This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft File: XUcovR9dE212i_F1NGHFPaRXRss.mft (raw, json) Hash identifier: PXHz940N9gj14HPhybdteSYKH38J7DAs/dKehTW9dnw= Subject key identifier: A1:AD:71:5F:2A:7E:EA:61:AA:5D:B9:74:63:59:B9:61:CE:27:6E:16 Authority key identifier: 5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB Certificate issuer: /CN=5d4728bd1f5d136d768bf1753461c53da45746cb Certificate serial: 019B3DC80F75BCD674B77A789AD4419CF735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 22:01:19 +0000 Manifest this update: Sat 20 Dec 2025 22:01:19 +0000 Manifest next update: Sun 21 Dec 2025 22:01:19 +0000 Files and hashes: 1: HBQ9odudt8FtC2hg2PdPFEmL6sY.roa (hash: qLOlhGmFNavd+EfWsRToyvlmrGX+k5BkUmneKAiMnB0=) 2: XUcovR9dE212i_F1NGHFPaRXRss.crl (hash: E8aPYs0RxIjMklxwYL9BkOZiOTZm6lQy2xuYYD2+ArI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:0f:75:bc:d6:74:b7:7a:78:9a:d4:41:9c:f7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4728bd1f5d136d768bf1753461c53da45746cb Validity Not Before: Dec 20 22:01:19 2025 GMT Not After : Dec 21 22:01:19 2025 GMT Subject: CN=a1ad715f2a7eea61aa5db9746359b961ce276e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:0c:12:65:b9:a4:1d:a1:6e:cc:fb:ff:ec: 8a:ec:ed:c8:06:bd:76:c7:ec:46:07:ce:9a:d7:6e: e3:b4:3d:7a:29:ab:6c:b3:21:05:1d:c7:87:30:38: 79:c2:39:63:16:af:31:2b:e8:a7:99:71:73:ee:a9: 13:b8:ab:28:3a:5c:bf:9a:fe:28:16:85:61:37:b2: d7:75:86:cd:dc:4d:59:9f:5a:d8:08:39:f7:c7:77: 93:b5:0c:f0:2e:79:62:c8:7e:ec:cf:69:a8:87:dd: 94:c2:ad:9d:d2:a1:ff:e4:35:3d:e1:02:98:5b:03: ed:25:6b:d9:c7:4e:35:0c:1b:eb:00:0c:a7:9a:8d: 3a:f5:b3:b3:1a:67:5a:7b:9c:b3:6e:5d:ab:7c:8d: 03:b8:1a:32:6d:60:fc:73:8f:f9:56:82:33:71:4e: 60:37:91:bd:a7:49:58:2e:cc:27:b5:6b:78:71:47: 6f:91:da:ff:18:08:d9:1e:2e:cb:c7:b3:87:b3:0b: 4d:c7:29:6a:e3:cf:35:bb:f6:02:1b:aa:07:81:a2: ce:8b:65:32:f3:fa:d2:0b:89:80:c4:63:b4:37:a9: 7a:da:76:e0:e6:ee:56:48:c7:d2:44:f9:25:b8:e1: 05:9b:6e:fa:ec:79:74:76:84:b4:21:e5:1e:0e:c3: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AD:71:5F:2A:7E:EA:61:AA:5D:B9:74:63:59:B9:61:CE:27:6E:16 X509v3 Authority Key Identifier: keyid:5D:47:28:BD:1F:5D:13:6D:76:8B:F1:75:34:61:C5:3D:A4:57:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUcovR9dE212i_F1NGHFPaRXRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dbe773-befc-4a77-b513-5e23672673d2/1/XUcovR9dE212i_F1NGHFPaRXRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9d:8d:70:c5:d2:96:10:62:53:7e:ad:5a:48:ed:b3:ca:76: 