This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json) Hash identifier: SLNNlyo4wXyjjWhkO+nJfGBa55HzNsSsjwIlYBYYFEw= Subject key identifier: 5D:54:3A:FC:64:AB:E1:F7:40:C4:AB:77:DA:04:C1:B0:4A:6B:C4:2B Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Certificate serial: 019B52612077AC6F47E48770BB5B63538AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft Manifest number: 1797 Signing time: Wed 24 Dec 2025 22:00:55 +0000 Manifest this update: Wed 24 Dec 2025 22:00:55 +0000 Manifest next update: Thu 25 Dec 2025 22:00:55 +0000 Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=) 2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: /dQ5HpVK2gb5d16qC8Ufu8rgTj4V5doKwiTUvpQkRwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:20:77:ac:6f:47:e4:87:70:bb:5b:63:53:8a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Validity Not Before: Dec 24 22:00:55 2025 GMT Not After : Dec 25 22:00:55 2025 GMT Subject: CN=5d543afc64abe1f740c4ab77da04c1b04a6bc42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:75:a2:d3:a0:9d:a4:52:b7:91:57:55:28: 14:23:d4:a5:d0:79:e7:c9:0d:67:f0:50:05:02:c5: 92:09:d3:e1:16:ad:78:a4:2e:0d:57:08:d0:a3:3e: e5:66:97:b2:5b:b0:4d:b9:09:92:35:6b:6f:9e:13: c8:6c:f7:67:2f:a2:cb:ee:63:52:2f:04:45:96:81: 3d:63:9b:96:42:ae:78:a6:e4:27:6f:de:6a:a6:ca: e4:7b:56:2d:06:26:20:1c:d1:12:a0:6b:92:9f:ad: f2:73:72:05:ac:45:d7:17:ad:77:f6:5b:ce:ed:d9: bb:1b:03:a1:10:b7:39:a0:3d:ee:97:3a:41:ce:8f: 90:f4:29:42:84:11:b8:32:35:e8:c1:9d:aa:47:62: ae:b5:cb:38:02:f3:95:1e:c1:2c:25:d5:ce:a0:11: ef:f1:a1:ab:ef:6f:fe:ad:85:96:4c:75:71:d2:d1: d6:28:37:ab:a7:1a:b8:31:7e:ec:bd:6c:d4:8f:b6: 76:9a:11:3f:4d:60:17:74:74:b8:db:31:ba:bd:4f: 17:6f:fa:a8:11:08:8d:e8:9d:fd:7c:b9:0d:af:82: a1:4c:20:1c:92:ca:83:7d:52:b8:2a:f5:9d:e0:42: f3:4a:b0:4e:f6:6e:9e:98:23:c1:66:b0:7f:17:42: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:54:3A:FC:64:AB:E1:F7:40:C4:AB:77:DA:04:C1:B0:4A:6B:C4:2B X509v3 Authority Key Identifier: keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f3:cb:8e:20:2a:63:30:16:48:88:87:43:75:65:6f:1f:5b: 42:da:6b:f4:c2:f8:78:e0:5e:17:cf:06:9c:5f:96:89:ba:0c: a8:ac:c2:4e:2b:44:e6:f1:f1:7a:23:c2:ff:a1:60:fd:44:c3: 9a:0b:b4:6b:f4:3e:e5:2c:da:2a:6f:49:f9:ac:c2:e7:c9:51: 66:77:a7:d8:80:94:68:43:21:f4:2f:6a:10:0e:b7:92:a4:ff: e2:f8:4f:1a:3a:96:53:5b:58:c5:0c:73:b1:b3:1a:1a:bd:51: 55:48:2b:00:0b:bb:08:b6:c1:57:f9:9a:e1:53:9f:23:35:36: 04:b3:0b:4a:9d:92:60:8e:de:4c:cc:25:76:e4:52:50:3c:b4: 76:16:87:ae:95:6a:81:42:aa:86:e7:0e:fe:7b:8b:da:bd:8a: 45:81:8a:28:a7:a3:ed:00:53:4b:7e:7b:51:0f:4c:51:e8:8e: a4:08:a6:62:ea:70:00:05:9a:55:76:8a:0b:13:b2:52:8d:95: 69:63:1e:53:a2:6f:29:28:67:26:d6:34:f9:f6:a3:01:21:1b: 7b:26:67:2a:84:98:a3:03:81:ae:64:8e:de:4a:e9:e1:95:26: f9:0d:9a:92:81:de:c7:49:d1:1f:50:e2:f1:77:1a:88:e0:3f: fe:fd:ae:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYSB3rG9H5Idwu1tjU4rlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk ZTAyNjAwHhcNMjUxMjI0MjIwMDU1WhcNMjUxMjI1MjIwMDU1WjAzMTEwLwYDVQQD Eyg1ZDU0M2FmYzY0YWJlMWY3NDBjNGFiNzdkYTA0YzFiMDRhNmJjNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn51otOgnaRSt5FXVSgUI9Sl0Hnn yQ1n8FAFAsWSCdPhFq14pC4NVwjQoz7lZpeyW7BNuQmSNWtvnhPIbPdnL6LL7mNS LwRFloE9Y5uWQq54puQnb95qpsrke1YtBiYgHNESoGuSn63yc3IFrEXXF6139lvO 7dm7GwOhELc5oD3ulzpBzo+Q9ClChBG4MjXowZ2qR2Kutcs4AvOVHsEsJdXOoBHv 8aGr72/+rYWWTHVx0tHWKDerpxq4MX7svWzUj7Z2mhE/TWAXdHS42zG6vU8Xb/qo EQiN6J39fLkNr4KhTCAcksqDfVK4KvWd4ELzSrBO9m6emCPBZrB/F0J1VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1UOvxkq+H3QMSrd9oEwbBKa8QrMB8GA1UdIwQY MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt YmY3MTQ0OWQ5N2RkLzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/PLjiAq YzAWSIiHQ3Vlbx9bQtpr9ML4eOBeF88GnF+WiboMqKzCTitE5vHxeiPC/6Fg/UTD mgu0a/Q+5SzaKm9J+azC58lRZnen2ICUaEMh9C9qEA63kqT/4vhPGjqWU1tYxQxz sbMaGr1RVUgrAAu7CLbBV/ma4VOfIzU2BLMLSp2SYI7eTMwlduRSUDy0dhaHrpVq gUKqhucO/nuL2r2KRYGKKKej7QBTS357UQ9MUeiOpAimYupwAAWaVXaKCxOyUo2V aWMeU6JvKShnJtY0+fajASEbeyZnKoSYowOBrmSO3krp4ZUm+Q2akoHex0nRH1Di 8XcaiOA//v2uyg== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:38 2025 by rpki-client