This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft File: Xjp4NTd7noSf58M_n8pFctkCZz8.mft (raw, json) Hash identifier: UIyWCB7ezHGE6JI+FReqZEvmvm6175YeQbF2RwA1Emo= Subject key identifier: 5B:58:03:6B:55:CF:F0:8D:F4:E4:FB:BC:96:FC:4E:E6:13:9B:AF:C1 Authority key identifier: 5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F Certificate issuer: /CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Certificate serial: 019B18A885B7A5B8B4078EC543925206A96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft Manifest number: 0F2A Signing time: Sat 13 Dec 2025 17:00:56 +0000 Manifest this update: Sat 13 Dec 2025 17:00:56 +0000 Manifest next update: Sun 14 Dec 2025 17:00:56 +0000 Files and hashes: 1: Xjp4NTd7noSf58M_n8pFctkCZz8.crl (hash: ikgLCzSqBNV+RAfIqvzZQda5nOEhJLv+jdQL6EuDPDk=) 2: YZ4IKL3VI82kHojYvMEpDnn7Ttk.roa (hash: /ay5+Bvjtyx5aTWN+x50j7spAi6yaynSV6oKHUcA/E8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:a8:85:b7:a5:b8:b4:07:8e:c5:43:92:52:06:a9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3a7835377b9e849fe7c33f9fca4572d902673f Validity Not Before: Dec 13 17:00:56 2025 GMT Not After : Dec 14 17:00:56 2025 GMT Subject: CN=5b58036b55cff08df4e4fbbc96fc4ee6139bafc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8e:28:98:8b:e2:4d:7d:15:9f:5a:72:54:0f: 11:77:71:65:ef:f2:0a:05:b0:c6:18:ff:c0:de:1b: 5b:1a:9a:92:34:dc:63:1c:06:47:43:67:1c:e4:0d: 86:bd:1b:df:50:53:30:4c:d6:a8:ef:dc:6d:23:c3: bc:d9:7f:20:bd:34:64:f7:9c:cd:af:c4:80:97:ea: 95:52:d0:00:6a:a4:d7:a0:6f:1d:dd:d0:0b:d0:49: 0b:88:18:3f:31:ef:ff:ac:ac:0a:eb:c0:07:33:6d: 92:49:0a:34:ab:70:4c:ac:31:40:b0:12:2a:23:c7: 6b:2d:f8:6f:25:be:cc:be:fe:f8:ee:2a:36:14:a2: 26:49:f2:71:63:c9:aa:da:2f:be:c6:8a:2e:c6:d1: cc:5f:03:5e:b1:6f:60:d8:ae:7f:91:28:41:d1:8d: d5:d7:f9:42:60:cb:51:9f:8c:e4:97:67:f5:a0:aa: 7c:55:fb:57:9f:ca:1f:11:3e:64:51:2b:a5:e3:de: 09:55:fd:e1:7b:ea:b2:9a:b1:92:b2:c9:9d:8f:f9: f7:dc:4b:ce:bd:2e:3e:f6:f8:c6:c8:12:d0:4b:99: 33:6c:84:93:84:75:65:34:e1:2e:af:08:5e:c0:52: a2:d3:08:e9:6d:2f:8b:fe:ba:c7:d1:b0:34:c9:41: dd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:58:03:6B:55:CF:F0:8D:F4:E4:FB:BC:96:FC:4E:E6:13:9B:AF:C1 X509v3 Authority Key Identifier: keyid:5E:3A:78:35:37:7B:9E:84:9F:E7:C3:3F:9F:CA:45:72:D9:02:67:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjp4NTd7noSf58M_n8pFctkCZz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cdd815-8bd3-414f-a9b8-055b1b0e60f4/1/Xjp4NTd7noSf58M_n8pFctkCZz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:bc:2f:25:25:d7:d7:c3:9d:b0:72:50:d3:0e:2f:f4:48: 