This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: hzFhBKCJtATWvEy1VE/h4goVaofCaplpI5/waz0FrYY= Subject key identifier: 5E:6C:2A:E6:9D:00:85:5F:7F:54:1C:BD:48:E8:5C:3F:67:76:06:82 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B39EADDE73A5B2D6C981C82BEA3505B6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 135D Signing time: Sat 20 Dec 2025 04:00:52 +0000 Manifest this update: Sat 20 Dec 2025 04:00:52 +0000 Manifest next update: Sun 21 Dec 2025 04:00:52 +0000 Files and hashes: 1: 4RKx0TPWpjyqFnYw_5DcC4r--8c.roa (hash: EeJxEgHcgX2POFtcheGSjZ/nSQoAG58B2CWKgWaFLHU=) 2: AjmtKVshFn4i5oudhf9_vWmAvsw.roa (hash: CuwkA+D3Ny2dECS4D0f8gIT8izPiI79T33+j6Gl48lk=) 3: B7-nq7_cc4f7Zt868VHWF4evtl4.roa (hash: 8XyukQXz+vjZuY6nqgv3ycX242CL7BTZXHzKPn1lLzs=) 4: NMjO7luh_VLlkiRN5_rJM9McdZU.roa (hash: F/s8ZrNFnB9cACRc/zfnUbwDpiBOuQs9t9+/CTXMuRk=) 5: QCWBDKlG8Io2BeH0NId31fpN2YE.roa (hash: 0NRY9EDUi1FWue8IN72u0GMUvyyjoroAoM3JlXroHao=) 6: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: z87xXCAtXF03Ia/wF324aW7L9xw08kpgOUnHk/ko5rM=) 7: XwHGUq38dDBNzTc_ge-yBwhhY1o.roa (hash: PgJwO//GwdLKnSg3NtaGlab1yN/ram5lj/PHtYxijoA=) 8: ewVsnSugCXk__789cz5d5ZAdZmc.roa (hash: o+8XbQDDA3JQsPJjR3Lfqf5ZVHX07bm5R0GYVGvsC9M=) 9: f4_XIVmsIZE5Q2N24spgeU0yDjk.roa (hash: 9PnPL8Uj92c8N0K6S0DkkLyk9Siv5wZEJPC/dCt0/ys=) 10: tWNAblpSIHBRwstDjrx69LZTG3c.roa (hash: TOR0ePLyq2A8fQRU7qwOgqkqVyE2uNZxjRQtXz0qxQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:dd:e7:3a:5b:2d:6c:98:1c:82:be:a3:50:5b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Dec 20 04:00:52 2025 GMT Not After : Dec 21 04:00:52 2025 GMT Subject: CN=5e6c2ae69d00855f7f541cbd48e85c3f67760682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:18:35:dc:46:65:53:ee:f8:59:f0:4b:4f:86: 10:0d:33:33:3d:25:c6:25:7c:85:0b:d9:e8:37:82: 65:ec:1a:2b:53:8c:e1:dc:c3:2d:f2:77:69:28:a2: e3:79:54:82:ce:4c:5f:9d:ce:b4:31:d7:cc:db:9f: f1:a7:56:7f:61:78:41:de:62:44:f3:7b:82:21:70: 0c:4d:06:8e:20:ae:50:ef:9e:54:fd:22:66:38:3b: 8d:5a:0c:e0:56:5f:03:b4:ef:24:ce:9f:bb:5d:f1: 14:8c:ed:93:ce:7d:7c:32:03:27:e9:e5:31:c7:2f: fc:06:dd:d0:e5:aa:84:b0:75:29:02:22:ec:2a:44: 62:d2:2c:6e:54:ee:bb:2f:85:0d:3f:c4:6a:ce:0d: 89:99:07:e6:8f:92:13:18:6c:7c:cb:19:80:37:b0: 73:88:e2:b0:e3:4d:bc:76:b4:f2:0b:68:19:85:95: 74:27:24:89:f9:80:74:91:15:ee:30:df:e5:a1:00: 