This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft File: XD6sD3atIc1SRFk-TBe6Zxtejuk.mft (raw, json) Hash identifier: D7ck/DYxexjUQQsFmVP+OWQC85GYa17iW1ZxL7Ew7nA= Subject key identifier: 5E:6C:D2:4E:E6:EE:09:34:60:E0:F4:FF:44:AB:BC:97:72:7E:AB:70 Authority key identifier: 5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9 Certificate issuer: /CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9 Certificate serial: 019B41DBA3B69EDD38EA8FC4144B895E8ED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft Manifest number: 13EC Signing time: Sun 21 Dec 2025 17:01:11 +0000 Manifest this update: Sun 21 Dec 2025 17:01:11 +0000 Manifest next update: Mon 22 Dec 2025 17:01:11 +0000 Files and hashes: 1: XD6sD3atIc1SRFk-TBe6Zxtejuk.crl (hash: hoxEtKGkrtrKyRmFFRlJjf63Mh753feV9h+z9Wx7Yz0=) 2: ml5z24U6xSCTuhnWBbQRxmv1hXU.roa (hash: NWPcXIF3UeWnsTiTzSSB4msAqIPsOtzwP/oaG1rR2kA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:a3:b6:9e:dd:38:ea:8f:c4:14:4b:89:5e:8e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c3eac0f76ad21cd5244593e4c17ba671b5e8ee9 Validity Not Before: Dec 21 17:01:11 2025 GMT Not After : Dec 22 17:01:11 2025 GMT Subject: CN=5e6cd24ee6ee093460e0f4ff44abbc97727eab70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:32:b5:3d:c9:df:33:6d:a8:62:ce:8c:9b:d9: 91:75:12:e7:fb:ba:67:8e:9f:40:36:3f:75:6b:a5: 6d:79:cb:79:ca:a4:b2:22:4b:17:2b:5d:d6:a7:47: 4f:6a:bb:31:47:41:33:d7:10:35:aa:e9:69:51:70: ac:ed:f3:41:5b:67:d3:0b:68:fd:01:4b:f0:96:e6: 42:ca:77:b2:5d:ff:0c:28:8a:06:6f:06:80:c4:6c: 66:fb:67:dc:e2:b6:3a:b1:c0:01:47:d4:6b:e5:5d: 61:a3:7f:11:e7:4a:50:ec:6f:5c:cc:10:71:cb:62: 2e:f4:2f:66:f1:dd:d0:08:19:0a:43:ea:70:e0:1b: 85:e3:ca:d1:6c:2c:00:e7:4a:05:a1:09:4f:ac:00: 27:68:57:f2:83:e5:a0:a4:8f:50:fa:26:37:20:9c: f5:ae:cd:e3:85:b5:48:2d:f8:a3:d1:54:48:1c:0b: dc:ff:db:2f:b3:b9:5d:b1:61:3d:e1:39:aa:95:4b: f0:3a:3f:d4:ea:5d:eb:a6:71:ba:6e:85:79:1c:2b: 43:72:fd:47:99:9a:b9:24:17:7c:31:df:2a:cd:6a: 5d:29:88:d7:e1:80:79:de:91:b5:16:7a:63:44:83: 47:49:16:e9:46:6e:57:f2:18:6f:c2:13:d6:e8:a4: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:6C:D2:4E:E6:EE:09:34:60:E0:F4:FF:44:AB:BC:97:72:7E:AB:70 X509v3 Authority Key Identifier: keyid:5C:3E:AC:0F:76:AD:21:CD:52:44:59:3E:4C:17:BA:67:1B:5E:8E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XD6sD3atIc1SRFk-TBe6Zxtejuk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/964088-8abd-454c-9927-4464a13bf1a0/1/XD6sD3atIc1SRFk-TBe6Zxtejuk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:6d:bd:20:e2:51:fa:aa:10:1d:2c:10:86:de:66:bf:2f:54: 