This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json) Hash identifier: 028pq/I0Ok2haDqsKgvBc6QFrnZmk/vjzsEnmh/Kynw= Subject key identifier: 0C:39:BC:70:B4:4A:89:BB:08:8E:9A:43:2C:E2:1A:F9:47:2F:5A:64 Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Certificate serial: 019AF12D1BBF5A14A9D83BF70DD099DCC302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=) 2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=) 3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: Fwz/3juS+2SxcHkzlwPU41SeMlVo3c2V57c8zlZrRqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1b:bf:5a:14:a9:d8:3b:f7:0d:d0:99:dc:c3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=0c39bc70b44a89bb088e9a432ce21af9472f5a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:eb:f2:2a:ed:f2:11:fd:4e:3b:c3:ad:98: fc:68:74:5e:97:cd:3e:79:22:60:63:5d:cb:7d:52: 7d:da:4d:f7:7b:b8:19:e2:26:04:86:36:f8:63:3e: 37:28:dd:e9:87:91:ad:e1:ed:06:75:3e:94:9b:e4: 6f:5d:35:eb:5b:fc:c1:a1:12:c7:0d:1b:61:20:d3: f3:ce:20:cc:af:9b:1b:cd:8d:65:33:41:b4:04:83: e4:da:5f:c7:61:90:88:be:45:84:4f:08:88:9f:04: e1:cd:b0:34:31:7e:1e:fb:96:c9:cd:ce:ec:c4:1c: bb:59:db:53:c9:14:6e:c5:1d:1d:60:58:13:92:b5: eb:83:d9:76:16:30:2f:2f:92:28:2f:61:33:ab:8f: aa:a0:84:b5:2c:ab:0f:ac:58:0b:9c:8e:57:4a:68: d4:c7:a0:b1:77:e0:4b:49:b4:d9:ec:b2:cb:ba:b2: 34:5e:75:63:33:08:23:af:93:91:0a:b7:8e:23:61: 9b:68:71:aa:2b:af:ce:6f:f8:4f:66:8a:4f:49:76: ee:22:3c:8f:ba:57:88:9f:29:f7:fc:12:03:59:95: dd:4f:9a:c7:a3:1e:b2:f7:33:ae:ba:f8:c5:73:b1: af:ce:72:1c:c8:65:29:ea:e2:26:ba:0f:60:8b:79: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:39:BC:70:B4:4A:89:BB:08:8E:9A:43:2C:E2:1A:F9:47:2F:5A:64 X509v3 Authority Key Identifier: keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ea:df:a3:dc:c3:ec:14:52:d2:7a:4d:61:4e:15:0e:bf:c5: d8:de:ec:92:02:17:39:d9:0b:94:17:be:aa:df:f4:d7:40:bc: 5a:df:28:a8:ab:f6:d0:b6:b4:2e:9e:3a:33:ee:7b:c4:0e:9f: 1f:6a:bd:1b:59:b0:b3:8f:22:76:6d:7d:6a:a3:1f:20:37:13: cf:10:f5:8f:e8:86:32:46:0b:29:f0:6c:b7:35:aa:c8:50:47: 67:e8:b4:0d:a7:7e:cc:03:c7:f7:c9:32:75:37:46:dd:89:1e: 63:59:b3:5e:81:63:f9:ff:b1:18:a6:fe:ac:1e:58:c6:b3:a7: 26:43:5f:3d:33:60:29:29:e5:c5:52:b5:18:75:31:9b:3a:18: 31:99:b1:2f:77:1b:4c:73:cd:91:c1:73:ba:23:52:3e:f0:2e: 1e:f0:ae:d0:10:96:88:8f:88:03:97:da:3d:01:b4:be:ee:51: cb:59:13:13:05:7a:4c:5e:de:0a:34:0f:7f:fd:c1:79:81:40: 11:61:22:29:77:03:8a:41:24:0b:13:a9:09:f1:96:b8:13:c4: d8:c9:cd:98:bf:98:57:aa:ae:d3:c7:e9:c3:63:31:39:4a:70: a4:dd:a5:83:61:65:6a:03:57:fe:b8:d2:45:40:b8:67:b5:78: c6:e9:dd:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRu/WhSp2Dv3DdCZ3MMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDk5ZDQ5YzRiMGU0NmIyNzg2ODQyNzMxZTE1MzQ4NWM4 YWM0OGIwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EygwYzM5YmM3MGI0NGE4OWJiMDg4ZTlhNDMyY2UyMWFmOTQ3MmY1YTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EHr8irt8hH9TjvDrZj8aHRel80+ eSJgY13LfVJ92k33e7gZ4iYEhjb4Yz43KN3ph5Gt4e0GdT6Um+RvXTXrW/zBoRLH DRthINPzziDMr5sbzY1lM0G0BIPk2l/HYZCIvkWETwiInwThzbA0MX4e+5bJzc7s xBy7WdtTyRRuxR0dYFgTkrXrg9l2FjAvL5IoL2Ezq4+qoIS1LKsPrFgLnI5XSmjU x6Cxd+BLSbTZ7LLLurI0XnVjMwgjr5ORCreOI2GbaHGqK6/Ob/hPZopPSXbuIjyP uleInyn3/BIDWZXdT5rHox6y9zOuuvjFc7GvznIcyGUp6uImug9gi3n1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw5vHC0Som7CI6aQyziGvlHL1pkMB8GA1UdIwQY MBaAFF7ZnUnEsORrJ4aEJzHhU0hcisSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEt OTBjM2FmYzdjOTQ3LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEtOTBjM2FmYzdjOTQ3 LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOerfo9zD 7BRS0npNYU4VDr/F2N7skgIXOdkLlBe+qt/010C8Wt8oqKv20La0Lp46M+57xA6f H2q9G1mws48idm19aqMfIDcTzxD1j+iGMkYLKfBstzWqyFBHZ+i0Dad+zAPH98ky dTdG3YkeY1mzXoFj+f+xGKb+rB5YxrOnJkNfPTNgKSnlxVK1GHUxmzoYMZmxL3cb THPNkcFzuiNSPvAuHvCu0BCWiI+IA5faPQG0vu5Ry1kTEwV6TF7eCjQPf/3BeYFA EWEiKXcDikEkCxOpCfGWuBPE2MnNmL+YV6qu08fpw2MxOUpwpN2lg2FlagNX/rjS RUC4Z7V4xundQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:05:49 2025 by rpki-client