This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json) Hash identifier: y6iYqdrrcZe8bWftUvhdSvWFTx8nFJNnVS1BkliATkc= Subject key identifier: 7F:8C:EA:B4:60:0A:DC:42:5C:A6:B3:FF:43:75:90:F5:7E:2D:4D:AF Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Certificate serial: 019B42EE83DF4C444F9E8CD4BCA08D4A71AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 22:01:26 +0000 Manifest this update: Sun 21 Dec 2025 22:01:26 +0000 Manifest next update: Mon 22 Dec 2025 22:01:26 +0000 Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=) 2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: uoAha3/5aPvC1R+xcJMPqKVgFHlG0858i/tebMsvGn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:83:df:4c:44:4f:9e:8c:d4:bc:a0:8d:4a:71:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Validity Not Before: Dec 21 22:01:26 2025 GMT Not After : Dec 22 22:01:26 2025 GMT Subject: CN=7f8ceab4600adc425ca6b3ff437590f57e2d4daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:77:1d:01:01:d0:3a:f5:0a:9b:7f:7d:bf: a3:d2:bb:a7:80:e4:9a:2e:4b:04:fa:2f:97:ad:fc: 34:05:32:c7:f9:2e:5e:ba:0f:af:ef:86:07:05:8b: 03:5d:36:e3:27:1c:ff:17:29:44:38:c1:ed:84:3b: 42:c8:45:21:84:6d:53:e2:36:8d:7e:7b:2e:71:c8: fb:b1:0a:d5:24:ef:25:df:a9:79:94:d9:9c:47:7b: 63:46:ce:d2:65:92:ba:d5:8a:cb:dc:a5:8e:06:b3: 51:71:58:f2:12:2e:95:ff:13:96:26:65:f1:bb:92: 3b:20:5f:02:a7:ce:35:06:43:6b:a2:9a:08:c0:9a: a7:a2:81:b3:10:56:e1:77:b0:cb:41:c0:92:29:09: 17:56:29:28:0c:8f:ce:1c:4f:10:8e:e6:43:97:4b: 72:1c:be:d3:f9:55:ea:fc:c9:c7:9c:7f:79:fa:7c: 57:69:58:d2:cc:9b:82:27:40:f5:f5:46:3a:3d:24: 8f:0d:ca:64:ca:34:f4:81:28:43:eb:fb:4c:8f:ea: 24:d9:f8:b4:09:8d:6a:f6:6c:87:9c:ac:9e:e2:6f: ab:75:61:26:57:b3:55:ee:c4:0d:92:cf:62:19:d5: 27:42:d5:cf:98:fd:e9:ea:70:eb:18:ad:01:5e:9f: 01:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:EA:B4:60:0A:DC:42:5C:A6:B3:FF:43:75:90:F5:7E:2D:4D:AF X509v3 Authority Key Identifier: keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2b:a1:a3:5d:c3:3f:ee:d5:70:56:67:fe:42:2c:32:b5:2f: 57:3f:43:f8:c7:b3:c1:9f:8a:d9:e0:f1:a5:1a:ba:06:17:c5: 19:05:ac:97:15:51:8a:d1:b8:36:e6:c6:5b:99:af:c6:3d:66: b2:3d:97:35:fb:90:dd:d9:88:15:d5:4d:2c:0a:5e:6d:89:0a: 28:4d:61:41:2e:0a:c3:8a:eb:86:67:95:32:d4:04:09:9c:71: f5:93:59:5f:d3:a3:8c:dd:3a:33:d0:81:5c:94:95:49:00:97: 00:9f:91:93:8b:eb:95:11:4f:bc:ce:dc:c6:9e:e4:f0:fa:d6: 5b:57:8b:f7:d7:5c:18:32:6b:79:bb:11:64:55:b1:f7:c9:a6: 00:32:29:99:d2:1a:bf:57:5e:ed:c3:27:2d:51:e8:b0:9e:f0: 9d:64:c5:a3:fd:36:ee:f7:f4:42:d1:b2:80:45:87:ef:18:41: 03:54:b6:4f:ba:4d:ca:ff:25:ec:d6:5b:4b:66:e6:bd:ea:8b: 30:77:38:33:f8:e9:d0:92:f5:67:dc:c4:b9:62:ef:21:1b:4a: fb:b4:f2:8f:f6:59:09:a4:a3:0d:57:bd:42:2a:f5:0b:a0:7b: b7:5b:dd:26:6e:f7:02:d8:34:e7:6f:12:e7:f2:a7:06:72:5a: 03:76:82:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7oPfTERPnozUvKCNSnGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk ZTAyNjAwHhcNMjUxMjIxMjIwMTI2WhcNMjUxMjIyMjIwMTI2WjAzMTEwLwYDVQQD Eyg3ZjhjZWFiNDYwMGFkYzQyNWNhNmIzZmY0Mzc1OTBmNTdlMmQ0ZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQV3HQEB0Dr1Cpt/fb+j0rungOSa LksE+i+Xrfw0BTLH+S5eug+v74YHBYsDXTbjJxz/FylEOMHthDtCyEUhhG1T4jaN fnsuccj7sQrVJO8l36l5lNmcR3tjRs7SZZK61YrL3KWOBrNRcVjyEi6V/xOWJmXx u5I7IF8Cp841BkNropoIwJqnooGzEFbhd7DLQcCSKQkXVikoDI/OHE8QjuZDl0ty HL7T+VXq/MnHnH95+nxXaVjSzJuCJ0D19UY6PSSPDcpkyjT0gShD6/tMj+ok2fi0 CY1q9myHnKye4m+rdWEmV7NV7sQNks9iGdUnQtXPmP3p6nDrGK0BXp8BQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+M6rRgCtxCXKaz/0N1kPV+LU2vMB8GA1UdIwQY MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt YmY3MTQ0OWQ5N2RkLzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyuho13D P+7VcFZn/kIsMrUvVz9D+MezwZ+K2eDxpRq6BhfFGQWslxVRitG4NubGW5mvxj1m sj2XNfuQ3dmIFdVNLApebYkKKE1hQS4Kw4rrhmeVMtQECZxx9ZNZX9OjjN06M9CB XJSVSQCXAJ+Rk4vrlRFPvM7cxp7k8PrWW1eL99dcGDJrebsRZFWx98mmADIpmdIa v1de7cMnLVHosJ7wnWTFo/027vf0QtGygEWH7xhBA1S2T7pNyv8l7NZbS2bmveqL MHc4M/jp0JL1Z9zEuWLvIRtK+7Tyj/ZZCaSjDVe9Qir1C6B7t1vdJm73Atg0528S 5/KnBnJaA3aCIA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:08:36 2025 by rpki-client