02:b8:01:f8:5e:df:66:9c:f0:74:67:69:53:dc:2f:e0:68:5b: 9d:32:51:4d:7a:85:3b:ab:a6:5e:24:15:d0:db:a5:d8:cf:da: 6e:10:7a:41:b2:37:6c:54:e9:15:d0:b4:31:07:cf:1b:4b:30: c7:07:b6:63:61:4e:f0:11:13:99:f3:d8:bd:c8:f3:b2:e6:20: f8:de:fc:31:8f:67:1e:48:15:17:85:28:0f:01:f6:98:a3:d1: 16:66:54:8a:20:9d:dc:e8:9c:dc:d9:bb:f4:cd:68:b0:e3:17: 8b:c3:9d:26:aa:7d:d1:5b:2b:a8:6f:39:87:3d:fc:d2:ff:c5: ee:fb:db:cd:6f:12:9c:76:e3:37:b0:a3:0b:5a:ae:6d:fe:57: 7b:a6:0f:5c:55:2c:39:d8:f2:1c:23:0b:61:00:03:8d:2d:7e: 86:f9:3a:50:30:6c:c8:79:b1:38:a3:03:19:9f:d7:f9:cb:10: c9:fc:51:9c:ed:3c:3d:76:d6:8c:c6:5e:37:ef:83:05:20:ca: 14:ba:73:c5:49:b2:f9:c5:2d:7a:f7:00:b6:d9:08:25:04:74: 34:d6:9a:01:f9:11:67:21:a1:8f:59:81:f7:c6:16:ba:31:38: 23:fe:25:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yA91vNZ0t3p4mtRBnPc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNDcyOGJkMWY1ZDEzNmQ3NjhiZjE3NTM0NjFjNTNkYTQ1 NzQ2Y2IwHhcNMjUxMjIwMjIwMTE5WhcNMjUxMjIxMjIwMTE5WjAzMTEwLwYDVQQD EyhhMWFkNzE1ZjJhN2VlYTYxYWE1ZGI5NzQ2MzU5Yjk2MWNlMjc2ZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c8MEmW5pB2hbsz7/+yK7O3IBr12 x+xGB86a127jtD16KatssyEFHceHMDh5wjljFq8xK+inmXFz7qkTuKsoOly/mv4o FoVhN7LXdYbN3E1Zn1rYCDn3x3eTtQzwLnliyH7sz2moh92Uwq2d0qH/5DU94QKY WwPtJWvZx041DBvrAAynmo069bOzGmdae5yzbl2rfI0DuBoybWD8c4/5VoIzcU5g N5G9p0lYLswntWt4cUdvkdr/GAjZHi7Lx7OHswtNxylq4881u/YCG6oHgaLOi2Uy 8/rSC4mAxGO0N6l62nbg5u5WSMfSRPkluOEFm2767Hl0doS0IeUeDsM3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGtcV8qfuphql25dGNZuWHOJ24WMB8GA1UdIwQY MBaAFF1HKL0fXRNtdovxdTRhxT2kV0bLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMt NWUyMzY3MjY3M2QyLzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kYmU3NzMtYmVmYy00YTc3LWI1MTMtNWUyMzY3MjY3M2Qy LzEvWFVjb3ZSOWRFMjEyaV9GMU5HSEZQYVJYUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ2NcMXS lhBiU36tWkjts8p2ArgB+F7fZpzwdGdpU9wv4GhbnTJRTXqFO6umXiQV0Nul2M/a bhB6QbI3bFTpFdC0MQfPG0swxwe2Y2FO8BETmfPYvcjzsuYg+N78MY9nHkgVF4Uo DwH2mKPRFmZUiiCd3Oic3Nm79M1osOMXi8OdJqp90VsrqG85hz380v/F7vvbzW8S nHbjN7CjC1qubf5Xe6YPXFUsOdjyHCMLYQADjS1+hvk6UDBsyHmxOKMDGZ/X+csQ yfxRnO08PXbWjMZeN++DBSDKFLpzxUmy+cUtevcAttkIJQR0NNaaAfkRZyGhj1mB 98YWujE4I/4l8g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:10:09 2025 by rpki-client