This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft File: xW93K_PEZBpxv39LxN4RyTrd_qY.mft (raw, json) Hash identifier: JAaYwl2HqpwPDdyHhjRFASaryCVA0CG5Jd9mBpOHIBQ= Subject key identifier: 5D:87:FC:56:2C:79:E1:00:8F:3D:17:FF:59:89:FF:27:8D:25:49:74 Authority key identifier: C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 Certificate issuer: /CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Certificate serial: 019B33446A5303BAA7C24D4E722FF04A4A07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft Manifest number: 10B9 Signing time: Thu 18 Dec 2025 21:01:20 +0000 Manifest this update: Thu 18 Dec 2025 21:01:20 +0000 Manifest next update: Fri 19 Dec 2025 21:01:20 +0000 Files and hashes: 1: 4VlPk-V4OmdI8dedIcEiZPcSpQw.roa (hash: L+fjrmz1h0uuao3n5B7aiIFi6OKYjyGLbVNoUwkvkL0=) 2: xW93K_PEZBpxv39LxN4RyTrd_qY.crl (hash: j7iRSn2JdWpriTmda7LPEVUGaSvK443V9Zx7iSdhOqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:6a:53:03:ba:a7:c2:4d:4e:72:2f:f0:4a:4a:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56f772bf3c4641a71bf7f4bc4de11c93addfea6 Validity Not Before: Dec 18 21:01:20 2025 GMT Not After : Dec 19 21:01:20 2025 GMT Subject: CN=5d87fc562c79e1008f3d17ff5989ff278d254974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:eb:af:6d:5a:da:bc:ee:0e:aa:ba:5f:07:86: 7f:64:c6:11:c7:1c:d9:a9:c8:a3:c0:78:51:0e:46: 89:25:7e:7d:94:a4:a8:34:4e:f6:d5:05:9f:96:9c: 78:48:50:ac:eb:db:90:6f:63:c3:19:a1:ce:13:3d: c5:95:48:0b:2e:54:0a:97:f7:b8:1b:72:7a:7b:b1: 02:82:b8:0e:1e:05:3c:bc:dd:b6:69:e2:4d:f6:58: ec:69:1a:a8:e6:87:f3:36:eb:bd:26:89:2e:50:92: 75:34:f6:19:e7:6c:05:1f:60:ef:29:10:b3:3e:20: 69:53:5d:c8:89:77:a7:75:e4:dc:15:80:07:d1:40: 38:24:1f:e6:cb:1e:44:26:fb:25:e7:0d:1d:96:68: d6:7d:f7:0a:15:29:cd:2c:05:f3:4c:42:50:59:05: fa:9e:fc:7b:66:e8:53:76:e0:93:82:33:49:c8:68: 19:10:9e:15:b7:9c:1d:e5:08:20:72:07:e7:f1:7c: 20:70:7c:41:22:6c:92:53:26:6a:34:78:37:cf:8c: db:78:96:ff:6a:97:22:fa:63:fa:12:2d:9b:f3:d4: 74:e0:2a:6c:09:07:8d:d9:53:2c:7e:66:01:8e:57: ad:df:20:3f:4d:b7:1d:44:6b:15:eb:db:59:a1:a9: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:87:FC:56:2C:79:E1:00:8F:3D:17:FF:59:89:FF:27:8D:25:49:74 X509v3 Authority Key Identifier: keyid:C5:6F:77:2B:F3:C4:64:1A:71:BF:7F:4B:C4:DE:11:C9:3A:DD:FE:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW93K_PEZBpxv39LxN4RyTrd_qY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/996cf4-67ea-413d-9317-7eca205fafcb/1/xW93K_PEZBpxv39LxN4RyTrd_qY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:13:a3:6e:10:3b:60:ec:f9:e1:a5:0c:a1:e4:ea:86:59:62: 