This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json) Hash identifier: nN9GQzJl9b4DerW08ERHCrGMhN1fSHXE3wQ3oHLcSFA= Subject key identifier: 23:EC:89:BC:FC:5E:DD:50:B1:8F:04:15:C9:90:A0:F1:F3:F1:68:40 Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B5E2E99C4AE6A00D1FC49A99E9394CF76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft Manifest number: 05DA Signing time: Sat 27 Dec 2025 05:01:10 +0000 Manifest this update: Sat 27 Dec 2025 05:01:10 +0000 Manifest next update: Sun 28 Dec 2025 05:01:10 +0000 Files and hashes: 1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=) 2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=) 3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: T8+twPzUIIH40fXnL+WPEq4c8Axw6ckxER9bKQTP4Zo=) 4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=) 5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:2e:99:c4:ae:6a:00:d1:fc:49:a9:9e:93:94:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Dec 27 05:01:10 2025 GMT Not After : Dec 28 05:01:10 2025 GMT Subject: CN=23ec89bcfc5edd50b18f0415c990a0f1f3f16840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f6:b8:bf:a1:99:20:4a:ee:54:16:ab:ca:c6: 87:44:9a:2e:e9:9a:b0:6f:77:40:ab:be:70:f6:bc: 06:57:d3:dd:73:f8:02:3b:26:7b:30:38:ab:67:5c: 1c:cc:83:8a:24:57:2a:8f:59:a8:0e:f7:f3:d7:4a: a0:be:30:00:85:2a:d8:6c:01:78:57:ff:1b:83:02: 57:1a:ef:be:5e:62:81:4d:0b:7b:e3:59:d5:78:08: ac:02:a7:eb:43:41:fe:b7:bb:7e:d4:86:97:c4:93: ee:e4:4c:0c:d2:10:d3:ec:e7:50:d9:22:ac:43:6f: e0:4f:2c:8f:c9:26:92:09:99:cb:d8:7b:03:62:41: d4:7f:7d:d9:68:a0:0a:77:75:71:a0:a0:29:7f:ef: 69:14:d3:3f:fe:89:05:88:dc:54:eb:2f:a1:fc:ac: ca:b1:d4:c1:b6:a9:2c:61:ae:9b:1f:2a:8c:42:82: 79:fa:88:d7:b1:9f:f2:3d:d0:bb:19:88:fd:67:ff: ff:f2:5d:53:94:20:21:89:a8:02:91:58:a7:75:a4: 4e:b6:2c:6a:4a:fb:b9:7c:d3:4d:f2:9e:bb:2d:3f: 67:25:42:53:90:e2:de:41:47:40:45:c6:bf:cc:bb: 72:8f:dd:4c:56:d6:b9:4a:8a:5c:66:9c:e6:d4:9d: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EC:89:BC:FC:5E:DD:50:B1:8F:04:15:C9:90:A0:F1:F3:F1:68:40 X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:65:83:56:37:f1:ca:da:27:8e:ef:84:b9:82:9e:9f:4e:10: e2:14:e3:9e:6b:29:8b:e0:40:5d:5b:0d:07:d6:c2:ff:a5:f2: f8:d8:14:f3:de:81:7f:76:cd:1d:e6:6f:39:f3:dc:ed:e8:7b: 3e:7e:1e:42:e0:59:91:eb:c4:6e:ad:a5:0b:81:f8:c3:8f:fb: 7a:78:b9:04:c2:37:5b:ac:db:02:89:82:a8:37:a6:7d:ae:3f: 83:d4:f0:7d:42:2f:6b:71:e7:95:3b:d0:4f:ef:e8:66:c1:00: d4:21:f4:23:fc:12:4b:29:d6:30:47:d5:10:9f:0e:7d:5b:b0: 96:79:c7:30:a6:48:d3:19:52:50:37:df:86:ca:e6:69:21:d4: 51:ac:a3:f9:63:1e:02:f9:aa:80:a7:0c:8b:32:fd:f9:49:f7: b5:7d:16:e6:10:ee:cf:63:a1:5a:4c:4a:53:87:cd:1d:05:ae: 2f:5f:70:60:4b:db:69:04:ed:c4:51:ec:30:2f:3a:5e:0f:88: 28:72:78:8a:43:3b:37:39:c3:17:41:2c:a2:26:29:1a:f6:2b: 96:f0:65:bc:29:f8:d8:dd:72:41:50:76:3c:ee:24:37:bd:ac: 6f:1d:6d:ff:a3:27:2d:b4:3c:67:4c:0e:77:30:1c:9c:0d:6e: e5:04:85:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZteLpnErmoA0fxJqZ6TlM92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjUxMjI3MDUwMTEwWhcNMjUxMjI4MDUwMTEwWjAzMTEwLwYDVQQD EygyM2VjODliY2ZjNWVkZDUwYjE4ZjA0MTVjOTkwYTBmMWYzZjE2ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPa4v6GZIEruVBarysaHRJou6Zqw b3dAq75w9rwGV9Pdc/gCOyZ7MDirZ1wczIOKJFcqj1moDvfz10qgvjAAhSrYbAF4 V/8bgwJXGu++XmKBTQt741nVeAisAqfrQ0H+t7t+1IaXxJPu5EwM0hDT7OdQ2SKs Q2/gTyyPySaSCZnL2HsDYkHUf33ZaKAKd3VxoKApf+9pFNM//okFiNxU6y+h/KzK sdTBtqksYa6bHyqMQoJ5+ojXsZ/yPdC7GYj9Z///8l1TlCAhiagCkVindaROtixq Svu5fNNN8p67LT9nJUJTkOLeQUdARca/zLtyj91MVta5SopcZpzm1J2BQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPsibz8Xt1QsY8EFcmQoPHz8WhAMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmWDVjfx ytonju+EuYKen04Q4hTjnmspi+BAXVsNB9bC/6Xy+NgU896Bf3bNHeZvOfPc7eh7 Pn4eQuBZkevEbq2lC4H4w4/7eni5BMI3W6zbAomCqDemfa4/g9TwfUIva3HnlTvQ T+/oZsEA1CH0I/wSSynWMEfVEJ8OfVuwlnnHMKZI0xlSUDffhsrmaSHUUayj+WMe AvmqgKcMizL9+Un3tX0W5hDuz2OhWkxKU4fNHQWuL19wYEvbaQTtxFHsMC86Xg+I KHJ4ikM7NznDF0EsoiYpGvYrlvBlvCn42N1yQVB2PO4kN72sbx1t/6MnLbQ8Z0wO dzAcnA1u5QSFAA== -----END CERTIFICATE-----Generated at Sat Dec 27 06:50:06 2025 by rpki-client