This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json) Hash identifier: R+EMUfFs8etsXZc1tkBjitj2+FxlOOLqNrnIv80ibk8= Subject key identifier: E1:1A:EC:FD:7B:E1:5C:51:21:5C:02:C8:8A:B5:8C:14:76:99:BE:95 Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Certificate serial: 019B3CECA075BED294ABC4FF07AF7EB5CA79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft Manifest number: B3 Signing time: Sat 20 Dec 2025 18:01:39 +0000 Manifest this update: Sat 20 Dec 2025 18:01:39 +0000 Manifest next update: Sun 21 Dec 2025 18:01:39 +0000 Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: r+SrI5ClxdmhiL/R6+Z8weJJouFTTahq2qdXDEp3JxY=) 2: b771fZdz_MNhiObaQsIwRdjf7Gs.roa (hash: o+D5q+mMR9tPd7YAvMxT+oCI4+Bj3WK3M/NrPMAIyl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a0:75:be:d2:94:ab:c4:ff:07:af:7e:b5:ca:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7 Validity Not Before: Dec 20 18:01:39 2025 GMT Not After : Dec 21 18:01:39 2025 GMT Subject: CN=e11aecfd7be15c51215c02c88ab58c147699be95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:0c:72:dc:f1:13:29:b8:4c:cb:bf:03:74: e8:bf:94:a6:92:4e:4a:f5:a2:63:92:f1:41:19:3d: 1c:b5:ce:41:9e:9b:3e:a4:6b:e5:48:88:b2:fa:b5: ee:f7:4a:69:8b:41:30:ec:f4:62:37:2b:b6:7a:72: 4e:5d:a8:3a:d0:e8:da:db:66:8f:95:e1:31:20:3f: 6c:03:58:62:69:a1:8c:bc:cf:ff:23:99:bd:52:5a: 77:25:0a:97:a9:6a:08:01:00:20:ea:99:25:2e:22: cc:ec:93:8b:78:42:2b:73:24:ec:49:5c:1f:f9:49: 79:ce:b3:a3:db:af:ed:0a:8d:21:f7:2f:5f:fc:db: dd:40:18:36:c0:40:14:43:19:a5:c5:a8:74:67:d2: e8:f1:82:94:03:2f:02:1b:3f:41:25:92:6f:3d:47: 4d:1c:fe:ab:47:c8:ff:1c:a5:a5:04:cf:05:f5:c5: 82:b6:50:5e:28:35:28:a0:df:d2:b6:43:eb:5b:a3: c3:cc:d0:6c:d5:b8:8f:6d:1d:af:54:51:a8:4f:6f: fc:4f:9a:51:d3:bd:b5:0e:94:fc:a9:cb:4b:54:ac: ed:4e:1c:5b:61:f4:4f:8d:90:ca:25:f2:91:83:cb: 3c:eb:33:b2:a5:50:dc:90:d8:a4:55:40:fa:fb:be: 24:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1A:EC:FD:7B:E1:5C:51:21:5C:02:C8:8A:B5:8C:14:76:99:BE:95 X509v3 Authority Key Identifier: keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:63:99:b5:9c:8e:f6:41:89:c4:84:42:8b:56:7b:0c:da:2c: 85:a5:a3:7f:8c:b6:e9:74:8b:79:d7:cc:1c:73:f2:c2:5c:f2: df:83:43:5d:28:aa:08:99:ec:c7:25:99:5a:8d:cc:41:31:35: 9b:04:0a:43:fe:fb:68:bc:05:8a:39:c5:a4:c4:48:ec:7e:cb: 61:54:40:28:78:45:d0:5b:d2:b5:18:5d:4a:ba:c3:99:88:ec: 3a:8b:13:78:67:7e:58:64:c5:e9:6a:38:33:2d:a6:f9:8d:c8: cb:c1:3e:a8:2a:04:f5:96:bb:f7:6d:a8:2d:06:c1:c8:24:56: 84:4a:98:91:b2:6d:a4:97:99:f4:56:5c:14:98:d7:f7:b8:d6: 6f:be:d0:79:0b:d3:9f:0e:f1:05:76:78:02:17:7f:06:6d:55: 51:16:c9:d3:d7:d9:2e:d5:9c:0c:1a:6b:a5:bd:f1:c4:d2:57: 38:fa:3c:66:db:7c:a6:ca:ee:bd:b0:28:f8:56:7c:98:64:8f: e1:84:cf:f9:21:d7:24:46:ed:01:b9:d0:1a:89:50:9d:d7:5b: f7:9a:72:65:4a:ac:cc:0d:d6:a6:55:ad:56:4d:f4:73:16:3f: b2:e2:e4:a7:99:ce:57:03:12:24:ed:e3:c6:83:7c:ba:20:b8: f1:08:f6:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KB1vtKUq8T/B69+tcp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGY0MGIxMjQ4ZGUzZGE1ZjVkNjA5N2Y4MTA2ODI5M2M0 YmVlZjcwHhcNMjUxMjIwMTgwMTM5WhcNMjUxMjIxMTgwMTM5WjAzMTEwLwYDVQQD EyhlMTFhZWNmZDdiZTE1YzUxMjE1YzAyYzg4YWI1OGMxNDc2OTliZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsREMctzxEym4TMu/A3Tov5Smkk5K 9aJjkvFBGT0ctc5Bnps+pGvlSIiy+rXu90ppi0Ew7PRiNyu2enJOXag60Oja22aP leExID9sA1hiaaGMvM//I5m9Ulp3JQqXqWoIAQAg6pklLiLM7JOLeEIrcyTsSVwf +Ul5zrOj26/tCo0h9y9f/NvdQBg2wEAUQxmlxah0Z9Lo8YKUAy8CGz9BJZJvPUdN HP6rR8j/HKWlBM8F9cWCtlBeKDUooN/StkPrW6PDzNBs1biPbR2vVFGoT2/8T5pR 0721DpT8qctLVKztThxbYfRPjZDKJfKRg8s86zOypVDckNikVUD6+74k6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEa7P174VxRIVwCyIq1jBR2mb6VMB8GA1UdIwQY MBaAFF2PQLEkjePaX11gl/gQaCk8S+73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEt YmQ2NWZlZDY3ZGM2LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8xMGZlYTgtNGY5Yy00MmUyLWIwNDEtYmQ2NWZlZDY3ZGM2 LzEvWFk5QXNTU040OXBmWFdDWC1CQm9LVHhMN3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmOZtZyO 9kGJxIRCi1Z7DNoshaWjf4y26XSLedfMHHPywlzy34NDXSiqCJnsxyWZWo3MQTE1 mwQKQ/77aLwFijnFpMRI7H7LYVRAKHhF0FvStRhdSrrDmYjsOosTeGd+WGTF6Wo4 My2m+Y3Iy8E+qCoE9Za7922oLQbByCRWhEqYkbJtpJeZ9FZcFJjX97jWb77QeQvT nw7xBXZ4Ahd/Bm1VURbJ09fZLtWcDBprpb3xxNJXOPo8Ztt8psruvbAo+FZ8mGSP 4YTP+SHXJEbtAbnQGolQnddb95pyZUqszA3WplWtVk30cxY/suLkp5nOVwMSJO3j xoN8uiC48Qj2Tg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:24 2025 by rpki-client