This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json) Hash identifier: NiG6Ba+tR3mixm2TUoAPePvWQryCHA4/Gx4a7TDbzB8= Subject key identifier: 59:01:89:B9:05:59:43:90:71:26:22:F5:5C:A3:27:4C:5E:45:77:25 Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Certificate serial: 019B3AFDFC21238688ADDA5A26A3D488BF42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft Manifest number: 15D4 Signing time: Sat 20 Dec 2025 09:01:22 +0000 Manifest this update: Sat 20 Dec 2025 09:01:22 +0000 Manifest next update: Sun 21 Dec 2025 09:01:22 +0000 Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=) 2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: e1p/pUdyt0G6stlJ0mDHf9sSL8AQPIKRKL4336pSeMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:fc:21:23:86:88:ad:da:5a:26:a3:d4:88:bf:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Validity Not Before: Dec 20 09:01:22 2025 GMT Not After : Dec 21 09:01:22 2025 GMT Subject: CN=590189b905594390712622f55ca3274c5e457725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:e9:ca:a7:a0:f4:4d:06:58:f1:c5:d7:62: 8e:f7:93:1c:5e:7e:26:a7:3e:b8:ad:91:f9:b6:df: 4d:54:48:e1:40:c2:7e:e1:d4:bd:6f:3a:11:56:5a: 80:d9:82:1a:cf:d8:5b:c1:aa:15:48:dc:ac:5b:cc: 58:c7:25:8c:1d:6d:ae:69:55:13:52:23:36:b7:f7: 7c:38:67:77:bd:3e:27:a3:93:24:76:ca:b3:50:e3: 95:b6:e1:da:fa:4b:93:47:ee:52:89:e6:c5:fe:3f: 1a:07:9f:ad:44:dc:64:a3:41:bc:33:6e:9c:a0:94: 48:c4:e6:84:d9:ed:2e:94:20:8d:34:61:70:c7:dd: 31:15:77:48:ba:f3:a5:89:8b:19:2b:9f:49:35:f1: a7:55:fe:a6:bd:4f:2d:cf:13:44:2e:ca:c4:df:89: 8c:c1:bc:4f:8d:3d:07:7a:f6:9a:98:21:73:0e:54: 91:1e:6d:73:de:6f:8c:c6:f7:17:6a:ca:5c:98:8c: 78:c8:40:c6:75:3a:7a:a1:b8:7f:45:d9:7c:41:31: bf:3b:41:a3:44:f7:fa:a8:3d:85:4d:3e:fc:41:f1: 2f:9f:53:97:ce:fb:6d:41:fc:de:4b:85:96:a4:05: ce:7b:6e:0c:d7:d6:3e:16:ed:b4:83:49:6b:b6:1f: d8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:01:89:B9:05:59:43:90:71:26:22:F5:5C:A3:27:4C:5E:45:77:25 X509v3 Authority Key Identifier: keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:35:94:cb:c3:73:c7:82:71:c3:0f:81:15:46:d1:e9:15:92: 10:8b:ab:76:8c:11:df:b8:c8:a4:1c:04:ed:1f:a9:90:99:22: 36:7b:32:c7:67:51:42:b3:c1:dd:22:17:ce:57:79:c4:d0:4c: fe:2a:66:b4:bf:cf:51:64:45:0a:95:27:0e:ec:0c:19:5b:d1: 9a:0f:5e:03:a0:a1:6b:8e:91:f0:39:b6:35:a0:c1:bf:d0:81: 22:83:23:f7:43:21:b3:b2:2b:c5:4b:9d:19:99:f1:05:b5:0f: a5:6c:06:d3:62:cc:16:8f:bf:91:71:3c:6e:c7:48:00:c2:3b: e5:2f:22:b5:5d:7f:15:9e:86:f2:b3:37:3d:42:dd:2d:0a:21: 24:fd:ed:ab:67:46:76:b7:3b:49:1e:69:81:24:29:27:6d:f0: 34:70:bb:5a:23:92:e9:73:18:24:68:cc:0d:e9:b3:bd:2b:95: 80:09:f1:e8:d9:e3:b9:42:64:6e:2e:36:66:8f:8f:57:f7:80: 67:df:c3:e1:8d:ca:e9:c5:f7:17:e1:11:78:2d:1d:30:5c:bd: f3:74:d9:28:9f:5a:3e:53:b9:21:08:a6:3d:d0:36:2d:8d:b7: ed:99:f1:75:3c:d5:25:90:95:97:31:67:2f:f6:ca:52:07:14: cd:0b:c3:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/fwhI4aIrdpaJqPUiL9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj ZmJmYWYwHhcNMjUxMjIwMDkwMTIyWhcNMjUxMjIxMDkwMTIyWjAzMTEwLwYDVQQD Eyg1OTAxODliOTA1NTk0MzkwNzEyNjIyZjU1Y2EzMjc0YzVlNDU3NzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPXpyqeg9E0GWPHF12KO95McXn4m pz64rZH5tt9NVEjhQMJ+4dS9bzoRVlqA2YIaz9hbwaoVSNysW8xYxyWMHW2uaVUT UiM2t/d8OGd3vT4no5MkdsqzUOOVtuHa+kuTR+5SiebF/j8aB5+tRNxko0G8M26c oJRIxOaE2e0ulCCNNGFwx90xFXdIuvOliYsZK59JNfGnVf6mvU8tzxNELsrE34mM wbxPjT0HevaamCFzDlSRHm1z3m+MxvcXaspcmIx4yEDGdTp6obh/Rdl8QTG/O0Gj RPf6qD2FTT78QfEvn1OXzvttQfzeS4WWpAXOe24M19Y+Fu20g0lrth/YvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkBibkFWUOQcSYi9VyjJ0xeRXclMB8GA1UdIwQY MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1 LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDWUy8Nz x4Jxww+BFUbR6RWSEIurdowR37jIpBwE7R+pkJkiNnsyx2dRQrPB3SIXzld5xNBM /ipmtL/PUWRFCpUnDuwMGVvRmg9eA6Cha46R8Dm2NaDBv9CBIoMj90Mhs7IrxUud GZnxBbUPpWwG02LMFo+/kXE8bsdIAMI75S8itV1/FZ6G8rM3PULdLQohJP3tq2dG drc7SR5pgSQpJ23wNHC7WiOS6XMYJGjMDemzvSuVgAnx6NnjuUJkbi42Zo+PV/eA Z9/D4Y3K6cX3F+EReC0dMFy983TZKJ9aPlO5IQimPdA2LY237ZnxdTzVJZCVlzFn L/bKUgcUzQvDEA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:52 2025 by rpki-client