This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: F4g8b46qnLgtIPGVtRwvnJ/u2BT9Wfv+b2b6xHbGAtE= Subject key identifier: 15:53:07:F7:AA:37:6D:9C:FD:D4:F6:05:77:16:3A:AA:A1:3D:1B:AC Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 019AF577BFAD5FE8864C1E346F0BA76E1B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 177F Signing time: Sat 06 Dec 2025 21:00:56 +0000 Manifest this update: Sat 06 Dec 2025 21:00:56 +0000 Manifest next update: Sun 07 Dec 2025 21:00:56 +0000 Files and hashes: 1: 4QRA_fiIHZYB5EZuskrPHiYUUDc.roa (hash: ezfV7W42FiizqjUq0E689olr+lhYHTNnecCcrOQrwAs=) 2: 9cZF6t0pRfYwb-LBxfj6qIf6oIs.roa (hash: rmhC0UPonVIgMVCi3q+pS4LXi85gqp0ddqXa/K7E7qg=) 3: CDpoDCRqRu5mYnZC-vNWb-Z4cYY.roa (hash: Mao9DXRYIqUFuxbornXbA6rVKtSpnt+StLb+Ok2TVFY=) 4: DabYXvkPXs2hMRDEyX4PYlbXIAE.roa (hash: R2xE23w7lL76/16oIpYK1R1COeQ1JGJ7JM3U0zJz/2Q=) 5: Gd4DMz1WoXVPf_YXfR9OUTg-7LI.roa (hash: U7MIxTCU2RPkt9VKJLvFKtcC11nh7/KkOtXDPDEff9A=) 6: Ov50TFrizn532f_ZE8aau7TMbys.roa (hash: nOGVoxUNvtV+g309971HIHoTUGiX5Ek05HSumAxnkhU=) 7: PWoTLfI1GBVWXAdLNRuMVldxrk4.roa (hash: Be3sB5DnBNtLR4E5AJd2Iddf4oH46RSRRAT/o6NWkO0=) 8: XVtsR7QApMnuJxBGbKhRiugNLuM.roa (hash: mBXTHq+MNZP6clXD4om9o4T9lzXQfLi50+F1yKfLWMA=) 9: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: 5SkbzE/z6pU195qoO9FxvRd0ZS2gerE4/beAI/NDjgg=) 10: hj80hnb2niBBNHp22xfNPpXEbQM.roa (hash: rD1+7098X87+oRFyY0knEf0O3QAd6XMqFszyW+lBKlM=) 11: pu79fYTs8S-_ETZOL6jX4YhwZhM.roa (hash: xtfR6o8dNy7mSVduqBKsC6j7R+5Nj8AS1EPRTZznQGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:bf:ad:5f:e8:86:4c:1e:34:6f:0b:a7:6e:1b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: Dec 6 21:00:56 2025 GMT Not After : Dec 7 21:00:56 2025 GMT Subject: CN=155307f7aa376d9cfdd4f60577163aaaa13d1bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:3b:38:5d:3c:26:80:88:06:ec:a8:af:d0: 88:d9:5f:f4:fd:03:a8:12:57:09:9d:5f:7e:7a:fd: d6:f9:27:64:a6:14:e2:12:4b:44:35:85:d8:d3:a2: f2:a5:ef:bb:a8:9c:fe:36:09:ec:7c:6b:7e:b2:1b: 65:c7:70:ee:ef:4f:63:93:35:01:37:9d:1e:cf:c4: 99:0c:a9:bd:bf:8e:ca:6e:e5:fb:8d:31:3c:2d:cd: 80:cc:64:57:39:c3:d7:5a:23:24:03:cb:9e:8c:05: 82:02:cc:23:f2:98:67:d1:2c:c7:09:49:97:34:1d: 4b:c2:66:6b:14:84:1a:70:cd:ac:f0:c9:cf:70:f5: 5f:6c:32:6f:c2:c9:2d:78:dc:0a:fa:83:64:be:fb: 92:44:1c:ed:b6:50:af:6b:d5:70:b6:53:94:1c:c3: c7:15:dc:f5:eb:be:fa:0f:9c:39:13:b6:ce:94:2c: 