This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json) Hash identifier: 54rf8htzwaG5+JNWDrO8rkIq6ye9smH0PDi+utRNakM= Subject key identifier: 41:D0:31:BA:73:7A:0A:D3:38:8B:18:F0:FA:DE:F8:40:D1:E7:F9:7B Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd Certificate serial: 019B3B6B91320FD7153FD182EB712127F534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft Manifest number: 108A Signing time: Sat 20 Dec 2025 11:01:03 +0000 Manifest this update: Sat 20 Dec 2025 11:01:03 +0000 Manifest next update: Sun 21 Dec 2025 11:01:03 +0000 Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=) 2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: a7sp+WDHlF5904FFvA21lltHFqTnW7PGKw5+w2PWatA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:91:32:0f:d7:15:3f:d1:82:eb:71:21:27:f5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd Validity Not Before: Dec 20 11:01:03 2025 GMT Not After : Dec 21 11:01:03 2025 GMT Subject: CN=41d031ba737a0ad3388b18f0fadef840d1e7f97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:a6:f8:d4:34:5c:85:e6:4a:0c:0f:0b:84: 0f:d7:2d:10:74:9f:7b:a5:41:00:b9:96:de:2f:ac: 8a:00:5c:97:b9:28:53:47:5d:a7:1e:b5:7f:ad:48: 60:85:25:e0:06:bd:0b:cf:ab:2d:79:49:22:d0:c7: 5b:1e:25:d4:db:50:66:b5:af:30:0e:1c:5d:46:1f: ec:eb:d6:63:e6:01:d1:2f:64:ea:b7:f5:a5:c9:6c: db:3d:8e:f8:1b:30:f1:b1:85:99:aa:05:6b:bf:7f: 05:c2:87:c4:b7:5c:af:67:31:7d:fe:e1:df:2f:1f: 85:b3:53:12:94:e0:f7:53:59:97:5d:5e:0e:15:2c: e0:84:88:07:55:8a:ce:b0:7a:d3:d9:97:24:b6:b5: b3:cf:6d:ce:9a:23:03:a0:bb:41:aa:32:2f:59:8f: a9:5b:f8:4b:a2:65:4d:0b:0c:7b:b2:48:6f:13:82: 80:cc:a8:e6:d8:44:d1:84:d7:4b:0b:0e:6f:98:2f: b2:86:2f:e0:ce:ea:a4:94:63:70:65:e6:e3:53:4b: 2a:bd:f8:12:a1:75:53:7c:d6:12:72:21:dd:a7:81: 75:12:bf:58:db:64:e6:55:ac:08:bc:d2:8f:7e:a9: 83:cd:c4:88:32:4b:69:2c:a0:94:3d:2c:6d:79:9f: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D0:31:BA:73:7A:0A:D3:38:8B:18:F0:FA:DE:F8:40:D1:E7:F9:7B X509v3 Authority Key Identifier: keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f6:ae:15:a7:9f:47:81:cd:78:3e:57:df:cb:8d:11:43:36: 20:b1:a2:0c:88:27:34:e2:4e:30:aa:30:d3:79:6d:00:74:25: ee:5a:b8:b1:01:ed:a5:ab:4d:f1:83:5d:eb:9b:f3:72:d6:76: 1d:42:f7:7e:73:42:7c:3b:80:c2:df:e0:61:28:cb:47:e2:66: 42:63:3d:6d:bc:04:c9:d1:9f:1a:12:ba:b6:26:e9:4c:f0:40: fe:d8:2c:20:dc:0c:64:2c:1f:64:0a:a3:ac:d4:06:cc:6b:4c: a2:e3:70:8e:b8:fe:6c:a5:84:39:51:c7:16:70:50:e1:9c:af: 68:ef:41:4d:17:27:c0:2f:b8:74:4d:16:32:85:e8:70:5c:f1: 4b:64:24:1f:df:7c:99:80:6a:f5:5c:8d:6a:5c:91:7a:7e:7d: dc:52:e8:04:f0:27:ae:96:00:40:0f:b1:73:54:a4:60:07:c4: 62:84:d4:ac:ee:68:54:d4:d7:4e:f3:52:4a:2d:93:4b:8d:60: fe:50:da:fd:ec:d1:14:44:44:17:f8:89:5f:47:3e:1a:bd:0f: d8:ce:ee:a7:e8:c7:8a:1a:b5:49:d2:2b:0b:4a:3e:fc:a6:4c: 08:0d:2a:6e:94:e5:20:94:98:87:fc:83:89:30:34:bc:df:d3: ef:c5:3f:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a5EyD9cVP9GC63EhJ/U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1 ODRmY2QwHhcNMjUxMjIwMTEwMTAzWhcNMjUxMjIxMTEwMTAzWjAzMTEwLwYDVQQD Eyg0MWQwMzFiYTczN2EwYWQzMzg4YjE4ZjBmYWRlZjg0MGQxZTdmOTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Gm+NQ0XIXmSgwPC4QP1y0QdJ97 pUEAuZbeL6yKAFyXuShTR12nHrV/rUhghSXgBr0Lz6steUki0MdbHiXU21Bmta8w DhxdRh/s69Zj5gHRL2Tqt/WlyWzbPY74GzDxsYWZqgVrv38FwofEt1yvZzF9/uHf Lx+Fs1MSlOD3U1mXXV4OFSzghIgHVYrOsHrT2ZcktrWzz23OmiMDoLtBqjIvWY+p W/hLomVNCwx7skhvE4KAzKjm2ETRhNdLCw5vmC+yhi/gzuqklGNwZebjU0sqvfgS oXVTfNYSciHdp4F1Er9Y22TmVawIvNKPfqmDzcSIMktpLKCUPSxteZ9exwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHQMbpzegrTOIsY8Pre+EDR5/l7MB8GA1UdIwQY MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvauFaef R4HNeD5X38uNEUM2ILGiDIgnNOJOMKow03ltAHQl7lq4sQHtpatN8YNd65vzctZ2 HUL3fnNCfDuAwt/gYSjLR+JmQmM9bbwEydGfGhK6tibpTPBA/tgsINwMZCwfZAqj rNQGzGtMouNwjrj+bKWEOVHHFnBQ4ZyvaO9BTRcnwC+4dE0WMoXocFzxS2QkH998 mYBq9VyNalyRen593FLoBPAnrpYAQA+xc1SkYAfEYoTUrO5oVNTXTvNSSi2TS41g /lDa/ezRFEREF/iJX0c+Gr0P2M7up+jHihq1SdIrC0o+/KZMCA0qbpTlIJSYh/yD iTA0vN/T78U/mA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:52:25 2025 by rpki-client