This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft File: xFP14jBCC8SnDQph3jtH3NoajQ4.mft (raw, json) Hash identifier: h4rNclR7VCpJT1B/RJ1daqkrIZpJ6Yh5IxOt1Tp3Bbg= Subject key identifier: B0:1B:7E:E2:57:D6:61:33:BD:23:BA:41:FE:AB:04:80:DF:BF:4B:73 Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Certificate serial: 019B42EE2A310B86A7959E9BF908E3DA6C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft Manifest number: 16BD Signing time: Sun 21 Dec 2025 22:01:03 +0000 Manifest this update: Sun 21 Dec 2025 22:01:03 +0000 Manifest next update: Mon 22 Dec 2025 22:01:03 +0000 Files and hashes: 1: ZYp7OzB0VDkonl-vqvogoEtvvrU.roa (hash: XLDH0R2aZzMq1kqL7QSYAm+5jtX2I1Y+ljQvrGChpiQ=) 2: afz7BRJzqEPxj8BZVsdOin_5y-4.roa (hash: 8P/qRECRaiQdIehiJb8DPPkG7wuZbj1mnaUAo4ZwGHI=) 3: xFP14jBCC8SnDQph3jtH3NoajQ4.crl (hash: 49O6qFOg/NAnxHc5UjRYeOQWdve4txPBfOPeztPNEnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:2a:31:0b:86:a7:95:9e:9b:f9:08:e3:da:6c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Validity Not Before: Dec 21 22:01:03 2025 GMT Not After : Dec 22 22:01:03 2025 GMT Subject: CN=b01b7ee257d66133bd23ba41feab0480dfbf4b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:45:87:3d:36:36:db:f5:e3:ba:41:87:b6: a7:f7:4d:a0:d2:19:51:d0:53:fe:de:25:7b:84:9f: 38:0a:0f:12:e7:2c:bb:37:32:af:c1:ca:a2:3f:c9: 7f:72:fd:09:e0:e9:a6:de:2e:8f:56:2f:74:bb:be: 7a:9f:94:4f:1d:35:86:e0:df:44:99:ef:98:85:1e: e8:48:41:b9:47:46:59:14:d3:29:4b:0d:10:8e:63: 0f:f8:5a:15:d1:ec:07:cb:b8:b6:48:22:8e:ee:ee: 48:5a:0b:86:f8:4f:95:13:18:48:03:2b:6c:4e:fe: b9:50:c3:71:0c:79:b8:4e:0b:4e:56:34:48:87:3c: e2:0f:3a:a4:56:51:40:3e:67:68:f1:15:67:04:95: e3:05:67:72:c5:51:32:2a:f6:13:08:e3:00:da:38: da:24:c2:28:36:cf:73:26:37:af:8e:b0:35:e9:e1: 8f:46:df:c3:77:61:ba:3d:12:08:45:ba:8f:86:1c: bc:20:a1:65:3d:81:76:8f:83:81:a0:37:c1:98:5f: 13:ac:15:52:90:62:56:7d:0f:ae:47:69:05:05:12: 5e:44:cb:f5:42:e5:21:2b:24:bc:bb:0b:7f:0e:8a: 27:a9:3e:af:4e:0a:33:f4:ae:33:9d:3b:47:07:3b: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1B:7E:E2:57:D6:61:33:BD:23:BA:41:FE:AB:04:80:DF:BF:4B:73 X509v3 Authority Key Identifier: keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:79:96:67:d0:97:4e:56:43:a1:1f:5b:ad:a8:cb:71:9d:1b: 4a:ea:e1:94:49:f8:f9:09:3d:de:f1:d4:48:1c:fa:4b:cd:ee: 94:0a:72:b2:c0:fa:62:0f:3b:25:d2:a6:0c:d1:87:9e:9a:88: 78:92:1e:40:75:98:8b:33:2f:55:ef:5d:20:12:80:6e:76:aa: 5c:24:d5:c1:dc:9c:e4:c3:13:f9:f2:41:e2:2f:21:c9:4f:04: 86:d8:83:2b:71:91:a4:90:6e:09:22:71:c4:4c:60:82:15:3f: d8:26:16:18:48:98:8f:f6:1b:98:7f:e7:3b:9d:6c:25:7f:98: 45:2d:50:a0:c9:84:f7:b3:6d:e3:36:cf:b2:ee:29:76:bb:86: 73:af:aa:1d:8c:7d:07:3a:bd:7f:9b:12:13:83:4f:b1:50:07: 72:36:38:e6:cb:a0:08:48:fb:f1:a1:d4:e5:71:29:3c:81:44: c6:3a:49:64:89:c3:ba:da:3b:1c:80:f2:83:57:ad:0d:77:42: c7:fa:e0:e2:e8:a9:74:8d:00:cc:ff:37:c8:0f:1f:af:65:c8: 0c:55:a7:a3:c1:d3:a8:b5:51:2e:e3:4e:fe:0f:52:cb:94:06: b3:82:4e:e1:dd:46:8e:e7:27:51:5c:c1:5c:18:7b:eb:ea:2e: f9:bc:09:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7ioxC4anlZ6b+Qjj2mx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx YThkMGUwHhcNMjUxMjIxMjIwMTAzWhcNMjUxMjIyMjIwMTAzWjAzMTEwLwYDVQQD EyhiMDFiN2VlMjU3ZDY2MTMzYmQyM2JhNDFmZWFiMDQ4MGRmYmY0YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA199Fhz02Ntv147pBh7an902g0hlR 0FP+3iV7hJ84Cg8S5yy7NzKvwcqiP8l/cv0J4Omm3i6PVi90u756n5RPHTWG4N9E me+YhR7oSEG5R0ZZFNMpSw0QjmMP+FoV0ewHy7i2SCKO7u5IWguG+E+VExhIAyts Tv65UMNxDHm4TgtOVjRIhzziDzqkVlFAPmdo8RVnBJXjBWdyxVEyKvYTCOMA2jja JMIoNs9zJjevjrA16eGPRt/Dd2G6PRIIRbqPhhy8IKFlPYF2j4OBoDfBmF8TrBVS kGJWfQ+uR2kFBRJeRMv1QuUhKyS8uwt/DoonqT6vTgoz9K4znTtHBzsi1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAbfuJX1mEzvSO6Qf6rBIDfv0tzMB8GA1UdIwQY MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt ZTZjZjE3Y2RkYTRmLzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnmWZ9CX TlZDoR9brajLcZ0bSurhlEn4+Qk93vHUSBz6S83ulApyssD6Yg87JdKmDNGHnpqI eJIeQHWYizMvVe9dIBKAbnaqXCTVwdyc5MMT+fJB4i8hyU8EhtiDK3GRpJBuCSJx xExgghU/2CYWGEiYj/YbmH/nO51sJX+YRS1QoMmE97Nt4zbPsu4pdruGc6+qHYx9 Bzq9f5sSE4NPsVAHcjY45sugCEj78aHU5XEpPIFExjpJZInDuto7HIDyg1etDXdC x/rg4uipdI0AzP83yA8fr2XIDFWno8HTqLVRLuNO/g9Sy5QGs4JO4d1GjucnUVzB XBh76+ou+bwJ5g== -----END CERTIFICATE-----Generated at Mon Dec 22 05:48:04 2025 by rpki-client