This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json) Hash identifier: lrMiRGe3kW0I0tLu3jQ8pv416txqHfjfaEY3/hVszrc= Subject key identifier: D6:6A:E1:B4:8D:98:72:48:A7:C4:E2:3B:4C:FE:EF:24:90:2A:A5:F1 Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Certificate serial: 019B39EB5D36618EC3A882F1A25BCE980A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft Manifest number: 094B Signing time: Sat 20 Dec 2025 04:01:24 +0000 Manifest this update: Sat 20 Dec 2025 04:01:24 +0000 Manifest next update: Sun 21 Dec 2025 04:01:24 +0000 Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: 6q+S+9Zyf+pciZD0HuHX0JZSm00Zxw7Z9XpCAr/UBrY=) 2: piG2uRHwpvwfiTxMHd8MLSGk4wE.roa (hash: ExOMOibeDEHpiyFKG9S0IQNKWRN+afMFp3jL5xO3Y8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:5d:36:61:8e:c3:a8:82:f1:a2:5b:ce:98:0a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa Validity Not Before: Dec 20 04:01:24 2025 GMT Not After : Dec 21 04:01:24 2025 GMT Subject: CN=d66ae1b48d987248a7c4e23b4cfeef24902aa5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:68:ed:52:33:a2:61:60:f6:7a:f7:69:d7: 12:d5:5d:3d:db:82:61:e4:33:36:ee:58:0c:f8:db: f8:18:9f:e5:c1:13:0f:c0:b7:65:8e:a3:9b:b4:10: 63:d4:ea:68:48:90:2b:97:68:fc:9d:e1:96:a2:3d: b9:df:ab:f8:06:79:b8:a8:43:4c:fa:39:8e:ec:7e: eb:b3:c2:3f:23:5a:39:1c:f1:a2:79:a9:f3:19:ce: 3f:3d:f9:57:fe:bc:ba:35:34:75:ab:24:d1:97:07: 47:75:67:df:77:34:03:0e:94:7c:53:9b:10:63:a2: 18:44:f0:8d:0f:f9:fb:42:b6:30:47:82:44:d1:e6: 6a:88:4b:73:bd:ca:73:c3:14:a8:0f:bb:24:7b:7d: 67:ac:ad:a1:8e:76:c6:63:c9:bd:33:f0:13:cd:44: 8f:38:c9:0f:9a:60:f9:f9:bd:f6:0a:c6:64:47:e9: 45:bf:c8:3b:35:d4:11:12:a8:aa:e3:c1:96:b8:84: 86:fe:27:bd:bd:19:60:f2:4a:e2:02:eb:5f:28:b7: 79:e2:0c:12:6e:b8:eb:46:0b:80:74:91:2e:98:35: 18:74:e3:6c:60:e1:66:1b:b8:5c:6e:f7:df:d0:97: e0:54:2c:b9:9c:ee:b5:f8:03:73:66:44:e0:d8:45: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6A:E1:B4:8D:98:72:48:A7:C4:E2:3B:4C:FE:EF:24:90:2A:A5:F1 X509v3 Authority Key Identifier: keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:18:69:8f:9f:72:15:21:b4:d9:bf:bc:4d:3f:28:97:14:fd: 84:36:4b:30:0b:8a:d8:c0:30:f3:bb:1c:37:96:58:c5:5c:20: 33:7e:aa:04:ca:eb:6b:63:0a:64:ff:76:5b:9d:65:90:de:37: e4:a1:a8:d8:8b:84:e4:53:06:3f:b7:c5:bd:d4:c5:3c:78:71: 91:6b:d6:8d:20:bf:32:1d:08:45:c1:4f:28:77:5c:83:ea:a5: 5d:2c:f1:9e:42:60:23:e1:af:bc:4a:35:77:9a:e4:c6:02:7a: 9c:b9:1a:09:41:4c:b5:9c:e3:3a:2b:b7:6f:a6:af:4f:d5:01: d1:5b:90:21:98:1a:08:88:cb:24:67:02:97:39:cb:a7:ca:32: 0a:89:0a:89:45:c8:f2:9d:87:23:26:cb:c7:ea:b5:1b:af:82: 02:09:2d:9a:d4:b0:e2:77:cd:91:1e:8a:f2:5e:52:ba:c6:b7: f7:0e:44:02:f8:f8:38:c5:03:60:3d:71:5b:c5:54:ef:ad:b4: b2:f5:00:9c:08:83:c6:f4:28:6a:13:95:af:b1:2b:01:0f:51: 43:70:fb:6f:f5:50:b9:18:ca:1d:17:78:b0:f9:f9:ed:a6:5b: 36:a0:11:3d:e5:88:40:94:7f:a8:07:c5:41:e0:c3:be:a9:b3: a8:5b:e7:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56102YY7DqILxolvOmApPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMGRmMGM4ZTVkMWIyMzUzOGJlYjVlY2NjM2FiMTI4NjVk ZjdlYWEwHhcNMjUxMjIwMDQwMTI0WhcNMjUxMjIxMDQwMTI0WjAzMTEwLwYDVQQD EyhkNjZhZTFiNDhkOTg3MjQ4YTdjNGUyM2I0Y2ZlZWYyNDkwMmFhNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsRo7VIzomFg9nr3adcS1V0924Jh 5DM27lgM+Nv4GJ/lwRMPwLdljqObtBBj1OpoSJArl2j8neGWoj2536v4Bnm4qENM +jmO7H7rs8I/I1o5HPGieanzGc4/PflX/ry6NTR1qyTRlwdHdWffdzQDDpR8U5sQ Y6IYRPCND/n7QrYwR4JE0eZqiEtzvcpzwxSoD7ske31nrK2hjnbGY8m9M/ATzUSP OMkPmmD5+b32CsZkR+lFv8g7NdQREqiq48GWuISG/ie9vRlg8kriAutfKLd54gwS brjrRguAdJEumDUYdONsYOFmG7hcbvff0JfgVCy5nO61+ANzZkTg2EVIvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZq4bSNmHJIp8TiO0z+7ySQKqXxMB8GA1UdIwQY MBaAFF8N8Mjl0bI1OL617Mw6sShl336qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUt YmM1MTNhOThiOWJlLzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lMTFkYWQtMjA4ZS00N2NjLWJmNmUtYmM1MTNhOThiOWJl LzEvWHczd3lPWFJzalU0dnJYc3pEcXhLR1hmZnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhhpj59y FSG02b+8TT8olxT9hDZLMAuK2MAw87scN5ZYxVwgM36qBMrra2MKZP92W51lkN43 5KGo2IuE5FMGP7fFvdTFPHhxkWvWjSC/Mh0IRcFPKHdcg+qlXSzxnkJgI+GvvEo1 d5rkxgJ6nLkaCUFMtZzjOiu3b6avT9UB0VuQIZgaCIjLJGcClznLp8oyCokKiUXI 8p2HIybLx+q1G6+CAgktmtSw4nfNkR6K8l5Susa39w5EAvj4OMUDYD1xW8VU7620 svUAnAiDxvQoahOVr7ErAQ9RQ3D7b/VQuRjKHRd4sPn57aZbNqARPeWIQJR/qAfF QeDDvqmzqFvnzw== -----END CERTIFICATE-----Generated at Sat Dec 20 06:51:51 2025 by rpki-client