This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json) Hash identifier: bdNX1GRFwr8l8dwXGQEjJpJB087nvYWxIGpwyTtMjbg= Subject key identifier: 86:D7:A8:43:39:94:89:A9:9A:F1:83:1F:F3:FC:43:A7:2D:8A:5F:F9 Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019AF3898F50FE582D1270B37B239FBF1D96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft Manifest number: 077E Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=) 2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: oFCVmxRg7Q/uJXMJz/5lcpNS6VrrIlHfgZQ5tEzTaDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8f:50:fe:58:2d:12:70:b3:7b:23:9f:bf:1d:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=86d7a843399489a99af1831ff3fc43a72d8a5ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:f7:03:6a:35:73:4a:57:1e:04:69:25:3c: 03:4a:74:3e:f9:d6:00:82:0e:1a:ca:6a:4c:42:b6: bb:3c:f0:e9:3c:72:d0:41:11:a5:13:20:4d:6d:6a: f2:2b:45:00:24:96:55:e6:ef:07:06:f6:16:46:37: 02:f7:a9:91:43:03:b6:65:9f:6f:0d:3d:64:36:b3: ef:92:c1:69:8d:34:8e:79:73:e8:66:c1:bd:57:59: d6:a6:3e:db:71:fd:da:ea:a9:49:68:5c:79:32:16: 3c:9b:01:75:90:ad:d5:27:67:b0:88:28:6e:86:c5: 3a:a3:54:31:4d:d8:7d:15:98:d8:88:a1:fb:bc:b8: f9:f9:75:3d:d4:bf:aa:db:f1:03:5a:8a:ed:41:0e: c9:09:53:ac:7f:e5:94:ec:d1:fb:96:bc:81:60:f8: be:6a:ce:c8:10:de:bd:ad:e1:3d:46:96:9d:e5:2b: d7:f8:e1:fb:b8:a5:68:3c:96:af:49:cd:6e:93:28: 38:c2:a1:34:44:35:5c:88:23:db:ba:1d:07:77:79: 42:10:2d:a7:32:64:7c:2c:da:87:aa:54:fc:d9:d7: 2b:06:8a:42:20:e7:28:9d:11:7b:b1:8d:31:51:5e: 9e:2f:7b:40:4b:72:26:21:b1:ef:43:02:8a:9a:2f: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D7:A8:43:39:94:89:A9:9A:F1:83:1F:F3:FC:43:A7:2D:8A:5F:F9 X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:d7:e6:a1:6a:ca:45:bf:84:2b:5c:b2:cd:e3:79:c3:ea:a1: da:57:89:31:a6:41:42:a5:8a:60:35:bf:11:df:cb:4b:3f:3b: 80:96:25:a5:65:60:25:9d:82:36:b1:2a:e7:82:65:9e:c7:62: ee:32:5c:05:22:0f:f0:4e:c6:d1:e6:70:4b:07:ce:76:51:76: 7d:97:1b:5b:48:31:c9:45:4f:a5:72:54:fa:6e:ab:37:5b:32: 5f:3a:45:d7:67:ea:c7:ab:48:6e:77:02:87:ae:c6:2b:eb:42: df:6e:e0:cb:36:f6:7a:66:c7:c0:7d:57:6b:b3:a4:b6:9f:6a: cd:2a:96:fa:3d:e9:93:9f:67:19:6c:2e:d0:5a:bb:d9:36:7c: 95:99:cc:dc:37:2d:f5:39:f0:2b:53:56:c4:53:d5:a8:1b:25: b3:b1:38:44:d9:d5:b0:13:7b:ca:a2:30:57:d6:26:6f:88:25: 0c:96:b0:52:3b:19:06:b2:50:00:6d:31:57:77:61:05:e2:b4: df:04:10:d6:95:15:0b:cd:5f:8b:74:de:ff:7a:c2:c3:e3:d8: 59:d5:f8:50:dc:4c:a0:f2:a7:d3:8a:69:83:5c:85:62:b1:a8: 99:5f:03:9d:8e:8c:23:03:36:0d:04:c0:4b:c7:9f:7b:f0:c9: 6e:d1:bc:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziY9Q/lgtEnCzeyOfvx2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD Eyg4NmQ3YTg0MzM5OTQ4OWE5OWFmMTgzMWZmM2ZjNDNhNzJkOGE1ZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAf3A2o1c0pXHgRpJTwDSnQ++dYA gg4aympMQra7PPDpPHLQQRGlEyBNbWryK0UAJJZV5u8HBvYWRjcC96mRQwO2ZZ9v DT1kNrPvksFpjTSOeXPoZsG9V1nWpj7bcf3a6qlJaFx5MhY8mwF1kK3VJ2ewiChu hsU6o1QxTdh9FZjYiKH7vLj5+XU91L+q2/EDWortQQ7JCVOsf+WU7NH7lryBYPi+ as7IEN69reE9Rpad5SvX+OH7uKVoPJavSc1ukyg4wqE0RDVciCPbuh0Hd3lCEC2n MmR8LNqHqlT82dcrBopCIOconRF7sY0xUV6eL3tAS3ImIbHvQwKKmi8KFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbXqEM5lImpmvGDH/P8Q6ctil/5MB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNfmoWrK Rb+EK1yyzeN5w+qh2leJMaZBQqWKYDW/Ed/LSz87gJYlpWVgJZ2CNrEq54Jlnsdi 7jJcBSIP8E7G0eZwSwfOdlF2fZcbW0gxyUVPpXJU+m6rN1syXzpF12fqx6tIbncC h67GK+tC327gyzb2embHwH1Xa7Oktp9qzSqW+j3pk59nGWwu0Fq72TZ8lZnM3Dct 9TnwK1NWxFPVqBsls7E4RNnVsBN7yqIwV9Ymb4glDJawUjsZBrJQAG0xV3dhBeK0 3wQQ1pUVC81fi3Te/3rCw+PYWdX4UNxMoPKn04ppg1yFYrGomV8DnY6MIwM2DQTA S8efe/DJbtG8rg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:03 2025 by rpki-client