This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json) Hash identifier: llW9HstK82Zh2TyP3CqNODCYj0zCOBMzTa/5DGOu71o= Subject key identifier: 33:7F:B8:FD:02:9C:FB:9D:E0:A8:01:C7:CC:88:D6:22:0A:55:27:E7 Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Certificate serial: 019B3A8FB819861F9E75D06AF30CB1AFFAF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft Manifest number: 0E68 Signing time: Sat 20 Dec 2025 07:00:55 +0000 Manifest this update: Sat 20 Dec 2025 07:00:55 +0000 Manifest next update: Sun 21 Dec 2025 07:00:55 +0000 Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=) 2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=) 3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: gk0ymR6nWtyyeoL9wXA9y9QL11nHOiJ9o3zwOzaeZlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:b8:19:86:1f:9e:75:d0:6a:f3:0c:b1:af:fa:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Validity Not Before: Dec 20 07:00:55 2025 GMT Not After : Dec 21 07:00:55 2025 GMT Subject: CN=337fb8fd029cfb9de0a801c7cc88d6220a5527e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:39:03:a8:e1:f7:0f:ff:7b:9a:3b:df:2c: 1b:8f:34:63:9b:30:d6:08:ce:c7:1a:1d:f3:dd:5d: 29:6f:b7:ff:a3:51:b6:c6:40:75:0d:3f:aa:30:96: 48:62:3b:61:50:f7:0e:42:83:77:6a:c7:78:45:d1: 46:75:d2:e3:f3:ba:76:c9:37:36:82:f4:b3:ec:89: a1:1f:b4:34:57:65:c0:16:1b:3d:c5:41:dc:02:bf: ea:70:06:c1:a3:fd:58:82:2c:0c:82:dd:2c:0c:14: 84:26:52:30:62:5c:57:8e:38:87:2d:99:a0:b6:1c: e6:43:b1:9d:8c:b3:bc:53:5c:29:d5:6d:51:a4:b5: e7:bd:66:35:1d:09:e9:e9:df:e1:51:5f:d8:ea:36: a8:f9:e8:29:49:e8:cf:f1:11:b3:4e:2e:c0:56:e6: 96:40:36:eb:88:4d:0a:a4:c9:87:48:29:cc:fa:cb: 29:11:e1:5b:0c:05:0c:12:49:47:ac:ab:4c:d5:7e: 10:bb:b7:a4:62:6b:96:25:6e:c0:47:4d:dd:88:ce: 69:ad:52:b1:ba:df:3a:05:72:8e:c7:a1:16:73:ef: f1:97:4e:ff:fb:bd:38:e4:74:00:dc:4b:89:99:d4: da:90:e8:93:f4:9b:fe:f0:3a:ed:e3:18:70:da:ca: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7F:B8:FD:02:9C:FB:9D:E0:A8:01:C7:CC:88:D6:22:0A:55:27:E7 X509v3 Authority Key Identifier: keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:7f:0f:17:76:a3:1a:e5:83:36:42:9e:43:95:2d:e6:2d:50: 7f:67:40:7c:38:ba:36:c4:4b:8d:77:76:81:26:a4:8f:d4:fc: 03:af:b4:eb:b5:7b:88:05:f0:38:48:74:c1:c4:6a:fe:5d:12: 3f:4c:88:e8:f1:9f:7f:81:15:5c:5b:97:5e:59:70:c5:ed:a5: 19:cf:e3:72:fc:52:7b:e9:b6:e6:3e:01:45:9c:79:5b:02:bd: 22:d5:10:e2:3d:41:d9:1b:7f:9e:2b:05:0f:0f:fd:c9:14:1e: 64:42:0b:d0:a1:d7:59:5f:0d:2d:0f:77:a8:cd:9f:ec:98:69: 57:60:b6:4d:29:33:be:a6:e7:2c:d7:31:de:2e:0f:1b:14:fa: ae:01:34:01:96:65:39:36:18:5a:37:e6:c3:97:32:12:d4:8c: 02:a3:2c:b1:59:12:ca:17:bb:f6:10:93:9b:bd:52:91:b0:48: 28:67:c3:56:13:c8:d6:58:b9:97:e5:d0:a3:44:0b:cc:42:9d: a5:a8:2c:d2:62:d1:c2:54:d1:83:ec:c8:b3:09:4b:77:b7:20: bc:42:bf:7e:3f:e6:5f:0c:a4:d4:09:9e:73:78:18:f1:7b:6a: 73:8b:9d:f9:71:b6:11:25:4d:2d:e3:9f:f7:e2:ae:8b:cd:f6: 40:bd:6f:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7gZhh+eddBq8wyxr/r4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDk5ZDQ5YzRiMGU0NmIyNzg2ODQyNzMxZTE1MzQ4NWM4 YWM0OGIwHhcNMjUxMjIwMDcwMDU1WhcNMjUxMjIxMDcwMDU1WjAzMTEwLwYDVQQD EygzMzdmYjhmZDAyOWNmYjlkZTBhODAxYzdjYzg4ZDYyMjBhNTUyN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtco5A6jh9w//e5o73ywbjzRjmzDW CM7HGh3z3V0pb7f/o1G2xkB1DT+qMJZIYjthUPcOQoN3asd4RdFGddLj87p2yTc2 gvSz7ImhH7Q0V2XAFhs9xUHcAr/qcAbBo/1YgiwMgt0sDBSEJlIwYlxXjjiHLZmg thzmQ7GdjLO8U1wp1W1RpLXnvWY1HQnp6d/hUV/Y6jao+egpSejP8RGzTi7AVuaW QDbriE0KpMmHSCnM+sspEeFbDAUMEklHrKtM1X4Qu7ekYmuWJW7AR03diM5prVKx ut86BXKOx6EWc+/xl07/+7045HQA3EuJmdTakOiT9Jv+8Drt4xhw2sp0ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN/uP0CnPud4KgBx8yI1iIKVSfnMB8GA1UdIwQY MBaAFF7ZnUnEsORrJ4aEJzHhU0hcisSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEt OTBjM2FmYzdjOTQ3LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEtOTBjM2FmYzdjOTQ3 LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH8PF3aj GuWDNkKeQ5Ut5i1Qf2dAfDi6NsRLjXd2gSakj9T8A6+067V7iAXwOEh0wcRq/l0S P0yI6PGff4EVXFuXXllwxe2lGc/jcvxSe+m25j4BRZx5WwK9ItUQ4j1B2Rt/nisF Dw/9yRQeZEIL0KHXWV8NLQ93qM2f7JhpV2C2TSkzvqbnLNcx3i4PGxT6rgE0AZZl OTYYWjfmw5cyEtSMAqMssVkSyhe79hCTm71SkbBIKGfDVhPI1li5l+XQo0QLzEKd pags0mLRwlTRg+zIswlLd7cgvEK/fj/mXwyk1Amec3gY8Xtqc4ud+XG2ESVNLeOf 9+Kui832QL1vsg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:05:58 2025 by rpki-client