This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json) Hash identifier: Z4B6ugyeTVLDN3oNaC7AkM2VgcZZQOtiamcGv+vUVc4= Subject key identifier: 64:F9:DF:4E:68:E6:F5:7B:51:7F:D6:3F:82:B2:B2:86:CA:C6:F2:54 Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f Certificate serial: 019B3DFEE6A17505DE3B54AA5D7577B15927 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft Manifest number: 039C Signing time: Sat 20 Dec 2025 23:01:13 +0000 Manifest this update: Sat 20 Dec 2025 23:01:13 +0000 Manifest next update: Sun 21 Dec 2025 23:01:13 +0000 Files and hashes: 1: duv4en-kEZVnVXOXNGPZW_Jyrcw.roa (hash: /NQGSNT25LxwGXN6iIBj1hB3qklD/ePBBcZOp63AVyY=) 2: vCCb_HMH6KGFfsqbXQ0TIng1tfU.roa (hash: Twx8fVXaunI4+UsiQLUlLfwUCYQ1G7itZPYouG+NOxY=) 3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: fOOtc7SmxXuNg7zYQUpFzvM3u3/yIAY2mIJpnhGLC+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e6:a1:75:05:de:3b:54:aa:5d:75:77:b1:59:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f Validity Not Before: Dec 20 23:01:13 2025 GMT Not After : Dec 21 23:01:13 2025 GMT Subject: CN=64f9df4e68e6f57b517fd63f82b2b286cac6f254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:9d:e6:73:ce:ed:4b:72:33:9c:d8:f4:04: fa:11:3e:7d:08:42:9c:a3:6b:c1:09:35:15:3e:ed: 06:ac:04:2b:dd:ba:3d:f7:f5:c1:18:ff:a4:f4:33: eb:18:47:80:60:4f:99:48:ca:85:78:6b:b0:5f:08: a4:8c:fb:4f:0e:59:c7:f2:d9:4d:67:26:f9:5f:89: 0a:2e:ca:36:f9:d4:da:3a:e1:22:49:c2:e6:df:17: ae:a2:a6:f8:95:71:f3:46:12:23:2d:58:1e:ff:35: aa:dd:01:37:d6:b7:2e:6d:c0:d7:94:e3:d3:cc:5c: b5:45:16:7d:a4:e9:7d:e4:f1:be:56:f2:49:4e:bf: fe:c9:ed:94:82:6f:fb:1e:bd:f9:51:c1:72:21:15: 3a:84:ae:b0:eb:6d:61:7c:17:4e:f6:77:13:44:82: d5:93:67:64:19:34:cf:cb:bc:b0:d8:bb:28:a4:96: d0:97:b2:6a:11:de:84:11:e0:f2:01:d8:81:8c:bc: c1:4a:73:f8:1a:4f:c9:16:43:95:ee:2c:a6:aa:24: 5b:ad:12:d9:08:d8:26:3d:8a:5f:12:e7:be:d9:6a: 87:60:92:18:4a:0b:83:b2:e1:b5:38:41:fd:fb:8d: 8c:80:f9:82:e8:fd:a9:3b:e4:56:13:f2:f4:d2:1c: 1d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F9:DF:4E:68:E6:F5:7B:51:7F:D6:3F:82:B2:B2:86:CA:C6:F2:54 X509v3 Authority Key Identifier: keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ae:a1:fc:37:4d:b1:fa:d8:0c:13:0c:7f:50:e1:76:09:54: c9:48:36:f1:70:c6:27:4c:1a:24:8c:7c:92:13:0e:f8:d9:2d: 16:c1:c8:96:f9:96:aa:92:65:3b:53:41:bb:70:a1:1a:81:49: e5:54:bb:24:20:1f:65:73:e8:e9:ef:60:8e:9d:e8:a5:46:9c: f9:65:af:1d:ff:dd:20:76:0f:51:0e:ac:ab:53:70:36:86:df: 59:51:6e:92:8f:01:fc:e5:19:34:b3:7f:dc:e2:03:7e:c9:f4: d4:64:bd:49:13:e8:69:fa:ad:ea:d9:7b:74:95:80:3e:8b:cb: 19:6d:f7:5e:57:03:c2:5b:fb:a1:6c:4f:ed:b8:d3:50:ad:69: 6d:e0:73:2b:ce:ac:0e:c7:fa:d1:ed:d7:93:9d:f3:c3:45:6c: 98:d3:90:70:2c:82:04:7d:c9:13:e8:03:71:36:64:aa:85:9e: 23:d8:cb:79:7e:91:13:c3:e2:08:3c:27:7f:f3:f7:09:60:d3: ef:1a:99:db:be:bb:0f:d1:e8:74:a0:34:c8:1e:1d:b6:88:38: f4:4c:5d:65:c0:7a:0c:32:88:6c:1e:66:79:a6:6e:c8:7b:55: fb:33:69:75:11:c1:51:a6:60:30:ca:46:69:5c:3a:e3:15:ac: c2:1c:f2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uahdQXeO1SqXXV3sVknMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2YwYWRhZWFmYjQwYzc3MjQ1OWU5MzkzNTRmNmJlNDUz ZjE1OGYwHhcNMjUxMjIwMjMwMTEzWhcNMjUxMjIxMjMwMTEzWjAzMTEwLwYDVQQD Eyg2NGY5ZGY0ZTY4ZTZmNTdiNTE3ZmQ2M2Y4MmIyYjI4NmNhYzZmMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G+d5nPO7UtyM5zY9AT6ET59CEKc o2vBCTUVPu0GrAQr3bo99/XBGP+k9DPrGEeAYE+ZSMqFeGuwXwikjPtPDlnH8tlN Zyb5X4kKLso2+dTaOuEiScLm3xeuoqb4lXHzRhIjLVge/zWq3QE31rcubcDXlOPT zFy1RRZ9pOl95PG+VvJJTr/+ye2Ugm/7Hr35UcFyIRU6hK6w621hfBdO9ncTRILV k2dkGTTPy7yw2LsopJbQl7JqEd6EEeDyAdiBjLzBSnP4Gk/JFkOV7iymqiRbrRLZ CNgmPYpfEue+2WqHYJIYSguDsuG1OEH9+42MgPmC6P2pO+RWE/L00hwdywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGT5305o5vV7UX/WP4KysobKxvJUMB8GA1UdIwQY MBaAFMU/Ctrq+0DHckWek5NU9r5FPxWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzct NDYxN2NhMzc2MDgzLzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zODA0YzItMGU0NC00YmUzLTkwMzctNDYxN2NhMzc2MDgz LzEveFQ4SzJ1cjdRTWR5Ulo2VGsxVDJ2a1VfRlk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq6h/DdN sfrYDBMMf1DhdglUyUg28XDGJ0waJIx8khMO+NktFsHIlvmWqpJlO1NBu3ChGoFJ 5VS7JCAfZXPo6e9gjp3opUac+WWvHf/dIHYPUQ6sq1NwNobfWVFuko8B/OUZNLN/ 3OIDfsn01GS9SRPoafqt6tl7dJWAPovLGW33XlcDwlv7oWxP7bjTUK1pbeBzK86s Dsf60e3Xk53zw0VsmNOQcCyCBH3JE+gDcTZkqoWeI9jLeX6RE8PiCDwnf/P3CWDT 7xqZ2767D9HodKA0yB4dtog49ExdZcB6DDKIbB5meaZuyHtV+zNpdRHBUaZgMMpG aVw64xWswhzyWA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:15 2025 by rpki-client