This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json) Hash identifier: VPLOROV9VB/JmkmfTqPxxYNrl2eDyYuJL/TjRpkdY4k= Subject key identifier: 37:AF:9D:59:1E:C6:A8:B9:34:F4:88:7A:31:0C:FC:12:AF:BB:D1:25 Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Certificate serial: 019B40C96713A7F1024C55C3A650D9D6938A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft Manifest number: 0AAC Signing time: Sun 21 Dec 2025 12:01:39 +0000 Manifest this update: Sun 21 Dec 2025 12:01:39 +0000 Manifest next update: Mon 22 Dec 2025 12:01:39 +0000 Files and hashes: 1: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: HICH6Vkqzv1vZop64HII4fCwGhTuPmSrK3I6Yf9VtN4=) 2: fYKamMDotNpG3aOBQiK2OsMYSYg.roa (hash: uPulFIQs0lwohOsO0wsrbiYG/acFSaW8YdBiwrRbEhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:67:13:a7:f1:02:4c:55:c3:a6:50:d9:d6:93:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1 Validity Not Before: Dec 21 12:01:39 2025 GMT Not After : Dec 22 12:01:39 2025 GMT Subject: CN=37af9d591ec6a8b934f4887a310cfc12afbbd125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e3:60:ea:24:a6:f8:6c:3e:95:07:a5:1e:9d: 9e:de:8b:a3:a1:eb:61:81:d2:3d:7e:83:23:f4:75: b6:41:df:0f:19:7b:a7:99:b7:53:e9:79:cd:fd:66: ba:2e:f3:8f:1d:c3:74:06:40:b4:40:7d:8d:09:4b: 3c:46:9e:34:24:11:27:0a:46:9a:4c:1c:2d:e4:84: a1:dd:22:15:5c:5c:0c:92:bd:8c:c7:ed:ef:07:bb: 46:89:71:50:63:d5:43:cd:81:7d:af:9c:39:f3:c6: c8:a1:bb:35:2f:c0:d7:f4:0c:69:81:ec:f6:82:ff: c4:3e:0c:02:47:73:b5:fe:08:28:7a:94:2e:07:0c: c9:81:c4:aa:be:7f:3b:ef:1f:69:f7:d2:46:c6:28: e5:8b:8c:c9:83:28:cc:67:45:fa:a3:05:94:7a:28: f3:87:05:bf:ff:02:1b:eb:65:dd:13:bf:eb:5e:92: 7a:73:1e:04:c3:ab:ab:69:76:ec:59:56:e3:f3:b5: a4:ae:43:20:5c:99:8b:4b:a1:99:a4:76:64:5b:d0: ee:94:e3:73:a7:d9:43:2a:64:17:91:1b:25:ae:3c: 4d:cf:20:e1:47:e6:6a:60:99:9e:0f:5f:0c:0b:6e: 43:0d:c8:6a:7d:28:e4:6f:ec:37:3e:65:bf:2e:6e: 03:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:AF:9D:59:1E:C6:A8:B9:34:F4:88:7A:31:0C:FC:12:AF:BB:D1:25 X509v3 Authority Key Identifier: keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:de:a2:09:9f:41:e8:5d:19:c5:bd:34:de:c6:c4:72:df:66: 64:20:d7:f3:80:b7:85:3a:8c:85:75:f6:c6:2e:7f:8b:0c:65: 85:99:63:31:22:61:ad:43:54:ee:14:16:5f:bb:4a:4f:75:96: aa:9d:30:fd:a0:61:4c:5f:31:72:e4:5d:31:01:f4:0a:e7:a6: 0d:e4:a9:8f:8d:d7:fe:24:69:de:b8:fd:92:99:c3:8d:41:64: b4:23:05:87:86:a0:7f:3a:5a:59:a4:c1:55:32:40:12:6f:80: d5:61:4f:5b:a0:ec:e2:fe:0d:19:11:6b:f4:fb:a6:17:ac:73: e7:f5:1a:be:0b:5e:7e:a3:ea:7e:a7:72:08:ad:05:fc:ec:65: 27:65:60:33:fa:3c:b0:97:6d:22:e9:8e:a3:c5:02:2e:b9:bf: d5:89:88:22:89:0b:ad:25:67:5b:1a:95:80:8f:cc:be:02:73: c7:50:36:e1:f1:bd:da:a0:c5:d6:4e:ef:c2:86:54:e5:57:90: 92:f6:d1:99:a0:97:81:79:ae:56:c9:65:ba:01:e5:75:10:6d: 63:dd:b7:15:ae:76:89:a4:99:98:78:34:d7:e2:97:07:f0:16: c1:26:bc:a9:e6:a4:6c:7a:90:98:8f:0c:36:5e:72:25:af:de: 54:fe:88:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyWcTp/ECTFXDplDZ1pOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3 N2Q0ZDEwHhcNMjUxMjIxMTIwMTM5WhcNMjUxMjIyMTIwMTM5WjAzMTEwLwYDVQQD EygzN2FmOWQ1OTFlYzZhOGI5MzRmNDg4N2EzMTBjZmMxMmFmYmJkMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uNg6iSm+Gw+lQelHp2e3oujoeth gdI9foMj9HW2Qd8PGXunmbdT6XnN/Wa6LvOPHcN0BkC0QH2NCUs8Rp40JBEnCkaa TBwt5ISh3SIVXFwMkr2Mx+3vB7tGiXFQY9VDzYF9r5w588bIobs1L8DX9Axpgez2 gv/EPgwCR3O1/ggoepQuBwzJgcSqvn877x9p99JGxijli4zJgyjMZ0X6owWUeijz hwW//wIb62XdE7/rXpJ6cx4Ew6uraXbsWVbj87WkrkMgXJmLS6GZpHZkW9DulONz p9lDKmQXkRslrjxNzyDhR+ZqYJmeD18MC25DDchqfSjkb+w3PmW/Lm4D6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDevnVkexqi5NPSIejEM/BKvu9ElMB8GA1UdIwQY MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2 LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd6iCZ9B 6F0Zxb003sbEct9mZCDX84C3hTqMhXX2xi5/iwxlhZljMSJhrUNU7hQWX7tKT3WW qp0w/aBhTF8xcuRdMQH0CuemDeSpj43X/iRp3rj9kpnDjUFktCMFh4agfzpaWaTB VTJAEm+A1WFPW6Ds4v4NGRFr9PumF6xz5/UavgtefqPqfqdyCK0F/OxlJ2VgM/o8 sJdtIumOo8UCLrm/1YmIIokLrSVnWxqVgI/MvgJzx1A24fG92qDF1k7vwoZU5VeQ kvbRmaCXgXmuVsllugHldRBtY923Fa52iaSZmHg01+KXB/AWwSa8qeakbHqQmI8M Nl5yJa/eVP6I1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:40 2025 by rpki-client