This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft File: X17ZkhxjvxDbCEutMy6p_5-BmeY.mft (raw, json) Hash identifier: hGECAeVRSwkhN6iMlqmBY2pM53+mPgR8gTRKUB4txaQ= Subject key identifier: 22:23:54:2C:E5:E5:73:80:87:10:21:5A:09:C7:9E:90:58:DC:4A:D7 Authority key identifier: 5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 Certificate issuer: /CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Certificate serial: 019B5A88AA90DEC8A4B6DD54E140170F1D75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft Manifest number: 07B1 Signing time: Fri 26 Dec 2025 12:01:04 +0000 Manifest this update: Fri 26 Dec 2025 12:01:04 +0000 Manifest next update: Sat 27 Dec 2025 12:01:04 +0000 Files and hashes: 1: PM3-UGKjLr96XIFPl-hOFG_Fkxo.roa (hash: 1qezTMxLLeCKKaAo2JrFFrXX9RE2wcF8+6TlYZv7BMc=) 2: X17ZkhxjvxDbCEutMy6p_5-BmeY.crl (hash: QtxjpsakJsD09guHxD6ztYb6PZfQGhgnHZ6b+QBVqLo=) 3: bmXZpHHxtrkVL17e18KvIxTw5lc.roa (hash: 8ICDtcdjlLyMFFUIIbeNdV9LHsXmbPFx6BjBW2piZ4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:aa:90:de:c8:a4:b6:dd:54:e1:40:17:0f:1d:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5ed9921c63bf10db084bad332ea9ff9f8199e6 Validity Not Before: Dec 26 12:01:04 2025 GMT Not After : Dec 27 12:01:04 2025 GMT Subject: CN=2223542ce5e573808710215a09c79e9058dc4ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:d8:b2:a5:e0:08:71:38:82:a2:ca:ff:e8: 0f:1b:eb:79:71:69:4a:0d:59:fa:63:e8:f3:d4:21: 48:2b:1d:24:9f:3b:49:9c:62:8b:e0:a2:6c:f3:99: 1e:24:c9:eb:60:0c:9a:35:71:a2:7b:88:33:94:6a: 07:7a:50:4a:b0:26:e7:d0:d7:a6:e2:22:5e:f8:54: 51:42:83:16:6f:69:19:13:c0:a9:19:d0:c8:f1:b4: ea:2c:f9:4e:a2:cd:dc:85:0e:1f:36:a3:9b:17:cc: 61:db:9e:ff:7c:d1:b9:4e:46:5d:fd:ba:49:6a:e5: 51:12:78:38:47:84:e2:bf:0e:7c:4b:d1:4b:28:78: 1b:ce:84:ff:e1:e9:03:76:cb:c6:1a:f3:08:89:11: 76:e7:df:68:b4:c6:a1:4d:a0:84:0c:e5:d5:f5:98: 94:1e:37:7a:c1:ba:60:00:8b:e1:ef:6a:a8:5c:d5: 4a:49:b8:17:88:13:89:cd:1a:2e:40:3a:7b:c4:33: f0:b4:3e:a8:f6:6f:eb:22:88:76:e9:4c:e5:aa:3c: 87:14:aa:60:93:68:9d:fb:48:76:e3:b1:5f:a2:a3: 72:6d:a4:6e:45:fa:0b:d9:24:21:e6:39:a5:62:29: f5:45:10:53:6f:f7:08:cc:1f:62:79:0b:69:24:f2: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:54:2C:E5:E5:73:80:87:10:21:5A:09:C7:9E:90:58:DC:4A:D7 X509v3 Authority Key Identifier: