This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json) Hash identifier: 5HWJ0fTxdxsz0CdWsenh42jEEpJAFrLnfxs2TFdUTfE= Subject key identifier: 74:98:2A:CD:C5:CC:4B:04:0E:D2:39:18:4D:CE:45:5D:38:42:6B:5C Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Certificate serial: 019B3C1004422DF7EB0174C1BF31FF5B4871 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 14:00:41 +0000 Manifest this update: Sat 20 Dec 2025 14:00:41 +0000 Manifest next update: Sun 21 Dec 2025 14:00:41 +0000 Files and hashes: 1: 0vJK_vyasIrWUmMeEUC9qBRt1hU.roa (hash: 8dnpR0wliwI6ds+bwuYSSa8p5H39NL3zBM5biG+2pNc=) 2: E7RpdyIBOL8QfbpWAMDvfKmfGvE.roa (hash: Jl5wvOsESTap4RI2Rb+pwF3WlOcK3fzc1tCnuSYRIgk=) 3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: WHOUokgtN8f4OSd6dBn7JFFLgkJzRiTjMiG7YRlEnf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:04:42:2d:f7:eb:01:74:c1:bf:31:ff:5b:48:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f Validity Not Before: Dec 20 14:00:41 2025 GMT Not After : Dec 21 14:00:41 2025 GMT Subject: CN=74982acdc5cc4b040ed239184dce455d38426b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f7:42:21:c4:23:4a:8d:56:f5:22:cf:ce:85: d1:81:7b:db:69:53:9e:45:9c:a2:9c:23:db:75:bd: 70:75:6f:a7:0a:c1:ed:2a:ad:dc:e9:25:65:49:8c: eb:31:68:e5:dd:a5:b3:6e:dc:ca:ef:e7:32:42:04: 69:4c:4c:13:05:71:05:53:b4:89:d0:ea:77:8c:45: 49:ba:a3:41:c9:2a:6f:c6:f2:1d:5f:07:87:1a:5e: 2a:29:9c:f1:cd:35:1c:5d:20:4e:6c:2d:b6:37:85: bd:a6:51:50:b5:3f:43:5a:28:46:e2:90:0b:37:3e: 66:3e:95:f3:8d:f1:ff:03:6c:8c:35:da:62:4b:12: 15:41:30:de:ac:f4:0f:49:3c:11:3e:92:d5:7f:16: 5d:7b:25:b2:38:87:4f:97:92:7d:50:6a:aa:ff:90: 45:bd:df:bf:29:8b:cb:59:9b:6e:64:73:92:d9:80: 8d:fc:8d:08:2b:1e:ad:ac:f1:ac:a7:3f:3d:32:f1: 99:5c:7f:79:7e:64:8e:f7:d8:d9:af:a7:29:a5:d7: 9e:f6:32:44:72:bc:de:0c:d4:79:9f:bf:ec:9a:c7: 24:dd:72:38:3b:b2:5a:1d:77:7b:4d:90:44:c1:a4: f7:0d:bf:e4:9d:1f:ea:ba:2d:cc:0e:d0:1a:98:65: 1a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:98:2A:CD:C5:CC:4B:04:0E:D2:39:18:4D:CE:45:5D:38:42:6B:5C X509v3 Authority Key Identifier: keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c0:cb:2b:dc:52:cf:96:87:0d:01:3f:07:8c:14:19:b9:88: 79:0d:3d:80:4d:cd:da:bf:14:e5:d9:96:9d:7c:86:51:d8:5b: 52:fb:d1:ea:6a:3d:21:2c:ee:11:b3:49:15:af:e4:86:7d:ed: 5e:95:b0:5d:ae:28:36:68:40:07:12:d3:a9:64:a0:66:dc:77: 3e:28:dd:55:c9:37:b2:34:aa:d6:6d:3a:06:bb:a5:d8:e4:ab: a0:b5:9c:8d:83:26:01:03:24:e2:c3:29:66:03:fe:fa:29:67: f5:f1:6c:19:b4:ae:e5:f3:7f:38:73:22:f9:d7:c0:ab:13:67: 72:2f:73:62:81:81:8b:ef:f6:78:ea:7e:26:44:8f:36:89:dc: 27:77:76:b7:9e:99:b3:a9:24:fd:8e:6e:19:77:57:fa:a4:f4: 24:51:de:cf:8a:a0:a7:75:33:23:45:57:b8:7f:8a:07:ba:93: 85:64:3b:07:7d:38:1a:0e:6c:7a:01:72:5d:8d:a1:1b:af:79: 0a:ca:d6:2d:84:f1:9c:01:d3:54:e8:53:d9:3c:d3:f0:3e:cc: ea:e1:0c:b3:19:8d:03:4e:e5:ba:d9:30:ac:20:41:01:5e:b8: c1:1e:fe:ae:05:07:22:4f:86:5b:94:33:c4:4e:7b:2f:53:88: 6e:12:de:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EARCLffrAXTBvzH/W0hxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmU4ZDcyNTI2ZTRlNzNhM2I1N2Q5MzYwZjNhNTFiZWI1 OWE0NWYwHhcNMjUxMjIwMTQwMDQxWhcNMjUxMjIxMTQwMDQxWjAzMTEwLwYDVQQD Eyg3NDk4MmFjZGM1Y2M0YjA0MGVkMjM5MTg0ZGNlNDU1ZDM4NDI2YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vdCIcQjSo1W9SLPzoXRgXvbaVOe RZyinCPbdb1wdW+nCsHtKq3c6SVlSYzrMWjl3aWzbtzK7+cyQgRpTEwTBXEFU7SJ 0Op3jEVJuqNBySpvxvIdXweHGl4qKZzxzTUcXSBObC22N4W9plFQtT9DWihG4pAL Nz5mPpXzjfH/A2yMNdpiSxIVQTDerPQPSTwRPpLVfxZdeyWyOIdPl5J9UGqq/5BF vd+/KYvLWZtuZHOS2YCN/I0IKx6trPGspz89MvGZXH95fmSO99jZr6cppdee9jJE crzeDNR5n7/smsck3XI4O7JaHXd7TZBEwaT3Db/knR/qui3MDtAamGUa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSYKs3FzEsEDtI5GE3ORV04QmtcMB8GA1UdIwQY MBaAFFz+jXJSbk5zo7V9k2DzpRvrWaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMt ZTRkZGZhMzJlNTJlLzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84NGJmNTQtMDljMy00MzI0LWExMWMtZTRkZGZhMzJlNTJl LzEvWFA2TmNsSnVUbk9qdFgyVFlQT2xHLXRacEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsDLK9xS z5aHDQE/B4wUGbmIeQ09gE3N2r8U5dmWnXyGUdhbUvvR6mo9ISzuEbNJFa/khn3t XpWwXa4oNmhABxLTqWSgZtx3PijdVck3sjSq1m06Brul2OSroLWcjYMmAQMk4sMp ZgP++iln9fFsGbSu5fN/OHMi+dfAqxNnci9zYoGBi+/2eOp+JkSPNoncJ3d2t56Z s6kk/Y5uGXdX+qT0JFHez4qgp3UzI0VXuH+KB7qThWQ7B304Gg5segFyXY2hG695 CsrWLYTxnAHTVOhT2TzT8D7M6uEMsxmNA07lutkwrCBBAV64wR7+rgUHIk+GW5Qz xE57L1OIbhLeKQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:06:32 2025 by rpki-client