This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft File: X39wJQCCw-BW8_5Si9d7BuIOQHw.mft (raw, json) Hash identifier: i4DFF5KTTHmAb4LZHUEaRAwAQ6F2Y5uE0xqAS/9OXFY= Subject key identifier: 41:DD:5B:97:29:BF:90:5A:4F:06:62:D9:08:42:84:47:73:37:2C:D7 Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Certificate serial: 019B38A22DF4D8159ACE660F17F24D43AFC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft Manifest number: 20 Signing time: Fri 19 Dec 2025 22:01:50 +0000 Manifest this update: Fri 19 Dec 2025 22:01:50 +0000 Manifest next update: Sat 20 Dec 2025 22:01:50 +0000 Files and hashes: 1: TVtbh1EANk8EpH4TcxXImCilqP0.roa (hash: 5hMvEtcOioS7prhLcCPmlP/Vf0m5SBNaV6YIJBfJFvk=) 2: VfDN-59FccxOvqATmPxAuatKHT0.roa (hash: nf9NPBl15MZ7mxxQFnZKJvDsjqw0S5Ttoo609OQKOSw=) 3: X39wJQCCw-BW8_5Si9d7BuIOQHw.crl (hash: jRfxSENg1/bBZDyE7ZaKxqgpk/u32ruM8bU8vId+tEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:2d:f4:d8:15:9a:ce:66:0f:17:f2:4d:43:af:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Validity Not Before: Dec 19 22:01:50 2025 GMT Not After : Dec 20 22:01:50 2025 GMT Subject: CN=41dd5b9729bf905a4f0662d90842844773372cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:08:9b:32:e0:51:fe:d0:50:8b:10:d3:65: 92:7c:72:cc:b4:49:71:d1:c9:52:96:4f:f3:3b:1d: bc:59:e9:4e:18:50:0d:c7:f6:02:fa:b3:8c:50:ce: 27:50:d1:fe:35:35:29:35:25:a9:2b:d3:f4:78:33: 24:4f:45:51:6d:43:ae:8f:a8:4c:62:a7:cb:7e:5e: 97:7f:22:1a:50:d3:c3:f5:08:8b:bc:9f:ea:74:4f: e0:ef:ec:70:fb:12:1a:1d:a1:89:8e:ca:d7:0b:3b: 2b:e8:aa:1d:d4:c6:e5:dc:6c:98:89:1e:03:93:6c: 9a:cf:27:6b:06:dd:97:7a:81:c2:b4:6b:35:77:41: fc:73:38:15:21:3e:6b:be:cb:9e:e4:95:4a:bc:5a: fa:21:82:cd:bb:7b:5c:92:cd:4f:96:8d:11:3e:3f: 53:53:72:3e:cf:b6:f0:05:cf:3f:85:27:fb:9f:1e: 52:ae:1c:04:4d:26:53:cd:7f:df:d6:3a:c5:f2:a1: 79:9e:9c:d3:95:00:d2:5c:49:8d:2c:39:37:51:43: a6:73:79:01:91:a0:d0:87:c9:ae:0b:14:9c:07:d0: 88:04:cb:d8:94:88:bb:2c:01:5b:67:f1:7d:75:40: 76:7e:33:70:14:c6:67:77:82:21:de:a2:b1:ae:bd: df:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DD:5B:97:29:BF:90:5A:4F:06:62:D9:08:42:84:47:73:37:2C:D7 X509v3 Authority Key Identifier: keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1b:5f:97:f3:00:4a:6b:9a:33:1d:be:a7:64:85:c7:dc:1f: e8:2b:2b:30:80:b9:df:93:bb:d8:29:8f:6c:66:be:da:ea:92: 82:24:c4:9b:e2:12:57:2c:a8:ee:a9:a1:21:e6:72:de:3c:4b: da:b2:59:c0:c9:1a:9a:eb:84:49:3b:53:99:6b:c4:ac:c2:d3: e9:1d:1b:3b:5a:b0:d9:d7:bc:b0:46:4b:00:41:9a:c7:0d:8f: bd:55:31:da:e0:fa:78:ac:14:ff:59:10:6a:d9:f8:c6:1f:05: 48:31:1a:52:8a:7e:9a:28:ac:fb:a1:b9:3e:23:72:85:ab:0f: 8f:cc:4f:e0:8f:e5:cc:38:ea:1e:2d:a0:97:bf:e3:31:66:3d: bb:84:3f:ae:c5:3f:a2:be:e0:6e:6c:ce:c2:38:61:7e:63:60: 1d:ad:05:23:1d:33:5f:b0:b2:42:03:3f:43:78:44:41:7a:07: ee:de:bb:34:9b:5b:c4:0d:31:53:8b:40:1e:3b:f9:25:4f:cc: ea:ec:2f:f2:f6:f8:5d:66:30:3b:86:ea:a7:e2:3d:52:23:eb: e2:99:77:ca:f8:8e:62:9c:df:ac:0f:cc:29:38:36:7c:2a:0a: b4:e2:cd:3a:ee:f8:94:e0:af:ea:61:c8:72:d0:f6:b1:93:35: 85:21:b6:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oi302BWazmYPF/JNQ6/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw ZTQwN2MwHhcNMjUxMjE5MjIwMTUwWhcNMjUxMjIwMjIwMTUwWjAzMTEwLwYDVQQD Eyg0MWRkNWI5NzI5YmY5MDVhNGYwNjYyZDkwODQyODQ0NzczMzcyY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FgImzLgUf7QUIsQ02WSfHLMtElx 0clSlk/zOx28WelOGFANx/YC+rOMUM4nUNH+NTUpNSWpK9P0eDMkT0VRbUOuj6hM YqfLfl6XfyIaUNPD9QiLvJ/qdE/g7+xw+xIaHaGJjsrXCzsr6Kod1Mbl3GyYiR4D k2yazydrBt2XeoHCtGs1d0H8czgVIT5rvsue5JVKvFr6IYLNu3tcks1Plo0RPj9T U3I+z7bwBc8/hSf7nx5SrhwETSZTzX/f1jrF8qF5npzTlQDSXEmNLDk3UUOmc3kB kaDQh8muCxScB9CIBMvYlIi7LAFbZ/F9dUB2fjNwFMZnd4Ih3qKxrr3fxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHdW5cpv5BaTwZi2QhChEdzNyzXMB8GA1UdIwQY MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt MjNmMGMwNGQyYzE3LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3 LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxtfl/MA SmuaMx2+p2SFx9wf6CsrMIC535O72CmPbGa+2uqSgiTEm+ISVyyo7qmhIeZy3jxL 2rJZwMkamuuESTtTmWvErMLT6R0bO1qw2de8sEZLAEGaxw2PvVUx2uD6eKwU/1kQ atn4xh8FSDEaUop+miis+6G5PiNyhasPj8xP4I/lzDjqHi2gl7/jMWY9u4Q/rsU/ or7gbmzOwjhhfmNgHa0FIx0zX7CyQgM/Q3hEQXoH7t67NJtbxA0xU4tAHjv5JU/M 6uwv8vb4XWYwO4bqp+I9UiPr4pl3yviOYpzfrA/MKTg2fCoKtOLNOu74lOCv6mHI ctD2sZM1hSG22Q== -----END CERTIFICATE-----Generated at Sat Dec 20 05:09:28 2025 by rpki-client