This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json) Hash identifier: j+sgNc7Jnw/g0Ku4/qJytGY8qKWcPm7KwE4Eb2iQbxI= Subject key identifier: B3:B0:4F:76:55:77:30:72:60:4C:76:6B:DD:4F:F2:7B:C5:B1:75:B1 Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019B5A51B86CAFBC5F1C6EECC0EE34F8CC99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 11:01:03 +0000 Manifest this update: Fri 26 Dec 2025 11:01:03 +0000 Manifest next update: Sat 27 Dec 2025 11:01:03 +0000 Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=) 2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: wPNZr91NqtdIq49YLapu5jTeW4BLL0IFYokfiWaMAfQ=) 3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:b8:6c:af:bc:5f:1c:6e:ec:c0:ee:34:f8:cc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Dec 26 11:01:03 2025 GMT Not After : Dec 27 11:01:03 2025 GMT Subject: CN=b3b04f7655773072604c766bdd4ff27bc5b175b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:a0:2e:c1:75:ab:da:f2:9b:d3:01:16:e6: 54:2f:42:14:eb:98:2c:a2:70:ad:99:fe:75:ab:fc: 79:60:18:df:f4:2a:d3:cc:be:13:0d:d9:f9:05:23: 45:67:b9:20:c3:8c:3e:a1:6b:eb:e5:8d:0a:0e:68: f3:42:f5:38:f7:6c:09:bb:78:a0:2a:8d:35:84:a6: 6c:5b:c6:b6:c5:c9:6c:76:22:4b:65:c3:38:33:02: 2f:6f:8f:ea:c5:a8:53:89:0b:c6:8b:0b:7e:af:7b: d7:fa:9d:60:ab:7c:8d:01:b9:66:b2:ae:a1:7b:5d: 8f:ef:09:51:fb:29:2b:1a:56:05:38:c1:69:c3:29: 86:af:1a:6a:c4:94:2f:89:73:db:ab:8e:8a:5d:9a: 95:cb:0e:d8:13:b5:d3:5a:fa:09:27:c2:5e:7c:d0: 23:02:01:51:ba:e6:15:c6:68:32:19:27:8f:ff:87: b4:47:7c:49:e0:38:9e:5c:b2:ac:2b:ff:81:67:88: 6f:74:ce:b5:e5:97:ff:0b:7c:2c:22:58:f8:8a:73: eb:4e:7f:fa:01:cd:80:8e:53:91:cc:38:35:17:5d: 15:65:f1:41:1e:92:37:4d:fa:96:d5:65:b3:14:c2: 3e:1f:c6:b0:d3:5d:3a:91:4b:f2:fd:c9:b2:02:70: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B0:4F:76:55:77:30:72:60:4C:76:6B:DD:4F:F2:7B:C5:B1:75:B1 X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e9:57:26:98:6b:cd:13:16:cc:0c:8e:8c:f0:e5:97:b7:26: 7f:62:99:ae:3b:71:60:cc:4a:b5:53:f7:ce:70:4c:2e:3b:32: 48:ba:c5:0c:d0:13:ce:97:b2:b1:46:9f:32:9b:75:da:5e:e1: c9:42:e3:3e:b9:63:43:ba:db:49:dc:24:4c:d3:6f:1a:3e:65: b0:99:55:28:24:10:71:e6:71:a2:8c:44:9d:55:37:01:10:ed: a0:28:d1:4e:a5:a2:37:4a:36:a5:3f:79:10:e1:41:5e:7f:f0: 90:71:90:83:63:87:f9:b5:ae:ee:22:b6:2f:3a:bd:51:a4:cd: fb:48:c7:58:be:ba:f5:7b:c1:5f:59:48:76:a5:db:ff:e4:fa: d6:d4:b8:a0:07:3f:96:a0:2e:59:27:08:56:a3:95:69:95:dd: 17:b7:03:4c:39:69:7f:87:5f:dd:06:59:9a:81:ce:11:cc:c0: 38:31:41:38:d4:a7:be:1c:ab:17:71:87:90:db:86:c4:9e:9a: 1a:cc:db:14:d0:f6:f9:78:94:73:72:44:20:0f:6b:2d:f0:b9: de:0c:86:d5:88:16:ac:f4:1f:53:2b:b9:50:10:e4:fa:87:71: bc:11:2e:86:15:1d:27:c2:60:32:83:c2:7f:0a:d4:9d:c2:80: ad:9d:d3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUbhsr7xfHG7swO40+MyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjUxMjI2MTEwMTAzWhcNMjUxMjI3MTEwMTAzWjAzMTEwLwYDVQQD EyhiM2IwNGY3NjU1NzczMDcyNjA0Yzc2NmJkZDRmZjI3YmM1YjE3NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVGgLsF1q9rym9MBFuZUL0IU65gs onCtmf51q/x5YBjf9CrTzL4TDdn5BSNFZ7kgw4w+oWvr5Y0KDmjzQvU492wJu3ig Ko01hKZsW8a2xclsdiJLZcM4MwIvb4/qxahTiQvGiwt+r3vX+p1gq3yNAblmsq6h e12P7wlR+ykrGlYFOMFpwymGrxpqxJQviXPbq46KXZqVyw7YE7XTWvoJJ8JefNAj AgFRuuYVxmgyGSeP/4e0R3xJ4DieXLKsK/+BZ4hvdM615Zf/C3wsIlj4inPrTn/6 Ac2AjlORzDg1F10VZfFBHpI3TfqW1WWzFMI+H8aw0106kUvy/cmyAnBIkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOwT3ZVdzByYEx2a91P8nvFsXWxMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+lXJphr zRMWzAyOjPDll7cmf2KZrjtxYMxKtVP3znBMLjsySLrFDNATzpeysUafMpt12l7h yULjPrljQ7rbSdwkTNNvGj5lsJlVKCQQceZxooxEnVU3ARDtoCjRTqWiN0o2pT95 EOFBXn/wkHGQg2OH+bWu7iK2Lzq9UaTN+0jHWL669XvBX1lIdqXb/+T61tS4oAc/ lqAuWScIVqOVaZXdF7cDTDlpf4df3QZZmoHOEczAODFBONSnvhyrF3GHkNuGxJ6a GszbFND2+XiUc3JEIA9rLfC53gyG1YgWrPQfUyu5UBDk+odxvBEuhhUdJ8JgMoPC fwrUncKArZ3TOg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:27 2025 by rpki-client