This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json) Hash identifier: XV3Dbx2fBvzYycQrqayNJBY62H9kDiqY09E0qBwW1JA= Subject key identifier: B1:64:AE:79:3D:AA:92:D0:13:40:4A:A0:EF:97:35:05:A8:02:01:D2 Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Certificate serial: 019B722279CF184DFD1C82695099C983CB64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft Manifest number: 053E Signing time: Wed 31 Dec 2025 02:00:20 +0000 Manifest this update: Wed 31 Dec 2025 02:00:20 +0000 Manifest next update: Thu 01 Jan 2026 02:00:20 +0000 Files and hashes: 1: 0eBj-TNfE0NgkAODM9VoPKQnB0E.roa (hash: O8GHZwLzkXmxkB1uIiy9qo5QY14RKmQf2i0WksTve7o=) 2: 4is7oarlUlE_cBHOgTitgHxyrkc.roa (hash: qZVlByTSh1XFAvIhseY4HhxihXTQeYS+WUxMcII1cZU=) 3: ArduW9RyhkgTaVNtmygI54aFcIA.roa (hash: H1GsuB1vIqvoIr6LSF93O4XBAfU4yiaPJMNktGfUc10=) 4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: Rg04n+LxewkPtxKLZ2aBxINn5mTzkdFp95paXes1iJI=) 5: daN1af44TDD-5KyCb7G5K92Gjfw.roa (hash: nddT0RY/8zIawPlYsyuteqH1tjgTi4pAyBRBnbLn5ts=) 6: sS98ShuiZY9gamFcZrqcbFzjMbs.roa (hash: BxhyjLfYrjzjXEBjZnGso78ZHOLYRxMopWgqZ0QBVko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:79:cf:18:4d:fd:1c:82:69:50:99:c9:83:cb:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1 Validity Not Before: Dec 31 02:00:20 2025 GMT Not After : Jan 1 02:00:20 2026 GMT Subject: CN=b164ae793daa92d013404aa0ef973505a80201d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:49:87:01:d3:50:5f:f8:f0:f3:83:9c:f5:55: 54:24:24:49:71:a3:3f:d0:e1:d0:82:c9:77:18:91: 73:03:a6:9f:11:cb:ef:c2:00:74:0b:1f:5f:f4:2f: a2:30:b1:93:a8:e9:b5:89:4b:a8:0d:00:26:b0:72: 36:f8:36:68:cb:53:cc:f2:91:5d:36:e2:6c:ad:72: ae:8e:26:47:8c:ea:cb:b0:cd:00:04:c4:9b:b5:27: 98:db:9a:be:bd:04:3e:10:45:e2:38:ec:ec:6b:eb: 8e:4d:26:0f:af:c5:e3:5d:64:cc:9b:6d:86:c0:33: ae:5d:c0:02:3f:e7:c7:de:98:a2:61:7d:9d:dc:35: 89:23:b6:3b:c1:7a:47:68:23:e7:d0:88:d8:77:1d: 95:53:88:3f:99:d1:55:57:c7:4f:6d:3f:00:2d:5d: 7f:e5:d9:6d:73:aa:6a:fb:c6:ff:de:f9:52:94:b3: cb:74:e9:49:5e:2b:1d:7b:e6:2c:2b:8d:b4:1b:dc: da:7b:56:6b:ee:6b:06:0a:3a:0d:81:a5:b0:54:d1: 5e:de:67:ab:da:af:0f:7f:51:37:11:92:71:68:f0: 80:31:75:ff:ea:4b:ce:5f:e7:85:e4:82:8b:c8:d2: 8b:6d:be:2b:f6:69:50:a6:91:90:3a:cf:8b:27:f1: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:64:AE:79:3D:AA:92:D0:13:40:4A:A0:EF:97:35:05:A8:02:01:D2 X509v3 Authority Key Identifier: keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:10:43:1f:f7:dd:77:84:00:2d:48:11:a7:40:f0:60:1f:7f: 2d:1e:49:40:d8:c3:ce:e8:01:dd:88:dc:b1:1f:37:b9:64:35: 22:be:ec:db:f9:37:e6:37:63:3e:24:7c:8c:18:85:df:c5:b8: 30:5c:59:ff:02:de:e0:0e:6a:e9:00:b7:ab:38:3a:d5:42:09: c9:d6:95:d5:15:4d:4f:3d:5a:07:09:68:7f:6b:39:64:32:64: d7:0c:50:6a:b4:3e:52:51:8b:87:cd:ae:0f:01:9c:8b:1c:74: 4d:1d:0e:06:b9:07:f4:12:4b:fc:95:5d:40:05:63:f9:ab:80: c8:3a:18:13:cc:0b:bb:ae:1d:c0:16:12:0e:df:59:36:f1:f3: 99:2d:64:0e:00:be:c4:12:ff:a4:19:db:cf:7f:2c:00:95:19: 81:74:61:a2:dc:65:8f:fe:b2:6b:04:ce:86:7d:6f:6c:63:89: d4:90:1c:51:23:44:c2:0a:6f:33:7d:90:04:0b:61:c7:46:84: 86:ff:d9:45:9b:db:49:6a:7e:6d:32:1a:1c:ae:b5:fe:b6:bc: 23:f6:00:49:55:7e:6d:1d:2d:7a:60:9e:5f:8c:d5:1f:86:9d: 1c:46:4a:69:79:58:60:fe:0d:a8:9d:c6:10:9f:38:97:39:47: f1:9b:f9:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyInnPGE39HIJpUJnJg8tkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh NTc2ZDEwHhcNMjUxMjMxMDIwMDIwWhcNMjYwMTAxMDIwMDIwWjAzMTEwLwYDVQQD EyhiMTY0YWU3OTNkYWE5MmQwMTM0MDRhYTBlZjk3MzUwNWE4MDIwMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkmHAdNQX/jw84Oc9VVUJCRJcaM/ 0OHQgsl3GJFzA6afEcvvwgB0Cx9f9C+iMLGTqOm1iUuoDQAmsHI2+DZoy1PM8pFd NuJsrXKujiZHjOrLsM0ABMSbtSeY25q+vQQ+EEXiOOzsa+uOTSYPr8XjXWTMm22G wDOuXcACP+fH3piiYX2d3DWJI7Y7wXpHaCPn0IjYdx2VU4g/mdFVV8dPbT8ALV1/ 5dltc6pq+8b/3vlSlLPLdOlJXisde+YsK420G9zae1Zr7msGCjoNgaWwVNFe3mer 2q8Pf1E3EZJxaPCAMXX/6kvOX+eF5IKLyNKLbb4r9mlQppGQOs+LJ/E/ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFkrnk9qpLQE0BKoO+XNQWoAgHSMB8GA1UdIwQY MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBBDH/fd d4QALUgRp0DwYB9/LR5JQNjDzugB3YjcsR83uWQ1Ir7s2/k35jdjPiR8jBiF38W4 MFxZ/wLe4A5q6QC3qzg61UIJydaV1RVNTz1aBwlof2s5ZDJk1wxQarQ+UlGLh82u DwGcixx0TR0OBrkH9BJL/JVdQAVj+auAyDoYE8wLu64dwBYSDt9ZNvHzmS1kDgC+ xBL/pBnbz38sAJUZgXRhotxlj/6yawTOhn1vbGOJ1JAcUSNEwgpvM32QBAthx0aE hv/ZRZvbSWp+bTIaHK61/ra8I/YASVV+bR0temCeX4zVH4adHEZKaXlYYP4NqJ3G EJ84lzlH8Zv5lQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:22:26 2025 by rpki-client