This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft File: XZrYiZ1byFSe7dPlny0NYhNczxQ.mft (raw, json) Hash identifier: Ej3fZBTjUGjNwcSZtw9+Adx5R6bZO5BXT9tg74Pjns0= Subject key identifier: 98:14:CA:F1:4D:D6:44:14:6A:8F:60:29:B9:E2:85:ED:13:0F:70:F8 Authority key identifier: 5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 Certificate issuer: /CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14 Certificate serial: 019B4883054B0EBE67E1DB8EB38C941A71F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft Manifest number: 02FE Signing time: Tue 23 Dec 2025 00:01:44 +0000 Manifest this update: Tue 23 Dec 2025 00:01:44 +0000 Manifest next update: Wed 24 Dec 2025 00:01:44 +0000 Files and hashes: 1: XZrYiZ1byFSe7dPlny0NYhNczxQ.crl (hash: N/P7KpQRpuOCzV3SvrWRwd93otYjx3e3SJUIp+sAbdk=) 2: m5GOwP2RAjr9d7tTC7l8N6PV3Js.roa (hash: 1yLaEhuOSXYxSo5HpHGS5B2c9njKUwnBpqElWVTZ0t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:83:05:4b:0e:be:67:e1:db:8e:b3:8c:94:1a:71:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9ad8899d5bc8549eedd3e59f2d0d62135ccf14 Validity Not Before: Dec 23 00:01:44 2025 GMT Not After : Dec 24 00:01:44 2025 GMT Subject: CN=9814caf14dd644146a8f6029b9e285ed130f70f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:01:00:f5:9d:56:7a:cf:85:2e:fe:cb:17: d2:30:f3:37:b0:52:78:7e:39:89:13:41:2f:7a:9a: 95:33:73:09:81:81:dd:be:69:eb:36:9a:9b:6a:db: 55:eb:36:fe:7d:17:83:0c:d9:09:72:64:d2:6a:ce: 9b:af:27:66:7e:87:1e:0b:9f:34:6a:d8:c0:b1:f6: 47:cd:0b:a9:cf:09:f1:19:14:0e:8c:34:e4:83:81: 24:20:f1:f2:27:0e:e7:85:4c:c6:43:dc:3e:44:e3: 4e:93:ab:3b:d3:ef:8c:b2:b0:61:20:7a:57:93:ee: 37:11:2b:b3:24:b0:5a:b5:e1:1a:f6:da:47:bf:16: 76:98:d2:98:62:ea:60:b2:be:5f:08:e3:02:fa:d9: 9c:b9:23:d5:f9:2e:f2:e0:2c:63:25:bb:f2:91:d0: fb:55:1c:46:47:39:5f:83:0f:44:3e:3e:20:5f:77: 24:a4:0a:e4:7b:b8:ca:b1:94:7e:d6:9c:f6:6e:a2: 99:74:ff:8a:6f:14:2c:47:e8:41:57:3e:9f:00:c3: ed:5c:36:c6:da:35:ae:33:58:6d:35:d3:38:5f:02: e9:d0:94:0a:98:e3:38:48:0c:e6:54:8d:78:b3:34: 7b:0e:97:86:6f:1b:22:b1:89:cc:c4:ed:7e:82:1e: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:14:CA:F1:4D:D6:44:14:6A:8F:60:29:B9:E2:85:ED:13:0F:70:F8 X509v3 Authority Key Identifier: keyid:5D:9A:D8:89:9D:5B:C8:54:9E:ED:D3:E5:9F:2D:0D:62:13:5C:CF:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZrYiZ1byFSe7dPlny0NYhNczxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/bcd792-8956-45fe-8534-0931fd3e5bee/1/XZrYiZ1byFSe7dPlny0NYhNczxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:80:de:94:8c:1e:e9:18:56:82:5d:bf:f2:58:db:63:63:fd: 