This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json) Hash identifier: b6meOuAHuydrAgEskjGMbFHfchq4LzAwLYsrOfuKozE= Subject key identifier: 11:4F:28:A1:73:34:B7:D5:47:CE:CF:E0:D4:EC:B8:EB:21:64:66:A4 Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Certificate serial: 019B3A21BE9B71B73B61FF906157A6ECD36F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 05:00:48 +0000 Manifest this update: Sat 20 Dec 2025 05:00:48 +0000 Manifest next update: Sun 21 Dec 2025 05:00:48 +0000 Files and hashes: 1: UHa0PUrVvlqJmfxBpJVCi2m-y4g.roa (hash: k2wV1z1hH+x/xLCT2XUUrUL5LqUbzcz6dyzMF+S+UWA=) 2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: +F9ZXjl3xBY2kGnAWjG8xNn6zJXxhaeXiLrSzMM+LIk=) 3: aPapdOg3chczRLaEQQ4twwrxodQ.roa (hash: cmj3AvJXpniFJk9oaDy233oV4hbFHwTxw3NrIU6hf2E=) 4: sQHnIxiTXdDvzwTuqD8p9cUZpbk.roa (hash: biOURbaVfbs816gF/jx/GDITj2SuRtw3EAQo7PheBYY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:be:9b:71:b7:3b:61:ff:90:61:57:a6:ec:d3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606 Validity Not Before: Dec 20 05:00:48 2025 GMT Not After : Dec 21 05:00:48 2025 GMT Subject: CN=114f28a17334b7d547cecfe0d4ecb8eb216466a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:13:77:70:2a:69:36:2f:c0:8e:f3:ee:c3: ae:c5:db:6e:1b:4d:a9:21:5e:8a:b9:f5:e5:fe:d0: ea:a4:9e:ca:a5:e7:cb:41:bd:92:88:2b:ae:db:0d: 8c:4f:eb:82:c0:55:c2:44:23:87:08:b0:af:fa:8a: 3b:d2:7a:25:34:e3:ec:6c:e5:c6:ef:cd:41:c0:8c: 10:7d:6e:14:85:0d:44:31:91:22:96:ee:f4:a1:f3: f8:55:85:cd:d2:47:67:c5:19:ea:d5:1b:3d:99:63: 52:e2:3d:17:04:74:52:23:99:87:bd:63:1a:fa:37: 3b:61:ac:de:7c:3f:d4:2a:e0:bb:f9:4b:e4:02:a2: a5:c5:84:b7:ab:16:59:8a:e0:3f:e2:76:f5:91:ff: bb:dc:d1:25:99:c5:3a:7d:3b:0b:b4:ea:74:9b:1f: 32:c3:55:d4:dd:18:4e:24:19:67:6f:5f:ae:f0:90: 3c:e8:34:3d:a9:cb:4a:db:33:92:55:01:c5:f7:0d: b0:5e:b4:de:82:5b:ba:63:34:7c:a8:9d:e2:c1:a8: f7:25:c9:ca:63:f8:58:1d:17:13:42:7e:4a:c7:dd: 3e:44:c7:e0:47:84:7e:4f:4e:7b:93:dc:24:c2:dd: 52:ca:3e:5b:b6:11:17:ac:a6:06:88:5b:ce:7f:b5: 42:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:28:A1:73:34:B7:D5:47:CE:CF:E0:D4:EC:B8:EB:21:64:66:A4 X509v3 Authority Key Identifier: keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a2:62:d2:3e:19:6b:b1:61:b7:0f:23:1f:e4:95:a9:d6:f6: e1:ca:f6:24:a6:1a:62:d6:69:70:9b:ab:f3:bc:42:d1:64:cc: cd:a8:4e:fe:5d:f3:14:d2:4d:da:c5:61:56:a6:a1:a6:58:89: 59:f9:d0:5a:7b:a6:70:68:b4:e4:02:2f:10:b8:50:27:15:51: 78:5a:48:3c:b8:5e:c2:f5:e6:31:ca:35:f7:1f:0b:8c:eb:01: ea:42:90:5b:80:1d:05:6d:22:e7:b4:9f:50:3d:66:ae:96:c5: 73:b6:d9:d0:cb:ec:bf:78:2d:ec:c0:29:7f:cb:cf:d6:69:c4: 29:0c:5c:28:a8:3a:9c:e5:d5:f8:91:57:36:c1:d2:2e:04:c8: 6a:fd:86:ff:d8:f3:c0:d6:04:82:7a:d1:6b:50:07:31:3d:c1: 42:05:29:ce:0b:73:e5:76:38:b6:71:41:40:c5:29:d9:7f:7e: 3b:f3:7e:5a:30:1b:b8:0a:f2:b8:bd:75:4a:e4:80:7a:e0:6e: 77:80:b5:07:4a:d0:c1:5f:fd:a0:a9:39:77:11:e1:ca:09:fc: 5f:24:40:96:e5:07:c2:2f:44:80:4a:e6:ff:6e:12:16:bc:5b: 62:2d:37:e6:45:84:d5:04:18:3c:be:65:86:07:32:a2:fd:c6: b2:74:2d:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ib6bcbc7Yf+QYVem7NNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmUzODgxZjNjNDQ3NzRmNTFjYzc1ZWU3ZTZmOTFjNTU2 NWE2MDYwHhcNMjUxMjIwMDUwMDQ4WhcNMjUxMjIxMDUwMDQ4WjAzMTEwLwYDVQQD EygxMTRmMjhhMTczMzRiN2Q1NDdjZWNmZTBkNGVjYjhlYjIxNjQ2NmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygMTd3AqaTYvwI7z7sOuxdtuG02p IV6KufXl/tDqpJ7KpefLQb2SiCuu2w2MT+uCwFXCRCOHCLCv+oo70nolNOPsbOXG 781BwIwQfW4UhQ1EMZEilu70ofP4VYXN0kdnxRnq1Rs9mWNS4j0XBHRSI5mHvWMa +jc7YazefD/UKuC7+UvkAqKlxYS3qxZZiuA/4nb1kf+73NElmcU6fTsLtOp0mx8y w1XU3RhOJBlnb1+u8JA86DQ9qctK2zOSVQHF9w2wXrTeglu6YzR8qJ3iwaj3JcnK Y/hYHRcTQn5Kx90+RMfgR4R+T057k9wkwt1Syj5bthEXrKYGiFvOf7VCnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFPKKFzNLfVR87P4NTsuOshZGakMB8GA1UdIwQY MBaAFFz+OIHzxEd09RzHXufm+RxVZaYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYt N2M5OTgwNzlhNmE5LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS81MjYwZDAtMTg1NS00ZjMwLWI4ZWYtN2M5OTgwNzlhNmE5 LzEvWFA0NGdmUEVSM1QxSE1kZTUtYjVIRlZscGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6Ji0j4Z a7Fhtw8jH+SVqdb24cr2JKYaYtZpcJur87xC0WTMzahO/l3zFNJN2sVhVqahpliJ WfnQWnumcGi05AIvELhQJxVReFpIPLhewvXmMco19x8LjOsB6kKQW4AdBW0i57Sf UD1mrpbFc7bZ0Mvsv3gt7MApf8vP1mnEKQxcKKg6nOXV+JFXNsHSLgTIav2G/9jz wNYEgnrRa1AHMT3BQgUpzgtz5XY4tnFBQMUp2X9+O/N+WjAbuAryuL11SuSAeuBu d4C1B0rQwV/9oKk5dxHhygn8XyRAluUHwi9EgErm/24SFrxbYi035kWE1QQYPL5l hgcyov3GsnQtzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:54 2025 by rpki-client