This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json) Hash identifier: 5qgQCTnP3NZHOOcLXuglV60oo1CuxJ6fALLY84uxUfE= Subject key identifier: 95:F7:80:94:68:B4:8F:AA:84:C7:92:96:14:D8:E0:0E:BD:0E:90:6F Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Certificate serial: 019B3E6C1720A5CCEF192C4AD0B0508C6F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:00:29 +0000 Manifest this update: Sun 21 Dec 2025 01:00:29 +0000 Manifest next update: Mon 22 Dec 2025 01:00:29 +0000 Files and hashes: 1: 1Pr3Rju9xHQPfWV31auS4t6_JKs.roa (hash: U6YPngmDoN0L1hanOZmXAZn1QKdSvL9NB2XC3NylzBI=) 2: EH68L41xD3pAELgVd86O10m8MkI.roa (hash: kVF4w9/67ztXyrHF78GW0MvfXrSQ0p5+COw2F7wfCkg=) 3: JCElWnpyHCGRVw4kJTI2wPhKalo.roa (hash: rPdh51cCsDaaE54oeGhrfMuu194frpT1l20RBDB0eJs=) 4: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: 8SRUXVmLj0hu0IbqxqBIdBOqMkUtxLWSN9b3ZKP39do=) 5: fZauZUiMq7QzdDKqVQAM0BTNdqg.roa (hash: 7Avl6IIjQaZ1np/4jtmkn7cQrYx+SSD6VScCgiCbrdk=) 6: mQw87omeSTSQ0GNmmy4NZ7MZg5c.roa (hash: nOiR+/wPsaUWm0acT8TdN25G4tHF28XiNptSgXF2Czo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:17:20:a5:cc:ef:19:2c:4a:d0:b0:50:8c:6f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336 Validity Not Before: Dec 21 01:00:29 2025 GMT Not After : Dec 22 01:00:29 2025 GMT Subject: CN=95f7809468b48faa84c7929614d8e00ebd0e906f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:59:9e:e9:16:94:ec:34:2e:c7:3e:81:21: 10:9b:13:e8:4f:82:a2:6f:86:67:0e:cb:5a:b9:8b: ca:27:9b:d6:8a:85:0b:b6:b2:97:ef:ca:88:a7:4e: ee:65:58:64:c0:d5:7a:6d:7e:96:cf:24:11:6d:44: ce:0c:5f:fe:87:7f:19:e6:ff:8c:e3:73:bb:cb:0b: 6d:42:34:e7:a4:81:13:3f:b9:42:8e:63:6e:33:4c: 8c:3d:45:18:1d:32:a5:b8:d7:08:a5:43:6b:ec:ab: 4a:4c:3b:51:7c:aa:74:e8:c7:1c:81:14:16:d0:02: 34:05:ad:7f:dc:b7:bf:67:e2:f2:f0:fd:ee:04:3d: a8:84:36:20:45:3a:b6:b6:35:e5:89:68:65:52:63: bf:e1:ca:ef:78:5b:12:64:22:96:ef:74:5f:94:76: 3d:dc:25:60:3c:1c:ec:d6:a9:98:6e:4d:55:65:fc: 21:92:47:30:32:c5:d8:23:ab:7a:24:ac:43:49:5a: dc:d4:0e:69:c9:bc:92:c7:07:46:09:ca:13:4f:3a: e7:56:91:9c:57:72:16:51:4f:65:64:c4:5d:eb:3a: 2f:6d:74:23:d0:09:10:eb:5a:e6:6b:18:60:b1:d8: d9:55:df:30:d0:18:89:4c:03:af:27:8d:7d:a4:9a: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F7:80:94:68:B4:8F:AA:84:C7:92:96:14:D8:E0:0E:BD:0E:90:6F X509v3 Authority Key Identifier: keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:3c:52:c9:f6:3b:5a:16:45:59:ad:18:a1:5c:55:8b:b9:e8: d4:d4:19:fc:da:cf:8d:1f:84:59:e6:1c:1c:bb:03:fc:37:b9: 80:c2:17:0b:22:a6:6f:cf:a3:20:33:af:05:fc:89:9f:53:2d: 77:f7:ca:88:99:f2:02:e6:4a:5c:cb:69:76:0d:5a:bb:75:ee: 8f:ce:4f:fc:85:27:b8:29:a5:0b:9e:25:2c:08:24:d1:98:57: 9e:49:f8:41:ce:84:61:9f:0e:06:b0:14:04:26:5c:48:51:45: 1f:fd:17:0b:e7:58:45:b6:ef:f5:b6:e2:c1:9e:ef:e5:23:99: 65:b2:ec:bf:b8:ff:f5:13:c0:f8:99:c0:88:94:c0:83:44:d6: 7d:90:de:34:f1:b4:b8:d8:25:19:ea:6a:8f:0d:c9:f5:6e:2d: 7a:50:0c:66:27:ba:da:8a:c2:70:f9:6f:71:5e:af:ae:ca:25: 06:c8:fb:05:2b:9f:cd:a2:4a:64:38:a0:96:e9:e4:53:b6:29: 7d:46:c8:6b:ab:a6:67:30:a8:0d:20:b1:0e:b8:75:b9:96:39: 40:a5:d8:9b:ec:96:63:a3:fe:21:b1:28:84:35:7e:40:1f:8b: 78:db:33:57:01:96:7c:a7:a5:7c:6f:39:bf:1c:9c:5c:01:b2: f1:38:c2:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bBcgpczvGSxK0LBQjG+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz NTAzMzYwHhcNMjUxMjIxMDEwMDI5WhcNMjUxMjIyMDEwMDI5WjAzMTEwLwYDVQQD Eyg5NWY3ODA5NDY4YjQ4ZmFhODRjNzkyOTYxNGQ4ZTAwZWJkMGU5MDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9lZnukWlOw0Lsc+gSEQmxPoT4Ki b4ZnDstauYvKJ5vWioULtrKX78qIp07uZVhkwNV6bX6WzyQRbUTODF/+h38Z5v+M 43O7ywttQjTnpIETP7lCjmNuM0yMPUUYHTKluNcIpUNr7KtKTDtRfKp06MccgRQW 0AI0Ba1/3Le/Z+Ly8P3uBD2ohDYgRTq2tjXliWhlUmO/4crveFsSZCKW73RflHY9 3CVgPBzs1qmYbk1VZfwhkkcwMsXYI6t6JKxDSVrc1A5pybySxwdGCcoTTzrnVpGc V3IWUU9lZMRd6zovbXQj0AkQ61rmaxhgsdjZVd8w0BiJTAOvJ419pJp0qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJX3gJRotI+qhMeSlhTY4A69DpBvMB8GA1UdIwQY MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzxSyfY7 WhZFWa0YoVxVi7no1NQZ/NrPjR+EWeYcHLsD/De5gMIXCyKmb8+jIDOvBfyJn1Mt d/fKiJnyAuZKXMtpdg1au3Xuj85P/IUnuCmlC54lLAgk0ZhXnkn4Qc6EYZ8OBrAU BCZcSFFFH/0XC+dYRbbv9bbiwZ7v5SOZZbLsv7j/9RPA+JnAiJTAg0TWfZDeNPG0 uNglGepqjw3J9W4telAMZie62orCcPlvcV6vrsolBsj7BSufzaJKZDiglunkU7Yp fUbIa6umZzCoDSCxDrh1uZY5QKXYm+yWY6P+IbEohDV+QB+LeNszVwGWfKelfG85 vxycXAGy8TjCUg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:24 2025 by rpki-client