00:37 +0000 Files and hashes: 1: 2-ZT3D_TT57WgEPZaHLs56UG0Yg.roa (hash: NyVeJy4V1X4eJ9opwnQRbcNHZ8PbRqXsdUICPp/i7rs=) 2: Xx-gbV262kPeRPTksdyUkrsofJ0.crl (hash: rd1shYwhMmYPo3jkLtJ+Axbz6P6bzldYvs0IsZPS9BM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:3a:7d:c8:39:a6:b3:1b:bf:eb:ee:ed:19:40:b5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f1fa06d5dbada43de44f4e4b1dc9492bb287c9d Validity Not Before: Dec 23 22:00:37 2025 GMT Not After : Dec 24 22:00:37 2025 GMT Subject: CN=7569a77660fefd14d90abd431ee6e8d7212beaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:e4:18:7d:9f:27:39:25:84:c3:f9:ad:5f: ed:b9:db:d7:6e:32:18:2c:1a:5b:6f:4b:79:94:d7: fc:ef:c0:16:1c:3a:c9:21:01:61:32:bc:8e:0f:d3: 0a:27:6d:f1:c6:a9:98:d5:d5:d2:d0:a4:57:70:f1: 15:dd:4b:76:5b:4d:43:89:67:32:25:66:5d:6c:35: 87:93:46:13:63:c4:e8:d4:d1:1b:f0:5c:f7:60:93: bd:77:8e:47:fa:8a:0f:b2:6c:76:33:7a:6c:e5:cb: ff:3f:00:c7:bd:2e:43:da:f5:df:ab:5d:80:15:1a: 7c:d4:b1:fe:ac:2b:b2:1d:e8:96:6e:1e:2f:25:a9: 47:69:25:7d:6e:56:77:c5:1c:e7:3b:61:35:0a:b8: 8e:ee:c4:5d:ed:5b:c5:fa:03:93:ee:c4:13:76:29: 54:b5:7d:ba:db:e5:1a:4b:d0:19:6f:77:d6:03:5b: ee:e4:aa:24:ca:df:03:44:47:c4:ac:28:30:d6:1e: 93:ee:67:aa:f9:62:6f:8d:8b:7a:2f:b1:2a:b3:f4: b4:d5:cd:d4:03:10:7c:4d:df:d9:b0:84:80:7b:1f: bc:f3:73:81:b2:81:fe:0a:ca:ac:c6:12:3c:af:74: 93:4f:2a:85:ab:51:f5:42:63:57:ec:93:6e:58:e1: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:A7:76:60:FE:FD:14:D9:0A:BD:43:1E:E6:E8:D7:21:2B:EA:EA X509v3 Authority Key Identifier: keyid:5F:1F:A0:6D:5D:BA:DA:43:DE:44:F4:E4:B1:DC:94:92:BB:28:7C:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx-gbV262kPeRPTksdyUkrsofJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/847d17-ba7c-4eae-9d55-25846d59fd60/1/Xx-gbV262kPeRPTksdyUkrsofJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:76:35:3d:f9:d1:03:9e:c9:26:83:76:1d:ec:4d:c9:1e:b7: 77:47:cb:e5:91:e5:e4:68:bf:0e:14:bf:9a:b9:4e:9f:3d:cf: 41:4c:d3:d3:bd:47:c6:21:34:c5:a1:f0:f1:e9:cf:8e:59:26: d8:15:96:d3:87:f3:43:a5:67:09:b1:03:7a:11:68:d0:84:a4: a6:1d:fe:53:65:27:54:de:a4:ef:9b:b3:10:de:e1:cb:d8:43: 7d:90:c1:68:87:ac:e5:68:11:59:ba:e3:16:c3:79:61:46:97: 56:57:70:9c:37:77:7d:99:5e:6f:c8:c3:24:d5:b8:de:4d:44: 74:18:3e:26:fb:31:6d:8c:d0:88:a4:c8:d1:8c:57:2c:8e:0f: 40:26:3f:cb:f3:cd:84:a6:ec:ed:d5:33:e7:8e:80:9c:6c:6c: 3f:80:e1:13:29:7a:b6:6d:28:01:d6:df:72:72:ac:23:31:51: 55:b3:dc:30:98:46:e2:29:a4:c9:a0:bd:d1:84:0f:b8:76:a1: f4:b5:1a:01:8d:fb:a3:c6:b0:1a:b9:3d:d2:a5:82:01:d9:e6: c2:58:bb:1f:ca:ea:7b:73:ae:8e:75:90:bc:4a:83:da:82:72: 9c:3c:98:bd:c9:44:3a:37:4b:0e:ce:09:0a:60:f2:ee:14:be: 1d:08:36:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNOn3IOaazG7/r7u0ZQLVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMWZhMDZkNWRiYWRhNDNkZTQ0ZjRlNGIxZGM5NDkyYmIy ODdjOWQwHhcNMjUxMjIzMjIwMDM3WhcNMjUxMjI0MjIwMDM3WjAzMTEwLwYDVQQD Eyg3NTY5YTc3NjYwZmVmZDE0ZDkwYWJkNDMxZWU2ZThkNzIxMmJlYWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEvkGH2fJzklhMP5rV/tudvXbjIY LBpbb0t5lNf878AWHDrJIQFhMryOD9MKJ23xxqmY1dXS0KRXcPEV3Ut2W01DiWcy JWZdbDWHk0YTY8To1NEb8Fz3YJO9d45H+ooPsmx2M3ps5cv/PwDHvS5D2vXfq12A FRp81LH+rCuyHeiWbh4vJalHaSV9blZ3xRznO2E1CriO7sRd7VvF+gOT7sQTdilU tX262+UaS9AZb3fWA1vu5Kokyt8DREfErCgw1h6T7meq+WJvjYt6L7Eqs/S01c3U AxB8Td/ZsISAex+883OBsoH+CsqsxhI8r3STTyqFq1H1QmNX7JNuWOGflQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVpp3Zg/v0U2Qq9Qx7m6NchK+rqMB8GA1UdIwQY MBaAFF8foG1dutpD3kT05LHclJK7KHydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUt MjU4NDZkNTlmZDYwLzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NDdkMTctYmE3Yy00ZWFlLTlkNTUtMjU4NDZkNTlmZDYw LzEvWHgtZ2JWMjYya1BlUlBUa3NkeVVrcnNvZkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinY1PfnR A57JJoN2HexNyR63d0fL5ZHl5Gi/DhS/mrlOnz3PQUzT071HxiE0xaHw8enPjlkm 2BWW04fzQ6VnCbEDehFo0ISkph3+U2UnVN6k75uzEN7hy9hDfZDBaIes5WgRWbrj FsN5YUaXVldwnDd3fZleb8jDJNW43k1EdBg+JvsxbYzQiKTI0YxXLI4PQCY/y/PN hKbs7dUz546AnGxsP4DhEyl6tm0oAdbfcnKsIzFRVbPcMJhG4imkyaC90YQPuHah 9LUaAY37o8awGrk90qWCAdnmwli7H8rqe3OujnWQvEqD2oJynDyYvclEOjdLDs4J CmDy7hS+HQg2TA== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:20 2025 by rpki-client