This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json) Hash identifier: PwsBpklRMqd4+WDO5r98KrdAadUI8QaWy9Wp9LmCwhI= Subject key identifier: CF:39:74:5C:6B:16:8F:E5:E2:4A:FD:22:F4:FC:D3:EE:E4:88:14:6C Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019AF12D522BA66E888ACFBA1A8324FE7D36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft Manifest number: 178B Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=) 2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=) 3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=) 4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=) 5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=) 6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: ME1Xy+tCIyskaanTFeHoyc7HhdBYnw6yaL8GOj1Vd9k=) 7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=) 8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:52:2b:a6:6e:88:8a:cf:ba:1a:83:24:fe:7d:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=cf39745c6b168fe5e24afd22f4fcd3eee488146c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:46:e7:3b:0f:96:42:49:46:2a:5f:6a:07:d7: 2e:10:c6:80:5e:c7:ae:07:46:30:53:48:92:32:0c: b6:17:c6:4b:35:69:d8:38:51:7f:35:55:b4:38:43: 43:40:f0:e5:f2:b1:8a:ca:00:97:a9:93:d7:0d:89: 58:5f:ae:ac:2b:23:c0:3c:bc:46:7d:c0:cb:72:e1: d2:2d:cf:d6:8e:19:62:ee:11:37:16:ec:ed:bd:47: 17:ba:9d:11:d4:81:18:01:b8:e1:ef:e8:fd:39:45: 37:46:c4:d9:49:7d:1f:b8:91:a1:35:81:05:8f:e5: 6e:02:36:cc:39:fc:9d:ce:1d:10:30:ba:b1:e8:a3: a5:13:18:bf:7a:8c:9e:68:f3:36:97:65:08:68:92: 82:4c:68:67:db:db:48:ef:3f:70:36:da:95:51:e6: d7:d7:29:fe:5c:78:81:a5:d3:80:79:64:18:54:fc: 00:34:8b:83:98:17:13:2a:7e:5a:69:2f:0d:6f:22: 7a:52:3e:e9:5a:3e:41:7f:db:f9:87:4e:c0:f6:f2: 54:bb:01:21:77:91:86:c3:90:2d:16:ae:09:39:b6: b4:c0:d0:84:ab:15:c6:56:66:61:01:72:25:8e:df: 99:31:72:16:5c:aa:77:56:7b:98:fc:68:cc:19:64: 6e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:39:74:5C:6B:16:8F:E5:E2:4A:FD:22:F4:FC:D3:EE:E4:88:14:6C X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f7:c7:e3:07:d2:3f:de:d2:10:6b:fa:73:db:f1:11:45:30: e6:4c:1f:c6:ef:cf:68:53:47:d1:35:78:5c:ae:33:8b:4b:2f: a6:37:b6:54:b0:be:64:74:de:27:58:29:65:be:2a:83:37:89: 2f:74:fa:86:49:68:d9:de:2e:e0:ac:57:70:53:75:60:89:ea: f2:9f:ae:63:36:95:d7:98:c5:57:a6:21:03:a8:a3:3e:35:6d: 02:c9:db:75:8d:ce:7e:1f:6a:fd:14:e7:4e:c4:ed:02:83:c2: 53:00:60:9a:9c:01:e6:4b:59:95:13:33:18:a3:93:eb:9f:fd: 40:f9:fc:98:65:94:59:ea:52:77:8f:eb:07:0a:9f:d9:79:da: c2:6c:92:6f:77:82:83:8e:39:65:77:58:55:07:0a:f3:ee:b0: 1c:ae:8c:4f:e8:5b:fe:bf:e4:a7:99:43:e5:33:bc:d2:63:bc: e6:c0:e6:33:8f:ad:35:b9:91:43:a0:eb:7e:50:fd:ac:f3:b0: 05:c0:94:8d:2b:b3:48:e2:7a:57:14:5f:51:f7:6e:8c:97:b9: 9a:de:8b:38:cc:a5:50:39:7f:f3:84:9f:9b:61:04:42:44:f4: 2b:68:48:44:bd:c6:8a:10:f9:62:3e:12:49:cf:2e:38:0e:50: 29:bc:80:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVIrpm6Iis+6GoMk/n02MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EyhjZjM5NzQ1YzZiMTY4ZmU1ZTI0YWZkMjJmNGZjZDNlZWU0ODgxNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkbnOw+WQklGKl9qB9cuEMaAXseu B0YwU0iSMgy2F8ZLNWnYOFF/NVW0OENDQPDl8rGKygCXqZPXDYlYX66sKyPAPLxG fcDLcuHSLc/Wjhli7hE3FuztvUcXup0R1IEYAbjh7+j9OUU3RsTZSX0fuJGhNYEF j+VuAjbMOfydzh0QMLqx6KOlExi/eoyeaPM2l2UIaJKCTGhn29tI7z9wNtqVUebX 1yn+XHiBpdOAeWQYVPwANIuDmBcTKn5aaS8NbyJ6Uj7pWj5Bf9v5h07A9vJUuwEh d5GGw5AtFq4JOba0wNCEqxXGVmZhAXIljt+ZMXIWXKp3VnuY/GjMGWRuwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM85dFxrFo/l4kr9IvT80+7kiBRsMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/fH4wfS P97SEGv6c9vxEUUw5kwfxu/PaFNH0TV4XK4zi0svpje2VLC+ZHTeJ1gpZb4qgzeJ L3T6hklo2d4u4KxXcFN1YInq8p+uYzaV15jFV6YhA6ijPjVtAsnbdY3Ofh9q/RTn TsTtAoPCUwBgmpwB5ktZlRMzGKOT65/9QPn8mGWUWepSd4/rBwqf2XnawmySb3eC g445ZXdYVQcK8+6wHK6MT+hb/r/kp5lD5TO80mO85sDmM4+tNbmRQ6DrflD9rPOw BcCUjSuzSOJ6VxRfUfdujJe5mt6LOMylUDl/84Sfm2EEQkT0K2hIRL3GihD5Yj4S Sc8uOA5QKbyA1g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:15 2025 by rpki-client