This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json) Hash identifier: JteHnoh/Nli8KJzz6qFhZobWUjEKDtLX1a6NPNM5Ifo= Subject key identifier: D8:D2:B7:48:01:2D:37:89:E4:D3:8E:F0:43:EC:9C:63:BD:A2:97:41 Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Certificate serial: 019B3F11E449266672578ED9B327E2C2DEA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:35 +0000 Manifest this update: Sun 21 Dec 2025 04:01:35 +0000 Manifest next update: Mon 22 Dec 2025 04:01:35 +0000 Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=) 2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: 44iDw8YRNdRGZtsYU6J9eueq2TAH2fKqlMG6lPYGIRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:e4:49:26:66:72:57:8e:d9:b3:27:e2:c2:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Validity Not Before: Dec 21 04:01:35 2025 GMT Not After : Dec 22 04:01:35 2025 GMT Subject: CN=d8d2b748012d3789e4d38ef043ec9c63bda29741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:b6:34:ab:2c:9c:5f:94:6a:19:c1:e2:0f: e9:18:a1:4e:81:0f:03:a0:d8:f8:45:60:48:17:c9: 89:a9:bf:7f:6d:92:0e:01:62:9d:f2:e6:4e:31:db: b3:3d:ef:e0:9b:ef:71:e9:fe:fe:c7:6c:d9:1a:48: 4d:dd:bd:b3:0a:d2:8b:c7:ba:8c:c1:4a:9a:ea:91: 75:7e:a4:cc:9b:26:e2:d3:2e:ae:8d:e2:95:28:13: 97:fb:05:07:28:66:7f:cb:3d:a6:b0:94:cc:58:c6: 28:17:c7:e3:be:7d:d2:77:7a:bb:2a:9f:fb:12:de: 24:19:d4:d0:d7:44:99:d6:e1:47:8e:80:4f:71:43: 56:b7:bd:89:13:d1:3c:a7:d8:bd:7e:0e:51:1c:d1: 4f:84:2f:f0:42:99:4d:ee:a0:39:80:69:2d:55:5d: 57:b6:60:81:25:cb:62:21:34:61:fb:a2:ee:da:4a: 09:9e:0e:b6:11:bd:cc:43:b0:c4:5b:99:8d:76:62: 8b:c8:54:d8:52:6b:f8:67:4d:7c:23:0c:5b:cc:cd: bb:eb:92:71:a0:fc:5b:df:32:3f:e6:34:dc:0c:6e: 5c:90:5c:5f:a1:e6:9c:1d:1a:24:24:4a:15:35:ec: b6:91:04:86:58:5f:bb:80:01:ec:ef:8c:3f:44:a2: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D2:B7:48:01:2D:37:89:E4:D3:8E:F0:43:EC:9C:63:BD:A2:97:41 X509v3 Authority Key Identifier: keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9a:72:e2:fd:ef:a2:7f:39:fc:6b:9d:60:54:6d:6f:50:b6: c3:c6:5f:2a:29:16:50:6c:f1:bd:bf:21:2d:c3:d4:f7:d6:30: ab:4e:a7:46:f2:00:dc:aa:41:d9:63:10:9f:5c:a0:86:21:c3: 45:34:ab:cc:7d:8c:8c:4e:8a:6d:d2:b6:ac:1d:85:9b:f8:9f: 72:40:98:07:10:88:38:d7:c5:18:74:97:0b:16:c5:2a:6d:96: 2f:ba:17:fd:b0:ce:07:76:67:e8:64:72:fe:ae:39:9e:e2:50: 6d:34:96:c9:ec:3e:d0:85:0f:c3:1b:cc:82:cc:10:77:37:10: 19:c2:77:e6:b5:d7:f4:c4:15:a0:56:b5:c1:75:d6:ef:f8:c9: 0d:56:18:73:e1:94:1f:5c:84:50:9c:9d:f6:8a:3f:8d:d2:c3: 11:e3:ba:6e:ad:28:ab:11:23:9a:ff:85:71:75:94:85:9a:7e: 78:c4:6e:8e:91:9d:4f:9a:04:67:2f:a8:8e:ee:04:de:14:22: f3:ac:e0:6f:b9:b7:94:91:a5:21:75:03:3a:40:bb:36:d4:93: 4a:ce:55:88:31:88:f0:16:df:16:d3:09:b3:4d:00:dc:c3:3f: 92:21:b8:75:16:c6:73:37:80:33:1a:30:1a:c3:73:72:5e:40: fe:ba:f2:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EeRJJmZyV47Zsyfiwt6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk NzAxNDIwHhcNMjUxMjIxMDQwMTM1WhcNMjUxMjIyMDQwMTM1WjAzMTEwLwYDVQQD EyhkOGQyYjc0ODAxMmQzNzg5ZTRkMzhlZjA0M2VjOWM2M2JkYTI5NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn+2NKssnF+UahnB4g/pGKFOgQ8D oNj4RWBIF8mJqb9/bZIOAWKd8uZOMduzPe/gm+9x6f7+x2zZGkhN3b2zCtKLx7qM wUqa6pF1fqTMmybi0y6ujeKVKBOX+wUHKGZ/yz2msJTMWMYoF8fjvn3Sd3q7Kp/7 Et4kGdTQ10SZ1uFHjoBPcUNWt72JE9E8p9i9fg5RHNFPhC/wQplN7qA5gGktVV1X tmCBJctiITRh+6Lu2koJng62Eb3MQ7DEW5mNdmKLyFTYUmv4Z018IwxbzM2765Jx oPxb3zI/5jTcDG5ckFxfoeacHRokJEoVNey2kQSGWF+7gAHs74w/RKKsKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjSt0gBLTeJ5NOO8EPsnGO9opdBMB8GA1UdIwQY MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5py4v3v on85/GudYFRtb1C2w8ZfKikWUGzxvb8hLcPU99Ywq06nRvIA3KpB2WMQn1yghiHD RTSrzH2MjE6KbdK2rB2Fm/ifckCYBxCIONfFGHSXCxbFKm2WL7oX/bDOB3Zn6GRy /q45nuJQbTSWyew+0IUPwxvMgswQdzcQGcJ35rXX9MQVoFa1wXXW7/jJDVYYc+GU H1yEUJyd9oo/jdLDEeO6bq0oqxEjmv+FcXWUhZp+eMRujpGdT5oEZy+oju4E3hQi 86zgb7m3lJGlIXUDOkC7NtSTSs5ViDGI8BbfFtMJs00A3MM/kiG4dRbGczeAMxow GsNzcl5A/rryog== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:40 2025 by rpki-client