This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json) Hash identifier: 4p16exrrmeENF8/2gkP9facGmp9wFhatT5+pvZ6d4U0= Subject key identifier: 6A:7A:48:53:D2:A3:DA:6A:11:15:B3:65:D8:9A:6D:C2:AF:C6:A6:60 Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Certificate serial: 019B378EAE87272CEE69169E975ED4108F4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft Manifest number: 0942 Signing time: Fri 19 Dec 2025 17:00:56 +0000 Manifest this update: Fri 19 Dec 2025 17:00:56 +0000 Manifest next update: Sat 20 Dec 2025 17:00:56 +0000 Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=) 2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: lyuighulb4llvLRktLVRGNUJ/6th4L4IT9Sc/z9yQnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:ae:87:27:2c:ee:69:16:9e:97:5e:d4:10:8f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Validity Not Before: Dec 19 17:00:56 2025 GMT Not After : Dec 20 17:00:56 2025 GMT Subject: CN=6a7a4853d2a3da6a1115b365d89a6dc2afc6a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:95:43:dd:c7:10:8a:22:68:ff:ce:0a:55: a0:1f:67:bd:c9:a4:87:08:45:0e:47:32:ca:66:63: 42:e6:02:f2:1a:ad:24:3e:2a:5a:71:e2:ee:eb:32: 47:a1:4d:50:c3:b9:e2:bd:96:07:a4:77:d8:38:af: 36:55:98:05:c7:1c:6a:d1:31:e4:69:c1:ad:57:31: 40:34:82:05:7c:ca:c5:47:6e:59:18:0c:58:98:9a: 34:8c:47:94:52:16:1a:6d:91:91:c4:77:55:0f:81: 57:4b:53:d5:fb:1a:67:ae:7e:5e:61:f5:f6:0a:c1: 1d:6f:aa:d2:6f:79:de:f1:de:86:4f:2f:4e:56:96: b3:b5:d0:fc:cd:d5:05:b7:7d:8b:17:8c:be:e3:41: 16:68:40:16:f3:06:71:92:29:c7:cc:47:b3:9e:50: 07:8c:77:40:6d:b7:61:06:62:db:4b:a6:57:53:f2: 13:eb:5a:46:33:d9:c2:30:b3:ad:31:92:11:b9:ad: 27:aa:84:b2:14:a1:dc:07:ee:a4:9b:dd:ba:73:c1: ef:88:9e:20:65:92:70:4a:a5:e5:d3:b0:71:bf:0c: fc:41:cd:60:40:be:55:81:f9:de:db:40:9d:08:40: e7:c3:60:68:8a:32:db:56:c7:1c:37:7e:d9:13:4b: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:48:53:D2:A3:DA:6A:11:15:B3:65:D8:9A:6D:C2:AF:C6:A6:60 X509v3 Authority Key Identifier: keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7d:b8:be:a5:c3:10:80:ba:6c:1a:51:5f:33:0e:23:81:2f: dc:72:d9:c2:3a:77:73:2f:c3:69:46:3b:77:d4:ee:f4:9f:20: d8:30:7e:67:b7:04:c7:9b:eb:b0:a7:9d:ff:9a:6b:ed:da:23: fc:e9:df:87:3a:10:7d:e4:c5:89:02:28:f7:a4:94:f9:6f:7b: 56:28:75:8b:59:ae:bc:fc:d3:b2:ae:ca:de:7d:a3:35:9c:e7: 9a:d8:73:9e:99:6b:0d:59:23:ec:fd:28:e2:2e:78:6c:18:b4: b1:18:9b:cb:a1:32:52:95:f7:ea:70:dc:b8:16:ca:56:b0:7b: 46:d4:2c:ea:51:f6:7b:a0:74:f7:74:4b:d6:c7:b2:13:d4:bd: 0c:23:22:c2:6e:6a:bf:cb:2c:f7:b1:59:54:2f:bd:3c:67:0f: b8:51:96:25:55:06:93:cf:88:78:64:49:60:1d:7d:db:b7:d6: f2:3e:b7:27:b3:db:77:fa:ff:0a:e8:96:31:16:e3:c0:0f:35: f5:f0:d6:23:71:f2:6b:dd:06:00:b7:0b:dd:d3:9a:a5:29:96: 9a:fe:54:74:cd:a7:b2:5c:2b:31:3e:c5:f1:65:6a:da:ea:e1: 30:77:d7:b1:9b:57:66:d5:4f:b0:0d:8c:de:95:03:cf:34:2d: 7c:2f:8e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jq6HJyzuaRael17UEI9OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1 ZDQ5MWUwHhcNMjUxMjE5MTcwMDU2WhcNMjUxMjIwMTcwMDU2WjAzMTEwLwYDVQQD Eyg2YTdhNDg1M2QyYTNkYTZhMTExNWIzNjVkODlhNmRjMmFmYzZhNjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT6VQ93HEIoiaP/OClWgH2e9yaSH CEUORzLKZmNC5gLyGq0kPipaceLu6zJHoU1Qw7nivZYHpHfYOK82VZgFxxxq0THk acGtVzFANIIFfMrFR25ZGAxYmJo0jEeUUhYabZGRxHdVD4FXS1PV+xpnrn5eYfX2 CsEdb6rSb3ne8d6GTy9OVpaztdD8zdUFt32LF4y+40EWaEAW8wZxkinHzEeznlAH jHdAbbdhBmLbS6ZXU/IT61pGM9nCMLOtMZIRua0nqoSyFKHcB+6km926c8HviJ4g ZZJwSqXl07Bxvwz8Qc1gQL5Vgfne20CdCEDnw2BoijLbVsccN37ZE0vVXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGp6SFPSo9pqERWzZdiabcKvxqZgMB8GA1UdIwQY MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH24vqXD EIC6bBpRXzMOI4Ev3HLZwjp3cy/DaUY7d9Tu9J8g2DB+Z7cEx5vrsKed/5pr7doj /OnfhzoQfeTFiQIo96SU+W97Vih1i1muvPzTsq7K3n2jNZznmthznplrDVkj7P0o 4i54bBi0sRiby6EyUpX36nDcuBbKVrB7RtQs6lH2e6B093RL1seyE9S9DCMiwm5q v8ss97FZVC+9PGcPuFGWJVUGk8+IeGRJYB1927fW8j63J7Pbd/r/CuiWMRbjwA81 9fDWI3Hya90GALcL3dOapSmWmv5UdM2nslwrMT7F8WVq2urhMHfXsZtXZtVPsA2M 3pUDzzQtfC+Oow== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:06 2025 by rpki-client