This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json) Hash identifier: oFhk1t6AhlU5Wwb+4/QXbSsl8wLDDDbWqfgxLsGKKhA= Subject key identifier: 19:9D:F0:CF:0D:B7:C4:A1:9F:47:82:8D:F3:0D:5F:8C:28:05:30:2B Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019B3DFE399E4E5ABA0C13F863D100104F7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft Manifest number: 0702 Signing time: Sat 20 Dec 2025 23:00:29 +0000 Manifest this update: Sat 20 Dec 2025 23:00:29 +0000 Manifest next update: Sun 21 Dec 2025 23:00:29 +0000 Files and hashes: 1: 0EYHloNNMUeAQfFhtTwh0_j8yCs.roa (hash: cCeGu5Zp9qskDY7ZxrA5s8MH+wQ38rU2p3PBy29pBl4=) 2: 3pGMf2uelis93d-cWIqOvjIte_8.roa (hash: hCA0m5958CMIXlTPuOx73BRCeRHxrLBc3i7kaHRRzvM=) 3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: g3LD+jMfCXgAPkLpyM7PLeRo6V4IMBWzwA6OzAUL2aQ=) 4: lmViBZUrJauVEE0G2QrmSk33TZM.roa (hash: HMXZlZJ5YNloePMdOCSIn559A8cE+RQD1iAwls1t7fk=) 5: p5sda-HwuWNCoJb8ZwZwGaKEMGY.roa (hash: aNaLV+OqbrfnfcABJDi26qGq5f1GualuPpkp1NT1+Pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:39:9e:4e:5a:ba:0c:13:f8:63:d1:00:10:4f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Dec 20 23:00:29 2025 GMT Not After : Dec 21 23:00:29 2025 GMT Subject: CN=199df0cf0db7c4a19f47828df30d5f8c2805302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:22:c4:d8:39:d5:67:44:17:e3:1a:ac:1f:7e: 46:7a:c0:84:d5:07:e4:5f:bd:56:7d:90:83:4a:89: 3e:ee:c4:96:4f:c5:7c:1b:df:02:82:d3:48:c1:4c: 3f:d4:09:a3:4d:6d:e2:3b:be:93:d6:5a:18:e0:d4: ca:35:8a:3d:a6:cd:3e:46:f2:2a:37:08:7f:00:4a: e5:ca:0f:70:97:a9:a3:43:f6:ea:cb:fb:7f:a2:3b: 41:13:6a:df:77:af:d2:9b:44:ef:53:3f:59:7c:94: 1d:9c:fb:f7:8b:7b:3a:d8:c2:3d:c1:c1:58:d4:f2: 52:4a:e3:b8:94:10:69:88:3d:6c:f8:f3:e3:e1:df: 94:47:e7:99:0c:5f:e8:57:16:c7:2b:5f:7b:0d:c9: 6b:f1:43:c8:96:38:f7:51:96:37:cc:09:cc:94:97: 42:61:61:28:c4:d7:40:d8:a6:1f:bf:fd:20:d3:04: 62:3b:64:82:24:ad:18:2c:49:1a:61:cc:0d:d4:bd: a5:fc:78:3d:90:c4:16:9e:81:88:d4:df:25:7b:62: 93:97:74:8c:36:dd:68:87:f7:a4:6c:7a:82:bd:11: ba:fc:c4:1b:8e:97:89:45:ec:de:89:95:c1:2c:9a: 91:ab:be:b4:b3:6f:9e:a9:f8:35:31:b1:d8:4e:2b: e9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9D:F0:CF:0D:B7:C4:A1:9F:47:82:8D:F3:0D:5F:8C:28:05:30:2B X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:f2:6d:a8:ba:09:f0:da:e8:b5:4c:eb:c6:c2:81:d5:1a:73: b8:68:df:10:e9:a2:68:60:2c:1f:26:29:54:04:4d:86:4e:bd: e4:10:a0:05:6f:8b:55:b4:5b:e6:d2:c6:89:8b:7a:76:ef:b7: b2:a3:76:71:55:1b:17:00:0d:35:33:77:51:fa:f4:45:5a:2e: d2:ea:a5:b4:a9:27:66:28:33:c1:24:80:b6:95:24:57:7f:6f: 37:a4:b3:4c:31:02:cf:ab:99:c2:7e:85:cc:91:1f:00:52:c1: b5:0d:99:5a:eb:29:1d:e2:bb:5e:0f:03:9e:7d:85:04:5e:4f: 71:b3:ae:dd:e1:c5:e6:64:2a:d3:af:4c:d5:e2:72:fc:a7:f9: a0:bf:fb:7a:57:7a:ba:ad:cb:16:63:e0:86:84:cf:44:72:f7: 83:ab:00:43:5f:83:1b:a8:c2:f9:a2:96:c6:85:ba:35:e9:c1: d5:8a:6f:5b:d9:1c:9a:fa:c0:62:f1:9a:97:37:52:45:e3:23: cd:9a:95:db:70:0b:13:90:70:db:31:f8:02:9e:26:47:9d:3b: 61:a8:fb:7c:d1:3f:bd:ce:ab:7b:ca:d3:39:4d:36:40:cf:87: 51:fb:69:63:08:f7:fe:0e:ee:20:f5:e3:8b:79:1f:02:88:a9: 02:c3:16:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/jmeTlq6DBP4Y9EAEE9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjUxMjIwMjMwMDI5WhcNMjUxMjIxMjMwMDI5WjAzMTEwLwYDVQQD EygxOTlkZjBjZjBkYjdjNGExOWY0NzgyOGRmMzBkNWY4YzI4MDUzMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliLE2DnVZ0QX4xqsH35GesCE1Qfk X71WfZCDSok+7sSWT8V8G98CgtNIwUw/1AmjTW3iO76T1loY4NTKNYo9ps0+RvIq Nwh/AErlyg9wl6mjQ/bqy/t/ojtBE2rfd6/Sm0TvUz9ZfJQdnPv3i3s62MI9wcFY 1PJSSuO4lBBpiD1s+PPj4d+UR+eZDF/oVxbHK197Dclr8UPIljj3UZY3zAnMlJdC YWEoxNdA2KYfv/0g0wRiO2SCJK0YLEkaYcwN1L2l/Hg9kMQWnoGI1N8le2KTl3SM Nt1oh/ekbHqCvRG6/MQbjpeJRezeiZXBLJqRq760s2+eqfg1MbHYTivp6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmd8M8Nt8Shn0eCjfMNX4woBTArMB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/JtqLoJ 8NrotUzrxsKB1RpzuGjfEOmiaGAsHyYpVARNhk695BCgBW+LVbRb5tLGiYt6du+3 sqN2cVUbFwANNTN3Ufr0RVou0uqltKknZigzwSSAtpUkV39vN6SzTDECz6uZwn6F zJEfAFLBtQ2ZWuspHeK7Xg8Dnn2FBF5PcbOu3eHF5mQq069M1eJy/Kf5oL/7eld6 uq3LFmPghoTPRHL3g6sAQ1+DG6jC+aKWxoW6NenB1YpvW9kcmvrAYvGalzdSReMj zZqV23ALE5Bw2zH4Ap4mR507Yaj7fNE/vc6re8rTOU02QM+HUftpYwj3/g7uIPXj i3kfAoipAsMWRA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:54 2025 by rpki-client