This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json) Hash identifier: jJKoOEqXke4s+VRdIfqUxm87fB9q4NRTk9wXOuXJ6xI= Subject key identifier: FB:04:3B:4C:B3:E0:98:CD:75:B6:02:42:F4:1A:05:B6:1B:4E:F1:04 Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3 Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3 Certificate serial: 019B33B2537037702E6016F548C1011B6408 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft Manifest number: 16C5 Signing time: Thu 18 Dec 2025 23:01:23 +0000 Manifest this update: Thu 18 Dec 2025 23:01:23 +0000 Manifest next update: Fri 19 Dec 2025 23:01:23 +0000 Files and hashes: 1: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: SfScXHA0q9xad7EF7f6K/KeO1HhclPaV9eWjhrhiAa4=) 2: ir_nzSQYAsgPoPu8kRGYQzALm7U.roa (hash: TCpfNyg//XzFyrfc8SAsUbs4iWswcCSro2mnromAmQo=) 3: m3SzGaHBe-liV9k_hjkTUrNHXMg.roa (hash: 1IYirY3YGGwbakrzW31PvEOIIPUhpCQb3MNxcEFgdzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:53:70:37:70:2e:60:16:f5:48:c1:01:1b:64:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3 Validity Not Before: Dec 18 23:01:23 2025 GMT Not After : Dec 19 23:01:23 2025 GMT Subject: CN=fb043b4cb3e098cd75b60242f41a05b61b4ef104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:ae:30:ae:a2:c2:8c:79:ed:4a:87:c9:45: 4d:33:52:4f:ae:b5:44:47:5b:2b:f7:9f:e8:81:a7: f6:1b:2a:35:d7:5b:cf:83:b5:97:31:26:d4:06:4b: a1:af:f6:14:a8:74:8c:ca:6a:f1:ca:b7:e9:d4:d4: 1d:d2:d2:cf:54:65:2d:f5:1e:eb:90:6b:21:25:8f: 6d:f7:21:8c:68:76:18:75:38:36:cf:13:c7:3b:91: 41:72:99:47:0d:1d:30:b0:bf:81:43:4d:84:ed:56: 7c:71:5a:81:a9:25:42:21:2a:7a:02:4e:83:e6:26: 7f:cb:8d:94:e7:e2:91:ad:cf:89:53:c0:d4:f6:38: c4:b8:e7:aa:48:8b:4e:bf:54:85:d2:2d:64:f5:4a: 96:39:5f:71:f8:b8:cc:52:a4:27:55:62:45:af:dc: 2e:06:ef:3f:36:2b:98:63:98:fa:0b:1a:22:1b:dd: 34:e2:12:86:cd:06:4b:26:22:a4:5f:82:ee:73:fc: 2a:f8:06:47:75:e0:8e:75:77:3c:63:ad:e4:80:3d: 09:86:3d:2a:c4:67:bc:d6:d9:f4:6b:62:1c:7f:c9: 1d:ae:64:11:45:a9:bb:a6:36:01:5b:4e:e4:53:f8: 2f:4d:6b:2c:d9:c9:b4:0e:57:9f:a9:0d:be:3f:26: e6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:04:3B:4C:B3:E0:98:CD:75:B6:02:42:F4:1A:05:B6:1B:4E:F1:04 X509v3 Authority Key Identifier: keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e9:b5:fc:37:35:ab:58:75:c9:a2:b0:98:06:56:09:d3:fa: 4d:59:ed:0e:0e:d5:24:52:cb:17:fe:03:fe:89:ce:22:7e:92: bc:c2:f4:25:7b:61:f5:98:2f:6d:3f:dc:86:70:ae:75:fe:36: cf:a3:45:d0:f1:81:51:2d:73:a8:48:c5:53:70:a4:74:0c:eb: 50:80:c3:fc:78:b9:7a:ac:58:77:a7:5c:21:ed:4b:6b:d4:80: 74:96:56:67:b8:5e:14:70:31:db:b1:ad:3c:1a:1d:c2:eb:f7: 02:65:0b:b2:87:19:0b:ed:e5:ab:2d:44:36:e4:39:fa:1f:05: cc:73:f2:b9:c4:1a:b0:d8:99:a1:8c:83:a9:ec:9a:58:3c:f2: bb:fb:50:8f:f6:9d:9a:1d:eb:07:61:89:01:e6:e7:c7:2b:31: 28:88:76:ac:a4:55:68:e0:15:f7:48:43:96:41:3d:bb:e5:5c: 1f:fd:1a:48:20:49:d2:85:01:52:72:f1:13:88:ff:e4:7d:fa: bd:3a:e2:7e:68:d9:21:ab:73:d0:40:33:8b:3e:7f:12:0f:fe: 73:35:87:9f:fc:55:d6:21:b1:c4:cd:d2:7c:a2:aa:71:0c:c2: 1e:1e:97:2c:9f:a8:ad:bb:d9:08:8f:27:b1:eb:90:05:3f:fb: 59:09:e7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszslNwN3AuYBb1SMEBG2QIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDg1ODNiMjExNzQxMDQ5ZTZiYjE5YTk0NmQ4MzFhYWJm MTFhZDMwHhcNMjUxMjE4MjMwMTIzWhcNMjUxMjE5MjMwMTIzWjAzMTEwLwYDVQQD EyhmYjA0M2I0Y2IzZTA5OGNkNzViNjAyNDJmNDFhMDViNjFiNGVmMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ICuMK6iwox57UqHyUVNM1JPrrVE R1sr95/ogaf2Gyo111vPg7WXMSbUBkuhr/YUqHSMymrxyrfp1NQd0tLPVGUt9R7r kGshJY9t9yGMaHYYdTg2zxPHO5FBcplHDR0wsL+BQ02E7VZ8cVqBqSVCISp6Ak6D 5iZ/y42U5+KRrc+JU8DU9jjEuOeqSItOv1SF0i1k9UqWOV9x+LjMUqQnVWJFr9wu Bu8/NiuYY5j6CxoiG9004hKGzQZLJiKkX4Luc/wq+AZHdeCOdXc8Y63kgD0Jhj0q xGe81tn0a2Icf8kdrmQRRam7pjYBW07kU/gvTWss2cm0DlefqQ2+PybmZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsEO0yz4JjNdbYCQvQaBbYbTvEEMB8GA1UdIwQY MBaAFFzYWDshF0EEnmuxmpRtgxqr8RrTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC83Mjk4YWItN2I5Yy00N2FkLTkwODUt NTA5NzRiY2RjMjQ4LzEvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC83Mjk4YWItN2I5Yy00N2FkLTkwODUtNTA5NzRiY2RjMjQ4 LzEvWE5oWU95RVhRUVNlYTdHYWxHMkRHcXZ4R3RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOm1/Dc1 q1h1yaKwmAZWCdP6TVntDg7VJFLLF/4D/onOIn6SvML0JXth9ZgvbT/chnCudf42 z6NF0PGBUS1zqEjFU3CkdAzrUIDD/Hi5eqxYd6dcIe1La9SAdJZWZ7heFHAx27Gt PBodwuv3AmULsocZC+3lqy1ENuQ5+h8FzHPyucQasNiZoYyDqeyaWDzyu/tQj/ad mh3rB2GJAebnxysxKIh2rKRVaOAV90hDlkE9u+VcH/0aSCBJ0oUBUnLxE4j/5H36 vTrifmjZIatz0EAziz5/Eg/+czWHn/xV1iGxxM3SfKKqcQzCHh6XLJ+orbvZCI8n seuQBT/7WQnnYA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:39:29 2025 by rpki-client