This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json) Hash identifier: hXfYbv9eWBy+GV2e0J9a2E80ev5lIqL0V8SpAyWle0g= Subject key identifier: 25:25:22:11:96:F6:20:13:70:4C:32:8A:F2:8B:A7:D7:29:34:C6:39 Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Certificate serial: 019B4C5F4117F9277A7386D616DAAA0F5627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 18:01:09 +0000 Manifest this update: Tue 23 Dec 2025 18:01:09 +0000 Manifest next update: Wed 24 Dec 2025 18:01:09 +0000 Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: cN3K3EFcmXmW0hPpr78ZS7ldblbL6SjoCMWnHUY7w+A=) 2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:41:17:f9:27:7a:73:86:d6:16:da:aa:0f:56:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Validity Not Before: Dec 23 18:01:09 2025 GMT Not After : Dec 24 18:01:09 2025 GMT Subject: CN=2525221196f62013704c328af28ba7d72934c639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:08:c2:22:16:39:9f:f9:25:f6:99:a7:65: 18:fd:c2:8e:e3:8d:3e:99:42:87:c4:01:06:8c:86: 79:66:f5:1d:8c:4b:74:21:04:a4:d1:3f:9d:fc:3c: 9e:dc:fa:7d:88:4f:a7:c9:6a:c6:57:ed:16:16:2c: b4:af:e7:b4:87:4f:76:82:bf:9b:94:41:21:c4:7c: 49:b2:7a:fe:a5:6e:c7:26:03:3c:22:78:91:62:c8: ed:74:f9:b5:bc:70:a6:43:19:ff:76:b3:81:0d:18: d9:72:c4:01:32:5d:57:16:40:58:a7:ef:c9:c1:9d: 43:97:2c:2f:76:45:df:ba:dd:3f:ef:4f:ef:5d:fa: e5:74:b9:8c:38:b6:a3:ce:ea:42:67:b3:46:61:89: 86:96:4c:e3:01:40:cd:38:db:db:ab:db:0f:4c:9d: 39:9b:db:d5:30:8d:5e:54:e1:31:2e:35:1d:c5:de: a2:43:61:7b:64:21:b1:1c:f6:65:2b:5b:df:2a:7a: fc:71:96:db:74:89:9d:a6:20:8a:c8:dd:91:a4:ae: dc:1f:aa:8c:f2:2b:15:03:3b:47:3d:67:03:62:4a: 84:f3:e6:85:28:54:4b:d2:ca:90:00:dd:83:e3:70: 25:10:07:ea:33:68:fd:1e:3a:4e:c8:f0:f1:9b:d3: 13:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:25:22:11:96:F6:20:13:70:4C:32:8A:F2:8B:A7:D7:29:34:C6:39 X509v3 Authority Key Identifier: keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:32:1a:4a:ab:5a:c1:58:bc:ba:32:01:3d:88:51:c8:2c:1f: 05:6e:b5:cb:2b:3a:ff:37:b0:8e:e2:b8:be:cd:63:7a:64:8d: 37:df:cc:e6:76:0d:15:b6:65:64:cf:37:39:37:5a:a7:fc:4e: 45:8e:eb:15:52:c5:6c:16:52:e6:00:44:6d:05:9a:73:2e:41: ee:d6:29:29:be:70:19:54:17:e2:e9:1f:67:b0:a6:d1:6b:b7: 0a:93:da:68:0f:61:3b:ce:79:bb:3b:fc:ec:d9:4d:27:8b:81: 1b:9e:a4:a5:97:f1:6b:a4:6d:b6:af:42:1e:d5:7e:6b:99:bf: 37:23:d8:f2:55:0e:d2:20:d1:69:58:c3:ab:d8:cc:7e:19:83: e7:d2:88:37:c5:6e:e4:f1:69:21:44:80:f6:20:ce:fc:db:c4: c7:58:5b:8a:bd:f7:f0:9a:ac:f1:be:72:8c:56:bb:2e:f8:5e: 54:04:fe:57:51:ea:26:b5:84:a8:08:fd:c8:95:70:61:88:9e: 71:07:a7:0e:b9:bb:4a:13:19:c0:5b:e3:fa:32:ac:ba:d4:c6: 79:50:e6:85:a2:d3:8d:4c:64:17:d5:09:be:78:87:1d:f1:40: ab:84:d3:9d:c3:1d:de:2b:c9:75:c5:39:fc:9c:7b:b8:41:4a: ec:fd:a2:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX0EX+Sd6c4bWFtqqD1YnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl MGYzZjcwHhcNMjUxMjIzMTgwMTA5WhcNMjUxMjI0MTgwMTA5WjAzMTEwLwYDVQQD EygyNTI1MjIxMTk2ZjYyMDEzNzA0YzMyOGFmMjhiYTdkNzI5MzRjNjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYIwiIWOZ/5JfaZp2UY/cKO440+ mUKHxAEGjIZ5ZvUdjEt0IQSk0T+d/Dye3Pp9iE+nyWrGV+0WFiy0r+e0h092gr+b lEEhxHxJsnr+pW7HJgM8IniRYsjtdPm1vHCmQxn/drOBDRjZcsQBMl1XFkBYp+/J wZ1DlywvdkXfut0/70/vXfrldLmMOLajzupCZ7NGYYmGlkzjAUDNONvbq9sPTJ05 m9vVMI1eVOExLjUdxd6iQ2F7ZCGxHPZlK1vfKnr8cZbbdImdpiCKyN2RpK7cH6qM 8isVAztHPWcDYkqE8+aFKFRL0sqQAN2D43AlEAfqM2j9HjpOyPDxm9MTMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUlIhGW9iATcEwyivKLp9cpNMY5MB8GA1UdIwQY MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt NmNkYmMyMTIyNzQ5LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5 LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACzIaSqta wVi8ujIBPYhRyCwfBW61yys6/zewjuK4vs1jemSNN9/M5nYNFbZlZM83OTdap/xO RY7rFVLFbBZS5gBEbQWacy5B7tYpKb5wGVQX4ukfZ7Cm0Wu3CpPaaA9hO855uzv8 7NlNJ4uBG56kpZfxa6Rttq9CHtV+a5m/NyPY8lUO0iDRaVjDq9jMfhmD59KIN8Vu 5PFpIUSA9iDO/NvEx1hbir338Jqs8b5yjFa7LvheVAT+V1HqJrWEqAj9yJVwYYie cQenDrm7ShMZwFvj+jKsutTGeVDmhaLTjUxkF9UJvniHHfFAq4TTncMd3ivJdcU5 /Jx7uEFK7P2ilw== -----END CERTIFICATE-----Generated at Tue Dec 23 22:27:38 2025 by rpki-client