77:b6:fc:97:cc:e7:db:41:db:26:aa:62:18:0a:ca: d8:f9:99:d7:f1:17:e0:31:25:2c:0c:16:a7:a6:2f: c9:b7:87:2c:3f:56:a8:4d:ee:ea:ff:63:d8:80:e2: e4:f7:52:c2:f9:d3:38:4b:4f:55:62:4c:cf:2e:ae: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6C:2A:E6:9D:00:85:5F:7F:54:1C:BD:48:E8:5C:3F:67:76:06:82 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:cb:28:49:d3:c4:87:bf:6a:c8:65:57:d5:0a:3a:f7:86: f1:07:c0:ca:0b:27:a5:43:52:71:08:12:49:13:15:1d:ef:ca: 79:fc:e6:c8:e4:f5:a4:63:31:e2:7d:6b:4d:3c:97:ca:c6:aa: 5e:b1:9c:3e:29:db:3c:a9:14:ce:ea:3e:03:1f:b3:04:27:0b: 96:a8:78:3d:84:a2:79:25:a5:12:c8:0e:5f:28:ff:e4:43:6f: 80:4c:6a:d4:93:13:f5:70:cd:f0:d1:24:3c:6a:21:8a:f2:30: c8:b5:0d:53:71:52:ea:73:d9:8d:91:b6:36:e7:29:c0:36:41: 1f:0a:5f:62:aa:d3:67:d0:9d:ed:a5:84:a9:f3:2d:27:36:2b: b7:03:ce:bc:71:3a:74:3e:15:c3:cc:78:d0:2d:63:52:7f:b9: 39:54:5f:a8:73:72:43:6f:12:a3:25:d9:06:4f:dc:a3:d6:0b: ce:cb:31:70:86:c7:e7:1c:ae:2c:17:6a:b0:43:3d:00:a6:61: 42:87:6a:9e:fd:ac:da:d8:d6:50:fd:9e:a9:90:94:32:eb:2b: df:ae:24:92:b0:02:04:3c:c8:b7:51:33:cd:4d:31:63:a1:5d: 7b:6d:e9:a3:4d:e1:ff:c9:fb:20:1e:4c:12:b1:f7:f0:2d:53: 43:43:6b:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56t3nOlstbJgcgr6jUFtvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMjIwMDQwMDUyWhcNMjUxMjIxMDQwMDUyWjAzMTEwLwYDVQQD Eyg1ZTZjMmFlNjlkMDA4NTVmN2Y1NDFjYmQ0OGU4NWMzZjY3NzYwNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBg13EZlU+74WfBLT4YQDTMzPSXG JXyFC9noN4Jl7BorU4zh3MMt8ndpKKLjeVSCzkxfnc60MdfM25/xp1Z/YXhB3mJE 83uCIXAMTQaOIK5Q755U/SJmODuNWgzgVl8DtO8kzp+7XfEUjO2Tzn18MgMn6eUx xy/8Bt3Q5aqEsHUpAiLsKkRi0ixuVO67L4UNP8Rqzg2JmQfmj5ITGGx8yxmAN7Bz iOKw4028drTyC2gZhZV0JySJ+YB0kRXuMN/loQB3tvyXzOfbQdsmqmIYCsrY+ZnX 8RfgMSUsDBanpi/Jt4csP1aoTe7q/2PYgOLk91LC+dM4S09VYkzPLq4CzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5sKuadAIVff1QcvUjoXD9ndgaCMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5PLKEnT xIe/ashlV9UKOveG8QfAygsnpUNScQgSSRMVHe/KefzmyOT1pGMx4n1rTTyXysaq XrGcPinbPKkUzuo+Ax+zBCcLlqh4PYSieSWlEsgOXyj/5ENvgExq1JMT9XDN8NEk PGohivIwyLUNU3FS6nPZjZG2NucpwDZBHwpfYqrTZ9Cd7aWEqfMtJzYrtwPOvHE6 dD4Vw8x40C1jUn+5OVRfqHNyQ28SoyXZBk/co9YLzssxcIbH5xyuLBdqsEM9AKZh Qodqnv2s2tjWUP2eqZCUMusr364kkrACBDzIt1EzzU0xY6Fde23po03h/8n7IB5M ErH38C1TQ0Nrvw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:29:16 2025 by rpki-client