This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft File: XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json) Hash identifier: 5VoOv8cdyPtQJRCtDU/CwizEDgneifBJKV8eknfU6Ew= Subject key identifier: 5E:8E:31:98:DE:D7:92:FC:CD:20:F6:A2:F3:26:52:DC:CF:17:7B:96 Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 Certificate issuer: /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Certificate serial: 019B4D042F4AB2D93E4AEF6CC23B950A2AA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 21:01:18 +0000 Manifest this update: Tue 23 Dec 2025 21:01:18 +0000 Manifest next update: Wed 24 Dec 2025 21:01:18 +0000 Files and hashes: 1: FBcAeE9oQIOW9kKPQJ1vgouTAbk.roa (hash: L0pGWwbFutGyRI32rrNWdKvE3ZZY088xKR9lZle7SCg=) 2: Tz90Wvu7GQ9v16xjtv3fYSRjDy8.roa (hash: /VeLcpXw8PuMvzvcyJgx3jKW0zDlptf/ULhrAgfV2dQ=) 3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: F5Oo7QRy1G1nGJRNcQMWdLZc5j7nqdHqEe3sv9+Avfg=) 4: jwOao49fuGzjzKpy4DVicXhqkq8.roa (hash: vTxxc3wFEPVm9vo1ixcSgxSo2myxU1VuH0FNYAoBops=) 5: pjWvLHgWJr8VfxqCyu_wjseZwrI.roa (hash: M+VetrzhMK4qS2ZDHlL6T1xkNC7G/F+gqzb3HNS9swc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:04:2f:4a:b2:d9:3e:4a:ef:6c:c2:3b:95:0a:2a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0 Validity Not Before: Dec 23 21:01:18 2025 GMT Not After : Dec 24 21:01:18 2025 GMT Subject: CN=5e8e3198ded792fccd20f6a2f32652dccf177b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:76:77:89:e2:ac:4c:ce:4b:35:b9:e9:f0: d6:4e:54:a7:0c:50:a3:bf:60:b1:4e:43:87:eb:1a: 3f:4f:97:31:59:9f:de:c8:82:ce:18:0e:01:09:88: 31:45:47:ef:b1:cb:8a:da:6e:d2:6f:a6:60:bd:0d: 40:bd:8f:8e:cf:a5:e8:35:03:b3:4a:c2:49:82:d7: 8d:46:91:9f:8d:9c:03:e2:3e:91:44:1c:67:e5:94: 97:d6:e8:c1:71:cb:7d:4d:8e:6e:41:20:af:cd:a1: cd:e0:40:e2:5f:2c:16:9f:69:10:b8:0d:1b:42:02: 1d:5a:16:46:fc:0c:ce:cf:28:f4:dd:c1:7c:a8:8e: fe:32:55:ce:b8:22:c8:67:b2:f1:6f:26:c7:a0:00: d1:41:a9:6e:db:b5:00:34:c8:39:7f:e4:23:f7:ad: 5c:4b:a1:6a:05:df:b4:8f:af:87:02:24:71:2f:59: dc:85:25:f1:39:52:a4:07:ea:8a:95:eb:65:59:fc: 6f:ea:b1:84:19:6d:9b:2e:f1:e2:42:f3:72:96:2d: 83:5e:ee:8e:75:de:27:bf:eb:1a:d4:1c:b3:1e:bd: 97:9b:14:4c:f0:ce:f9:b9:41:d5:fb:b5:fd:2e:dd: f5:14:eb:7e:c0:dd:0b:cf:2b:de:9c:86:ca:da:22: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8E:31:98:DE:D7:92:FC:CD:20:F6:A2:F3:26:52:DC:CF:17:7B:96 X509v3 Authority Key