This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json) Hash identifier: gYctSRayNYDuCJmVygxBnoF/iGRTyYk98k9WIGGAcOE= Subject key identifier: 85:C3:C1:BF:A7:45:1B:01:3B:47:89:84:6E:FA:90:8A:76:A3:FF:AB Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08 Certificate serial: 019B2407D81B429C68677304669EB8DBFF68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft Manifest number: 0BA6 Signing time: Mon 15 Dec 2025 22:00:52 +0000 Manifest this update: Mon 15 Dec 2025 22:00:52 +0000 Manifest next update: Tue 16 Dec 2025 22:00:52 +0000 Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=) 2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: y9CdPPqAgzyrH79ylpC10+OH4/oEumbPjj7qXlPS0yQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:d8:1b:42:9c:68:67:73:04:66:9e:b8:db:ff:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08 Validity Not Before: Dec 15 22:00:52 2025 GMT Not After : Dec 16 22:00:52 2025 GMT Subject: CN=85c3c1bfa7451b013b4789846efa908a76a3ffab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ef:77:89:78:3c:1b:43:a4:13:74:9c:da:19: 19:6c:8e:58:bd:67:48:35:65:a5:90:0d:b9:c6:e7: 25:7b:a9:65:4d:1d:aa:0a:ef:08:3e:ed:40:ed:14: ab:7e:bc:27:a9:0e:ac:56:b6:14:dc:3a:27:54:e6: 7f:ec:fc:6d:11:a3:c1:76:42:ce:9a:21:05:80:a4: c8:c8:d7:43:a5:1a:cc:4d:28:a9:5e:b7:82:f8:ab: ff:74:cb:5a:70:50:b7:7f:74:4f:1c:80:32:ee:9f: d3:e2:a7:13:5b:48:a4:c4:ac:80:87:c2:c1:90:bc: ce:d7:37:32:ee:f3:50:4c:39:42:a2:96:84:37:72: 4c:0f:e8:12:19:58:1d:8d:5a:2e:f0:98:aa:89:be: 50:e2:f0:d9:bd:60:eb:64:11:22:51:d5:09:ee:e2: 03:cd:fe:f8:27:7c:09:fc:6a:93:57:17:d2:5a:fd: 86:6a:8b:45:1e:93:59:24:10:2a:a2:34:97:aa:49: b8:a8:fc:85:3d:22:d5:9d:cf:85:25:36:18:2a:c1: 27:3c:f4:a9:db:af:fa:2b:22:79:db:51:3d:a4:1c: ae:36:3b:f8:66:b0:80:49:03:73:74:c5:b7:dc:5a: a5:3e:e5:a9:22:f0:74:85:99:11:4c:ad:ad:51:07: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C3:C1:BF:A7:45:1B:01:3B:47:89:84:6E:FA:90:8A:76:A3:FF:AB X509v3 Authority Key Identifier: keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d3:59:b1:4e:00:02:71:a3:06:f5:0f:18:8e:9e:38:a9:00: f5:68:c8:59:5f:f0:c6:46:a7:46:d2:90:65:f7:86:01:e5:f8: 7c:c7:97:28:59:e8:d7:f8:e2:14:1f:ae:bb:70:7f:b5:67:db: fa:1e:95:d1:8c:73:6f:a9:d7:0e:95:e2:62:81:c7:a2:08:5e: 4c:60:a4:b5:33:c9:a9:6a:f4:61:d7:42:5d:92:77:bf:78:eb: e1:73:1a:86:86:a9:24:ea:03:17:b4:72:d9:da:81:fe:cc:bb: 00:2f:bb:fa:b6:f6:d1:08:ae:a2:3d:0a:34:91:7a:5e:ae:df: f7:9c:78:b8:03:3a:8d:3d:78:34:c4:9d:4c:a0:1e:27:f8:10: 99:56:c9:dd:b7:6d:7a:1e:aa:1c:7b:0f:ab:6d:06:39:39:3d: 14:c3:89:e3:89:e3:78:79:30:d4:87:3c:3a:ff:9a:b9:03:0a: 50:70:f2:d0:75:ce:8b:ea:64:64:78:8b:67:91:e9:4e:50:4a: 1e:70:8b:ab:1c:a2:51:b9:f7:66:24:3b:02:4c:c4:a3:67:7e: 5a:e2:5e:6b:5c:fd:b8:f2:8a:93:6f:e8:69:3d:5f:cb:ea:69: 2a:96:f9:1c:3c:af:97:c0:a8:76:64:06:2d:07:eb:c6:ba:f7: 30:6a:73:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB9gbQpxoZ3MEZp642/9oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGU1ODE1MzdlN2FhNjY3ODNjMzQwMzgyMmExMTgxYTMx NjhkMDgwHhcNMjUxMjE1MjIwMDUyWhcNMjUxMjE2MjIwMDUyWjAzMTEwLwYDVQQD Eyg4NWMzYzFiZmE3NDUxYjAxM2I0Nzg5ODQ2ZWZhOTA4YTc2YTNmZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe93iXg8G0OkE3Sc2hkZbI5YvWdI NWWlkA25xucle6llTR2qCu8IPu1A7RSrfrwnqQ6sVrYU3DonVOZ/7PxtEaPBdkLO miEFgKTIyNdDpRrMTSipXreC+Kv/dMtacFC3f3RPHIAy7p/T4qcTW0ikxKyAh8LB kLzO1zcy7vNQTDlCopaEN3JMD+gSGVgdjVou8Jiqib5Q4vDZvWDrZBEiUdUJ7uID zf74J3wJ/GqTVxfSWv2GaotFHpNZJBAqojSXqkm4qPyFPSLVnc+FJTYYKsEnPPSp 26/6KyJ521E9pByuNjv4ZrCASQNzdMW33FqlPuWpIvB0hZkRTK2tUQfp9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXDwb+nRRsBO0eJhG76kIp2o/+rMB8GA1UdIwQY MBaAFF6OWBU356pmeDw0A4IqEYGjFo0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDkt NzQxOGFjMTEwYzgzLzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDktNzQxOGFjMTEwYzgz LzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtNZsU4A AnGjBvUPGI6eOKkA9WjIWV/wxkanRtKQZfeGAeX4fMeXKFno1/jiFB+uu3B/tWfb +h6V0Yxzb6nXDpXiYoHHogheTGCktTPJqWr0YddCXZJ3v3jr4XMahoapJOoDF7Ry 2dqB/sy7AC+7+rb20Qiuoj0KNJF6Xq7f95x4uAM6jT14NMSdTKAeJ/gQmVbJ3bdt eh6qHHsPq20GOTk9FMOJ44njeHkw1Ic8Ov+auQMKUHDy0HXOi+pkZHiLZ5HpTlBK HnCLqxyiUbn3ZiQ7AkzEo2d+WuJea1z9uPKKk2/oaT1fy+ppKpb5HDyvl8CodmQG LQfrxrr3MGpz8g== -----END CERTIFICATE-----Generated at Tue Dec 16 00:49:37 2025 by rpki-client