This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json) Hash identifier: M89z+XgCvsSTOmalCrvTyjhkB2IgWWVsxk8Cj0ln9vc= Subject key identifier: 57:2A:86:83:3E:96:62:D5:62:8D:82:56:41:89:2A:44:FC:6B:D8:F8 Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Certificate serial: 019B44DD01CA266E5C2595E558ACE892B233 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft Manifest number: 1566 Signing time: Mon 22 Dec 2025 07:01:32 +0000 Manifest this update: Mon 22 Dec 2025 07:01:32 +0000 Manifest next update: Tue 23 Dec 2025 07:01:32 +0000 Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=) 2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 7c1BpHOe2FPbkYLFx1P2KLKr55hRIvNcEquFnD9ofDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dd:01:ca:26:6e:5c:25:95:e5:58:ac:e8:92:b2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Validity Not Before: Dec 22 07:01:32 2025 GMT Not After : Dec 23 07:01:32 2025 GMT Subject: CN=572a86833e9662d5628d825641892a44fc6bd8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:5d:53:00:05:82:16:1b:f4:ac:ce:56:07:dd: 79:ad:ef:41:77:79:ca:1d:a5:50:d0:bd:b1:a9:70: d8:b9:23:13:0a:46:84:ae:3d:1c:fb:61:76:ce:65: 1f:94:21:0c:8f:a2:86:5d:9a:bf:99:f2:30:3e:49: b3:cb:c3:d9:d1:6f:06:89:52:35:1a:de:23:3b:16: 6c:1c:73:2e:b4:d4:15:58:b0:ca:21:1e:ec:dc:bf: b6:cd:8a:a5:eb:8e:e7:84:24:1c:3e:a5:70:a1:8f: f5:8b:d5:ad:37:2d:87:76:6d:27:28:9b:53:34:22: 82:3e:86:e3:83:12:5a:54:c0:42:44:8a:0f:fa:3d: b6:e7:01:8f:8e:17:54:6e:06:b4:d8:e2:c6:c1:58: 06:8b:fb:bc:e9:b9:73:6f:6b:3e:27:bb:e1:50:19: c3:1f:f4:e9:b8:3e:3b:2d:ec:46:4c:08:ad:26:8d: 7d:cf:eb:48:55:4a:4f:4d:8b:07:72:18:3c:2f:f5: 00:32:8f:1e:22:05:d8:7d:ed:eb:20:d2:dd:7b:26: 00:ec:b0:9e:f0:85:41:96:9e:79:8b:64:b5:0c:8c: c6:f1:1f:13:e0:c5:ca:2e:0f:9e:9b:d2:07:3f:9f: 80:5f:86:38:7c:9a:32:c5:49:fd:f7:a6:70:27:e3: 32:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:86:83:3E:96:62:D5:62:8D:82:56:41:89:2A:44:FC:6B:D8:F8 X509v3 Authority Key Identifier: keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cd:8d:28:a6:30:80:5e:d0:f7:d8:c3:d4:6b:3f:6c:9a:6c: a8:14:93:04:9c:4c:fb:fb:00:4b:5a:a4:0d:fc:c7:4e:66:83: 11:e0:08:5f:ad:d0:76:22:0a:c6:a0:82:82:9e:c2:48:35:fb: b6:be:a1:c2:ee:83:07:d2:42:b3:7e:fe:60:c4:15:3e:1d:66: 4a:b0:1a:3e:5a:3b:58:12:02:23:e8:2c:eb:26:5c:ed:08:32: a1:62:81:6d:d3:69:44:13:b9:eb:77:e7:b2:7d:d0:89:d0:1c: 0e:8e:08:a8:1b:79:34:63:57:15:e0:18:e9:26:02:be:bc:53: 71:44:4c:d8:bd:d3:a5:33:a4:36:89:93:68:30:56:e5:79:d8: fc:8a:b4:a6:bc:e1:fc:4a:b4:8f:e6:33:94:a0:db:99:0a:21: d0:01:39:26:be:c4:27:4f:25:2d:a1:0a:b4:e4:04:98:a0:7b: af:80:dc:36:7b:f6:a3:18:5f:46:6c:be:e0:29:0e:1b:61:1d: 7f:7d:85:cf:fa:1d:39:19:5f:38:f2:10:5c:97:9e:66:ff:fe: 2b:6f:ab:22:43:e7:f7:18:92:bc:c4:93:56:49:bd:df:e1:da: 40:77:49:47:c7:75:b8:50:5c:0f:c7:3b:28:85:39:1e:a1:d5: 7a:3c:d3:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3QHKJm5cJZXlWKzokrIzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl MGZiNGUwHhcNMjUxMjIyMDcwMTMyWhcNMjUxMjIzMDcwMTMyWjAzMTEwLwYDVQQD Eyg1NzJhODY4MzNlOTY2MmQ1NjI4ZDgyNTY0MTg5MmE0NGZjNmJkOGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlF1TAAWCFhv0rM5WB915re9Bd3nK HaVQ0L2xqXDYuSMTCkaErj0c+2F2zmUflCEMj6KGXZq/mfIwPkmzy8PZ0W8GiVI1 Gt4jOxZsHHMutNQVWLDKIR7s3L+2zYql647nhCQcPqVwoY/1i9WtNy2Hdm0nKJtT NCKCPobjgxJaVMBCRIoP+j225wGPjhdUbga02OLGwVgGi/u86blzb2s+J7vhUBnD H/TpuD47LexGTAitJo19z+tIVUpPTYsHchg8L/UAMo8eIgXYfe3rINLdeyYA7LCe 8IVBlp55i2S1DIzG8R8T4MXKLg+em9IHP5+AX4Y4fJoyxUn996ZwJ+MykQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcqhoM+lmLVYo2CVkGJKkT8a9j4MB8GA1UdIwQY MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY82NKKYw gF7Q99jD1Gs/bJpsqBSTBJxM+/sAS1qkDfzHTmaDEeAIX63QdiIKxqCCgp7CSDX7 tr6hwu6DB9JCs37+YMQVPh1mSrAaPlo7WBICI+gs6yZc7QgyoWKBbdNpRBO563fn sn3QidAcDo4IqBt5NGNXFeAY6SYCvrxTcURM2L3TpTOkNomTaDBW5XnY/Iq0przh /Eq0j+YzlKDbmQoh0AE5Jr7EJ08lLaEKtOQEmKB7r4DcNnv2oxhfRmy+4CkOG2Ed f32Fz/odORlfOPIQXJeeZv/+K2+rIkPn9xiSvMSTVkm93+HaQHdJR8d1uFBcD8c7 KIU5HqHVejzTmw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:36:03 2025 by rpki-client