Identifier: keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:92:35:9b:cf:65:3a:cb:9a:6f:b6:85:e3:88:87:a5:27:e6: ce:8e:0c:71:db:6d:90:03:f9:7f:b2:aa:8c:f4:c1:31:bf:84: 4d:94:0d:fe:ee:7f:48:a0:e3:bd:c5:b0:ea:ee:00:1b:ab:b8: af:fb:35:85:07:51:fe:eb:2e:d1:4d:ee:26:e8:be:e4:e5:c3: 37:22:aa:ac:1e:56:da:4a:5a:68:f5:77:d0:76:8e:27:e4:9a: 11:4e:2a:14:60:a5:a3:41:ed:5f:22:40:af:cd:e1:3a:48:b9: 2a:56:22:9a:d5:45:cc:e4:18:a2:e7:ad:66:4c:26:b1:8a:47: 43:2e:d1:a8:3a:84:60:9f:1b:62:6a:41:16:0d:4b:ac:d7:93: ef:99:8b:a9:73:55:90:bc:da:70:d9:e8:01:34:52:99:99:63: aa:d2:ca:86:67:83:24:02:c1:9f:cf:03:65:a0:4f:1d:3a:de: 24:3e:e1:47:34:9e:ff:92:7f:e5:7a:9c:7f:b1:0f:b2:a6:8c: fd:f1:34:e9:ea:82:f3:fa:2a:49:02:6c:aa:01:92:aa:93:5d: 6f:78:89:40:49:dc:92:99:ce:aa:9a:b2:d4:a9:ee:fa:5b:7c: cf:0a:22:ec:a5:86:55:26:e5:55:1e:a8:61:93:42:6e:87:ef: 56:88:52:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtNBC9Kstk+Su9swjuVCiqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTFhYWUwYzkzYWQwNGI3Mjk4MDgyYjY4YmY2YTU0ZmE2 OGJjZjAwHhcNMjUxMjIzMjEwMTE4WhcNMjUxMjI0MjEwMTE4WjAzMTEwLwYDVQQD Eyg1ZThlMzE5OGRlZDc5MmZjY2QyMGY2YTJmMzI2NTJkY2NmMTc3Yjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpZ2d4nirEzOSzW56fDWTlSnDFCj v2CxTkOH6xo/T5cxWZ/eyILOGA4BCYgxRUfvscuK2m7Sb6ZgvQ1AvY+Oz6XoNQOz SsJJgteNRpGfjZwD4j6RRBxn5ZSX1ujBcct9TY5uQSCvzaHN4EDiXywWn2kQuA0b QgIdWhZG/AzOzyj03cF8qI7+MlXOuCLIZ7LxbybHoADRQalu27UANMg5f+Qj961c S6FqBd+0j6+HAiRxL1nchSXxOVKkB+qKletlWfxv6rGEGW2bLvHiQvNyli2DXu6O dd4nv+sa1ByzHr2XmxRM8M75uUHV+7X9Lt31FOt+wN0LzyvenIbK2iJpsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6OMZje15L8zSD2ovMmUtzPF3uWMB8GA1UdIwQY MBaAFFzhquDJOtBLcpgIK2i/alT6aLzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQt YmExNDE4ZDIyMDg3LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mZjM2MTgtNzAzMi00MTQzLTkzNzQtYmExNDE4ZDIyMDg3 LzEvWE9HcTRNazYwRXR5bUFncmFMOXFWUHBvdlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5I1m89l Osuab7aF44iHpSfmzo4McdttkAP5f7KqjPTBMb+ETZQN/u5/SKDjvcWw6u4AG6u4 r/s1hQdR/usu0U3uJui+5OXDNyKqrB5W2kpaaPV30HaOJ+SaEU4qFGClo0HtXyJA r83hOki5KlYimtVFzOQYouetZkwmsYpHQy7RqDqEYJ8bYmpBFg1LrNeT75mLqXNV kLzacNnoATRSmZljqtLKhmeDJALBn88DZaBPHTreJD7hRzSe/5J/5Xqcf7EPsqaM /fE06eqC8/oqSQJsqgGSqpNdb3iJQEnckpnOqpqy1Knu+lt8zwoi7KWGVSblVR6o YZNCbofvVohSZA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:16:35 2025 by rpki-client