This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json) Hash identifier: FCAesY+Neeo7DV3gFW5Y3xKVYiRqNNIw7uP3/N70KXk= Subject key identifier: B3:E6:85:BF:B6:61:63:75:F1:69:AE:A3:ED:A8:4E:9B:02:32:0D:15 Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b Certificate serial: 019B21E2ED718412997B2B741AADC30AEA32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft Manifest number: 0796 Signing time: Mon 15 Dec 2025 12:01:18 +0000 Manifest this update: Mon 15 Dec 2025 12:01:18 +0000 Manifest next update: Tue 16 Dec 2025 12:01:18 +0000 Files and hashes: 1: 646H87YSEkgW60B6TS9Mv8ofIgY.roa (hash: qigAB2EAlIaW97KB1UwxTGt9D3D4QQiyvLLGjSnPdBA=) 2: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: 2dBkJOCi+WY4Kuap/o1DOcyIxBf5GwMWj6bPMYQNnao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:ed:71:84:12:99:7b:2b:74:1a:ad:c3:0a:ea:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b Validity Not Before: Dec 15 12:01:18 2025 GMT Not After : Dec 16 12:01:18 2025 GMT Subject: CN=b3e685bfb6616375f169aea3eda84e9b02320d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:7b:c3:33:b2:19:04:1c:5b:30:f4:ab:9a: b2:5b:d8:10:01:b1:1b:0b:71:5f:61:78:2a:bb:ca: 53:43:52:c9:80:8d:f1:62:fa:2f:02:92:34:93:5e: 23:48:a8:0b:6e:24:15:40:37:f4:24:85:b9:10:10: 33:cb:43:ab:d2:55:b2:ec:0a:e1:4e:29:5d:5f:63: d8:16:ac:f3:1d:7f:74:41:71:62:76:13:a8:17:94: 35:8b:5b:b8:70:05:d3:fb:60:66:f5:7d:21:f7:94: 08:41:22:bb:72:a6:8b:f0:49:4b:3e:12:1f:5e:66: 96:de:87:c1:fc:58:d6:29:04:92:f7:c6:53:0f:f1: 35:60:37:c3:48:c0:68:60:fe:74:28:c2:01:47:65: 66:dd:61:fa:82:f3:84:69:96:ee:b9:b4:5e:ce:84: 7b:eb:12:d3:83:fd:5e:02:45:d3:63:62:2b:6f:a2: 24:ad:b6:d6:8f:71:e0:78:3f:81:2a:14:3c:2c:c3: 8d:0f:85:19:76:6e:ad:13:bd:1a:67:69:e9:b8:1e: af:3d:9e:ba:c5:50:87:45:94:09:db:02:52:8b:cf: 53:b1:93:d2:6c:2e:27:e8:76:e7:e9:75:74:b5:f1: 8d:cb:7a:9e:b9:cb:2f:e5:d1:c1:02:2e:e5:0d:12: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:85:BF:B6:61:63:75:F1:69:AE:A3:ED:A8:4E:9B:02:32:0D:15 X509v3 Authority Key Identifier: keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f0:0f:d9:b8:c2:93:e5:ac:5f:0d:cd:fb:98:be:8f:12:43: 52:26:b0:2f:f1:5a:5f:64:1d:f6:d7:af:e5:b0:a1:09:e8:b3: 77:09:88:82:ea:7d:3d:57:cd:e6:60:ee:05:5b:df:0e:e7:46: ae:b6:48:a1:08:2b:15:65:40:d2:a0:f5:26:39:96:b5:f5:08: 8b:1f:4c:84:7f:fb:e9:cc:d3:d5:d6:bb:bc:c7:4a:74:f6:3f: 37:2e:15:b7:a5:a5:12:4e:b1:63:6c:ce:a3:4a:5f:3f:c7:1d: db:7b:9c:37:7c:10:0b:62:44:40:ac:86:ba:31:53:a8:fb:82: a2:15:93:a9:97:64:76:41:a0:11:bc:37:e1:d0:db:3c:8c:5a: 0d:d4:e9:64:30:f6:cb:ea:85:dd:b9:98:f4:79:a0:9f:b4:68: 7a:c6:85:1f:ed:19:99:f0:fa:2c:db:a7:80:54:c2:38:c4:75: eb:fa:55:9c:e0:4b:93:11:c1:ec:20:c9:f9:8c:98:bf:ac:92: 82:29:8c:4c:61:c2:d6:9c:28:00:09:67:2e:ed:7d:d9:ea:8d: 0b:38:72:03:c2:55:80:23:a7:76:26:b0:3a:cd:75:01:af:50: 21:9a:ac:6f:38:8a:81:15:15:86:9e:89:e7:b9:af:0b:3c:ab: b9:0d:13:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4u1xhBKZeyt0Gq3DCuoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNjc2NjBhZjc1MjNjNjFiN2Y5NWQwODQ4OGQ1ODNlOWQ1 MTRmNmIwHhcNMjUxMjE1MTIwMTE4WhcNMjUxMjE2MTIwMTE4WjAzMTEwLwYDVQQD EyhiM2U2ODViZmI2NjE2Mzc1ZjE2OWFlYTNlZGE4NGU5YjAyMzIwZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumx7wzOyGQQcWzD0q5qyW9gQAbEb C3FfYXgqu8pTQ1LJgI3xYvovApI0k14jSKgLbiQVQDf0JIW5EBAzy0Or0lWy7Arh TildX2PYFqzzHX90QXFidhOoF5Q1i1u4cAXT+2Bm9X0h95QIQSK7cqaL8ElLPhIf XmaW3ofB/FjWKQSS98ZTD/E1YDfDSMBoYP50KMIBR2Vm3WH6gvOEaZbuubRezoR7 6xLTg/1eAkXTY2Irb6IkrbbWj3HgeD+BKhQ8LMOND4UZdm6tE70aZ2npuB6vPZ66 xVCHRZQJ2wJSi89TsZPSbC4n6Hbn6XV0tfGNy3qeucsv5dHBAi7lDRKa8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPmhb+2YWN18Wmuo+2oTpsCMg0VMB8GA1UdIwQY MBaAFF5nZgr3Ujxht/ldCEiNWD6dUU9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDIt MDBkMmZhYzVmMDEwLzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85Nzg2ZGEtMWY0Yy00MDhjLWIyMDItMDBkMmZhYzVmMDEw LzEvWG1kbUN2ZFNQR0czLVYwSVNJMVlQcDFSVDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfAP2bjC k+WsXw3N+5i+jxJDUiawL/FaX2Qd9tev5bChCeizdwmIgup9PVfN5mDuBVvfDudG rrZIoQgrFWVA0qD1JjmWtfUIix9MhH/76czT1da7vMdKdPY/Ny4Vt6WlEk6xY2zO o0pfP8cd23ucN3wQC2JEQKyGujFTqPuCohWTqZdkdkGgEbw34dDbPIxaDdTpZDD2 y+qF3bmY9Hmgn7RoesaFH+0ZmfD6LNungFTCOMR16/pVnOBLkxHB7CDJ+YyYv6yS gimMTGHC1pwoAAlnLu192eqNCzhyA8JVgCOndiawOs11Aa9QIZqsbziKgRUVhp6J 57mvCzyruQ0T1Q== -----END CERTIFICATE-----Generated at Mon Dec 15 20:11:56 2025 by rpki-client