keyid:5F:5E:D9:92:1C:63:BF:10:DB:08:4B:AD:33:2E:A9:FF:9F:81:99:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X17ZkhxjvxDbCEutMy6p_5-BmeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/df0b7a-68b3-47d5-b671-df27f10c7097/1/X17ZkhxjvxDbCEutMy6p_5-BmeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2e:52:fd:7d:ec:8c:4e:ed:18:f1:6b:be:2b:05:43:a1:3d: 56:89:93:14:28:96:51:51:a6:1b:7f:86:1a:c8:88:bd:14:3d: cd:fd:81:e3:66:52:07:32:05:58:df:e8:dc:66:b6:74:a8:b8: 0f:fe:ec:eb:ca:83:2a:62:3e:38:1c:2c:32:dc:37:7b:d8:f6: 8e:60:9a:9c:ab:69:bc:32:5e:71:e4:ce:33:05:6b:06:3f:e8: 77:f1:d2:ba:9e:15:fa:f4:b5:e7:b3:39:9c:49:1c:8d:b0:94: 75:3e:8c:dd:a2:6b:b4:a7:27:ab:2e:4c:7f:19:00:9d:49:1d: e3:e1:85:f3:c2:dd:a5:45:f6:6d:7f:54:e7:56:2b:93:e1:73: 62:20:fd:92:ee:f6:26:e6:ce:de:ef:41:0f:1c:3e:3c:59:fc: 4d:85:6f:35:5c:52:5d:f4:9c:dc:ce:07:d0:5b:69:c2:6d:2b: fa:90:94:e0:77:b0:be:0c:e6:c8:49:ba:52:a6:e0:50:70:80: 38:d7:8a:97:92:65:a8:28:bc:5f:08:54:2b:5c:c5:f4:d9:27: 08:dc:0b:5e:fe:ce:38:a1:dd:c5:a5:df:f0:b4:a1:18:72:c4: b3:63:05:b5:e9:98:28:47:ea:a2:b8:ab:fd:fc:56:31:05:6c: 18:e4:f4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKqQ3siktt1U4UAXDx11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNWVkOTkyMWM2M2JmMTBkYjA4NGJhZDMzMmVhOWZmOWY4 MTk5ZTYwHhcNMjUxMjI2MTIwMTA0WhcNMjUxMjI3MTIwMTA0WjAzMTEwLwYDVQQD EygyMjIzNTQyY2U1ZTU3MzgwODcxMDIxNWEwOWM3OWU5MDU4ZGM0YWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOnYsqXgCHE4gqLK/+gPG+t5cWlK DVn6Y+jz1CFIKx0knztJnGKL4KJs85keJMnrYAyaNXGie4gzlGoHelBKsCbn0Nem 4iJe+FRRQoMWb2kZE8CpGdDI8bTqLPlOos3chQ4fNqObF8xh257/fNG5TkZd/bpJ auVREng4R4Tivw58S9FLKHgbzoT/4ekDdsvGGvMIiRF2599otMahTaCEDOXV9ZiU Hjd6wbpgAIvh72qoXNVKSbgXiBOJzRouQDp7xDPwtD6o9m/rIoh26UzlqjyHFKpg k2id+0h247FfoqNybaRuRfoL2SQh5jmlYin1RRBTb/cIzB9ieQtpJPKSXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIjVCzl5XOAhxAhWgnHnpBY3ErXMB8GA1UdIwQY MBaAFF9e2ZIcY78Q2whLrTMuqf+fgZnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEt ZGYyN2YxMGM3MDk3LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9kZjBiN2EtNjhiMy00N2Q1LWI2NzEtZGYyN2YxMGM3MDk3 LzEvWDE3WmtoeGp2eERiQ0V1dE15NnBfNS1CbWVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAey5S/X3s jE7tGPFrvisFQ6E9VomTFCiWUVGmG3+GGsiIvRQ9zf2B42ZSBzIFWN/o3Ga2dKi4 D/7s68qDKmI+OBwsMtw3e9j2jmCanKtpvDJeceTOMwVrBj/od/HSup4V+vS157M5 nEkcjbCUdT6M3aJrtKcnqy5MfxkAnUkd4+GF88LdpUX2bX9U51Yrk+FzYiD9ku72 JubO3u9BDxw+PFn8TYVvNVxSXfSc3M4H0Ftpwm0r+pCU4HewvgzmyEm6UqbgUHCA ONeKl5JlqCi8XwhUK1zF9NknCNwLXv7OOKHdxaXf8LShGHLEs2MFtemYKEfqorir /fxWMQVsGOT0Pw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:00 2025 by rpki-client