This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json) Hash identifier: ej7czXe1AMpykYhvosA5DsI1HafLJN4w9nFiHrxGyd0= Subject key identifier: CA:08:D2:EF:40:B4:BF:B3:B7:23:B6:93:99:12:0A:0E:3A:39:C5:FF Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef Certificate serial: 019B3F118880C980E8DC24D2A23C045D250A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:12 +0000 Manifest this update: Sun 21 Dec 2025 04:01:12 +0000 Manifest next update: Mon 22 Dec 2025 04:01:12 +0000 Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: L63aaaN7zsQHwXMwwtY6FRqKXhugK0YNOwOmPQpx3eo=) 2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:88:80:c9:80:e8:dc:24:d2:a2:3c:04:5d:25:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef Validity Not Before: Dec 21 04:01:12 2025 GMT Not After : Dec 22 04:01:12 2025 GMT Subject: CN=ca08d2ef40b4bfb3b723b69399120a0e3a39c5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:56:9a:8f:9a:d7:cd:4e:5f:2c:51:b2:8c: 29:d4:e9:e0:97:55:c9:ce:0b:f0:fb:30:aa:6c:59: c8:47:c8:20:20:44:c3:74:4a:63:b3:79:c6:3f:20: d1:2c:00:ba:27:93:05:92:bf:95:b5:3b:2d:f8:5d: 67:d9:dd:78:40:d2:f9:5c:9a:d9:fd:99:38:02:ec: e0:f3:c6:af:02:dc:65:90:c6:5b:84:5a:a1:f9:b5: 6d:4f:6f:84:24:5c:e4:df:54:4a:03:3e:e0:ad:8a: 14:21:af:54:32:8e:73:29:dc:64:e9:07:b5:00:cc: ec:1c:2c:91:69:96:ee:27:af:39:14:84:12:9f:aa: 5e:3d:f5:41:0b:09:2a:4c:09:f2:66:53:ac:af:7b: 5f:6d:06:a4:da:7d:93:b3:b5:8c:0d:08:dc:95:7b: ad:56:52:ff:68:27:ca:77:55:d5:78:ae:61:ba:eb: e0:85:4c:38:b4:35:14:a9:2f:5f:ca:66:6d:ce:b5: ab:2a:81:60:92:4b:bc:2b:e3:9d:8a:f3:31:21:e0: c6:f9:e8:e5:30:b4:9a:b8:b9:60:d6:86:dc:d5:2c: cb:23:ff:8d:28:8e:f4:aa:6b:71:7a:52:bd:6b:90: dc:e3:ed:4e:9a:4c:1d:a5:e0:52:00:54:3f:b8:35: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:08:D2:EF:40:B4:BF:B3:B7:23:B6:93:99:12:0A:0E:3A:39:C5:FF X509v3 Authority Key Identifier: keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:97:cc:e5:62:b3:9d:e1:cd:97:2a:31:aa:aa:24:54:a9:5f: 31:a9:ac:5e:2d:80:51:95:c1:ad:35:dd:2a:72:59:b3:15:fd: 97:90:42:37:65:df:d7:eb:87:a5:d2:28:7c:1a:f9:7e:82:31: 4d:7c:1b:5d:61:cc:de:c4:d6:a8:13:3d:14:48:e2:61:a5:81: 65:54:b8:87:cc:41:79:a4:e5:9f:cf:23:90:55:b4:34:ea:dd: b8:39:af:ec:9d:98:3b:66:87:24:d4:99:76:e6:d1:01:23:9b: c4:52:52:48:9b:65:14:de:0e:f4:95:c3:a5:bd:d4:ad:b9:2b: e8:a3:b8:1f:11:e6:2a:9d:1f:c4:a5:2a:11:13:60:8e:c8:d7: 15:90:52:69:77:b1:5e:56:ba:10:1f:98:c2:bd:fe:85:27:63: 3d:22:eb:dd:db:cb:cd:e7:2a:95:c2:f7:8d:92:6e:37:e0:85: e6:c7:3e:de:9c:0c:13:67:b6:59:6f:b9:4c:51:b3:25:eb:fc: dc:02:12:6d:a2:34:db:08:ef:7a:b0:1d:c2:18:02:fc:40:5f: 4c:9c:6b:64:d2:ac:9c:67:83:97:a0:97:de:e2:42:22:42:38: b9:d8:04:16:8d:cd:5a:84:a3:6c:80:91:48:b4:b1:b7:42:14: b6:51:c9:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYiAyYDo3CTSojwEXSUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk Y2RkZWYwHhcNMjUxMjIxMDQwMTEyWhcNMjUxMjIyMDQwMTEyWjAzMTEwLwYDVQQD EyhjYTA4ZDJlZjQwYjRiZmIzYjcyM2I2OTM5OTEyMGEwZTNhMzljNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T1Wmo+a181OXyxRsowp1Ongl1XJ zgvw+zCqbFnIR8ggIETDdEpjs3nGPyDRLAC6J5MFkr+VtTst+F1n2d14QNL5XJrZ /Zk4Auzg88avAtxlkMZbhFqh+bVtT2+EJFzk31RKAz7grYoUIa9UMo5zKdxk6Qe1 AMzsHCyRaZbuJ685FIQSn6pePfVBCwkqTAnyZlOsr3tfbQak2n2Ts7WMDQjclXut VlL/aCfKd1XVeK5huuvghUw4tDUUqS9fymZtzrWrKoFgkku8K+OdivMxIeDG+ejl MLSauLlg1obc1SzLI/+NKI70qmtxelK9a5Dc4+1OmkwdpeBSAFQ/uDUbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoI0u9AtL+ztyO2k5kSCg46OcX/MB8GA1UdIwQY MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2 LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJfM5WKz neHNlyoxqqokVKlfMamsXi2AUZXBrTXdKnJZsxX9l5BCN2Xf1+uHpdIofBr5foIx TXwbXWHM3sTWqBM9FEjiYaWBZVS4h8xBeaTln88jkFW0NOrduDmv7J2YO2aHJNSZ dubRASObxFJSSJtlFN4O9JXDpb3Urbkr6KO4HxHmKp0fxKUqERNgjsjXFZBSaXex Xla6EB+Ywr3+hSdjPSLr3dvLzecqlcL3jZJuN+CF5sc+3pwME2e2WW+5TFGzJev8 3AISbaI02wjverAdwhgC/EBfTJxrZNKsnGeDl6CX3uJCIkI4udgEFo3NWoSjbICR SLSxt0IUtlHJbg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:51 2025 by rpki-client