41:b9:99:ad:4c:62:54:24:0b:1d:9e:45:0a:24:e7:3e:e0:c7: cb:ee:6c:41:49:0d:6a:ad:41:ed:05:93:4d:5f:d4:7b:f7:92: 9c:26:60:5f:a9:d4:75:a1:2b:b2:d6:ca:8c:6b:5b:0d:3d:09: 8a:0a:1a:5d:5d:99:9e:fd:9a:29:ff:82:36:8b:8a:4c:be:cc: 39:64:94:fa:73:93:7c:c3:eb:6d:10:f2:b6:46:6d:d8:24:5b: 4a:cf:20:91:12:ff:71:21:d1:b3:1c:d6:ef:4b:ff:46:84:0a: 17:b8:3a:fa:30:61:b0:22:30:86:3a:61:d8:61:df:1d:1a:be: a3:07:5e:e9:76:17:c7:f8:5f:d2:90:b5:1a:41:76:43:a7:37: e1:87:00:91:e4:b9:b7:17:3f:b8:1c:7c:6d:2e:86:d9:9e:49: 23:9e:d1:ca:8d:66:e9:d8:31:4a:db:2e:6b:2c:a4:ab:2e:3d: 96:42:42:b0:16:79:15:7b:30:bc:13:db:d1:8d:f2:94:a2:4a: f0:42:44:3f:19:b6:43:7a:1e:62:b8:a4:f2:a8:6b:4e:81:57: 30:54:ad:0c:44:6f:d3:fc:cf:c9:89:e5:04:97:2e:f7:fa:b5: 1b:8f:6b:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB26O2nt046o/EFEuJXo7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjM2VhYzBmNzZhZDIxY2Q1MjQ0NTkzZTRjMTdiYTY3MWI1 ZThlZTkwHhcNMjUxMjIxMTcwMTExWhcNMjUxMjIyMTcwMTExWjAzMTEwLwYDVQQD Eyg1ZTZjZDI0ZWU2ZWUwOTM0NjBlMGY0ZmY0NGFiYmM5NzcyN2VhYjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTK1PcnfM22oYs6Mm9mRdRLn+7pn jp9ANj91a6Vtect5yqSyIksXK13Wp0dParsxR0Ez1xA1qulpUXCs7fNBW2fTC2j9 AUvwluZCyneyXf8MKIoGbwaAxGxm+2fc4rY6scABR9Rr5V1ho38R50pQ7G9czBBx y2Iu9C9m8d3QCBkKQ+pw4BuF48rRbCwA50oFoQlPrAAnaFfyg+WgpI9Q+iY3IJz1 rs3jhbVILfij0VRIHAvc/9svs7ldsWE94TmqlUvwOj/U6l3rpnG6boV5HCtDcv1H mZq5JBd8Md8qzWpdKYjX4YB53pG1FnpjRINHSRbpRm5X8hhvwhPW6KSZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5s0k7m7gk0YOD0/0SrvJdyfqtwMB8GA1UdIwQY MBaAFFw+rA92rSHNUkRZPkwXumcbXo7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5Mjct NDQ2NGExM2JmMWEwLzEvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni85NjQwODgtOGFiZC00NTRjLTk5MjctNDQ2NGExM2JmMWEw LzEvWEQ2c0QzYXRJYzFTUkZrLVRCZTZaeHRlanVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG29IOJR +qoQHSwQht5mvy9UQbmZrUxiVCQLHZ5FCiTnPuDHy+5sQUkNaq1B7QWTTV/Ue/eS nCZgX6nUdaErstbKjGtbDT0JigoaXV2Znv2aKf+CNouKTL7MOWSU+nOTfMPrbRDy tkZt2CRbSs8gkRL/cSHRsxzW70v/RoQKF7g6+jBhsCIwhjph2GHfHRq+owde6XYX x/hf0pC1GkF2Q6c34YcAkeS5txc/uBx8bS6G2Z5JI57Ryo1m6dgxStsuayykqy49 lkJCsBZ5FXswvBPb0Y3ylKJK8EJEPxm2Q3oeYrik8qhrToFXMFStDERv0/zPyYnl BJcu9/q1G49r0w== -----END CERTIFICATE-----Generated at Sun Dec 21 21:02:54 2025 by rpki-client