This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json) Hash identifier: ruBwcidpz2UZbnOc3/lKLlhnJdkms0nlQShkepezG08= Subject key identifier: EB:F3:E7:D4:1C:AF:86:84:65:4B:F5:75:D5:28:24:1E:DD:90:6E:AC Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Certificate serial: 019B2B8AA00D479A2B6505666751D0457BEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft Manifest number: 117A Signing time: Wed 17 Dec 2025 09:01:03 +0000 Manifest this update: Wed 17 Dec 2025 09:01:03 +0000 Manifest next update: Thu 18 Dec 2025 09:01:03 +0000 Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=) 2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: Hv9+nekEq8FMLVGa+tHcHGKL3PPwJovFwvq+FbQ2Wm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a0:0d:47:9a:2b:65:05:66:67:51:d0:45:7b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd Validity Not Before: Dec 17 09:01:03 2025 GMT Not After : Dec 18 09:01:03 2025 GMT Subject: CN=ebf3e7d41caf8684654bf575d528241edd906eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a4:84:2f:a3:5c:c3:ce:d7:04:e4:7b:d9:47: 97:5d:8f:a1:25:d4:fd:e7:2b:b7:de:73:49:ff:07: 94:40:67:63:35:03:fc:46:c0:76:b6:a9:05:0f:45: c4:07:d3:d8:fb:62:36:ea:ba:0e:68:c4:38:2f:ba: 44:8a:a6:ec:0c:40:59:d0:0e:f9:cc:10:1c:89:12: d5:7b:52:8d:d2:a7:8a:e6:16:7c:94:6b:79:dd:87: d3:06:15:8d:73:34:87:18:d0:47:39:d9:1b:10:45: cc:71:9d:90:2f:31:34:a4:e2:b7:20:8e:c2:1a:90: 3a:14:0b:69:f7:f7:59:48:3b:c7:e9:38:6e:22:2d: b3:ea:8c:5e:53:39:4f:0a:48:fb:3b:26:57:0a:e8: 8b:60:2f:c3:1e:66:e0:27:70:2a:69:a6:61:d5:fc: d5:69:03:04:8f:2d:c7:e5:6c:13:d9:c5:ce:77:cd: 71:02:ad:07:17:4a:7c:56:1d:39:b6:0c:ac:d3:1b: 66:f8:25:9a:9e:97:e8:26:df:56:1a:20:43:96:44: a6:99:b6:28:73:f0:ae:bc:5d:25:a7:ea:fd:39:dd: 2d:f6:16:22:04:0e:f7:c0:76:fe:65:22:d2:e9:61: ba:28:16:79:9f:03:62:97:b3:86:e2:61:ba:c3:fc: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F3:E7:D4:1C:AF:86:84:65:4B:F5:75:D5:28:24:1E:DD:90:6E:AC X509v3 Authority Key Identifier: keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:a0:70:bf:f4:a2:ce:4e:c7:bd:f5:7b:78:7e:0e:e0:03: 8d:18:8a:aa:ae:7d:6a:7e:a6:ce:42:74:bf:05:db:54:5d:6d: e0:5c:79:61:8d:ef:50:44:37:46:27:a5:92:79:9a:de:6a:99: d5:1f:f3:2d:92:6b:90:8b:2f:83:db:e5:f3:6d:f3:30:ec:1e: 28:0c:a6:16:56:1c:32:86:b2:27:29:96:ba:7f:56:48:73:d3: 6d:6a:28:73:ae:95:10:dd:a6:33:cf:21:0d:f3:9e:15:b5:4c: d8:25:95:c7:e1:5d:5b:54:14:f7:c2:8a:77:60:26:ea:13:fb: a9:1e:1c:ba:ce:3d:5b:2e:87:dd:0a:75:f6:6c:1d:1e:fc:b7: b8:55:54:1a:4b:fd:5f:4a:51:52:cc:b6:b5:39:f1:e9:ba:38: 25:10:a0:6d:44:f0:e7:af:0c:8c:f0:f3:c2:6f:30:2d:5e:23: 84:41:7a:3d:59:01:bc:d7:ce:ce:db:0f:a1:00:ac:1d:6a:f0: f2:a0:fb:9e:41:25:18:4f:d7:1d:72:7c:99:99:7c:de:f4:8c: b8:8c:1e:2b:2c:94:ba:4d:c9:be:79:3e:8d:a4:eb:a6:ab:02: 63:3c:6c:53:81:f0:54:b4:a6:93:ee:0b:c7:33:33:9d:b4:06: 1f:bd:57:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqANR5orZQVmZ1HQRXvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdiNjE2MTE3MTllYzdjOGUwMDEyYjFhZmY3ZTgxZmM3 Njg5YmQwHhcNMjUxMjE3MDkwMTAzWhcNMjUxMjE4MDkwMTAzWjAzMTEwLwYDVQQD EyhlYmYzZTdkNDFjYWY4Njg0NjU0YmY1NzVkNTI4MjQxZWRkOTA2ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaSEL6Ncw87XBOR72UeXXY+hJdT9 5yu33nNJ/weUQGdjNQP8RsB2tqkFD0XEB9PY+2I26roOaMQ4L7pEiqbsDEBZ0A75 zBAciRLVe1KN0qeK5hZ8lGt53YfTBhWNczSHGNBHOdkbEEXMcZ2QLzE0pOK3II7C GpA6FAtp9/dZSDvH6ThuIi2z6oxeUzlPCkj7OyZXCuiLYC/DHmbgJ3AqaaZh1fzV aQMEjy3H5WwT2cXOd81xAq0HF0p8Vh05tgys0xtm+CWanpfoJt9WGiBDlkSmmbYo c/CuvF0lp+r9Od0t9hYiBA73wHb+ZSLS6WG6KBZ5nwNil7OG4mG6w/yUHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvz59Qcr4aEZUv1ddUoJB7dkG6sMB8GA1UdIwQY MBaAFFxXthYRcZ7HyOABKxr/foH8dom9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1Mjgt ZmEzMDcxYzQzNWYxLzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iN2ZlNzUtMzBlZS00YTZmLWI1MjgtZmEzMDcxYzQzNWYx LzEvWEZlMkZoRnhuc2ZJNEFFckd2OS1nZngyaWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM6gcL/0 os5Ox731e3h+DuADjRiKqq59an6mzkJ0vwXbVF1t4Fx5YY3vUEQ3Rielknma3mqZ 1R/zLZJrkIsvg9vl823zMOweKAymFlYcMoayJymWun9WSHPTbWooc66VEN2mM88h DfOeFbVM2CWVx+FdW1QU98KKd2Am6hP7qR4cus49Wy6H3Qp19mwdHvy3uFVUGkv9 X0pRUsy2tTnx6bo4JRCgbUTw568MjPDzwm8wLV4jhEF6PVkBvNfOztsPoQCsHWrw 8qD7nkElGE/XHXJ8mZl83vSMuIweKyyUuk3Jvnk+jaTrpqsCYzxsU4HwVLSmk+4L xzMznbQGH71Xaw== -----END CERTIFICATE-----Generated at Wed Dec 17 17:54:42 2025 by rpki-client