9b:f6:cb:8a:02:47:35:19:b2:01:10:40:31:42:ca:d7:e8:de: 33:a5:ca:da:af:cc:08:6e:8f:1f:af:af:9d:8f:5f:13:ad:13: 43:b7:04:92:b7:76:3a:98:59:72:b6:81:3d:50:7c:2f:57:35: 59:39:34:4a:99:16:7b:73:a2:f3:7c:d3:0d:93:79:2a:76:5b: 1b:d0:c5:2b:ce:bb:6d:90:17:dc:53:3d:1c:18:47:b0:29:03: c8:ac:1f:2d:5c:42:f2:0b:1c:59:c4:9d:b8:dd:ef:cc:83:6b: 3b:cd:5c:82:e7:74:00:fd:85:bf:25:89:cf:c4:d2:32:ba:3b: 84:2f:0e:0d:8a:12:9a:91:af:ec:20:52:55:d8:4e:7c:3a:8f: ee:24:79:d6:13:59:24:51:37:03:08:00:3a:02:0d:4c:16:6e: f1:db:71:32:ba:e0:4f:37:8d:c6:7f:27:03:e4:94:9f:0b:ec: 48:18:4c:5a:86:98:51:60:90:10:5c:69:68:de:4c:23:8e:48: 17:cc:59:b7:9a:0f:49:47:a8:c4:f9:6f:28:83:4c:33:75:9e: cd:8f:22:51:a6:f4:da:28:69:60:56:ac:40:69:c0:4d:3a:ac: c2:fb:e0:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgwVLDr5n4duOs4yUGnH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWFkODg5OWQ1YmM4NTQ5ZWVkZDNlNTlmMmQwZDYyMTM1 Y2NmMTQwHhcNMjUxMjIzMDAwMTQ0WhcNMjUxMjI0MDAwMTQ0WjAzMTEwLwYDVQQD Eyg5ODE0Y2FmMTRkZDY0NDE0NmE4ZjYwMjliOWUyODVlZDEzMGY3MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV0BAPWdVnrPhS7+yxfSMPM3sFJ4 fjmJE0EvepqVM3MJgYHdvmnrNpqbattV6zb+fReDDNkJcmTSas6brydmfoceC580 atjAsfZHzQupzwnxGRQOjDTkg4EkIPHyJw7nhUzGQ9w+RONOk6s70++MsrBhIHpX k+43ESuzJLBateEa9tpHvxZ2mNKYYupgsr5fCOMC+tmcuSPV+S7y4CxjJbvykdD7 VRxGRzlfgw9EPj4gX3ckpArke7jKsZR+1pz2bqKZdP+KbxQsR+hBVz6fAMPtXDbG 2jWuM1htNdM4XwLp0JQKmOM4SAzmVI14szR7DpeGbxsisYnMxO1+gh6eJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgUyvFN1kQUao9gKbnihe0TD3D4MB8GA1UdIwQY MBaAFF2a2ImdW8hUnu3T5Z8tDWITXM8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQt MDkzMWZkM2U1YmVlLzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iY2Q3OTItODk1Ni00NWZlLTg1MzQtMDkzMWZkM2U1YmVl LzEvWFpyWWlaMWJ5RlNlN2RQbG55ME5ZaE5jenhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIDelIwe 6RhWgl2/8ljbY2P9m/bLigJHNRmyARBAMULK1+jeM6XK2q/MCG6PH6+vnY9fE60T Q7cEkrd2OphZcraBPVB8L1c1WTk0SpkWe3Oi83zTDZN5KnZbG9DFK867bZAX3FM9 HBhHsCkDyKwfLVxC8gscWcSduN3vzINrO81cgud0AP2FvyWJz8TSMro7hC8ODYoS mpGv7CBSVdhOfDqP7iR51hNZJFE3AwgAOgINTBZu8dtxMrrgTzeNxn8nA+SUnwvs SBhMWoaYUWCQEFxpaN5MI45IF8xZt5oPSUeoxPlvKINMM3WezY8iUab02ihpYFas QGnATTqswvvgCA== -----END CERTIFICATE-----Generated at Tue Dec 23 06:10:59 2025 by rpki-client