7d:93:25:70:ec:7e:bc:ba:28:ee:92:75:07:cb:9f: be:6e:b0:38:b5:ea:86:56:18:00:42:41:21:84:68: 12:60:2d:dd:24:07:5b:ae:8c:19:94:4c:8f:4d:6d: fc:5b:93:14:c0:92:f7:ff:dd:3d:fc:1a:5e:8f:04: 59:ea:a4:8b:dc:b6:57:44:b3:7f:75:95:f2:97:2f: 3f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:53:07:F7:AA:37:6D:9C:FD:D4:F6:05:77:16:3A:AA:A1:3D:1B:AC X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ff:8b:41:ae:df:70:2c:17:49:4f:fa:e2:24:ba:b0:16:65: 78:50:58:cb:53:45:f3:97:96:3d:72:71:d1:d1:b8:d3:3a:b4: 79:a6:3c:81:0a:e9:ca:18:2a:68:0a:b7:54:49:06:46:3e:9c: 6b:a8:9d:1b:2e:d3:cc:ff:71:59:92:81:39:f7:de:e0:03:66: e4:8c:3a:85:cc:65:60:ce:ec:a0:c3:fe:e7:5c:09:ca:71:b3: 01:fc:a9:8f:6b:3f:1f:84:44:0a:39:3b:2a:bb:26:44:8d:b5: f8:4b:2e:64:c9:6a:f0:74:ff:9a:b0:6c:0f:b6:52:4f:04:00: a0:2f:82:fd:5c:a7:ef:c0:a3:b2:90:ba:97:8e:88:97:28:fa: 39:67:b9:d2:43:5e:42:48:fa:70:72:8d:e1:c1:82:c2:f7:6f: ac:8c:25:a3:05:d0:35:30:51:2f:ae:3e:eb:b7:e2:07:5f:b9: b3:87:e7:fd:ca:4f:2b:44:80:8d:8f:9b:8d:b3:47:c5:76:b7: 0d:ed:87:f2:cc:55:b1:7f:e7:a1:64:e7:f5:8e:e3:5a:d0:75: 60:88:cb:93:79:30:bd:03:5d:9f:d8:ae:50:82:1a:c1:7b:96: b4:84:b5:57:a4:28:73:cb:2d:5d:d3:23:9b:75:fb:11:dc:2a: e8:10:4a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d7+tX+iGTB40bwunbht/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjUxMjA2MjEwMDU2WhcNMjUxMjA3MjEwMDU2WjAzMTEwLwYDVQQD EygxNTUzMDdmN2FhMzc2ZDljZmRkNGY2MDU3NzE2M2FhYWExM2QxYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNs7OF08JoCIBuyor9CI2V/0/QOo ElcJnV9+ev3W+SdkphTiEktENYXY06Lype+7qJz+NgnsfGt+shtlx3Du709jkzUB N50ez8SZDKm9v47KbuX7jTE8Lc2AzGRXOcPXWiMkA8uejAWCAswj8phn0SzHCUmX NB1LwmZrFIQacM2s8MnPcPVfbDJvwskteNwK+oNkvvuSRBzttlCva9VwtlOUHMPH Fdz16776D5w5E7bOlCx9kyVw7H68uijuknUHy5++brA4teqGVhgAQkEhhGgSYC3d JAdbrowZlEyPTW38W5MUwJL3/909/BpejwRZ6qSL3LZXRLN/dZXyly8/VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVTB/eqN22c/dT2BXcWOqqhPRusMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYv+LQa7f cCwXSU/64iS6sBZleFBYy1NF85eWPXJx0dG40zq0eaY8gQrpyhgqaAq3VEkGRj6c a6idGy7TzP9xWZKBOffe4ANm5Iw6hcxlYM7soMP+51wJynGzAfypj2s/H4RECjk7 KrsmRI21+EsuZMlq8HT/mrBsD7ZSTwQAoC+C/Vyn78CjspC6l46Ilyj6OWe50kNe Qkj6cHKN4cGCwvdvrIwlowXQNTBRL64+67fiB1+5s4fn/cpPK0SAjY+bjbNHxXa3 De2H8sxVsX/noWTn9Y7jWtB1YIjLk3kwvQNdn9iuUIIawXuWtIS1V6Qoc8stXdMj m3X7Edwq6BBKjg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:49 2025 by rpki-client