This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json) Hash identifier: 6JoUJeYyeJpi4gRz+E5hIhJu6yqueKBD2C/I74HSzSs= Subject key identifier: 11:2D:C6:68:E4:39:6E:C3:26:34:0D:7B:1F:F8:83:73:71:EA:85:A7 Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019B405B1C7ED0BA394E2CCF6CE0E34DA972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft Manifest number: 17B4 Signing time: Sun 21 Dec 2025 10:01:11 +0000 Manifest this update: Sun 21 Dec 2025 10:01:11 +0000 Manifest next update: Mon 22 Dec 2025 10:01:11 +0000 Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=) 2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=) 3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=) 4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=) 5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=) 6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: tEp402ZMLU+Hkjb7ESYg4qxyHo+IgD8ZYP3jBvwiigg=) 7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=) 8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1c:7e:d0:ba:39:4e:2c:cf:6c:e0:e3:4d:a9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Dec 21 10:01:11 2025 GMT Not After : Dec 22 10:01:11 2025 GMT Subject: CN=112dc668e4396ec326340d7b1ff8837371ea85a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2c:5c:08:ae:76:82:93:bf:2e:44:71:7b:9b: 20:39:f5:d7:a5:22:09:86:30:c9:bb:f0:c9:fc:97: fe:b4:d7:df:c3:0c:d5:c3:59:1d:83:9a:08:f0:d0: 0a:5d:7a:58:23:6f:fe:1c:4b:97:e1:1a:24:0e:d1: 53:e9:50:55:9a:e7:7e:3a:62:e6:5c:4f:3b:89:96: 48:87:e4:d8:cb:7e:7f:66:19:df:da:05:67:08:f9: 2f:6d:a6:88:f6:50:94:fd:48:a7:84:11:6c:8c:e7: 6f:ff:d2:7a:02:1f:a0:3f:f4:4d:ca:8f:fd:70:c3: 1e:a4:bf:e9:c7:5a:25:28:e6:94:cb:ee:22:08:b8: f1:b9:a7:c9:62:1b:ff:2c:bc:e4:c0:9e:b4:4f:75: 35:3d:6f:46:03:23:69:45:75:93:37:f9:b8:28:be: aa:61:d8:94:a5:0a:fa:9c:a1:1e:f1:0c:36:b5:13: 79:6c:6c:6a:07:82:28:0e:8e:eb:47:43:a4:2f:01: e3:8c:38:7f:26:f3:55:46:8f:eb:fb:ce:f8:77:71: a6:f9:b0:49:e6:06:c5:f3:64:13:30:1d:00:bf:f2: d5:7c:6c:51:05:87:ad:48:c9:f5:63:b9:9a:97:b9: 58:ff:f6:d0:fb:d4:1e:c9:ef:f8:b2:85:26:35:13: 9d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2D:C6:68:E4:39:6E:C3:26:34:0D:7B:1F:F8:83:73:71:EA:85:A7 X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:16:6b:d1:52:5d:8c:b4:39:97:e8:72:23:b4:4e:f7:8b:d5: e5:56:58:a0:db:9b:55:59:cf:58:3c:1f:87:44:50:54:8b:0a: fe:a6:dd:44:fd:2a:94:86:bd:ce:c2:9b:44:5a:f6:11:eb:6f: 55:cb:35:b5:37:10:1c:0b:39:1b:3d:0f:10:c3:38:5b:5c:e1: bf:2e:70:05:cc:10:5f:b0:1c:2d:e2:83:e4:f8:b1:84:ac:d4: e6:69:28:d7:22:b9:49:9d:e9:b1:c1:77:33:de:b8:a9:10:10: 74:42:76:ca:a6:d6:ff:ca:3d:74:ec:35:98:54:04:41:ec:03: 66:d6:5a:ca:da:ee:d9:c3:8f:5b:bf:4b:e4:6f:bb:41:50:2b: 53:3d:f2:88:b3:8d:b7:32:c0:8e:a0:10:ba:38:d3:a7:ae:88: 3b:13:c2:74:ee:06:c4:9c:df:43:db:68:dc:35:f5:15:0f:cf: b5:84:1f:19:4f:d6:25:56:2a:72:dd:ef:dc:ef:5d:f4:52:bd: f5:15:5e:38:24:ac:24:46:f4:22:82:1f:29:6c:78:18:16:cf: 5c:74:0c:98:e2:d7:28:75:54:a0:0c:ab:99:98:ba:31:9e:af: 57:15:90:77:bb:6e:9f:06:39:7a:85:7e:e3:cc:b3:c1:58:21: 9c:62:1f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxx+0Lo5TizPbODjTalyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjUxMjIxMTAwMTExWhcNMjUxMjIyMTAwMTExWjAzMTEwLwYDVQQD EygxMTJkYzY2OGU0Mzk2ZWMzMjYzNDBkN2IxZmY4ODM3MzcxZWE4NWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yxcCK52gpO/LkRxe5sgOfXXpSIJ hjDJu/DJ/Jf+tNffwwzVw1kdg5oI8NAKXXpYI2/+HEuX4RokDtFT6VBVmud+OmLm XE87iZZIh+TYy35/Zhnf2gVnCPkvbaaI9lCU/UinhBFsjOdv/9J6Ah+gP/RNyo/9 cMMepL/px1olKOaUy+4iCLjxuafJYhv/LLzkwJ60T3U1PW9GAyNpRXWTN/m4KL6q YdiUpQr6nKEe8Qw2tRN5bGxqB4IoDo7rR0OkLwHjjDh/JvNVRo/r+874d3Gm+bBJ 5gbF82QTMB0Av/LVfGxRBYetSMn1Y7mal7lY//bQ+9Qeye/4soUmNROdIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEtxmjkOW7DJjQNex/4g3Nx6oWnMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxZr0VJd jLQ5l+hyI7RO94vV5VZYoNubVVnPWDwfh0RQVIsK/qbdRP0qlIa9zsKbRFr2Eetv Vcs1tTcQHAs5Gz0PEMM4W1zhvy5wBcwQX7AcLeKD5PixhKzU5mko1yK5SZ3pscF3 M964qRAQdEJ2yqbW/8o9dOw1mFQEQewDZtZaytru2cOPW79L5G+7QVArUz3yiLON tzLAjqAQujjTp66IOxPCdO4GxJzfQ9to3DX1FQ/PtYQfGU/WJVYqct3v3O9d9FK9 9RVeOCSsJEb0IoIfKWx4GBbPXHQMmOLXKHVUoAyrmZi6MZ6vVxWQd7tunwY5eoV+ 48yzwVghnGIf3g== -----END CERTIFICATE-----Generated at Sun Dec 21 16:18:53 2025 by rpki-client