This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json) Hash identifier: l79cKU4jt54IZY7/5DbZPIZVOISzpDKyL2R02dBMy/I= Subject key identifier: 21:5F:93:36:08:A2:35:0D:5D:3A:6C:E0:2E:7D:A1:3B:0D:C3:5A:6E Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Certificate serial: 019B5AF690A32BDE2023AB0BEC119959A263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 14:01:06 +0000 Manifest this update: Fri 26 Dec 2025 14:01:06 +0000 Manifest next update: Sat 27 Dec 2025 14:01:06 +0000 Files and hashes: 1: 1-NGjnQxo4c6IDfqjk5paae-wSfM.roa (hash: 4pr97OcGZEpEysIvYdOK32obqFh3ATs7kdH95HWDctQ=) 2: UUanwV5xGuK3SINsq8WiMNy7Rsw.roa (hash: JbzAaEUNAUROpdNsWj7B0ylMXqQOejnEiOY//pgAVzs=) 3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: 5vlgqGslLnvllhTPe+D4Q3M63t9I59Gt8TII48cynjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:90:a3:2b:de:20:23:ab:0b:ec:11:99:59:a2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9 Validity Not Before: Dec 26 14:01:06 2025 GMT Not After : Dec 27 14:01:06 2025 GMT Subject: CN=215f933608a2350d5d3a6ce02e7da13b0dc35a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:c7:50:0c:66:6f:b6:61:bb:03:97:dd:01: 76:c5:38:f6:e6:92:ef:b0:91:e4:3b:fb:b8:f5:34: 72:c5:8f:cb:dd:70:d5:02:2d:f8:5d:e1:a0:8c:80: 12:1b:81:95:14:da:b8:42:cf:f7:7e:09:ea:e4:a3: 63:5a:61:60:68:23:5f:86:ad:98:50:f4:f7:f1:7d: 31:83:8f:b6:ac:d2:d6:07:d4:2c:bf:ea:ea:98:4b: 88:83:6a:32:71:54:37:fc:68:01:0f:37:3e:38:e7: 2b:5a:5e:54:13:dc:b3:33:8a:dd:c0:12:54:15:1c: 0d:29:8c:e3:52:1d:39:1b:1a:13:11:31:bd:23:b2: 60:0f:53:0d:ff:56:19:f6:8c:05:d2:6a:84:0c:b0: 8f:03:e9:1e:3e:8e:d4:43:61:a4:de:63:2d:0c:be: c7:b7:2f:02:ce:f7:4c:db:01:7f:9d:74:41:6d:ad: 4d:30:17:b6:b2:a2:ed:c1:fd:e1:42:81:57:12:43: 35:ca:a9:19:c2:3c:ae:44:58:ce:1d:89:9e:06:b2: c5:db:72:d0:33:88:aa:c6:e6:f3:8f:7f:f2:4b:bf: 37:f8:b3:65:2d:1f:0f:fc:c8:f3:d0:94:ac:e7:d2: ef:ff:50:97:bf:3a:6f:40:bf:fd:88:8a:a8:71:7a: 47:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5F:93:36:08:A2:35:0D:5D:3A:6C:E0:2E:7D:A1:3B:0D:C3:5A:6E X509v3 Authority Key Identifier: keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d6:a2:f7:d4:28:f8:69:90:b3:8f:97:b3:a9:9c:2a:c7:c6: e6:1f:3a:f5:c6:fc:14:0e:2b:24:fd:a7:1e:3a:05:21:e4:11: 87:ce:c3:a4:dc:33:9a:f0:5d:fd:f2:f8:50:7f:0f:75:69:b2: 9c:21:77:b9:a9:d8:63:5e:b4:e6:b4:09:8f:73:96:11:47:29: 1f:34:71:e5:20:9b:40:56:46:eb:d2:0f:d0:77:75:c9:23:2d: 5e:bd:9c:52:75:39:9e:22:ed:f3:be:d9:c8:43:75:2b:59:a7: 58:df:d7:6f:d8:f0:05:36:17:d3:56:2a:8d:41:27:3e:86:8a: 2b:01:ef:dc:c8:7c:a0:ad:de:22:c5:43:2e:7b:f4:46:67:5d: 60:3a:ea:17:53:f1:76:1e:02:5a:8d:e5:d2:de:c8:c6:8c:27: 8e:bf:02:1d:b3:ac:6e:56:33:76:68:b1:ec:fc:7a:f0:d1:b9: 5d:8d:b5:1a:45:b7:29:89:e0:62:e2:36:48:7c:b2:3a:05:d1: 2d:82:40:85:5d:7d:a2:c3:d7:c2:ee:03:59:11:89:9a:ec:52: 0f:8b:b4:63:98:64:38:f8:06:5a:5b:49:b6:d9:d0:4c:8f:48: f5:3f:b5:a1:52:c1:8e:c7:09:b4:ab:0c:19:66:34:58:89:01: 1f:3e:0c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9pCjK94gI6sL7BGZWaJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOTllOGQ1NzEzYTVlNjM4MmMwZDEzODlkNjI0MjgxNmY5 ZDZmYjkwHhcNMjUxMjI2MTQwMTA2WhcNMjUxMjI3MTQwMTA2WjAzMTEwLwYDVQQD EygyMTVmOTMzNjA4YTIzNTBkNWQzYTZjZTAyZTdkYTEzYjBkYzM1YTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU/HUAxmb7ZhuwOX3QF2xTj25pLv sJHkO/u49TRyxY/L3XDVAi34XeGgjIASG4GVFNq4Qs/3fgnq5KNjWmFgaCNfhq2Y UPT38X0xg4+2rNLWB9Qsv+rqmEuIg2oycVQ3/GgBDzc+OOcrWl5UE9yzM4rdwBJU FRwNKYzjUh05GxoTETG9I7JgD1MN/1YZ9owF0mqEDLCPA+kePo7UQ2Gk3mMtDL7H ty8CzvdM2wF/nXRBba1NMBe2sqLtwf3hQoFXEkM1yqkZwjyuRFjOHYmeBrLF23LQ M4iqxubzj3/yS783+LNlLR8P/Mjz0JSs59Lv/1CXvzpvQL/9iIqocXpHeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFfkzYIojUNXTps4C59oTsNw1puMB8GA1UdIwQY MBaAFF2Z6NVxOl5jgsDROJ1iQoFvnW+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMt OWNhOGVhOTBlNjE3LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9kMmY5OTItM2ExNy00OTc1LTljMmMtOWNhOGVhOTBlNjE3 LzEvWFpubzFYRTZYbU9Dd05FNG5XSkNnVy1kYjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdai99Qo +GmQs4+Xs6mcKsfG5h869cb8FA4rJP2nHjoFIeQRh87DpNwzmvBd/fL4UH8PdWmy nCF3uanYY1605rQJj3OWEUcpHzRx5SCbQFZG69IP0Hd1ySMtXr2cUnU5niLt877Z yEN1K1mnWN/Xb9jwBTYX01YqjUEnPoaKKwHv3Mh8oK3eIsVDLnv0RmddYDrqF1Px dh4CWo3l0t7Ixownjr8CHbOsblYzdmix7Px68NG5XY21GkW3KYngYuI2SHyyOgXR LYJAhV19osPXwu4DWRGJmuxSD4u0Y5hkOPgGWltJttnQTI9I9T+1oVLBjscJtKsM GWY0WIkBHz4Mfg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:37 2025 by rpki-client