This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json) Hash identifier: XzOPBlUvy+I1SGqLwBeN5RRg0q2ro5FVvwQuEUByU04= Subject key identifier: FF:F4:1C:5F:CB:C1:4D:72:16:70:E2:DF:B0:E9:75:25:DF:0A:7A:F6 Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605 Certificate serial: 019B281B6EAF61132482BF836003F1A6D8A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft Manifest number: 065D Signing time: Tue 16 Dec 2025 17:00:44 +0000 Manifest this update: Tue 16 Dec 2025 17:00:44 +0000 Manifest next update: Wed 17 Dec 2025 17:00:44 +0000 Files and hashes: 1: 02wqSv6S3QfGQclsARr7QXNvdWI.roa (hash: blfoT2HbR+GD9/4BT0/OCiD+iemp7TQrPXABrjQFnJw=) 2: RSjMhTaGtuAfeDXOX3uwyAT1Eok.roa (hash: Y4/cSuW1UOGa89zMuz5QH1r95dZUNstGhg+JOqcELak=) 3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: QeQas3HTBqZMLJ2IjN26R9txXalLXcvJTm1ENKEF9IY=) 4: xJZ2Genlg6FZ5BYdZvsnK__KGuk.roa (hash: vX+ymzFaWBe0MgYWBkL1Ckb8oOlGEmiJb877SUGvYCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:6e:af:61:13:24:82:bf:83:60:03:f1:a6:d8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605 Validity Not Before: Dec 16 17:00:44 2025 GMT Not After : Dec 17 17:00:44 2025 GMT Subject: CN=fff41c5fcbc14d721670e2dfb0e97525df0a7af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:56:24:a6:b9:d0:de:f8:81:0c:14:db:03:ab: 0e:cf:56:9e:27:80:2d:00:46:be:59:35:53:e2:84: 69:05:14:b3:ea:0d:8f:a3:ba:4d:3c:5f:86:77:05: f0:18:c8:03:a6:09:ce:8f:92:16:ce:1e:49:a2:bb: d3:02:49:d0:3d:94:1c:ba:f8:7d:df:0c:d0:5a:1c: e1:78:ce:14:16:e6:2c:d4:46:4b:17:7e:77:85:7e: 15:be:5b:8d:b5:be:c0:3b:df:86:11:25:18:92:66: 62:f7:a3:1f:df:8e:c4:76:43:34:b8:6a:b0:b0:89: 68:12:ca:f1:7c:81:1a:09:c2:54:c9:81:88:4c:f3: 8b:61:ff:2b:ba:83:95:2f:1f:cb:9d:56:4e:23:3b: 35:56:fb:f6:62:34:2f:41:cd:4e:6e:3f:21:b5:1d: 89:a4:cf:d1:ab:59:f6:22:09:40:5f:7f:b6:18:8d: 57:e6:76:8c:9f:46:53:36:f5:cc:24:69:a0:b9:57: db:e7:6e:bd:74:4f:a3:00:2a:01:c3:4d:e9:bc:b3: 01:c2:ed:bf:d1:42:14:22:22:67:4f:65:c7:de:d4: 66:65:f0:f4:db:5b:f6:59:6c:36:4b:51:ac:16:47: 15:ad:a2:32:0b:cf:46:65:a2:ab:e2:f6:0b:1d:b6: 8c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F4:1C:5F:CB:C1:4D:72:16:70:E2:DF:B0:E9:75:25:DF:0A:7A:F6 X509v3 Authority Key Identifier: keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d1:e2:0c:21:fb:87:97:57:47:27:85:30:10:85:0a:10:45: