This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json) Hash identifier: cNqFvci0mC7oECYXSMj/Uql2iHpHwUtWSuthqhMtC1g= Subject key identifier: E2:9E:4C:59:E1:2F:81:EF:88:52:FB:B9:8C:B4:D3:2F:3C:E9:FA:9C Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019B405B6368B0F176D57B780971B76567B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:29 +0000 Manifest this update: Sun 21 Dec 2025 10:01:29 +0000 Manifest next update: Mon 22 Dec 2025 10:01:29 +0000 Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: Uf7BobjUVbIf7U/7a+kgUmOLo1a8Z9Cea7dxq/JxdIs=) 2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=) 3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:63:68:b0:f1:76:d5:7b:78:09:71:b7:65:67:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Dec 21 10:01:29 2025 GMT Not After : Dec 22 10:01:29 2025 GMT Subject: CN=e29e4c59e12f81ef8852fbb98cb4d32f3ce9fa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:d2:93:19:a7:61:10:24:4d:fe:07:02:a2: 28:d1:84:dc:ff:d9:ab:c6:53:83:dc:93:18:0e:6d: 5d:6e:14:89:bf:ca:24:7e:a0:be:e4:4b:38:ac:f7: 94:19:2a:94:24:b9:47:9e:18:e7:70:66:cf:e6:34: f2:af:5b:eb:9a:e4:70:a8:74:2f:5f:5b:56:a8:01: d6:1c:e2:23:d7:19:fa:f6:34:4a:1b:bf:bb:de:87: 3a:f2:9d:9c:61:b9:9f:68:2f:48:5e:33:b9:dc:84: 33:31:bc:7a:79:8b:c8:94:a8:bc:58:fc:bb:db:34: 18:70:2c:32:fb:b5:38:09:d5:cc:c0:12:a3:38:02: 7d:a8:fc:47:12:24:05:86:ad:5b:4e:43:c8:d9:c3: 2c:c2:87:6a:04:42:08:d4:a6:ff:d4:ec:58:fa:61: 8e:db:b1:f6:af:3f:47:84:fa:30:88:f7:25:d2:04: bd:6a:d9:a2:b9:8e:60:d2:b5:7b:42:9c:d7:11:04: 91:99:cf:bf:4a:f8:9e:e3:09:df:cb:7f:7e:e3:e7: b3:5d:41:61:b0:c2:b8:c9:24:7f:23:47:29:40:63: c2:dc:f6:d8:01:87:89:01:67:66:23:1d:df:26:e6: 75:91:21:ee:32:07:da:63:ff:78:6e:04:a0:7d:f7: 88:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9E:4C:59:E1:2F:81:EF:88:52:FB:B9:8C:B4:D3:2F:3C:E9:FA:9C X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a7:18:ff:0a:9f:09:9a:f6:e5:26:88:50:7d:53:18:ed:81: 49:71:06:f1:f8:69:48:33:9a:b9:11:72:f1:fb:f5:b4:3f:ad: c3:2a:bf:3d:34:a5:e8:a6:ca:15:42:6b:18:1d:d6:e5:8e:d5: 0f:43:f7:0e:10:1f:de:c1:c9:97:74:c4:80:96:01:28:4c:23: 82:f3:03:36:88:59:cc:ee:97:7b:e2:aa:9d:4b:6f:fb:c3:e4: 1e:c1:e6:0f:be:af:c3:ce:49:2e:3d:c2:c8:fb:ed:d6:20:78: 12:5b:bc:12:46:e8:db:69:fe:f7:a5:7f:42:d0:68:3e:b5:85: c8:e3:87:ae:a9:c5:f6:ef:7d:e2:80:88:e3:da:c6:32:41:60: 21:6e:aa:7b:50:3f:a1:69:c9:64:75:92:eb:66:72:44:f7:d8: 00:c1:58:82:4d:90:77:6a:9d:36:bb:62:b1:b7:3c:63:99:15: 17:82:b6:11:7d:e4:b5:52:17:b4:a1:fd:74:05:ef:94:67:1e: 39:8b:60:db:ba:37:8a:e6:d5:52:b4:8b:c8:d2:60:97:fa:57: 27:53:69:b9:2a:de:e9:71:7a:22:b2:02:ad:c7:a7:e5:4a:96: a4:3c:5a:a4:87:f9:77:43:95:10:8c:15:da:7c:22:94:23:42: ba:8f:ad:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW2NosPF21Xt4CXG3ZWe4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjUxMjIxMTAwMTI5WhcNMjUxMjIyMTAwMTI5WjAzMTEwLwYDVQQD EyhlMjllNGM1OWUxMmY4MWVmODg1MmZiYjk4Y2I0ZDMyZjNjZTlmYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdbSkxmnYRAkTf4HAqIo0YTc/9mr xlOD3JMYDm1dbhSJv8okfqC+5Es4rPeUGSqUJLlHnhjncGbP5jTyr1vrmuRwqHQv X1tWqAHWHOIj1xn69jRKG7+73oc68p2cYbmfaC9IXjO53IQzMbx6eYvIlKi8WPy7 2zQYcCwy+7U4CdXMwBKjOAJ9qPxHEiQFhq1bTkPI2cMswodqBEII1Kb/1OxY+mGO 27H2rz9HhPowiPcl0gS9atmiuY5g0rV7QpzXEQSRmc+/Svie4wnfy39+4+ezXUFh sMK4ySR/I0cpQGPC3PbYAYeJAWdmIx3fJuZ1kSHuMgfaY/94bgSgffeI8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKeTFnhL4HviFL7uYy00y886fqcMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqcY/wqf CZr25SaIUH1TGO2BSXEG8fhpSDOauRFy8fv1tD+twyq/PTSl6KbKFUJrGB3W5Y7V D0P3DhAf3sHJl3TEgJYBKEwjgvMDNohZzO6Xe+KqnUtv+8PkHsHmD76vw85JLj3C yPvt1iB4Elu8Ekbo22n+96V/QtBoPrWFyOOHrqnF9u994oCI49rGMkFgIW6qe1A/ oWnJZHWS62ZyRPfYAMFYgk2Qd2qdNrtisbc8Y5kVF4K2EX3ktVIXtKH9dAXvlGce OYtg27o3iubVUrSLyNJgl/pXJ1NpuSre6XF6IrICrcen5UqWpDxapIf5d0OVEIwV 2nwilCNCuo+tSA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:51:40 2025 by rpki-client