This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json) Hash identifier: S8jZUE4fKfXvfvKg299vKNr0zJAQ6h7oRVqFtFXdFfY= Subject key identifier: 97:5D:5F:C3:BA:93:40:92:A5:80:20:17:7D:2E:24:60:9B:82:8B:AD Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019B42B785B78EBB7DCF1A4109324CCF9190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft Manifest number: 0669 Signing time: Sun 21 Dec 2025 21:01:22 +0000 Manifest this update: Sun 21 Dec 2025 21:01:22 +0000 Manifest next update: Mon 22 Dec 2025 21:01:22 +0000 Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: 5ttaIXMH6g/I3yOii4ihMZ+rVAsABnwIl9j3xMZk8JE=) 2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:85:b7:8e:bb:7d:cf:1a:41:09:32:4c:cf:91:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Dec 21 21:01:22 2025 GMT Not After : Dec 22 21:01:22 2025 GMT Subject: CN=975d5fc3ba934092a58020177d2e24609b828bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:68:31:0c:8b:2b:a2:e7:02:16:1d:8b:e0: 49:05:27:c3:10:9b:57:48:41:f2:53:74:7e:da:cb: 1a:09:e7:6d:c6:f6:0e:d6:47:0c:d3:15:1f:55:ed: b3:ff:33:17:49:bc:2e:db:8b:24:9b:3c:84:60:d0: c6:c9:52:95:24:62:c1:b2:63:6f:d6:bf:7e:0e:0a: da:77:94:2b:64:54:19:d8:04:c2:bd:db:76:2c:bd: b2:72:b1:c1:f5:40:1e:86:b0:20:09:3e:98:3e:f3: 38:88:44:f3:14:7e:9c:cd:10:8a:50:86:73:c0:0e: b3:44:9f:98:41:0a:34:92:bd:11:33:a4:6e:a0:1b: ef:7d:6a:cd:b9:22:88:7f:90:a4:aa:23:9e:ec:c4: 25:26:d9:ef:0e:62:7d:71:70:e7:ba:44:1b:d1:c6: 3f:89:93:e9:c0:3d:db:02:3c:50:40:cd:24:a9:b6: d8:27:3f:b8:7c:c0:0a:1f:7a:6e:0b:84:3e:4b:42: 8f:01:f0:45:fb:27:a7:cd:4e:04:a6:4a:8b:10:43: 2c:89:dc:02:a3:54:8a:c2:3b:7b:a8:ce:bf:85:b1: bb:2d:ad:94:46:9b:4a:72:17:26:55:3d:60:d9:8a: 2b:40:2e:49:ce:a1:ad:46:0b:f5:56:c4:a5:25:86: 9d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5D:5F:C3:BA:93:40:92:A5:80:20:17:7D:2E:24:60:9B:82:8B:AD X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c4:b4:63:68:c9:0d:ca:9b:b6:14:4e:89:f6:8e:55:a2:d9: 08:ea:6b:cd:75:4c:17:f8:4c:19:55:f4:e8:00:cc:45:15:67: a0:3a:5e:65:67:dc:12:c0:0f:87:47:70:3a:31:a0:5c:33:ba: a5:2e:09:bb:91:d5:5d:2c:f4:24:04:f2:d4:ae:6d:17:ab:1e: 4f:1b:22:73:2c:a4:dc:f7:e6:ed:44:74:ff:dd:ff:8b:a2:5d: 1d:70:38:31:d2:22:2b:19:87:76:55:95:17:7c:ef:54:fd:a3: 8c:22:73:5c:9f:ab:40:90:08:53:b7:32:0f:5f:48:01:1b:b6: 73:2b:6b:c7:0e:2f:48:b5:34:1a:f9:34:7b:f8:87:7e:8d:84: ca:ae:18:35:c9:8a:90:22:a4:4e:a7:7a:32:da:c8:eb:6b:8e: ef:5f:b1:5d:62:ef:d4:0a:2f:11:32:2e:a9:bb:71:35:19:db: e1:1a:90:73:94:4f:d8:c5:72:b7:44:17:fb:2a:4b:ae:04:df: b3:7d:f1:6d:7b:db:ff:ed:73:d8:04:ec:c2:6e:18:e7:01:e3: fa:f5:32:b9:86:0c:b1:54:5c:d6:58:1d:99:cb:59:a1:61:79: 84:f8:fb:85:6b:bd:b9:11:51:9d:2f:5f:f1:cd:74:ab:5f:d6: da:f8:71:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt4W3jrt9zxpBCTJMz5GQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjUxMjIxMjEwMTIyWhcNMjUxMjIyMjEwMTIyWjAzMTEwLwYDVQQD Eyg5NzVkNWZjM2JhOTM0MDkyYTU4MDIwMTc3ZDJlMjQ2MDliODI4YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgJoMQyLK6LnAhYdi+BJBSfDEJtX SEHyU3R+2ssaCedtxvYO1kcM0xUfVe2z/zMXSbwu24skmzyEYNDGyVKVJGLBsmNv 1r9+Dgrad5QrZFQZ2ATCvdt2LL2ycrHB9UAehrAgCT6YPvM4iETzFH6czRCKUIZz wA6zRJ+YQQo0kr0RM6RuoBvvfWrNuSKIf5CkqiOe7MQlJtnvDmJ9cXDnukQb0cY/ iZPpwD3bAjxQQM0kqbbYJz+4fMAKH3puC4Q+S0KPAfBF+yenzU4EpkqLEEMsidwC o1SKwjt7qM6/hbG7La2URptKchcmVT1g2YorQC5JzqGtRgv1VsSlJYad2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJddX8O6k0CSpYAgF30uJGCbgoutMB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMS0Y2jJ DcqbthROifaOVaLZCOprzXVMF/hMGVX06ADMRRVnoDpeZWfcEsAPh0dwOjGgXDO6 pS4Ju5HVXSz0JATy1K5tF6seTxsicyyk3Pfm7UR0/93/i6JdHXA4MdIiKxmHdlWV F3zvVP2jjCJzXJ+rQJAIU7cyD19IARu2cytrxw4vSLU0Gvk0e/iHfo2Eyq4YNcmK kCKkTqd6MtrI62uO71+xXWLv1AovETIuqbtxNRnb4RqQc5RP2MVyt0QX+ypLrgTf s33xbXvb/+1z2ATswm4Y5wHj+vUyuYYMsVRc1lgdmctZoWF5hPj7hWu9uRFRnS9f 8c10q1/W2vhxrA== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:59 2025 by rpki-client