This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json) Hash identifier: pBYxfuAqkaaNIaltW851LNQi7vN19vaK5p7BQqnmrpM= Subject key identifier: 92:29:42:6F:A1:B7:00:43:07:60:0F:75:E6:C5:05:24:CD:30:AE:67 Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Certificate serial: 019B631DB947053447D9AD590E078BC4DEC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft Manifest number: 0768 Signing time: Sun 28 Dec 2025 04:00:50 +0000 Manifest this update: Sun 28 Dec 2025 04:00:50 +0000 Manifest next update: Mon 29 Dec 2025 04:00:50 +0000 Files and hashes: 1: gAeMHhtFSbcycnERLLnOEpIkAko.roa (hash: e6fugfkqh4EKp2KogcF4JNMD2SRVe0PwewPhIKGPhCE=) 2: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: jjPo8qWLLGN1EqT5WU78FOXzIF3m0QuhFTXnLAJZCKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:b9:47:05:34:47:d9:ad:59:0e:07:8b:c4:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07 Validity Not Before: Dec 28 04:00:50 2025 GMT Not After : Dec 29 04:00:50 2025 GMT Subject: CN=9229426fa1b7004307600f75e6c50524cd30ae67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:09:b3:9d:87:83:17:12:a3:50:d4:8a:c9: 15:5d:e9:d3:b2:cd:e6:1f:cb:17:18:9f:d9:29:c6: 69:64:96:55:cc:be:09:1a:08:b8:45:2c:5e:c8:45: 7e:8d:64:6f:92:31:48:b3:26:1b:05:91:4c:5c:58: b8:30:df:b4:fb:0a:b9:59:92:84:ff:87:39:51:55: 52:87:8b:bf:c8:65:64:7f:01:6f:6b:7f:3a:bc:e2: 17:ca:b2:79:a0:78:11:8f:96:8b:73:b4:90:5b:a1: 13:cb:28:ea:f2:a4:56:9e:42:e9:53:ce:d0:05:bd: f3:81:d7:ae:9e:d5:b8:5c:a2:a1:77:2e:db:17:b8: 92:da:2a:aa:bc:ff:05:1d:cb:ce:8f:56:0e:27:1f: f5:cd:2e:72:1a:40:b9:7a:26:d5:94:f6:12:d6:e0: ab:7b:fa:56:f5:7f:95:65:63:c2:30:7f:23:af:1e: 11:43:1a:b9:fa:f0:71:bb:b0:bf:10:2a:57:9c:f7: 92:22:69:32:1e:21:b3:a7:59:63:d8:8f:30:10:b8: bd:e4:f8:20:cb:6b:50:08:fc:06:c5:3d:1d:6e:04: ec:4e:bb:db:f8:fc:8f:eb:7b:ac:94:8e:0b:29:b1: ff:b2:54:b7:87:f6:3b:28:a4:79:9d:5b:ac:60:68: 97:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:29:42:6F:A1:B7:00:43:07:60:0F:75:E6:C5:05:24:CD:30:AE:67 X509v3 Authority Key Identifier: keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:85:ba:c3:05:0d:9b:5c:c3:cb:38:63:2f:8a:41:a0:52:ae: 79:ab:28:83:b8:c8:f2:82:2f:c0:60:ea:43:f7:76:01:bf:08: b0:56:e0:3c:1f:3f:ae:ba:0c:90:ac:66:f8:77:8c:39:85:ad: db:f2:68:39:bc:58:47:d6:6c:bc:13:88:66:cb:f6:da:c1:0d: 48:65:a7:75:2c:02:08:8d:4b:85:a3:33:28:e6:97:25:ce:00: b3:18:78:7a:d0:25:1f:c4:ce:23:60:07:74:a8:df:81:9b:d9: f7:50:74:f0:47:ee:95:97:16:45:1f:b9:70:99:85:f4:e5:f6: 48:9c:2c:99:b8:d8:ee:64:ea:69:04:bc:10:23:16:3b:ac:79: 9a:9c:36:69:11:a7:6c:e2:84:d5:60:1f:49:cb:c0:4d:24:2f: af:a5:9e:51:74:d3:b9:c9:52:ac:5f:64:9d:86:8e:39:5e:fa: b4:4e:54:08:d8:8d:ef:90:07:db:c2:5d:cf:e1:8f:90:2b:85: 09:74:b6:fc:5d:8e:7c:65:d8:8d:1f:a2:bc:f1:4e:c0:6b:d0: 7d:9a:49:18:e0:a2:f6:95:06:a7:14:bf:7c:39:2d:69:f4:dc: 2d:9f:ca:0d:86:5e:d9:a2:ed:c6:b7:2e:7c:89:0b:ad:54:1e: 22:7e:a1:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHblHBTRH2a1ZDgeLxN7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmMzOGIyYTEwMDM5NWZhOWI5OTE5YWQ3OTJlN2FjYjJk YjJlMDcwHhcNMjUxMjI4MDQwMDUwWhcNMjUxMjI5MDQwMDUwWjAzMTEwLwYDVQQD Eyg5MjI5NDI2ZmExYjcwMDQzMDc2MDBmNzVlNmM1MDUyNGNkMzBhZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAAJs52HgxcSo1DUiskVXenTss3m H8sXGJ/ZKcZpZJZVzL4JGgi4RSxeyEV+jWRvkjFIsyYbBZFMXFi4MN+0+wq5WZKE /4c5UVVSh4u/yGVkfwFva386vOIXyrJ5oHgRj5aLc7SQW6ETyyjq8qRWnkLpU87Q Bb3zgdeuntW4XKKhdy7bF7iS2iqqvP8FHcvOj1YOJx/1zS5yGkC5eibVlPYS1uCr e/pW9X+VZWPCMH8jrx4RQxq5+vBxu7C/ECpXnPeSImkyHiGzp1lj2I8wELi95Pgg y2tQCPwGxT0dbgTsTrvb+PyP63uslI4LKbH/slS3h/Y7KKR5nVusYGiXnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIpQm+htwBDB2APdebFBSTNMK5nMB8GA1UdIwQY MBaAFMb8OLKhADlfqbmRmteS56yy2y4HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgt YTg5YTcwMjhkNDI5LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OTgwMGQtMTUxZi00ZTMwLTlmZDgtYTg5YTcwMjhkNDI5 LzEveHZ3NHNxRUFPVi1wdVpHYTE1TG5yTExiTGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIW6wwUN m1zDyzhjL4pBoFKueasog7jI8oIvwGDqQ/d2Ab8IsFbgPB8/rroMkKxm+HeMOYWt 2/JoObxYR9ZsvBOIZsv22sENSGWndSwCCI1LhaMzKOaXJc4Asxh4etAlH8TOI2AH dKjfgZvZ91B08EfulZcWRR+5cJmF9OX2SJwsmbjY7mTqaQS8ECMWO6x5mpw2aRGn bOKE1WAfScvATSQvr6WeUXTTuclSrF9knYaOOV76tE5UCNiN75AH28Jdz+GPkCuF CXS2/F2OfGXYjR+ivPFOwGvQfZpJGOCi9pUGpxS/fDktafTcLZ/KDYZe2aLtxrcu fIkLrVQeIn6h0Q== -----END CERTIFICATE-----Generated at Sun Dec 28 06:21:57 2025 by rpki-client