This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json) Hash identifier: 46U+TIxWLjqi/shM0jIG5cBy4uhOed2gW6ApKY15HQU= Subject key identifier: 65:57:05:94:4D:63:E1:76:42:99:43:8A:4E:FB:CE:F7:B2:03:D3:2C Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Certificate serial: 019B3C7E2E3E0326CBEB3C30C618FFBEA615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:01:00 +0000 Manifest this update: Sat 20 Dec 2025 16:01:00 +0000 Manifest next update: Sun 21 Dec 2025 16:01:00 +0000 Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: fMZcDJdykR+W1cGS9cdxQCjQdBfVLIFU9JONBVhnueg=) 2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=) 3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:2e:3e:03:26:cb:eb:3c:30:c6:18:ff:be:a6:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Validity Not Before: Dec 20 16:01:00 2025 GMT Not After : Dec 21 16:01:00 2025 GMT Subject: CN=655705944d63e1764299438a4efbcef7b203d32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:38:46:4f:15:65:bb:93:b0:5a:0b:e9:05:f3: 68:f9:ae:dc:7d:57:cc:dc:b4:bb:91:1a:d7:fd:03: bc:7b:df:7b:15:b6:fe:84:9c:34:b6:ca:87:d6:45: 32:62:5b:e2:7a:6d:14:48:01:9d:a4:17:15:0d:25: b4:db:92:fc:93:dc:2b:52:e1:d2:41:a4:e8:a0:97: db:66:3e:1f:2b:d1:ce:50:ef:9f:00:23:f3:cb:76: e4:be:12:10:1a:48:dd:d4:09:4c:07:b3:eb:27:d6: 5d:e7:11:7d:39:45:d0:11:6e:d9:4a:8d:5d:63:17: e7:db:d9:af:82:24:80:7f:8d:b7:43:93:8a:51:41: 68:0a:32:e9:be:fd:00:ec:42:3d:37:49:65:5a:1a: 68:06:a5:fe:67:fa:b7:28:df:78:57:1e:bb:d4:11: 9a:07:ed:06:69:ce:09:48:f5:54:1a:24:3e:6c:74: 31:c3:0b:b8:6a:e0:17:9a:12:8e:e4:a9:c0:b8:cb: 84:f5:78:72:ef:fa:ab:9a:c0:ae:11:6f:52:b5:18: 38:9a:cb:38:6f:cd:b9:ab:58:e6:65:47:b7:38:c0: 8d:3b:9b:21:11:cc:ef:98:0a:8a:cc:17:a2:f6:97: 0e:d5:dd:ea:3a:08:d6:d6:87:a2:18:71:dd:ae:63: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:57:05:94:4D:63:E1:76:42:99:43:8A:4E:FB:CE:F7:B2:03:D3:2C X509v3 Authority Key Identifier: keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:05:48:e4:dc:f8:3d:e5:d8:52:31:50:0a:d7:ef:60:91:66: 7c:f6:4a:4b:0c:09:6b:1a:f9:9c:29:3d:a1:11:3e:25:0d:b6: 8f:1d:ca:54:5a:75:5d:ad:3c:54:9c:ef:c4:5f:e5:77:a6:c9: 15:db:6e:ef:0a:25:21:9c:02:85:57:96:00:aa:d7:0f:db:23: d2:4f:e6:60:a0:16:b9:f8:f6:dd:97:70:df:e5:e0:25:28:f2: 27:00:5d:49:39:fc:7a:42:87:32:b4:79:a0:b7:7d:45:4b:ec: 5e:6c:06:92:1c:26:f7:d6:53:a8:46:8e:36:c1:32:c2:d7:c6: b3:86:d2:a7:fa:ae:df:f3:a2:57:97:e2:b4:e6:b8:25:11:d7: 09:7b:67:00:4e:ca:dd:20:0f:b3:ef:36:5b:1a:d0:3a:13:c9: 9c:02:9d:cd:12:91:40:86:de:b2:d4:72:32:d3:76:d3:ed:8f: 68:55:57:ec:5a:59:12:dc:27:eb:90:e4:67:48:42:f2:b2:cb: f1:ce:e2:af:d5:b8:2c:60:01:24:49:a4:dd:93:52:ef:6b:5b: e1:77:42:0d:e1:04:0d:10:d4:3a:bc:cb:67:63:e0:83:23:29: c9:b7:00:5f:5b:cd:4c:71:d1:5a:7f:23:11:92:32:1b:0e:04: 02:cf:ce:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fi4+AybL6zwwxhj/vqYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3 ZmQ0ZmEwHhcNMjUxMjIwMTYwMTAwWhcNMjUxMjIxMTYwMTAwWjAzMTEwLwYDVQQD Eyg2NTU3MDU5NDRkNjNlMTc2NDI5OTQzOGE0ZWZiY2VmN2IyMDNkMzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzhGTxVlu5OwWgvpBfNo+a7cfVfM 3LS7kRrX/QO8e997Fbb+hJw0tsqH1kUyYlviem0USAGdpBcVDSW025L8k9wrUuHS QaTooJfbZj4fK9HOUO+fACPzy3bkvhIQGkjd1AlMB7PrJ9Zd5xF9OUXQEW7ZSo1d Yxfn29mvgiSAf423Q5OKUUFoCjLpvv0A7EI9N0llWhpoBqX+Z/q3KN94Vx671BGa B+0Gac4JSPVUGiQ+bHQxwwu4auAXmhKO5KnAuMuE9Xhy7/qrmsCuEW9StRg4mss4 b825q1jmZUe3OMCNO5shEczvmAqKzBei9pcO1d3qOgjW1oeiGHHdrmNDFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVXBZRNY+F2QplDik77zveyA9MsMB8GA1UdIwQY MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5 LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQVI5Nz4 PeXYUjFQCtfvYJFmfPZKSwwJaxr5nCk9oRE+JQ22jx3KVFp1Xa08VJzvxF/ld6bJ Fdtu7wolIZwChVeWAKrXD9sj0k/mYKAWufj23Zdw3+XgJSjyJwBdSTn8ekKHMrR5 oLd9RUvsXmwGkhwm99ZTqEaONsEywtfGs4bSp/qu3/OiV5fitOa4JRHXCXtnAE7K 3SAPs+82WxrQOhPJnAKdzRKRQIbestRyMtN20+2PaFVX7FpZEtwn65DkZ0hC8rLL 8c7ir9W4LGABJEmk3ZNS72tb4XdCDeEEDRDUOrzLZ2PggyMpybcAX1vNTHHRWn8j EZIyGw4EAs/Osg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:16:17 2025 by rpki-client