This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft File: XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft (raw, json) Hash identifier: B6eq3qFnxK7PRtT9h+4GwGk5cWD+3FeXlcoWLQ34tM0= Subject key identifier: B5:93:98:51:CA:24:D3:AF:3A:1D:EE:37:22:8F:78:8E:D9:B9:59:12 Authority key identifier: 5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3 Certificate issuer: /CN=5d382238289a8802cf52b67d9bf4ae87a50933c3 Certificate serial: 019B3456EFB7E69C67B3472A0E52821C980B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft Manifest number: 16F0 Signing time: Fri 19 Dec 2025 02:01:11 +0000 Manifest this update: Fri 19 Dec 2025 02:01:11 +0000 Manifest next update: Sat 20 Dec 2025 02:01:11 +0000 Files and hashes: 1: 2ywpCRCtpz6hrb_B5Z2UyYL2m-g.roa (hash: Z+2VK2G2lzN86LoPcE9VgbDrrppkQUiQOHGoi5RCAY8=) 2: XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl (hash: DdffL6g+oKvJCLKnn61FJrUgtBaCnPbTQXZYKJE3AYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:ef:b7:e6:9c:67:b3:47:2a:0e:52:82:1c:98:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d382238289a8802cf52b67d9bf4ae87a50933c3 Validity Not Before: Dec 19 02:01:11 2025 GMT Not After : Dec 20 02:01:11 2025 GMT Subject: CN=b5939851ca24d3af3a1dee37228f788ed9b95912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:60:c4:75:12:3b:37:e7:9c:60:7f:e4:d3:36: d7:dc:d1:86:a3:aa:ff:a2:ba:33:55:55:1f:32:51: 8f:a1:7a:56:14:c5:6a:89:5a:d9:04:c6:ba:ea:a0: 0e:8c:38:48:67:2c:7e:08:5c:65:df:8c:ec:db:02: af:80:f4:75:c7:b0:22:20:b3:48:4f:9f:95:e5:4c: 5f:bc:0b:55:ab:8d:f0:17:86:02:fc:d2:f2:f9:f4: a5:80:38:b0:f2:69:4d:ca:fc:c6:ef:2f:f2:01:41: b9:18:8f:ce:9a:1e:67:ec:21:0e:4f:81:25:a0:ae: b4:39:98:ae:6f:04:a7:96:67:8c:0d:a4:0d:75:59: 22:6f:bc:09:89:26:fc:a7:61:a3:45:99:20:44:79: 75:37:dc:21:c5:cf:10:48:88:54:a5:b8:ff:51:d2: 7b:68:86:99:84:59:e4:53:1a:ef:ed:55:85:1d:72: 37:cf:5e:bd:e6:12:a1:f2:df:4d:aa:4d:55:54:a1: 42:8a:a0:82:e4:bb:1e:23:3c:d6:8c:98:bb:c4:58: 13:f8:3f:69:91:01:b7:1e:f6:44:31:c5:f5:5c:4a: e0:7a:8d:1c:5d:4a:ba:c6:06:ae:f2:78:44:af:bb: 7b:85:2b:ef:a3:ec:f8:7e:a1:19:6d:2b:f9:5c:c4: a9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:93:98:51:CA:24:D3:AF:3A:1D:EE:37:22:8F:78:8E:D9:B9:59:12 X509v3 Authority Key Identifier: keyid:5D:38:22:38:28:9A:88:02:CF:52:B6:7D:9B:F4:AE:87:A5:09:33:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTgiOCiaiALPUrZ9m_Suh6UJM8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/85018a-c238-4319-ad42-885757c1248f/1/XTgiOCiaiALPUrZ9m_Suh6UJM8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d5:9f:75:2c:09:81:bc:96:01:b2:73:6a:42:de:75:da:54: 