This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft File: XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json) Hash identifier: PgwswVxwQJzGkx9aCLu9rJZM9+ensjVV+jyI+huT9tM= Subject key identifier: C0:42:ED:C5:15:5A:C6:17:E2:BE:40:20:05:B5:85:68:63:D3:ED:8E Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Certificate serial: 019B34C6450D1E1424B254F270342AD11277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 04:02:47 +0000 Manifest this update: Fri 19 Dec 2025 04:02:47 +0000 Manifest next update: Sat 20 Dec 2025 04:02:47 +0000 Files and hashes: 1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: xqyPszgHS8WsgqvH2In/cJl+4zw8VqAbWknlZA11yYY=) 2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:45:0d:1e:14:24:b2:54:f2:70:34:2a:d1:12:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Validity Not Before: Dec 19 04:02:47 2025 GMT Not After : Dec 20 04:02:47 2025 GMT Subject: CN=c042edc5155ac617e2be402005b5856863d3ed8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:48:6e:cd:a9:ca:57:34:c1:e7:ab:6a:20: 1a:75:93:1f:20:58:30:5d:d5:10:39:1a:43:f6:e0: de:2f:2e:ff:5f:f9:73:e3:1a:62:9f:4f:d4:01:21: c0:2d:80:5d:67:d6:41:1b:cc:94:b2:d4:59:00:3c: 11:b8:fc:a4:f9:f0:e4:83:0d:fe:5c:d2:ff:01:73: fd:9f:da:86:b8:0b:cb:ed:fb:e9:e9:d9:d1:76:e1: fb:fa:a6:75:83:52:67:c1:5a:90:13:3b:b4:00:0d: 25:1f:b5:06:2d:24:21:25:9d:6b:8e:92:f0:84:93: c2:41:b9:8a:c2:49:37:53:69:da:e8:6e:0a:8d:75: a4:73:ac:65:9f:2b:76:fe:39:94:bf:2d:64:9c:2f: 50:3e:99:83:9d:2d:15:1b:69:d6:f4:48:31:1e:ee: 3a:26:8c:63:92:8b:ea:bc:0b:4b:4f:c3:58:65:f0: b4:34:13:0f:b3:15:09:63:e3:d4:2a:ef:2c:db:4c: 23:5e:7b:38:3c:1e:6f:72:21:50:b0:37:2c:04:33: d1:be:23:ee:05:2f:51:68:60:da:bc:cf:2a:00:dc: 74:a5:d1:ba:d4:11:47:68:f3:0b:65:d1:66:33:5c: e4:09:de:5b:64:63:6d:67:31:ad:dc:89:59:6c:8b: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:ED:C5:15:5A:C6:17:E2:BE:40:20:05:B5:85:68:63:D3:ED:8E X509v3 Authority Key Identifier: keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:bd:06:c3:d8:ce:be:5b:bc:53:a9:0d:99:d9:fe:a4:45:48: 56:db:cc:6e:c4:a3:b6:aa:3f:ab:1f:ec:f0:de:6c:e1:de:2d: 85:de:ec:6c:1b:e8:c2:f5:0f:9c:77:9a:ed:38:d1:ca:9c:21: 73:d2:c4:21:bd:6e:88:b7:a3:cf:9d:ac:79:ae:e0:be:de:21: 62:b2:2e:97:c2:a7:0c:bd:74:6c:6b:ee:03:56:62:ec:eb:bd: fd:71:f4:fd:cd:ba:28:c4:72:ce:8d:fc:45:82:f7:53:7a:ca: a6:de:36:be:b0:52:99:17:ec:60:85:56:5f:5e:c4:0d:04:ab: 44:a2:86:77:9c:99:df:3f:92:6d:c0:02:be:75:b9:28:d2:ba: b0:34:e6:79:d9:02:8c:4a:b3:62:70:5a:9d:dd:52:44:6c:4d: 6f:c2:0f:2f:cc:97:d3:1d:dc:c1:9b:a1:7e:6d:44:45:cb:d4: 69:50:71:4f:a5:0b:7f:f3:1a:12:2d:a7:ab:b1:9c:dd:61:9c: 95:1f:6e:bb:85:80:48:da:eb:74:67:bc:d1:0d:cd:72:7a:fd: 6c:73:a3:e8:af:78:8e:ff:17:ed:07:c4:8b:63:81:7d:35:93: 32:56:34:b4:27:be:24:93:34:23:77:48:26:b5:f9:0f:d2:04: 3b:c5:15:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xkUNHhQkslTycDQq0RJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3 ZGE3ZWEwHhcNMjUxMjE5MDQwMjQ3WhcNMjUxMjIwMDQwMjQ3WjAzMTEwLwYDVQQD EyhjMDQyZWRjNTE1NWFjNjE3ZTJiZTQwMjAwNWI1ODU2ODYzZDNlZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9lIbs2pylc0weeraiAadZMfIFgw XdUQORpD9uDeLy7/X/lz4xpin0/UASHALYBdZ9ZBG8yUstRZADwRuPyk+fDkgw3+ XNL/AXP9n9qGuAvL7fvp6dnRduH7+qZ1g1JnwVqQEzu0AA0lH7UGLSQhJZ1rjpLw hJPCQbmKwkk3U2na6G4KjXWkc6xlnyt2/jmUvy1knC9QPpmDnS0VG2nW9EgxHu46 JoxjkovqvAtLT8NYZfC0NBMPsxUJY+PUKu8s20wjXns4PB5vciFQsDcsBDPRviPu BS9RaGDavM8qANx0pdG61BFHaPMLZdFmM1zkCd5bZGNtZzGt3IlZbItGYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBC7cUVWsYX4r5AIAW1hWhj0+2OMB8GA1UdIwQY MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt MzUyMDA0YmMyMjgyLzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL0Gw9jO vlu8U6kNmdn+pEVIVtvMbsSjtqo/qx/s8N5s4d4thd7sbBvowvUPnHea7TjRypwh c9LEIb1uiLejz52sea7gvt4hYrIul8KnDL10bGvuA1Zi7Ou9/XH0/c26KMRyzo38 RYL3U3rKpt42vrBSmRfsYIVWX17EDQSrRKKGd5yZ3z+SbcACvnW5KNK6sDTmedkC jEqzYnBand1SRGxNb8IPL8yX0x3cwZuhfm1ERcvUaVBxT6ULf/MaEi2nq7Gc3WGc lR9uu4WASNrrdGe80Q3Ncnr9bHOj6K94jv8X7QfEi2OBfTWTMlY0tCe+JJM0I3dI JrX5D9IEO8UVHg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:36 2025 by rpki-client