This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json) Hash identifier: t6rDWeedzQStn06wSqmQkuC8oIoF9i3hjo1YdDGuiBQ= Subject key identifier: 3F:95:EB:FB:35:B1:65:1A:26:E3:BB:85:89:67:DF:30:44:27:43:8F Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019B3E6C700DD328089B44C2DE4425BF27AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft Manifest number: 09AC Signing time: Sun 21 Dec 2025 01:00:52 +0000 Manifest this update: Sun 21 Dec 2025 01:00:52 +0000 Manifest next update: Mon 22 Dec 2025 01:00:52 +0000 Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: 8E2YIPsLifT2Qv6mlk4JxTMFg0njxE50u5UGYb9W9P4=) 2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:70:0d:d3:28:08:9b:44:c2:de:44:25:bf:27:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Dec 21 01:00:52 2025 GMT Not After : Dec 22 01:00:52 2025 GMT Subject: CN=3f95ebfb35b1651a26e3bb858967df304427438f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:df:83:a9:80:fe:67:5e:8b:63:04:b4:e2: 97:9a:4d:5d:e7:ea:dc:1e:50:b4:d3:a5:65:22:55: 29:f3:89:34:e8:29:6c:da:8f:ce:02:5b:20:4e:16: 3f:3a:29:d5:27:b9:29:c6:a8:06:2c:6d:cf:0a:ac: ce:70:4d:42:a9:a0:07:cd:b9:b5:8f:34:64:f6:26: 47:60:01:1a:7a:bb:dc:d1:87:5f:3a:ce:ec:af:ff: c5:ec:cd:b3:2f:02:3c:8f:99:f3:ff:7a:09:31:58: 14:fe:c9:f6:d2:32:b9:91:70:d5:95:9d:7d:c5:dc: 08:38:a5:87:5b:92:f0:e7:a4:f6:3c:cb:bf:b1:63: 20:9b:df:06:5a:f1:fd:63:38:d8:26:27:6a:dd:15: 23:8b:08:94:08:f8:c5:7d:df:15:e2:dd:de:88:b7: 07:48:7d:59:42:a5:03:3c:e5:5c:a7:82:4e:b0:54: 31:60:11:26:a5:b8:1b:b4:5b:bb:95:93:6b:42:8f: 94:cd:f2:09:d1:f8:24:15:0e:86:2f:9b:22:13:43: 54:54:57:89:19:a0:34:02:aa:9a:c9:71:e1:7e:8b: ad:40:66:52:4e:d2:96:3d:10:f6:5c:fe:1b:29:3e: c5:e9:ae:c9:8b:4c:e7:ae:78:4a:fe:9b:d7:a7:24: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:95:EB:FB:35:B1:65:1A:26:E3:BB:85:89:67:DF:30:44:27:43:8F X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:64:59:83:eb:69:9f:69:b3:8a:92:56:cb:cf:29:72:28:9a: 7b:f4:c5:04:5b:a3:7c:d4:a9:69:3c:b9:ec:16:0c:c8:5b:e5: ed:30:15:65:a5:e6:bf:9e:95:80:93:65:1d:8a:49:72:b6:2f: 18:be:d8:cc:de:2c:d7:ff:71:5c:e9:76:60:fc:c4:23:77:74: ee:e3:61:b3:71:bd:a4:44:f6:db:96:38:36:c8:d5:13:29:3c: 3a:65:83:26:98:a6:07:5f:e5:ea:ed:26:92:23:72:70:3c:67: bc:e8:54:fb:a8:40:31:1f:50:7f:dd:cd:30:65:b8:94:c7:d4: 5b:53:7d:7b:3b:01:07:73:b2:76:e5:f9:94:fe:67:5e:19:f8: 1d:3a:fc:1b:24:db:cd:93:f9:71:94:ff:6d:fb:a5:9d:0c:da: bd:9d:5e:35:96:08:7b:ae:e2:2c:69:79:ae:29:84:44:ea:14: bf:1b:85:0a:04:4c:4a:1c:52:b1:ac:43:64:62:d5:83:d3:a5: 13:f2:99:a5:71:3a:7a:f0:4e:f9:72:f4:3d:20:4a:fb:7c:35: 39:21:60:d4:2f:75:f3:a2:dd:b5:da:f2:b7:db:da:de:38:d3: 42:7e:b3:85:b8:4e:0f:9b:db:43:ab:5a:ca:64:bc:cf:39:f6: 6f:e9:b4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bHAN0ygIm0TC3kQlvyetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjUxMjIxMDEwMDUyWhcNMjUxMjIyMDEwMDUyWjAzMTEwLwYDVQQD EygzZjk1ZWJmYjM1YjE2NTFhMjZlM2JiODU4OTY3ZGYzMDQ0Mjc0MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhPfg6mA/mdei2MEtOKXmk1d5+rc HlC006VlIlUp84k06Cls2o/OAlsgThY/OinVJ7kpxqgGLG3PCqzOcE1CqaAHzbm1 jzRk9iZHYAEaervc0YdfOs7sr//F7M2zLwI8j5nz/3oJMVgU/sn20jK5kXDVlZ19 xdwIOKWHW5Lw56T2PMu/sWMgm98GWvH9YzjYJidq3RUjiwiUCPjFfd8V4t3eiLcH SH1ZQqUDPOVcp4JOsFQxYBEmpbgbtFu7lZNrQo+UzfIJ0fgkFQ6GL5siE0NUVFeJ GaA0AqqayXHhfoutQGZSTtKWPRD2XP4bKT7F6a7Ji0znrnhK/pvXpyQr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+V6/s1sWUaJuO7hYln3zBEJ0OPMB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2RZg+tp n2mzipJWy88pciiae/TFBFujfNSpaTy57BYMyFvl7TAVZaXmv56VgJNlHYpJcrYv GL7YzN4s1/9xXOl2YPzEI3d07uNhs3G9pET225Y4NsjVEyk8OmWDJpimB1/l6u0m kiNycDxnvOhU+6hAMR9Qf93NMGW4lMfUW1N9ezsBB3OyduX5lP5nXhn4HTr8GyTb zZP5cZT/bfulnQzavZ1eNZYIe67iLGl5rimEROoUvxuFCgRMShxSsaxDZGLVg9Ol E/KZpXE6evBO+XL0PSBK+3w1OSFg1C9186Ldtdryt9va3jjTQn6zhbhOD5vbQ6ta ymS8zzn2b+m05g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:08:18 2025 by rpki-client