This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft File: X4anFB9vt7TCi84xRGe2FU4Pk3c.mft (raw, json) Hash identifier: NUpKXZomkpziaPv7kBIj/ID8SZ5Xryqe90Sc4Guh7qU= Subject key identifier: 21:E8:BA:B2:C9:5F:36:23:04:13:C6:07:3F:11:D1:8D:2E:D6:84:B5 Authority key identifier: 5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 Certificate issuer: /CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Certificate serial: 019B311EAAC590643CC82F29B8AC396AB6FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft Manifest number: 0F1C Signing time: Thu 18 Dec 2025 11:00:51 +0000 Manifest this update: Thu 18 Dec 2025 11:00:51 +0000 Manifest next update: Fri 19 Dec 2025 11:00:51 +0000 Files and hashes: 1: BR7Kxw4uDHIJjtWZxBN3yY39MEc.roa (hash: NNnpY2dCMdRRtPAK+Xc47po5O7wykSonQcaPlzT/ALM=) 2: X4anFB9vt7TCi84xRGe2FU4Pk3c.crl (hash: m/zBxMOJ/WBx/VB5v54iSYwR8JItKVjc4ery804EIuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:aa:c5:90:64:3c:c8:2f:29:b8:ac:39:6a:b6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f86a7141f6fb7b4c28bce314467b6154e0f9377 Validity Not Before: Dec 18 11:00:51 2025 GMT Not After : Dec 19 11:00:51 2025 GMT Subject: CN=21e8bab2c95f36230413c6073f11d18d2ed684b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:27:fd:6b:e0:c8:e4:b5:11:c2:ba:37:33: 53:cb:31:26:e5:ee:12:0a:1d:ae:77:15:16:7d:0e: 51:6f:3e:c2:be:a0:4a:14:cc:4e:d9:9b:eb:98:bf: 51:50:09:25:ca:e2:e8:18:87:9e:72:4e:c4:e4:fd: f0:3d:ac:4d:22:eb:53:ed:b3:40:0e:4f:be:85:dc: da:13:95:a5:69:38:8c:e1:52:6e:8e:03:17:1b:62: 21:be:44:c3:27:23:72:e9:24:b0:ef:f9:36:0f:c2: 79:b3:6c:31:3c:37:0d:ac:45:e1:dc:97:b5:2d:71: 16:20:40:0b:09:58:9c:9c:f2:18:2e:af:f8:04:5d: db:6a:74:c2:f5:9d:b5:ae:7d:d2:36:98:03:da:b3: 82:d2:17:35:42:4c:ea:25:d2:cf:43:39:93:79:fa: 01:43:80:8f:7b:f7:e7:69:50:6e:48:e4:8c:2c:87: 4a:b4:73:61:24:75:be:48:67:ec:3e:76:fe:0b:a4: 25:9e:b6:94:65:99:47:5a:33:ee:3e:05:23:22:37: 4d:50:9b:43:6f:6a:9a:05:e1:1c:5b:82:e8:99:95: 88:91:31:4f:6e:9e:6a:bc:3e:63:41:b8:21:86:79: 85:b3:ed:d2:f3:8f:66:8a:83:9c:66:83:02:dd:8e: 28:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E8:BA:B2:C9:5F:36:23:04:13:C6:07:3F:11:D1:8D:2E:D6:84:B5 X509v3 Authority Key Identifier: keyid:5F:86:A7:14:1F:6F:B7:B4:C2:8B:CE:31:44:67:B6:15:4E:0F:93:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4anFB9vt7TCi84xRGe2FU4Pk3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/09b6c7-52ef-4897-bfa6-5e0e281d7da3/1/X4anFB9vt7TCi84xRGe2FU4Pk3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:6d:e9:cb:05:0a:6e:9c:80:d5:40:21:b9:88:e1:eb:2b:0b: 