6a:da:c8:fe:c1:2e:ff:d3:27:86:9f:a6:ad:02:ed:ce:b6:b2: 9a:e0:f6:78:a6:67:47:75:ed:3a:54:51:ed:f4:00:90:a3:e0: fb:5e:ab:36:86:e2:16:a2:05:a5:0b:88:20:c6:3e:fd:c9:a5: 50:fc:7e:ba:15:13:57:21:a0:94:de:f8:a2:ed:25:43:75:68: 25:7d:f9:f2:dc:7f:ce:77:fe:bf:67:3d:9b:e0:d1:50:e6:0e: ed:ff:a4:3f:ee:b8:8a:c0:25:0e:8a:35:11:77:08:7a:21:91: b6:f2:6c:42:a8:62:0e:c7:f2:9d:32:2b:36:0d:73:9e:ef:94: d4:dc:b5:55:a5:e9:8c:e3:8b:fb:54:09:26:a4:fc:2a:cf:7f: 5a:92:8e:09:39:9b:6c:3a:19:93:7c:0f:10:ad:79:85:ce:c9: 2b:ba:b1:06:c4:27:fd:49:1c:d0:d3:c3:39:ad:0c:59:e9:b0: 9a:66:e3:f2:38:00:62:02:88:4d:a2:fa:3b:a7:a9:8f:c4:ba: f0:bb:7c:4e:d0:90:46:97:5d:0b:39:57:d3:29:6d:2a:fd:27: cf:50:21:8f:a8:24:b2:73:86:49:17:c4:fa:d3:ac:aa:8c:ba: 80:cd:c9:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYqIW3pbi0B47FQ5JSBqlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2E3ODM1Mzc3YjllODQ5ZmU3YzMzZjlmY2E0NTcyZDkw MjY3M2YwHhcNMjUxMjEzMTcwMDU2WhcNMjUxMjE0MTcwMDU2WjAzMTEwLwYDVQQD Eyg1YjU4MDM2YjU1Y2ZmMDhkZjRlNGZiYmM5NmZjNGVlNjEzOWJhZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY4omIviTX0Vn1pyVA8Rd3Fl7/IK BbDGGP/A3htbGpqSNNxjHAZHQ2cc5A2GvRvfUFMwTNao79xtI8O82X8gvTRk95zN r8SAl+qVUtAAaqTXoG8d3dAL0EkLiBg/Me//rKwK68AHM22SSQo0q3BMrDFAsBIq I8drLfhvJb7Mvv747io2FKImSfJxY8mq2i++xoouxtHMXwNesW9g2K5/kShB0Y3V 1/lCYMtRn4zkl2f1oKp8VftXn8ofET5kUSul494JVf3he+qymrGSssmdj/n33EvO vS4+9vjGyBLQS5kzbISThHVlNOEurwhewFKi0wjpbS+L/rrH0bA0yUHdbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtYA2tVz/CN9OT7vJb8TuYTm6/BMB8GA1UdIwQY MBaAFF46eDU3e56En+fDP5/KRXLZAmc/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5Yjgt MDU1YjFiMGU2MGY0LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9jZGQ4MTUtOGJkMy00MTRmLWE5YjgtMDU1YjFiMGU2MGY0 LzEvWGpwNE5UZDdub1NmNThNX244cEZjdGtDWno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZO8LyUl 19fDnbByUNMOL/RIatrI/sEu/9Mnhp+mrQLtzraymuD2eKZnR3XtOlRR7fQAkKPg +16rNobiFqIFpQuIIMY+/cmlUPx+uhUTVyGglN74ou0lQ3VoJX358tx/znf+v2c9 m+DRUOYO7f+kP+64isAlDoo1EXcIeiGRtvJsQqhiDsfynTIrNg1znu+U1Ny1VaXp jOOL+1QJJqT8Ks9/WpKOCTmbbDoZk3wPEK15hc7JK7qxBsQn/Ukc0NPDOa0MWemw mmbj8jgAYgKITaL6O6epj8S68Lt8TtCQRpddCzlX0yltKv0nz1Ahj6gksnOGSRfE +tOsqoy6gM3JHw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:57:45 2025 by rpki-client