This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: +kB5WOx+vYRqYjF/EIwlYfRv5UwyzeOLt+8+lXMId60= Subject key identifier: A0:B2:3F:35:A9:64:C4:2B:B9:F0:23:4B:25:E5:1C:0D:1A:E7:C2:66 Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019B3A218F321F934F4BCF5B264EBE598FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 0355 Signing time: Sat 20 Dec 2025 05:00:36 +0000 Manifest this update: Sat 20 Dec 2025 05:00:36 +0000 Manifest next update: Sun 21 Dec 2025 05:00:36 +0000 Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: fRslxNt0O73JbNBv+t3MpgVMux9sgqzNElIXV7MNTcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:8f:32:1f:93:4f:4b:cf:5b:26:4e:be:59:8f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Dec 20 05:00:36 2025 GMT Not After : Dec 21 05:00:36 2025 GMT Subject: CN=a0b23f35a964c42bb9f0234b25e51c0d1ae7c266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:62:bd:07:19:aa:4f:c8:e4:d9:97:05:58:82: 16:97:7c:8a:a5:9d:f6:64:58:fc:31:30:c2:a8:2b: 16:c3:9d:fb:0a:3f:96:cb:7e:05:57:81:4f:0e:14: 3e:79:b2:bd:1c:2e:85:67:a5:26:b4:cf:29:4b:01: e6:a7:54:c7:fe:cd:99:d3:cb:c5:ff:76:68:55:e5: 55:d7:e4:ef:ff:b6:f1:33:de:f0:0a:0b:4f:b1:52: 77:10:09:f4:51:af:6b:a4:24:32:e4:77:12:66:4a: 47:91:7f:6b:23:31:fd:42:83:aa:75:57:6b:e7:3b: 1e:98:a9:0e:c9:cc:e9:99:54:6c:60:b9:0c:9c:eb: 0c:a4:c5:d5:18:23:b2:97:88:d8:2d:47:31:97:90: 7e:0d:74:81:c6:4b:41:b9:fc:a5:1f:e0:0b:2e:da: be:bf:c6:e2:2b:08:69:91:3e:bf:21:7d:b1:68:63: ba:c2:14:d3:0b:63:25:49:8c:25:28:b4:4d:20:06: 56:ce:da:0f:a9:2b:59:3d:c1:37:57:ad:43:36:d3: 94:a3:b8:78:30:df:9d:d8:59:22:a0:1c:ab:92:50: 38:f4:b5:fc:5c:36:0d:90:66:01:c6:f8:40:d6:2c: 64:86:8e:45:a6:9f:9d:a2:43:35:05:7c:9a:3c:8c: 80:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B2:3F:35:A9:64:C4:2B:B9:F0:23:4B:25:E5:1C:0D:1A:E7:C2:66 X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d3:d0:69:a4:28:6e:11:d3:9e:be:52:ad:57:4a:fe:8c:fb: 44:86:e8:ac:30:85:e5:87:f0:eb:27:c6:6e:df:f5:ea:7f:b7: 74:82:0c:ee:ed:e4:15:6e:29:b7:c6:06:2d:ef:f0:61:4e:e3: 53:a0:e5:a7:35:4d:12:ee:af:01:a4:0d:bc:0e:41:b5:8f:07: 3d:28:4b:f7:3d:2f:8e:89:1f:16:eb:45:41:2c:e2:09:ff:8b: eb:2e:e7:9a:7f:76:1f:93:22:f5:32:43:24:f0:9d:b2:7b:22: 92:e2:25:72:95:d3:41:31:2e:84:ba:6d:e4:a3:4c:af:74:c0: 35:4b:91:e3:61:5b:82:f7:a7:5f:a8:cc:d0:bf:45:9e:9e:14: a3:97:20:b4:96:c1:e7:99:eb:39:2c:51:26:83:a3:d3:4d:07: 5c:9f:2b:ca:2d:d5:39:10:83:94:2f:6a:c4:bb:eb:d8:33:3a: 11:24:58:1a:a2:fd:9d:93:5d:74:d8:77:88:14:8e:fd:57:4e: 0a:ac:6d:ee:31:b7:a5:08:47:c7:da:8a:6d:a2:4b:9d:97:fc: 3e:16:e6:60:21:a7:a9:e7:14:c4:12:2a:d3:13:3a:02:ae:09: 0f:2b:0f:ba:1e:46:e4:1f:91:7f:5f:93:a4:40:8a:6b:6b:f4: 15:ed:27:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IY8yH5NPS89bJk6+WY/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjUxMjIwMDUwMDM2WhcNMjUxMjIxMDUwMDM2WjAzMTEwLwYDVQQD EyhhMGIyM2YzNWE5NjRjNDJiYjlmMDIzNGIyNWU1MWMwZDFhZTdjMjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2K9BxmqT8jk2ZcFWIIWl3yKpZ32 ZFj8MTDCqCsWw537Cj+Wy34FV4FPDhQ+ebK9HC6FZ6UmtM8pSwHmp1TH/s2Z08vF /3ZoVeVV1+Tv/7bxM97wCgtPsVJ3EAn0Ua9rpCQy5HcSZkpHkX9rIzH9QoOqdVdr 5zsemKkOyczpmVRsYLkMnOsMpMXVGCOyl4jYLUcxl5B+DXSBxktBufylH+ALLtq+ v8biKwhpkT6/IX2xaGO6whTTC2MlSYwlKLRNIAZWztoPqStZPcE3V61DNtOUo7h4 MN+d2FkioByrklA49LX8XDYNkGYBxvhA1ixkho5Fpp+dokM1BXyaPIyAmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCyPzWpZMQrufAjSyXlHA0a58JmMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdPQaaQo bhHTnr5SrVdK/oz7RIborDCF5Yfw6yfGbt/16n+3dIIM7u3kFW4pt8YGLe/wYU7j U6DlpzVNEu6vAaQNvA5BtY8HPShL9z0vjokfFutFQSziCf+L6y7nmn92H5Mi9TJD JPCdsnsikuIlcpXTQTEuhLpt5KNMr3TANUuR42FbgvenX6jM0L9Fnp4Uo5cgtJbB 55nrOSxRJoOj000HXJ8ryi3VORCDlC9qxLvr2DM6ESRYGqL9nZNddNh3iBSO/VdO Cqxt7jG3pQhHx9qKbaJLnZf8PhbmYCGnqecUxBIq0xM6Aq4JDysPuh5G5B+Rf1+T pECKa2v0Fe0niQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:17 2025 by rpki-client