This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json) Hash identifier: Uyqlp0hvo3kvvVCKDCsxf3YCheHNLzY6C92sV4Pwyo8= Subject key identifier: C6:F9:25:1F:D0:EE:FA:DC:AC:24:73:95:65:D3:55:9A:96:FC:29:91 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B3F114E3C2170FC81ECAE2578122E4ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft Manifest number: 149A Signing time: Sun 21 Dec 2025 04:00:57 +0000 Manifest this update: Sun 21 Dec 2025 04:00:57 +0000 Manifest next update: Mon 22 Dec 2025 04:00:57 +0000 Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: N1POkV5mM9ChbudijBDnLBYqLCvSJzimt2m8X6ZJZ1c=) 2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=) 3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=) 4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:4e:3c:21:70:fc:81:ec:ae:25:78:12:2e:4e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Dec 21 04:00:57 2025 GMT Not After : Dec 22 04:00:57 2025 GMT Subject: CN=c6f9251fd0eefadcac24739565d3559a96fc2991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:a1:e5:74:0d:4b:a0:bb:a3:18:e7:e1:2f: 9a:e5:fe:7e:0c:c9:f9:33:18:4b:53:ab:fa:ab:51: db:27:7c:88:67:52:24:65:bd:84:fa:67:8a:0d:29: c9:08:91:77:e7:e5:0e:c6:9d:ee:31:6b:12:62:a9: ca:8a:d9:29:db:56:ef:79:11:2e:21:fd:de:5e:71: 9a:a7:ae:db:33:52:81:de:53:2b:2f:69:e7:18:06: 07:bd:b7:8e:66:e7:47:6b:3f:56:33:0c:70:ec:75: f2:df:56:ee:1b:13:16:3d:80:d7:7c:a8:f2:f2:4d: c1:ea:a4:42:ab:d3:95:3c:2e:7c:9a:f2:be:6c:26: 3f:b7:c4:d6:72:c7:55:5c:ba:ae:ef:67:30:a6:2d: bd:48:6d:22:c5:d9:c5:e6:7c:ac:e5:b3:5f:13:12: 41:64:01:2b:af:74:df:5e:2e:d0:ab:09:40:d2:87: 46:1f:52:9e:bf:13:03:de:1c:92:ca:ad:69:ea:c4: 6a:36:f1:09:53:9a:3e:7e:57:09:46:6d:f6:c9:77: 20:53:d3:fb:14:d6:76:47:f9:4f:8a:0e:f3:3b:26: 85:78:2d:0b:7f:29:5c:be:77:5e:52:fc:13:14:36: 9f:f9:e2:bc:58:02:e3:e8:7f:a2:e5:bb:28:f9:58: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F9:25:1F:D0:EE:FA:DC:AC:24:73:95:65:D3:55:9A:96:FC:29:91 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:47:6a:c3:3a:23:8a:83:44:d9:25:28:41:28:8d:97:db:d2: 85:35:b2:96:28:85:26:34:8c:6d:14:27:7b:85:d0:5f:c3:40: cb:09:7b:48:32:3b:c7:ae:cb:08:12:ff:5c:42:b4:93:63:a0: 6f:dc:6b:02:32:72:91:a7:6d:71:f9:be:ae:04:d3:b6:2f:39: a2:b9:09:c3:28:d6:70:8b:59:b1:2f:3b:e8:3f:b4:cc:44:e2: f7:bc:3b:82:ad:3e:9e:9e:7a:6f:be:79:da:aa:ef:32:e8:ab: 65:c5:23:56:b3:c7:91:88:ad:37:3e:fe:40:1d:d8:0a:2a:8d: 48:79:4a:2e:6c:cd:f2:f9:24:6d:9e:48:dd:c8:b2:fa:7b:11: 2b:0d:8c:8b:14:33:fd:f9:7b:88:75:92:eb:47:ef:0d:6b:43: a2:55:c0:08:3a:9e:c1:d7:66:a3:d9:76:85:c7:09:ef:96:45: 1e:b0:99:0d:ad:e7:86:05:b3:22:86:0c:f3:31:b0:ee:3c:6c: 70:e8:75:2c:17:2e:16:65:da:57:14:48:e5:2f:75:2e:4f:0d: 62:37:67:ca:84:f0:22:02:63:f4:ea:57:4e:ee:8b:76:6a:f2: 90:cb:30:7c:b7:57:af:75:4c:c4:c1:79:e8:dc:84:9d:01:34: c7:6e:b2:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EU48IXD8geyuJXgSLk7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjUxMjIxMDQwMDU3WhcNMjUxMjIyMDQwMDU3WjAzMTEwLwYDVQQD EyhjNmY5MjUxZmQwZWVmYWRjYWMyNDczOTU2NWQzNTU5YTk2ZmMyOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRih5XQNS6C7oxjn4S+a5f5+DMn5 MxhLU6v6q1HbJ3yIZ1IkZb2E+meKDSnJCJF35+UOxp3uMWsSYqnKitkp21bveREu If3eXnGap67bM1KB3lMrL2nnGAYHvbeOZudHaz9WMwxw7HXy31buGxMWPYDXfKjy 8k3B6qRCq9OVPC58mvK+bCY/t8TWcsdVXLqu72cwpi29SG0ixdnF5nys5bNfExJB ZAErr3TfXi7QqwlA0odGH1KevxMD3hySyq1p6sRqNvEJU5o+flcJRm32yXcgU9P7 FNZ2R/lPig7zOyaFeC0LfylcvndeUvwTFDaf+eK8WALj6H+i5bso+ViWjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb5JR/Q7vrcrCRzlWXTVZqW/CmRMB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakdqwzoj ioNE2SUoQSiNl9vShTWyliiFJjSMbRQne4XQX8NAywl7SDI7x67LCBL/XEK0k2Og b9xrAjJykadtcfm+rgTTti85orkJwyjWcItZsS876D+0zETi97w7gq0+np56b755 2qrvMuirZcUjVrPHkYitNz7+QB3YCiqNSHlKLmzN8vkkbZ5I3ciy+nsRKw2MixQz /fl7iHWS60fvDWtDolXACDqewddmo9l2hccJ75ZFHrCZDa3nhgWzIoYM8zGw7jxs cOh1LBcuFmXaVxRI5S91Lk8NYjdnyoTwIgJj9OpXTu6LdmrykMswfLdXr3VMxMF5 6NyEnQE0x26yFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:10 2025 by rpki-client