This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json) Hash identifier: JVDEO6b9pzNr1+6XJS5U9U7f46RLhWZ5M1oylmstbCM= Subject key identifier: E5:1C:05:06:C1:05:D7:27:0B:70:57:CB:BF:51:2C:38:9B:9C:1F:6E Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Certificate serial: 019B1D97F9D3E00655DDA0DB022EE236799C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 16:00:57 +0000 Manifest this update: Sun 14 Dec 2025 16:00:57 +0000 Manifest next update: Mon 15 Dec 2025 16:00:57 +0000 Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: oizOnYEv3EE4HTRDtPwj79q7im92i2lvnI5eE8U349k=) 2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=) 3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:97:f9:d3:e0:06:55:dd:a0:db:02:2e:e2:36:79:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Validity Not Before: Dec 14 16:00:57 2025 GMT Not After : Dec 15 16:00:57 2025 GMT Subject: CN=e51c0506c105d7270b7057cbbf512c389b9c1f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:e1:df:0e:72:69:82:a5:6e:17:50:e6:63: 90:28:d7:07:7c:de:0d:78:f8:3b:96:62:77:21:93: 14:7d:44:5e:2f:0d:c3:47:29:1e:90:e9:46:02:d1: a3:93:d0:d6:7f:2a:7f:07:f3:31:5d:6b:c1:5c:4f: 87:7b:88:bc:a7:97:f4:8b:a0:eb:c2:59:19:15:3b: 3e:ff:92:9c:e5:76:42:ad:e7:a2:2e:a1:5a:9a:07: a6:2d:c3:fe:8e:de:cf:11:e1:c8:6c:f0:ae:0c:6f: cb:84:a7:2b:64:b7:1e:a0:a3:28:75:1a:0e:dd:64: 2b:de:2f:29:73:07:f7:02:0b:fc:c3:63:f6:67:a5: 79:5f:9f:9d:f0:ee:5c:17:2b:b2:86:29:79:c2:ca: b8:24:eb:93:b9:f5:37:fa:f5:5a:40:2a:ec:05:44: 3d:4a:a2:98:cb:00:6d:4e:f2:fd:db:72:55:a6:7b: 6e:d2:7d:bd:81:b4:b6:be:80:fc:61:81:38:06:4e: 6d:21:a3:ed:f6:5f:a6:c5:f8:a5:aa:13:0a:5d:2f: c4:5a:28:2d:92:64:d3:63:97:3f:f1:22:f7:91:84: 3d:c9:cb:e2:64:ef:03:80:b8:c0:35:b0:16:38:2c: 4e:95:58:be:19:eb:d2:15:ae:99:00:c8:df:f2:cb: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1C:05:06:C1:05:D7:27:0B:70:57:CB:BF:51:2C:38:9B:9C:1F:6E X509v3 Authority Key Identifier: keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:79:48:30:db:eb:ab:bd:00:2e:24:7a:dd:8c:a3:56:57:0d: b5:c3:34:b4:aa:73:31:a8:8b:70:da:6e:5c:42:7b:5e:c2:86: d9:25:31:51:2b:2b:e0:3f:ac:c1:67:60:70:d5:a7:b1:cf:0a: f6:07:67:1d:5c:9d:6d:d7:37:70:43:72:80:65:d8:25:c0:96: 2f:59:ae:92:64:30:73:87:ce:33:51:da:d9:06:d3:0e:30:29: be:f0:03:3c:6c:96:dc:d2:f1:38:7e:ac:6f:87:3d:cb:c7:67: 6e:d1:ac:fc:82:e0:91:8a:4c:80:bc:f5:ed:ca:7e:cc:dd:9b: 38:34:06:bb:38:1f:8c:1d:73:d6:8e:05:38:28:71:aa:44:98: df:77:e1:47:66:41:e4:2a:d6:8d:91:7a:dd:90:91:e6:8e:72: 76:24:44:1d:c4:74:47:0d:33:22:08:57:3e:8f:da:fb:bd:9a: bb:1d:5e:6d:48:da:5c:b8:b9:1c:0b:2f:4a:53:34:8e:80:e9: 71:b6:78:e8:15:8e:c3:7d:e6:52:64:8e:4f:63:23:cc:71:02: 0e:90:ec:2a:e8:dd:d7:e4:da:53:3c:85:57:43:e3:de:7a:31: c8:96:d2:88:c5:17:7c:1e:a0:ee:35:aa:ed:70:75:e9:1c:19: 68:56:b6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdl/nT4AZV3aDbAi7iNnmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3 ZmQ0ZmEwHhcNMjUxMjE0MTYwMDU3WhcNMjUxMjE1MTYwMDU3WjAzMTEwLwYDVQQD EyhlNTFjMDUwNmMxMDVkNzI3MGI3MDU3Y2JiZjUxMmMzODliOWMxZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz/h3w5yaYKlbhdQ5mOQKNcHfN4N ePg7lmJ3IZMUfUReLw3DRykekOlGAtGjk9DWfyp/B/MxXWvBXE+He4i8p5f0i6Dr wlkZFTs+/5Kc5XZCreeiLqFamgemLcP+jt7PEeHIbPCuDG/LhKcrZLceoKModRoO 3WQr3i8pcwf3Agv8w2P2Z6V5X5+d8O5cFyuyhil5wsq4JOuTufU3+vVaQCrsBUQ9 SqKYywBtTvL923JVpntu0n29gbS2voD8YYE4Bk5tIaPt9l+mxfilqhMKXS/EWigt kmTTY5c/8SL3kYQ9ycviZO8DgLjANbAWOCxOlVi+GevSFa6ZAMjf8svNIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUcBQbBBdcnC3BXy79RLDibnB9uMB8GA1UdIwQY MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5 LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHlIMNvr q70ALiR63YyjVlcNtcM0tKpzMaiLcNpuXEJ7XsKG2SUxUSsr4D+swWdgcNWnsc8K 9gdnHVydbdc3cENygGXYJcCWL1mukmQwc4fOM1Ha2QbTDjApvvADPGyW3NLxOH6s b4c9y8dnbtGs/ILgkYpMgLz17cp+zN2bODQGuzgfjB1z1o4FOChxqkSY33fhR2ZB 5CrWjZF63ZCR5o5ydiREHcR0Rw0zIghXPo/a+72aux1ebUjaXLi5HAsvSlM0joDp cbZ46BWOw33mUmSOT2MjzHECDpDsKujd1+TaUzyFV0Pj3noxyJbSiMUXfB6g7jWq 7XB16RwZaFa2rQ== -----END CERTIFICATE-----Generated at Sun Dec 14 19:30:43 2025 by rpki-client