This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json) Hash identifier: t9KAnWiPsTtqQwxowFCfk/7hR+Xv/NPBsOKamz5YRkk= Subject key identifier: 0D:33:54:FC:E3:2A:ED:00:F3:0C:6F:7D:6E:7A:AC:B5:EC:49:E3:66 Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Certificate serial: 019B4A029C577F6FF3581284BDB4566E5C3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 07:00:43 +0000 Manifest this update: Tue 23 Dec 2025 07:00:43 +0000 Manifest next update: Wed 24 Dec 2025 07:00:43 +0000 Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=) 2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=) 3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=) 4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: Rthr0mi7ruGfa011eKDREfbXnXdaXe9cJer9YfJjzjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:9c:57:7f:6f:f3:58:12:84:bd:b4:56:6e:5c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Validity Not Before: Dec 23 07:00:43 2025 GMT Not After : Dec 24 07:00:43 2025 GMT Subject: CN=0d3354fce32aed00f30c6f7d6e7aacb5ec49e366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:84:c7:71:4a:73:f0:08:b9:f7:e9:37:d2: 16:ff:64:40:56:9f:0c:c1:c6:68:46:a1:68:ed:0e: 66:b8:5d:f7:ce:cd:c2:e6:06:37:a2:bc:47:bb:29: aa:38:b5:4e:45:cd:83:6f:b0:c5:70:21:b5:09:87: 2a:ad:1d:e0:f9:45:70:12:d4:c3:e6:03:4b:91:5b: cf:e8:8b:e1:75:b4:24:eb:ed:da:d4:88:66:0d:5c: 66:c8:27:7b:06:62:94:ff:58:ef:54:03:11:a8:8a: 91:7a:4d:ad:22:bc:a8:79:4d:7a:63:e0:af:a5:68: 28:0c:0f:df:05:42:91:2a:82:3e:9a:c9:5a:c8:f9: d4:6d:52:9b:8c:a1:44:74:d9:fc:69:13:90:be:b3: 05:6d:6c:ec:e3:19:e9:dd:ba:42:fe:9b:ed:ec:20: aa:1d:9c:e6:c0:ae:b2:bd:c8:6d:c4:76:cb:15:4f: 3a:4f:61:01:60:65:53:98:ad:99:27:c4:dd:94:65: 8f:c1:60:60:f4:33:69:5f:bf:60:c9:c4:31:6d:31: 5b:0c:82:83:0e:96:6d:14:f0:76:24:11:19:f1:09: 70:26:a5:02:a2:38:f2:ef:c2:80:7a:8a:3f:ca:1d: df:d8:b2:fe:c4:ac:a6:ec:f2:d1:35:9c:48:2e:40: d8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:33:54:FC:E3:2A:ED:00:F3:0C:6F:7D:6E:7A:AC:B5:EC:49:E3:66 X509v3 Authority Key Identifier: keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:93:6a:9a:eb:61:a8:f6:45:1d:47:fe:44:dc:3a:c5:11:53: 0d:da:fc:4d:36:f5:15:80:e8:32:b5:7a:f9:35:b8:ab:ae:32: 96:62:c6:8c:5e:5d:6d:74:19:10:1d:2e:4a:49:b2:27:1e:12: 3a:1c:67:03:50:0d:a6:e6:d0:f8:ee:48:cf:ec:f8:73:24:8b: 54:8c:d8:51:bd:fa:9a:f4:aa:96:ca:63:8a:e0:c2:06:e5:8b: 48:e8:e6:73:d9:21:6a:b9:a5:a2:1e:b6:97:fb:58:aa:c6:eb: 5f:ee:28:ae:be:e5:ba:f0:3a:33:8a:19:f9:a0:ec:9f:45:43: a2:d0:87:6f:77:f7:ad:02:27:a1:d7:b0:db:32:e0:9b:0d:64: d5:40:f6:cb:8d:74:db:5a:bf:62:6a:86:71:ad:89:44:75:b1: 9e:e0:4a:1b:26:ef:e3:4b:87:95:8c:fa:62:a6:3d:af:37:14: c6:57:e7:b4:f6:d1:ef:eb:32:35:e5:43:49:11:34:6f:54:a6: 75:e7:b1:07:eb:fc:b7:48:78:8b:6e:ba:41:ba:a7:c0:81:ca: 68:bf:96:8f:43:3b:07:b3:ac:4c:85:e3:4e:0c:c0:ac:3c:aa: e6:32:35:0d:46:c7:25:f4:3d:ef:82:58:f3:6a:7f:d9:09:6a: 02:4b:95:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKApxXf2/zWBKEvbRWblw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl NzE5M2QwHhcNMjUxMjIzMDcwMDQzWhcNMjUxMjI0MDcwMDQzWjAzMTEwLwYDVQQD EygwZDMzNTRmY2UzMmFlZDAwZjMwYzZmN2Q2ZTdhYWNiNWVjNDllMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcGEx3FKc/AIuffpN9IW/2RAVp8M wcZoRqFo7Q5muF33zs3C5gY3orxHuymqOLVORc2Db7DFcCG1CYcqrR3g+UVwEtTD 5gNLkVvP6IvhdbQk6+3a1IhmDVxmyCd7BmKU/1jvVAMRqIqRek2tIryoeU16Y+Cv pWgoDA/fBUKRKoI+mslayPnUbVKbjKFEdNn8aROQvrMFbWzs4xnp3bpC/pvt7CCq HZzmwK6yvchtxHbLFU86T2EBYGVTmK2ZJ8TdlGWPwWBg9DNpX79gycQxbTFbDIKD DpZtFPB2JBEZ8QlwJqUCojjy78KAeoo/yh3f2LL+xKym7PLRNZxILkDYSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0zVPzjKu0A8wxvfW56rLXsSeNmMB8GA1UdIwQY MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJNqmuth qPZFHUf+RNw6xRFTDdr8TTb1FYDoMrV6+TW4q64ylmLGjF5dbXQZEB0uSkmyJx4S OhxnA1ANpubQ+O5Iz+z4cySLVIzYUb36mvSqlspjiuDCBuWLSOjmc9kharmloh62 l/tYqsbrX+4orr7luvA6M4oZ+aDsn0VDotCHb3f3rQInodew2zLgmw1k1UD2y410 21q/YmqGca2JRHWxnuBKGybv40uHlYz6YqY9rzcUxlfntPbR7+syNeVDSRE0b1Sm deexB+v8t0h4i266QbqnwIHKaL+Wj0M7B7OsTIXjTgzArDyq5jI1DUbHJfQ974JY 82p/2QlqAkuVbQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:54:18 2025 by rpki-client