This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json) Hash identifier: aOvblfkWe+lfVM5bdXLM4k7Df9aJJlgzH74TqCSNA3w= Subject key identifier: EC:6E:C4:5A:5A:6E:AA:E8:A1:8A:7D:DA:46:36:4B:69:39:EA:6C:0D Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868 Certificate serial: 019B378E922876563A037B32A214A671D1B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 17:00:48 +0000 Manifest this update: Fri 19 Dec 2025 17:00:48 +0000 Manifest next update: Sat 20 Dec 2025 17:00:48 +0000 Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=) 2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: a8WuwzrcwDT/DQILxRVe9TQAKNW30a2gxJveiFgRZiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:92:28:76:56:3a:03:7b:32:a2:14:a6:71:d1:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868 Validity Not Before: Dec 19 17:00:48 2025 GMT Not After : Dec 20 17:00:48 2025 GMT Subject: CN=ec6ec45a5a6eaae8a18a7dda46364b6939ea6c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:e1:fd:3f:a7:4a:db:de:72:02:ac:71:b4: d0:f0:70:42:1d:6c:29:90:e1:db:35:79:49:75:85: ee:25:22:ca:1b:b8:4d:c7:07:82:13:2b:cc:05:49: 9d:40:e3:b0:7e:bb:a4:88:52:68:41:c6:8b:2a:d2: 8d:bd:ba:35:88:45:8f:e6:60:d7:e4:ec:6a:02:cd: 23:5e:5f:a5:49:5f:c9:16:39:9f:2c:88:98:7c:e0: c1:0a:2c:93:f6:68:ad:44:af:fb:97:86:62:93:0b: 3f:0f:3a:63:7f:2c:40:95:22:9b:6c:e3:7a:39:40: 15:a5:9c:07:34:29:c9:28:ed:03:e0:23:9b:13:f6: 3a:cb:a0:5e:c3:22:11:ab:24:e1:95:5a:0f:86:e6: 6c:8d:49:2c:4f:0d:66:0b:70:6b:10:6c:b5:f8:26: 81:98:8f:83:89:b6:fd:33:00:8e:e7:25:6e:06:30: 39:39:a4:fe:f4:1a:c3:76:d8:92:cd:10:8d:f4:9c: 17:d7:a2:23:a5:50:e2:b5:36:46:3f:18:22:14:d8: 9c:bc:b1:dc:6c:87:64:8a:2a:77:cc:98:db:d4:be: 9d:9d:6b:46:5a:c1:3c:5c:51:b7:0c:ae:99:d5:8f: 4b:d6:de:18:30:a8:c5:1a:48:31:f2:01:56:18:e1: 77:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6E:C4:5A:5A:6E:AA:E8:A1:8A:7D:DA:46:36:4B:69:39:EA:6C:0D X509v3 Authority Key Identifier: keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:fc:dd:32:45:f2:55:04:7c:3c:c9:23:42:45:b6:22:75:68: 61:f7:cb:37:a6:1e:ef:f6:af:c4:29:1e:7d:47:48:35:90:50: e2:7c:71:c6:c1:8c:51:07:67:f7:c7:ff:b0:ed:df:52:99:d1: f2:d9:6b:f6:97:f9:5d:9a:a9:29:22:86:cc:f4:a4:74:79:1b: ec:61:84:9c:02:9c:a6:c6:bd:44:5e:b7:74:49:9a:e0:e8:56: bc:ae:29:7c:c4:60:ad:06:0d:7e:8b:40:ee:9f:4d:d0:6b:3d: e4:ab:cd:e6:04:e4:ab:66:7d:97:a1:ea:80:3d:a9:72:71:7e: 7c:46:cc:29:ce:c8:1d:b5:ac:fe:01:07:65:6c:6f:3b:23:23: c1:44:9b:3c:fb:19:43:b0:48:94:1b:51:8f:a5:4d:68:42:da: 70:b9:39:a4:d5:01:8e:77:c4:d2:11:33:d9:a2:98:e9:b7:fe: 30:1c:b6:df:ab:ed:9c:cf:ad:b1:ed:0a:b8:2a:6c:91:7b:6a: 25:b0:4d:98:58:a4:41:bb:43:28:2f:e7:8f:99:ac:28:64:af: 3e:85:2b:20:bb:0c:80:d2:aa:93:9a:b2:37:c2:2d:70:f5:c8: aa:d4:9d:30:b8:ea:ea:6f:43:fe:a5:52:81:24:a9:78:8f:f0: 68:ae:b1:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jpIodlY6A3syohSmcdG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmNjZDdkN2UzMDhmODE4MDcwNTFmOGQ0ODdlOWQ4Mjlj MjQ4NjgwHhcNMjUxMjE5MTcwMDQ4WhcNMjUxMjIwMTcwMDQ4WjAzMTEwLwYDVQQD EyhlYzZlYzQ1YTVhNmVhYWU4YTE4YTdkZGE0NjM2NGI2OTM5ZWE2YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJzh/T+nStvecgKscbTQ8HBCHWwp kOHbNXlJdYXuJSLKG7hNxweCEyvMBUmdQOOwfrukiFJoQcaLKtKNvbo1iEWP5mDX 5OxqAs0jXl+lSV/JFjmfLIiYfODBCiyT9mitRK/7l4Zikws/DzpjfyxAlSKbbON6 OUAVpZwHNCnJKO0D4CObE/Y6y6BewyIRqyThlVoPhuZsjUksTw1mC3BrEGy1+CaB mI+Dibb9MwCO5yVuBjA5OaT+9BrDdtiSzRCN9JwX16IjpVDitTZGPxgiFNicvLHc bIdkiip3zJjb1L6dnWtGWsE8XFG3DK6Z1Y9L1t4YMKjFGkgx8gFWGOF3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxuxFpabqrooYp92kY2S2k56mwNMB8GA1UdIwQY MBaAFF78zX1+MI+BgHBR+NSH6dgpwkhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQt ZDFiZDA2ZjViZjAwLzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQtZDFiZDA2ZjViZjAw LzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPzdMkXy VQR8PMkjQkW2InVoYffLN6Ye7/avxCkefUdINZBQ4nxxxsGMUQdn98f/sO3fUpnR 8tlr9pf5XZqpKSKGzPSkdHkb7GGEnAKcpsa9RF63dEma4OhWvK4pfMRgrQYNfotA 7p9N0Gs95KvN5gTkq2Z9l6HqgD2pcnF+fEbMKc7IHbWs/gEHZWxvOyMjwUSbPPsZ Q7BIlBtRj6VNaELacLk5pNUBjnfE0hEz2aKY6bf+MBy236vtnM+tse0KuCpskXtq JbBNmFikQbtDKC/nj5msKGSvPoUrILsMgNKqk5qyN8ItcPXIqtSdMLjq6m9D/qVS gSSpeI/waK6xHw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:41:08 2025 by rpki-client