This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json) Hash identifier: VjGZ6LH6ra/kxZTplCu4b65wUc05FBYK4Y0uAZif1Xw= Subject key identifier: E2:35:53:77:AB:C1:37:74:66:00:18:8C:69:22:0A:04:36:53:FC:B6 Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Certificate serial: 019B52610A48A3750DC69E1B7F8425A86074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft Manifest number: 14A4 Signing time: Wed 24 Dec 2025 22:00:49 +0000 Manifest this update: Wed 24 Dec 2025 22:00:49 +0000 Manifest next update: Thu 25 Dec 2025 22:00:49 +0000 Files and hashes: 1: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: 9773XHpfv6cvZW6BqovDbHhjtjZfOX6puMsm4VLLo6o=) 2: dwg63BIs70UrJw-Aax3sA8BXybY.roa (hash: 5QGHb3BFkyoA0+FZCtvQU8D70IR4N2YKdw4R2aOSeJQ=) 3: kpF9qPJxNFMnxwBLEMVnxkLPTlM.roa (hash: sP+YzMpu1yvXIExVMF+qz5VNW7hPHjzYBXRJgWww/jU=) 4: ooSUZeRWEgEQnBmOBZBl50kW0Ss.roa (hash: XaXFTIC5WACeTPiGq5647vf0R9FxLAGRvbwFyBodmmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:0a:48:a3:75:0d:c6:9e:1b:7f:84:25:a8:60:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac Validity Not Before: Dec 24 22:00:49 2025 GMT Not After : Dec 25 22:00:49 2025 GMT Subject: CN=e2355377abc137746600188c69220a043653fcb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:ce:ae:cf:99:35:81:b6:53:e0:01:67:9b: cf:b9:e6:ee:b7:73:42:2d:bf:35:8a:77:ee:84:d7: e3:1f:81:55:28:4d:e4:f2:1d:85:34:4d:fc:0f:5c: 7f:60:a3:79:27:44:37:84:e9:86:63:8f:a5:a6:6d: 56:ea:5f:25:0c:f2:06:68:94:48:1b:54:66:bd:40: 61:6d:ed:b7:12:bd:7b:53:61:2a:7d:bd:c2:60:bb: f5:7f:0f:03:d5:fa:a3:2a:e5:51:5e:59:23:42:80: f7:89:f7:11:4c:a8:89:05:96:b0:50:ad:18:c6:7d: df:7e:be:b5:f9:03:54:8d:fc:bb:3d:ed:60:d1:2c: e4:19:0e:d5:3e:22:f9:94:12:fc:21:85:a3:91:c3: 19:6d:83:da:41:b6:64:a7:98:e4:91:20:ce:c8:e8: 3a:a4:02:ff:6d:8b:e2:b4:ce:ac:1a:f1:06:d7:ee: 7b:c5:1d:32:cc:0e:f8:27:4c:1e:ae:8c:dc:4e:c7: 58:2d:dd:8e:69:b6:80:37:80:ee:c1:64:ad:1b:f9: ed:2f:65:3e:c9:c3:70:6a:b4:38:ab:28:34:37:e8: 1c:2b:b5:10:e4:07:39:a5:36:6b:7a:50:4c:bb:88: 15:9f:9d:9f:56:2e:d0:d5:d5:2f:13:07:71:83:16: 31:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:35:53:77:AB:C1:37:74:66:00:18:8C:69:22:0A:04:36:53:FC:B6 X509v3 Authority Key Identifier: keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b4:82:19:09:e1:bc:a7:8a:eb:87:17:49:76:3f:77:e8:c2: e0:88:83:58:fc:49:35:d0:d8:ea:32:f3:66:4b:31:ad:5a:b1: 0f:ae:ff:71:c2:ff:39:9d:1d:5b:d4:c7:ef:92:b6:7d:89:2b: 7e:e7:d9:ca:9b:39:98:07:3d:a1:a8:2c:4c:f2:15:f0:8c:2e: 7e:5b:b0:1f:2a:fc:2c:bc:dd:68:13:04:46:8e:ba:74:f9:4d: bd:4d:85:64:d9:cf:f3:bf:69:83:7c:3d:48:61:90:39:f3:15: 4a:0e:d0:74:37:c4:cc:9c:90:93:71:12:d8:35:1c:08:dd:2a: 45:aa:31:dc:69:f5:da:4c:35:f4:c9:58:e2:db:af:9e:2c:7a: 33:da:43:2d:e6:20:e4:33:e5:5c:85:b2:50:c6:8f:71:7e:27: f6:e7:a9:e0:0e:cf:2f:22:36:1f:32:ee:78:ee:84:4a:a5:61: 8a:f0:dd:f0:15:62:d3:5f:31:58:4f:57:43:a6:67:bd:c9:a1: df:64:aa:77:14:1c:34:84:13:db:f7:4e:cb:ec:e9:4b:f0:3e: 4a:d8:39:b8:99:da:e8:96:33:db:09:94:dc:01:58:4e:d1:59: ee:07:68:67:03:aa:87:00:c1:27:59:6e:ac:d6:9b:39:ae:1e: 73:41:65:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYQpIo3UNxp4bf4QlqGB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjU2MzIxZWI3ZWEzZWU0NWNkZWQwMjg2Njg0MjBlMzdm YTJmYWMwHhcNMjUxMjI0MjIwMDQ5WhcNMjUxMjI1MjIwMDQ5WjAzMTEwLwYDVQQD EyhlMjM1NTM3N2FiYzEzNzc0NjYwMDE4OGM2OTIyMGEwNDM2NTNmY2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgPOrs+ZNYG2U+ABZ5vPuebut3NC Lb81infuhNfjH4FVKE3k8h2FNE38D1x/YKN5J0Q3hOmGY4+lpm1W6l8lDPIGaJRI G1RmvUBhbe23Er17U2Eqfb3CYLv1fw8D1fqjKuVRXlkjQoD3ifcRTKiJBZawUK0Y xn3ffr61+QNUjfy7Pe1g0SzkGQ7VPiL5lBL8IYWjkcMZbYPaQbZkp5jkkSDOyOg6 pAL/bYvitM6sGvEG1+57xR0yzA74J0werozcTsdYLd2OabaAN4DuwWStG/ntL2U+ ycNwarQ4qyg0N+gcK7UQ5Ac5pTZrelBMu4gVn52fVi7Q1dUvEwdxgxYxfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI1U3erwTd0ZgAYjGkiCgQ2U/y2MB8GA1UdIwQY MBaAFFz1YyHrfqPuRc3tAoZoQg43+i+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODIt ODQzZTI2MmRkOGRjLzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9kZmE0YTgtMzhiMC00NjFiLWEwODItODQzZTI2MmRkOGRj LzEvWFBWaklldC1vLTVGemUwQ2htaENEamY2TDZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7SCGQnh vKeK64cXSXY/d+jC4IiDWPxJNdDY6jLzZksxrVqxD67/ccL/OZ0dW9TH75K2fYkr fufZyps5mAc9oagsTPIV8IwufluwHyr8LLzdaBMERo66dPlNvU2FZNnP879pg3w9 SGGQOfMVSg7QdDfEzJyQk3ES2DUcCN0qRaox3Gn12kw19MlY4tuvnix6M9pDLeYg 5DPlXIWyUMaPcX4n9uep4A7PLyI2HzLueO6ESqVhivDd8BVi018xWE9XQ6Znvcmh 32SqdxQcNIQT2/dOy+zpS/A+Stg5uJna6JYz2wmU3AFYTtFZ7gdoZwOqhwDBJ1lu rNabOa4ec0FlqA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:07:59 2025 by rpki-client