This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json) Hash identifier: 9tu4EPo6Ttl6G2UP8Ekdwk1wipC7zZXaFKsO/IgQVa4= Subject key identifier: 8F:64:4F:27:66:91:27:71:39:41:CF:1B:76:AA:11:0E:70:08:8C:38 Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392 Certificate serial: 019B4392E1EC196048239DAE1989CA4F4808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft Manifest number: 1494 Signing time: Mon 22 Dec 2025 01:00:58 +0000 Manifest this update: Mon 22 Dec 2025 01:00:58 +0000 Manifest next update: Tue 23 Dec 2025 01:00:58 +0000 Files and hashes: 1: NKYWlz4gwZY4JXbw2fZ-33Yiq7Q.roa (hash: 78EN8i32FjxMTLLdcIXwd9Vb1kdj7OWCE2WX2/B4rLA=) 2: VUj2jDG1P5mpu3G51mRFUhrIbU4.roa (hash: twr8z4nqYemreBGHT9Kr4AfrcVcZYqpeai7rZry08Us=) 3: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: wyfk2kbFB/C3D0xkFpOZIKNBjr/zCA9Lq//ir5/ZqFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:e1:ec:19:60:48:23:9d:ae:19:89:ca:4f:48:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392 Validity Not Before: Dec 22 01:00:58 2025 GMT Not After : Dec 23 01:00:58 2025 GMT Subject: CN=8f644f27669127713941cf1b76aa110e70088c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:a8:ef:db:ac:23:fe:ec:58:f8:f8:80:b8: 8c:55:49:56:c3:05:80:4c:69:c0:30:67:88:b4:25: a8:53:cb:c3:00:18:30:29:eb:2b:c7:2c:88:40:0b: d5:be:eb:51:b2:8b:94:46:b7:c3:ec:d8:73:d9:ca: c5:1e:f8:3f:d5:0c:17:a8:03:6f:fe:1f:eb:3a:ed: 34:d7:0b:c1:fc:82:5a:ab:af:42:a5:08:7d:cc:33: eb:dc:b6:3d:0a:44:a9:f4:29:3c:59:71:eb:fb:49: e9:53:c2:0c:43:6d:c9:1a:bc:13:08:14:bf:44:1b: 49:1b:85:7d:ef:1e:07:f4:a5:de:e5:fa:1c:cc:3c: 2b:6a:7d:a7:70:5d:a9:3d:37:b7:d3:1e:4d:bb:bc: 9d:7c:63:b4:d9:e0:5b:ab:4e:fe:03:21:a7:4a:90: 29:5a:61:14:4c:46:e1:32:83:40:20:52:11:01:bd: dd:10:d5:2f:a2:97:95:99:2f:08:85:a3:d6:0a:77: 39:62:04:d3:aa:c0:1e:e7:54:54:bd:7a:e5:a1:51: 45:7a:1f:c7:08:22:2a:a9:23:09:d9:0d:8c:66:98: c0:ca:a0:1a:2e:42:1e:41:94:4d:20:b6:ee:de:08: ac:50:90:0e:3d:1b:d5:1f:30:6c:9a:57:4a:ec:7f: bc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:64:4F:27:66:91:27:71:39:41:CF:1B:76:AA:11:0E:70:08:8C:38 X509v3 Authority Key Identifier: keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4b:4e:b0:7d:d0:4e:78:a2:2f:cd:7f:3c:0f:03:bb:9d:00: 27:15:ef:80:4a:f7:85:bd:b5:3b:a2:94:05:86:9a:6e:0d:cd: 99:1d:d8:d0:80:04:a9:0a:f3:80:b3:97:92:15:04:39:03:2f: 6a:da:e0:28:e9:74:94:4a:77:51:4b:49:3a:66:9a:63:b6:f2: aa:e9:58:62:8f:13:9a:57:aa:59:39:b9:38:0c:32:6e:43:2d: ba:d4:29:64:a4:12:74:e2:26:20:53:4b:3d:21:38:82:e7:63: 74:f3:c2:e6:fb:c5:3a:60:f9:f5:fe:6f:28:da:20:64:61:42: 4e:01:ae:fd:b2:eb:3f:5c:b6:29:a9:56:d7:38:24:7a:06:36: ad:07:44:6e:d1:25:02:fd:36:7e:47:24:2a:bb:52:21:9b:aa: c2:3a:4e:78:02:ad:a9:b1:76:95:c2:2d:ec:54:09:75:45:a8: 77:1b:30:b2:1f:7a:33:42:80:31:5c:1b:d6:c5:81:b3:f1:54: d8:1a:dc:34:31:8d:1d:79:7a:80:76:98:01:8e:04:03:27:ec: 7e:5a:34:78:07:47:ba:f1:b7:c9:ba:9b:c4:88:e9:c2:f2:e8: ef:b0:59:fa:67:bb:b7:d8:4b:2d:33:38:16:6b:94:f0:95:1b: 7c:7e:65:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkuHsGWBII52uGYnKT0gIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi MWEzOTIwHhcNMjUxMjIyMDEwMDU4WhcNMjUxMjIzMDEwMDU4WjAzMTEwLwYDVQQD Eyg4ZjY0NGYyNzY2OTEyNzcxMzk0MWNmMWI3NmFhMTEwZTcwMDg4YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Ko79usI/7sWPj4gLiMVUlWwwWA TGnAMGeItCWoU8vDABgwKesrxyyIQAvVvutRsouURrfD7Nhz2crFHvg/1QwXqANv /h/rOu001wvB/IJaq69CpQh9zDPr3LY9CkSp9Ck8WXHr+0npU8IMQ23JGrwTCBS/ RBtJG4V97x4H9KXe5foczDwran2ncF2pPTe30x5Nu7ydfGO02eBbq07+AyGnSpAp WmEUTEbhMoNAIFIRAb3dENUvopeVmS8IhaPWCnc5YgTTqsAe51RUvXrloVFFeh/H CCIqqSMJ2Q2MZpjAyqAaLkIeQZRNILbu3gisUJAOPRvVHzBsmldK7H+80QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9kTydmkSdxOUHPG3aqEQ5wCIw4MB8GA1UdIwQY MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut ZTI3MjAxMzAyNmI0LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0 LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEktOsH3Q TniiL81/PA8Du50AJxXvgEr3hb21O6KUBYaabg3NmR3Y0IAEqQrzgLOXkhUEOQMv atrgKOl0lEp3UUtJOmaaY7byqulYYo8TmleqWTm5OAwybkMtutQpZKQSdOImIFNL PSE4gudjdPPC5vvFOmD59f5vKNogZGFCTgGu/bLrP1y2KalW1zgkegY2rQdEbtEl Av02fkckKrtSIZuqwjpOeAKtqbF2lcIt7FQJdUWodxswsh96M0KAMVwb1sWBs/FU 2BrcNDGNHXl6gHaYAY4EAyfsflo0eAdHuvG3ybqbxIjpwvLo77BZ+me7t9hLLTM4 FmuU8JUbfH5lLQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:05:12 2025 by rpki-client