8b:e5:3a:7d:80:27:08:0d:f7:34:17:ca:77:01:cb:bc:57:2a: 5d:7b:02:d9:c1:60:39:b8:c0:4b:bc:05:a5:44:c8:9a:3b:b9: 8f:82:4f:b0:e2:b2:bb:68:b2:cc:04:1d:af:09:dc:a7:b0:a5: 73:78:a0:96:12:9c:9b:c0:2d:8a:d2:5f:9b:66:74:77:8a:f5: c6:9e:55:9d:ab:9f:62:b8:87:92:02:17:ec:c8:cb:4d:cb:33: 27:13:ee:4f:c9:7c:11:41:b1:01:e1:37:59:6c:2b:12:81:74: e8:17:2c:ea:ab:53:81:e9:25:cb:d6:e6:c2:e7:ba:c6:16:de: ed:ba:81:fe:33:81:23:42:9d:75:b6:c9:8f:87:4f:ad:a9:ae: 0f:e5:f6:df:b6:b8:45:e6:93:eb:5d:e4:03:78:48:7b:49:10: 1d:c0:d6:09:a2:f5:f4:5b:f0:29:03:6c:93:d3:61:d0:63:28: 7e:45:d9:ec:da:b6:da:01:6e:90:2f:e2:bb:0f:8a:ba:0b:0a: 9e:5f:3d:36:b8:82:a8:60:35:c8:b2:12:0b:e6:9d:5f:82:0d: b4:d1:15:c8:a2:b0:34:b3:fb:31:fb:26:60:36:37:74:95:7f: 73:c5:18:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHqrFkGQ8yC8puKw5arb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODZhNzE0MWY2ZmI3YjRjMjhiY2UzMTQ0NjdiNjE1NGUw ZjkzNzcwHhcNMjUxMjE4MTEwMDUxWhcNMjUxMjE5MTEwMDUxWjAzMTEwLwYDVQQD EygyMWU4YmFiMmM5NWYzNjIzMDQxM2M2MDczZjExZDE4ZDJlZDY4NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49on/WvgyOS1EcK6NzNTyzEm5e4S Ch2udxUWfQ5Rbz7CvqBKFMxO2ZvrmL9RUAklyuLoGIeeck7E5P3wPaxNIutT7bNA Dk++hdzaE5WlaTiM4VJujgMXG2IhvkTDJyNy6SSw7/k2D8J5s2wxPDcNrEXh3Je1 LXEWIEALCVicnPIYLq/4BF3banTC9Z21rn3SNpgD2rOC0hc1QkzqJdLPQzmTefoB Q4CPe/fnaVBuSOSMLIdKtHNhJHW+SGfsPnb+C6QlnraUZZlHWjPuPgUjIjdNUJtD b2qaBeEcW4LomZWIkTFPbp5qvD5jQbghhnmFs+3S849mioOcZoMC3Y4o7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHourLJXzYjBBPGBz8R0Y0u1oS1MB8GA1UdIwQY MBaAFF+GpxQfb7e0wovOMURnthVOD5N3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYt NWUwZTI4MWQ3ZGEzLzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8wOWI2YzctNTJlZi00ODk3LWJmYTYtNWUwZTI4MWQ3ZGEz LzEvWDRhbkZCOXZ0N1RDaTg0eFJHZTJGVTRQazNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy23pywUK bpyA1UAhuYjh6ysLi+U6fYAnCA33NBfKdwHLvFcqXXsC2cFgObjAS7wFpUTImju5 j4JPsOKyu2iyzAQdrwncp7Clc3iglhKcm8AtitJfm2Z0d4r1xp5VnaufYriHkgIX 7MjLTcszJxPuT8l8EUGxAeE3WWwrEoF06Bcs6qtTgekly9bmwue6xhbe7bqB/jOB I0KddbbJj4dPramuD+X237a4ReaT613kA3hIe0kQHcDWCaL19FvwKQNsk9Nh0GMo fkXZ7Nq22gFukC/iuw+KugsKnl89NriCqGA1yLISC+adX4INtNEVyKKwNLP7Mfsm YDY3dJV/c8UYqw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:41:25 2025 by rpki-client