57:11:e3:d3:72:12:19:98:73:2a:d4:3b:6f:06:e5:63:61:06: b2:3a:26:58:88:a4:f0:5b:2a:00:ef:02:d4:5e:89:1a:a9:90: 79:8f:dc:45:7b:a5:e8:7b:ad:c1:98:23:71:20:0c:cc:9b:81: b7:e2:b7:65:58:a6:3e:11:c3:6f:0c:3f:ec:d9:36:84:1f:8c: 31:db:e6:bf:50:ba:2b:fc:b7:81:4b:de:e2:fb:5e:c3:f5:bf: 02:d0:f1:15:35:ed:1a:71:4e:c5:bf:64:03:23:bc:d3:f3:1c: 00:39:44:53:1b:87:d3:a2:0a:8a:7e:2f:a9:eb:ab:1c:25:cc: 6d:a9:0a:b6:e9:e5:e2:05:59:4e:1f:bb:7f:67:fd:54:ae:e3: 9d:12:d0:43:8f:7d:9a:ff:c1:07:58:a7:4a:d5:69:7c:ec:33: f0:dc:47:84:e7:f8:3e:62:45:5e:68:e8:e0:81:d8:dc:41:f0: 48:c9:89:eb:50:02:97:42:79:5d:6a:1a:0e:24:94:67:03:76: 19:38:54:5d:01:d6:17:c0:59:6f:3a:1f:6f:3c:a5:17:f4:8f: 06:49:7f:86:cc:31:c0:8e:14:8f:c6:39:e2:07:0c:77:87:a3: ad:3b:34:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRGpTA7qnwk1Oci/wSkoHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmY3NzJiZjNjNDY0MWE3MWJmN2Y0YmM0ZGUxMWM5M2Fk ZGZlYTYwHhcNMjUxMjE4MjEwMTIwWhcNMjUxMjE5MjEwMTIwWjAzMTEwLwYDVQQD Eyg1ZDg3ZmM1NjJjNzllMTAwOGYzZDE3ZmY1OTg5ZmYyNzhkMjU0OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+uvbVravO4OqrpfB4Z/ZMYRxxzZ qcijwHhRDkaJJX59lKSoNE721QWflpx4SFCs69uQb2PDGaHOEz3FlUgLLlQKl/e4 G3J6e7ECgrgOHgU8vN22aeJN9ljsaRqo5ofzNuu9JokuUJJ1NPYZ52wFH2DvKRCz PiBpU13IiXendeTcFYAH0UA4JB/myx5EJvsl5w0dlmjWffcKFSnNLAXzTEJQWQX6 nvx7ZuhTduCTgjNJyGgZEJ4Vt5wd5Qggcgfn8XwgcHxBImySUyZqNHg3z4zbeJb/ apci+mP6Ei2b89R04CpsCQeN2VMsfmYBjlet3yA/TbcdRGsV69tZoak26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2H/FYseeEAjz0X/1mJ/yeNJUl0MB8GA1UdIwQY MBaAFMVvdyvzxGQacb9/S8TeEck63f6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTct N2VjYTIwNWZhZmNiLzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85OTZjZjQtNjdlYS00MTNkLTkzMTctN2VjYTIwNWZhZmNi LzEveFc5M0tfUEVaQnB4djM5THhONFJ5VHJkX3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACROjbhA7 YOz54aUMoeTqhlliVxHj03ISGZhzKtQ7bwblY2EGsjomWIik8FsqAO8C1F6JGqmQ eY/cRXul6HutwZgjcSAMzJuBt+K3ZVimPhHDbww/7Nk2hB+MMdvmv1C6K/y3gUve 4vtew/W/AtDxFTXtGnFOxb9kAyO80/McADlEUxuH06IKin4vqeurHCXMbakKtunl 4gVZTh+7f2f9VK7jnRLQQ499mv/BB1inStVpfOwz8NxHhOf4PmJFXmjo4IHY3EHw SMmJ61ACl0J5XWoaDiSUZwN2GThUXQHWF8BZbzofbzylF/SPBkl/hswxwI4Uj8Y5 4gcMd4ejrTs0fg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:03 2025 by rpki-client