ba:cc:4b:2b:46:be:d0:86:bf:89:16:87:29:06:ba:ec:28:a6: c9:2c:85:ad:0d:f2:d7:7c:9c:2c:76:11:9d:5b:32:9b:62:49: 68:dd:de:2c:82:52:7a:fb:8a:b5:fe:65:db:0d:10:72:8b:af: c3:ef:eb:1e:fc:d7:7e:9b:66:db:82:ba:26:e5:7d:e3:41:ba: d0:96:e6:09:20:d8:9b:bc:f5:18:43:9f:a6:48:b5:96:f0:b8: e8:27:ad:7d:be:be:d1:44:fe:d2:f9:e0:44:9f:81:cd:74:99: b0:5a:44:c9:51:ec:0f:4b:dc:f2:c2:32:0e:69:b4:57:67:2d: 43:d5:bf:4b:2a:75:57:e7:a8:a3:1c:91:22:4e:b8:ad:81:8c: 7a:9d:db:b7:bd:4c:7e:57:5f:64:ec:ea:3a:24:0c:61:64:96: 32:fb:6d:93:dc:8e:a2:ab:26:89:8b:cb:09:e6:6a:56:8c:3e: 46:0d:f3:26:43:4f:b7:dd:03:b2:5b:bf:7e:39:52:52:3b:4d: 12:61:a9:3f:fc:3f:f3:23:0d:68:09:da:2c:31:6c:35:67:4b: a1:96:d6:07:af:9f:4b:2b:7c:d6:73:3d:3f:aa:fd:ec:e6:33: b7:88:59:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG26vYRMkgr+DYAPxptiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDhkYzEwMjE4YWM2ZGI3OTQzMGFlN2M0NDUxNTU5MDQx N2Q2MDUwHhcNMjUxMjE2MTcwMDQ0WhcNMjUxMjE3MTcwMDQ0WjAzMTEwLwYDVQQD EyhmZmY0MWM1ZmNiYzE0ZDcyMTY3MGUyZGZiMGU5NzUyNWRmMGE3YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolYkprnQ3viBDBTbA6sOz1aeJ4At AEa+WTVT4oRpBRSz6g2Po7pNPF+GdwXwGMgDpgnOj5IWzh5JorvTAknQPZQcuvh9 3wzQWhzheM4UFuYs1EZLF353hX4VvluNtb7AO9+GESUYkmZi96Mf347EdkM0uGqw sIloEsrxfIEaCcJUyYGITPOLYf8ruoOVLx/LnVZOIzs1Vvv2YjQvQc1Obj8htR2J pM/Rq1n2IglAX3+2GI1X5naMn0ZTNvXMJGmguVfb5269dE+jACoBw03pvLMBwu2/ 0UIUIiJnT2XH3tRmZfD021v2WWw2S1GsFkcVraIyC89GZaKr4vYLHbaMbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/0HF/LwU1yFnDi37DpdSXfCnr2MB8GA1UdIwQY MBaAFF8I3BAhisbbeUMK58RFFVkEF9YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjct NWQzYTQyMWEwZjEwLzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kODE3NDUtNjU4ZC00YTc0LTkyZjctNWQzYTQyMWEwZjEw LzEvWHdqY0VDR0t4dHQ1UXdybnhFVVZXUVFYMWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdHiDCH7 h5dXRyeFMBCFChBFusxLK0a+0Ia/iRaHKQa67CimySyFrQ3y13ycLHYRnVsym2JJ aN3eLIJSevuKtf5l2w0Qcouvw+/rHvzXfptm24K6JuV940G60JbmCSDYm7z1GEOf pki1lvC46Cetfb6+0UT+0vngRJ+BzXSZsFpEyVHsD0vc8sIyDmm0V2ctQ9W/Syp1 V+eooxyRIk64rYGMep3bt71MfldfZOzqOiQMYWSWMvttk9yOoqsmiYvLCeZqVow+ Rg3zJkNPt90Dslu/fjlSUjtNEmGpP/w/8yMNaAnaLDFsNWdLoZbWB6+fSyt81nM9 P6r97OYzt4hZSA== -----END CERTIFICATE-----Generated at Wed Dec 17 00:25:41 2025 by rpki-client