This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json) Hash identifier: G1Y0uQkQKH994GbwKbVZvjP+Rk9woVUa5V1ARPnccKw= Subject key identifier: 53:1B:3B:1C:2F:57:EC:ED:39:E6:EE:01:30:B5:75:83:F1:79:56:6E Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Certificate serial: 019B5072D5AF5E507EF671B78D32547AD78E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft Manifest number: 12 Signing time: Wed 24 Dec 2025 13:01:01 +0000 Manifest this update: Wed 24 Dec 2025 13:01:01 +0000 Manifest next update: Thu 25 Dec 2025 13:01:01 +0000 Files and hashes: 1: STZKxSbzUYyXUyydQBoeh7f5WSU.roa (hash: 2dXYIkhJ6cX4bMaIUv9yFeoHLF6wnyWKQlnhRKdn3WA=) 2: T6fpXr9wKGJ3aCznk32JPJaimhg.asa (hash: n722aK2AFEKdM2CPBPu9m4CBX/wUOMnKDrC8rZHOkMY=) 3: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: rP3ycCCppNtD/IwVQyBsu4XZRuEZXWAen1lHW5OhvGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:d5:af:5e:50:7e:f6:71:b7:8d:32:54:7a:d7:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c Validity Not Before: Dec 24 13:01:01 2025 GMT Not After : Dec 25 13:01:01 2025 GMT Subject: CN=531b3b1c2f57eced39e6ee0130b57583f179566e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:39:af:fc:e5:c2:2b:01:36:01:80:68:3e:0b: 53:72:25:d6:dc:58:2e:fe:99:eb:9c:26:cb:12:22: 70:56:28:5e:08:70:8b:91:7e:e4:13:9e:22:f0:7c: 13:a2:ee:e6:37:c1:0c:68:ed:e4:fa:0a:79:8e:89: 4c:bf:c6:73:4a:05:88:db:a3:a0:17:3f:ca:d8:de: b9:1f:16:42:4a:a1:80:da:63:fc:b0:94:fe:a8:0d: 4f:4f:3f:a2:a1:09:04:11:9f:2a:5b:9d:a8:b6:59: 45:d2:6e:43:bc:aa:f5:df:b3:9a:a7:70:40:0a:07: 3a:06:23:aa:9b:9b:aa:c7:f1:11:94:a3:f2:c9:34: e2:c4:76:35:fe:ce:46:de:c4:e3:98:5a:d7:88:d8: ea:f2:2e:a0:14:6f:16:10:65:6d:08:37:71:b6:3c: e2:8f:17:54:49:a3:b0:0d:3b:db:e7:f9:de:9e:e8: b6:46:97:65:de:45:94:0e:fe:ee:94:96:b7:3e:8a: 9c:41:97:4f:af:a8:cb:f8:55:b9:01:5c:22:13:72: c3:b8:08:ae:f3:e6:7b:94:69:48:20:30:a1:d1:b9: 45:2b:14:11:39:71:ee:d1:ce:53:65:ac:12:ff:7f: b5:06:a0:c7:7e:de:b8:a8:9c:b9:ae:62:54:0e:5e: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1B:3B:1C:2F:57:EC:ED:39:E6:EE:01:30:B5:75:83:F1:79:56:6E X509v3 Authority Key Identifier: keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e6:76:51:f7:d5:e2:a1:87:8f:d0:91:5f:35:e1:39:4f:65: 64:36:4d:ba:c5:dd:89:6a:b8:cd:38:fa:da:f0:05:e7:5f:dd: 90:02:aa:ca:62:76:6d:ad:74:2f:72:53:b9:bc:37:7a:48:53: 1c:5e:6a:84:db:e9:6f:8e:38:4d:75:ff:71:fe:9b:c4:22:fb: da:11:37:a0:12:6c:f6:40:f7:75:fd:43:94:1f:8c:a9:35:f9: 2b:f5:26:38:f4:f4:9e:a5:9c:e2:4d:2d:8c:df:ed:a6:1d:06: 9e:c8:1b:25:df:3f:e1:6d:e5:e3:2a:9b:fd:d1:74:02:eb:7f: 2c:48:8d:40:33:24:a5:d6:0a:a6:e9:da:11:19:e6:b2:38:63: 53:5e:d3:84:e6:69:3e:d8:ea:a5:84:10:3f:97:51:e6:47:b3: 07:a9:76:d7:c8:0e:63:0f:5c:84:57:3f:3d:e8:3b:d4:7c:ea: 0d:3b:4c:d2:e1:97:a6:00:b9:ce:7e:65:94:5b:1e:fe:dd:77: de:af:14:ae:7b:97:d4:3f:7e:b1:07:7b:df:c9:51:cf:99:3d: 58:9f:af:23:f5:50:78:e6:f0:9b:d4:27:85:ec:12:2c:08:83: 36:61:76:d5:c5:2d:8e:45:c6:b2:58:e8:58:f5:57:5d:95:47: 5d:7c:1c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQctWvXlB+9nG3jTJUeteOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNDNiZGMwYmI1NGZiODY5ZWU4M2EyYmQ4YmQ4NzczOTg5 M2E0MmMwHhcNMjUxMjI0MTMwMTAxWhcNMjUxMjI1MTMwMTAxWjAzMTEwLwYDVQQD Eyg1MzFiM2IxYzJmNTdlY2VkMzllNmVlMDEzMGI1NzU4M2YxNzk1NjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jmv/OXCKwE2AYBoPgtTciXW3Fgu /pnrnCbLEiJwViheCHCLkX7kE54i8HwTou7mN8EMaO3k+gp5jolMv8ZzSgWI26Og Fz/K2N65HxZCSqGA2mP8sJT+qA1PTz+ioQkEEZ8qW52otllF0m5DvKr137Oap3BA Cgc6BiOqm5uqx/ERlKPyyTTixHY1/s5G3sTjmFrXiNjq8i6gFG8WEGVtCDdxtjzi jxdUSaOwDTvb5/nenui2Rpdl3kWUDv7ulJa3PoqcQZdPr6jL+FW5AVwiE3LDuAiu 8+Z7lGlIIDCh0blFKxQROXHu0c5TZawS/3+1BqDHft64qJy5rmJUDl4qbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMbOxwvV+ztOebuATC1dYPxeVZuMB8GA1UdIwQY MBaAFFxDvcC7VPuGnug6K9i9h3OYk6QsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUt NDg5NmIyMjhmMTg3LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYjZiN2YtNGYxOS00N2FkLTg4OTUtNDg5NmIyMjhmMTg3 LzEvWEVPOXdMdFUtNGFlNkRvcjJMMkhjNWlUcEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgOZ2UffV 4qGHj9CRXzXhOU9lZDZNusXdiWq4zTj62vAF51/dkAKqymJ2ba10L3JTubw3ekhT HF5qhNvpb444TXX/cf6bxCL72hE3oBJs9kD3df1DlB+MqTX5K/UmOPT0nqWc4k0t jN/tph0GnsgbJd8/4W3l4yqb/dF0Aut/LEiNQDMkpdYKpunaERnmsjhjU17ThOZp PtjqpYQQP5dR5kezB6l218gOYw9chFc/Peg71HzqDTtM0uGXpgC5zn5llFse/t13 3q8UrnuX1D9+sQd738lRz5k9WJ+vI/VQeObwm9QnhewSLAiDNmF21cUtjkXGsljo WPVXXZVHXXwc6g== -----END CERTIFICATE-----Generated at Wed Dec 24 18:37:20 2025 by rpki-client