This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft File: XfQO50ielcV_EEJxkZ2iaLxRP5s.mft (raw, json) Hash identifier: 0lY0vJohLzHlkV1XMfeaV5SpBXD6Hi68DwUcoxLCzpE= Subject key identifier: 57:BD:FE:B0:6F:58:2A:37:9D:46:83:7E:D6:3B:D3:4B:63:5F:52:48 Authority key identifier: 5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B Certificate issuer: /CN=5df40ee7489e95c57f104271919da268bc513f9b Certificate serial: 019AF1D24B4EE276577947961EDF7227D222 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft Manifest number: 103A Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: KK_qi4NMLcaN6VX_fs5Nnpo24oQ.roa (hash: o1mYnl0sun9DJGzd+XokmvL8uGfknZk5uv8J3esnry8=) 2: XfQO50ielcV_EEJxkZ2iaLxRP5s.crl (hash: Vd3iafEVC+ZAWI8rtUGvLEXg763anzrYozDu/uLdRnk=) 3: nYXV0oeOr7H1U28AOUuilcsp0nU.roa (hash: le0as7/dQRPjlA2JPpfjCeLlBJxV/pSf9ynVav6lgxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4b:4e:e2:76:57:79:47:96:1e:df:72:27:d2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df40ee7489e95c57f104271919da268bc513f9b Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=57bdfeb06f582a379d46837ed63bd34b635f5248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:af:c9:97:39:de:82:94:e9:68:6f:24:21: 38:7d:94:2c:a2:97:19:6c:08:d0:d8:17:10:e9:fa: b7:88:64:5a:15:d6:64:f3:87:87:19:54:cd:57:1f: de:20:69:1e:97:ae:da:dc:44:03:94:2e:f1:46:42: 1f:19:7e:79:5e:26:f8:2e:0a:d1:2b:17:80:3c:a6: f8:e2:e9:c3:56:bc:b1:0a:9b:ab:0c:c4:47:c1:47: 31:8f:f2:fa:d9:61:46:93:17:65:43:20:75:de:b2: dd:ce:72:59:79:1d:c2:2b:92:1b:b4:d1:77:81:8a: 4b:f8:43:15:b9:02:64:e9:3a:75:ac:b6:18:5d:96: de:0c:a3:38:54:5d:e6:e8:f7:c0:43:7c:ae:3c:a3: c9:ce:89:cb:c0:25:22:52:3d:a0:32:3d:34:48:fb: 94:64:26:9f:ed:ac:f3:73:1f:bc:aa:2f:f5:b7:a4: 4a:15:ea:f2:8d:49:08:51:d6:7b:41:54:e6:c8:3d: 95:05:35:2c:01:fd:15:cb:df:fe:fc:15:65:5c:48: 7a:69:9c:e3:ac:95:d5:48:22:d5:21:8f:f1:9d:f6: 4f:dc:01:09:ae:58:bd:3c:69:29:81:63:ac:81:ee: 61:3d:7c:0b:d9:69:e4:b4:df:70:ca:c5:a4:f7:94: f1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BD:FE:B0:6F:58:2A:37:9D:46:83:7E:D6:3B:D3:4B:63:5F:52:48 X509v3 Authority Key Identifier: keyid:5D:F4:0E:E7:48:9E:95:C5:7F:10:42:71:91:9D:A2:68:BC:51:3F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfQO50ielcV_EEJxkZ2iaLxRP5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/a7e850-00be-4dc2-8c41-3866b95f485f/1/XfQO50ielcV_EEJxkZ2iaLxRP5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0e:f0:1e:d2:fd:88:e1:54:9a:24:6d:7a:62:13:ea:86:ba: 4b:4c:65:f7:13:95:4d:db:ba:94:b9:26:50:ce:bb:3a:02:f2: 16:77:6e:cf:a2:20:14:d2:ee:e7:2f:80:56:dc:b8:9e:14:2e: e5:e8:af:e4:f1:58:8b:42:23:86:eb:ca:86:bc:d8:d0:21:a5: 87:fa:0b:f6:5f:aa:b2:57:6d:cc:32:10:6d:ed:2f:d0:68:3d: 15:53:5d:0f:ac:0b:01:40:46:f4:50:34:0c:62:c5:ed:3a:b4: b2:f9:a8:c4:ee:32:be:b6:1e:d1:2f:5b:a8:c7:c4:7f:e6:7d: cf:3c:f3:d0:2d:3b:78:3c:47:17:86:ab:9a:27:4d:e1:bc:0e: 96:73:73:af:98:5f:8e:d3:42:f2:e5:41:f0:5e:e7:11:3b:9c: aa:33:e0:fd:e3:08:66:ac:fd:de:df:78:ae:13:c5:fa:13:12: 4c:7c:da:b4:fd:24:8a:b4:2d:78:e8:8c:17:00:a6:30:77:31: 3b:77:17:4a:23:9d:fa:2b:0e:49:f4:c4:3b:44:1e:7d:50:a9: 12:35:30:b0:5f:4a:bc:05:df:00:d2:6f:cc:c3:7f:26:5e:54: 39:87:fd:8c:fe:6d:42:9e:cb:99:3b:3d:c9:97:5d:03:26:33: ee:f5:3f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ktO4nZXeUeWHt9yJ9IiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjQwZWU3NDg5ZTk1YzU3ZjEwNDI3MTkxOWRhMjY4YmM1 MTNmOWIwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg1N2JkZmViMDZmNTgyYTM3OWQ0NjgzN2VkNjNiZDM0YjYzNWY1MjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynqvyZc53oKU6WhvJCE4fZQsopcZ bAjQ2BcQ6fq3iGRaFdZk84eHGVTNVx/eIGkel67a3EQDlC7xRkIfGX55Xib4LgrR KxeAPKb44unDVryxCpurDMRHwUcxj/L62WFGkxdlQyB13rLdznJZeR3CK5IbtNF3 gYpL+EMVuQJk6Tp1rLYYXZbeDKM4VF3m6PfAQ3yuPKPJzonLwCUiUj2gMj00SPuU ZCaf7azzcx+8qi/1t6RKFeryjUkIUdZ7QVTmyD2VBTUsAf0Vy9/+/BVlXEh6aZzj rJXVSCLVIY/xnfZP3AEJrli9PGkpgWOsge5hPXwL2WnktN9wysWk95TxMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFe9/rBvWCo3nUaDftY700tjX1JIMB8GA1UdIwQY MBaAFF30DudInpXFfxBCcZGdomi8UT+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEt Mzg2NmI5NWY0ODVmLzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9hN2U4NTAtMDBiZS00ZGMyLThjNDEtMzg2NmI5NWY0ODVm LzEvWGZRTzUwaWVsY1ZfRUVKeGtaMmlhTHhSUDVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvw7wHtL9 iOFUmiRtemIT6oa6S0xl9xOVTdu6lLkmUM67OgLyFnduz6IgFNLu5y+AVty4nhQu 5eiv5PFYi0IjhuvKhrzY0CGlh/oL9l+qsldtzDIQbe0v0Gg9FVNdD6wLAUBG9FA0 DGLF7Tq0svmoxO4yvrYe0S9bqMfEf+Z9zzzz0C07eDxHF4armidN4bwOlnNzr5hf jtNC8uVB8F7nETucqjPg/eMIZqz93t94rhPF+hMSTHzatP0kirQteOiMFwCmMHcx O3cXSiOd+isOSfTEO0QefVCpEjUwsF9KvAXfANJvzMN/Jl5UOYf9jP5tQp7LmTs9 yZddAyYz7vU/FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:56 2025 by rpki-client