5c:c6:4e:9f:f6:f1:7f:e6:7a:12:c9:bd:5a:33:76:61:8a:74: 34:5e:f9:5e:4c:cf:bf:c5:51:e1:fb:4a:0c:7f:7a:ba:eb:bd: 95:98:6a:a1:d7:00:67:6b:6f:c4:ee:8a:0b:95:de:5e:10:a9: eb:2e:45:7f:d4:fd:47:ff:97:68:50:69:79:04:d9:b3:02:f4: d5:fe:1c:3c:50:7f:28:c6:96:28:a1:3d:be:46:0d:a2:20:3e: 4f:27:95:66:c1:4f:1f:bc:cc:3c:3c:15:e5:42:de:7f:f7:c7: b9:b1:4d:b7:6c:a0:57:84:89:84:ff:7b:d6:1d:ca:b9:eb:5a: c7:d6:94:97:dd:8d:3a:1d:62:53:f9:13:b0:43:36:ac:27:7b: 2e:9c:00:29:4b:15:e2:fa:45:2c:33:e4:e6:84:9d:06:66:63: 41:f2:a6:84:5c:85:41:67:a0:be:dc:d0:fd:40:59:1d:2e:de: 35:28:52:39:8c:81:d5:56:a5:62:a5:3c:da:98:e5:39:eb:ab: bd:59:00:e7:12:b7:d6:4b:db:36:45:03:f1:e9:fc:a2:40:66: 7c:dc:4f:4c:22:9e:d5:5e:bc:29:b9:9d:66:2b:9a:f8:42:81: 85:2a:93:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0Vu+35pxns0cqDlKCHJgLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzgyMjM4Mjg5YTg4MDJjZjUyYjY3ZDliZjRhZTg3YTUw OTMzYzMwHhcNMjUxMjE5MDIwMTExWhcNMjUxMjIwMDIwMTExWjAzMTEwLwYDVQQD EyhiNTkzOTg1MWNhMjRkM2FmM2ExZGVlMzcyMjhmNzg4ZWQ5Yjk1OTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymDEdRI7N+ecYH/k0zbX3NGGo6r/ orozVVUfMlGPoXpWFMVqiVrZBMa66qAOjDhIZyx+CFxl34zs2wKvgPR1x7AiILNI T5+V5UxfvAtVq43wF4YC/NLy+fSlgDiw8mlNyvzG7y/yAUG5GI/Omh5n7CEOT4El oK60OZiubwSnlmeMDaQNdVkib7wJiSb8p2GjRZkgRHl1N9whxc8QSIhUpbj/UdJ7 aIaZhFnkUxrv7VWFHXI3z1695hKh8t9Nqk1VVKFCiqCC5LseIzzWjJi7xFgT+D9p kQG3HvZEMcX1XErgeo0cXUq6xgau8nhEr7t7hSvvo+z4fqEZbSv5XMSpdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWTmFHKJNOvOh3uNyKPeI7ZuVkSMB8GA1UdIwQY MBaAFF04IjgomogCz1K2fZv0roelCTPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDIt ODg1NzU3YzEyNDhmLzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84NTAxOGEtYzIzOC00MzE5LWFkNDItODg1NzU3YzEyNDhm LzEvWFRnaU9DaWFpQUxQVXJaOW1fU3VoNlVKTThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtWfdSwJ gbyWAbJzakLeddpUXMZOn/bxf+Z6Esm9WjN2YYp0NF75XkzPv8VR4ftKDH96uuu9 lZhqodcAZ2tvxO6KC5XeXhCp6y5Ff9T9R/+XaFBpeQTZswL01f4cPFB/KMaWKKE9 vkYNoiA+TyeVZsFPH7zMPDwV5ULef/fHubFNt2ygV4SJhP971h3Kuetax9aUl92N Oh1iU/kTsEM2rCd7LpwAKUsV4vpFLDPk5oSdBmZjQfKmhFyFQWegvtzQ/UBZHS7e NShSOYyB1ValYqU82pjlOeurvVkA5xK31kvbNkUD8en8okBmfNxPTCKe1V68Kbmd Ziua+EKBhSqTCA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:59 2025 by rpki-client