This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json) Hash identifier: XgrRg7UKxiTK9mmc35cMsrT2Vh48PuwKjmQ+B4SSbDo= Subject key identifier: 32:6E:77:F5:C1:E8:2E:0B:7D:C4:0A:3B:46:A3:D5:F2:19:D0:FE:48 Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef Certificate serial: 019B25F64D99A4E454A13F3C9B546DE198D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 07:00:57 +0000 Manifest this update: Tue 16 Dec 2025 07:00:57 +0000 Manifest next update: Wed 17 Dec 2025 07:00:57 +0000 Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: kYJ+MehIn/wABjFOPC8JdnWIvdhsZCG1bKgb68U5uTo=) 2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:4d:99:a4:e4:54:a1:3f:3c:9b:54:6d:e1:98:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef Validity Not Before: Dec 16 07:00:57 2025 GMT Not After : Dec 17 07:00:57 2025 GMT Subject: CN=326e77f5c1e82e0b7dc40a3b46a3d5f219d0fe48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:54:14:ed:b6:f9:25:24:fc:27:1f:b3:4c: 8c:24:b0:bc:85:aa:76:8d:1b:f0:0a:03:1f:b7:0a: a4:41:72:58:8c:0e:9e:30:76:18:c7:b3:6b:e8:bf: b2:6f:b8:6d:3b:50:08:4d:4b:e5:dc:42:0b:6f:c5: 1a:f5:72:87:d2:3e:b5:98:d2:52:ba:6b:90:95:6b: e1:d5:a5:a5:df:fd:89:91:63:28:05:0f:04:d4:6a: fe:2c:61:14:0f:ae:ac:6d:16:a0:e4:60:f9:b3:af: ef:d4:41:79:e3:89:7a:07:45:2d:c5:ed:1b:b3:f4: 6f:d5:28:ec:49:50:30:89:12:cf:70:b9:32:c4:90: de:39:05:19:66:b2:e3:f7:c5:83:97:87:73:25:94: 6e:aa:ca:d5:30:56:4c:de:0d:bd:c4:ba:a4:41:69: f6:8f:df:91:1e:a9:25:62:f8:a7:3c:df:42:66:c0: 20:2b:11:0f:9d:46:c3:75:49:fe:96:c9:43:57:96: 30:e3:49:5b:65:bd:ec:45:ae:d2:b6:54:60:0a:06: 4e:45:4c:42:6d:71:da:93:8b:07:30:24:20:8e:f8: 64:9c:7a:a1:f9:a5:26:69:59:ca:6f:58:ea:e6:f9: 8e:20:5b:14:00:98:02:79:2c:06:e1:b0:3c:aa:35: e9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:77:F5:C1:E8:2E:0B:7D:C4:0A:3B:46:A3:D5:F2:19:D0:FE:48 X509v3 Authority Key Identifier: keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:96:6a:bc:26:a3:59:3a:aa:09:28:6d:39:1c:a0:4e:a9:23: 90:f6:d4:a7:63:06:7b:27:45:77:b9:4b:70:2f:2c:a4:9f:c3: 6e:2d:f0:42:9a:ec:6e:5a:4b:4a:ce:d0:81:75:6a:02:6b:bb: 42:fd:43:7f:42:cf:b2:b4:57:3b:fc:8f:85:bc:e6:63:27:e1: ea:f1:90:44:50:15:0a:74:11:a3:5d:00:5e:85:79:dc:d7:89: fd:ae:02:b2:91:a1:6e:30:76:90:42:ac:9d:04:22:b2:91:c3: 9c:bb:dd:ad:6d:83:1c:a9:06:5c:35:0d:4f:8c:2b:c8:6d:f2: dd:bf:24:45:a3:d3:5c:29:d6:31:a5:3a:f7:a4:ad:e7:0a:80: bf:3d:a1:ef:bb:dc:6b:7f:f9:23:72:d4:6e:f1:f7:6d:73:4f: ea:07:d4:ef:91:ae:67:6f:b1:0e:c0:0d:e2:fc:d0:68:95:9c: 05:da:bf:f9:92:27:ef:48:d7:e5:2c:17:92:e8:3c:47:ef:12: 0c:6e:c1:eb:b3:75:ff:55:2c:f0:40:d8:f4:6c:15:e4:65:6c: 4f:bd:71:5e:45:2c:7b:b6:76:db:e6:22:3d:9b:33:b6:9c:d9: 78:e7:f4:4e:90:ed:25:8d:d7:f9:ed:54:7b:30:c1:25:d8:1c: 21:02:1a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9k2ZpORUoT88m1Rt4ZjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk Y2RkZWYwHhcNMjUxMjE2MDcwMDU3WhcNMjUxMjE3MDcwMDU3WjAzMTEwLwYDVQQD EygzMjZlNzdmNWMxZTgyZTBiN2RjNDBhM2I0NmEzZDVmMjE5ZDBmZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4tUFO22+SUk/Ccfs0yMJLC8hap2 jRvwCgMftwqkQXJYjA6eMHYYx7Nr6L+yb7htO1AITUvl3EILb8Ua9XKH0j61mNJS umuQlWvh1aWl3/2JkWMoBQ8E1Gr+LGEUD66sbRag5GD5s6/v1EF544l6B0Utxe0b s/Rv1SjsSVAwiRLPcLkyxJDeOQUZZrLj98WDl4dzJZRuqsrVMFZM3g29xLqkQWn2 j9+RHqklYvinPN9CZsAgKxEPnUbDdUn+lslDV5Yw40lbZb3sRa7StlRgCgZORUxC bXHak4sHMCQgjvhknHqh+aUmaVnKb1jq5vmOIFsUAJgCeSwG4bA8qjXpHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJud/XB6C4LfcQKO0aj1fIZ0P5IMB8GA1UdIwQY MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2 LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpZqvCaj WTqqCShtORygTqkjkPbUp2MGeydFd7lLcC8spJ/Dbi3wQprsblpLSs7QgXVqAmu7 Qv1Df0LPsrRXO/yPhbzmYyfh6vGQRFAVCnQRo10AXoV53NeJ/a4CspGhbjB2kEKs nQQispHDnLvdrW2DHKkGXDUNT4wryG3y3b8kRaPTXCnWMaU696St5wqAvz2h77vc a3/5I3LUbvH3bXNP6gfU75GuZ2+xDsAN4vzQaJWcBdq/+ZIn70jX5SwXkug8R+8S DG7B67N1/1Us8EDY9GwV5GVsT71xXkUse7Z22+YiPZsztpzZeOf0TpDtJY3X+e1U ezDBJdgcIQIaQQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:59:20 2025 by rpki-client