This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json) Hash identifier: QV45CWL4B/CDKq0m0vBePLQfd/VoonrMPHouR3fK5uA= Subject key identifier: A7:B2:F3:68:B8:A2:DF:C5:B6:1A:D7:BD:0F:A4:65:8D:4B:60:4F:7F Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Certificate serial: 019B4BF2E67A482C7B1DA5A81032FADD04DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft Manifest number: 0A5A Signing time: Tue 23 Dec 2025 16:02:48 +0000 Manifest this update: Tue 23 Dec 2025 16:02:48 +0000 Manifest next update: Wed 24 Dec 2025 16:02:48 +0000 Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=) 2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: g96W+8b/uiIPhjSRZ2LQ+cvGsiM0sdunBOMYi+c7Rz0=) 3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:e6:7a:48:2c:7b:1d:a5:a8:10:32:fa:dd:04:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Validity Not Before: Dec 23 16:02:48 2025 GMT Not After : Dec 24 16:02:48 2025 GMT Subject: CN=a7b2f368b8a2dfc5b61ad7bd0fa4658d4b604f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7d:24:55:90:11:d5:75:8d:de:bd:37:7d:e0: 84:35:67:50:ea:59:9f:1c:7b:28:ae:92:87:92:6a: 21:66:ac:bf:79:db:d3:07:e1:b1:30:3f:83:e5:59: 92:f0:0a:38:8d:dc:89:db:d8:c2:8e:70:b3:38:2e: f0:05:b6:78:2c:e7:08:b4:76:27:a0:6d:0b:ad:fd: d4:63:42:54:d5:c4:7c:ba:cc:6a:17:87:61:ed:4a: 80:d1:09:19:85:f4:d5:76:c3:ff:5c:fb:6c:85:2c: cd:5c:00:ac:d7:9b:9f:ee:50:60:69:52:a5:d1:bb: 6c:b1:a4:88:93:2b:c9:fb:00:12:7f:56:62:6e:43: 13:ce:97:15:59:0a:47:39:d8:8f:1c:c5:a9:1e:66: b2:4b:4a:53:df:fa:ea:f9:04:bd:60:14:36:d3:ac: fa:71:d4:9b:be:ec:b7:6a:2a:a0:ce:69:47:6a:f6: b5:2c:72:46:bb:9b:22:82:1a:d0:5c:1d:45:06:7e: fe:d1:0f:38:94:80:26:20:45:f2:d5:91:cb:b1:04: 3f:d1:9d:af:64:c0:71:8d:80:a2:8a:84:87:49:bb: 18:c2:bd:48:5d:bd:d9:a9:37:e1:02:8c:49:3f:09: 87:25:d6:17:b6:16:ed:16:cd:71:e3:5c:c1:08:43: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B2:F3:68:B8:A2:DF:C5:B6:1A:D7:BD:0F:A4:65:8D:4B:60:4F:7F X509v3 Authority Key Identifier: keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c1:66:3e:ff:a7:b8:2d:11:8b:9f:c2:b8:bd:ed:00:a2:c9: 54:e0:e3:92:7e:13:4b:48:8c:5a:aa:52:55:88:59:3b:a5:de: 93:ed:bc:b6:34:f3:35:2a:4d:c4:c3:92:a5:88:6a:52:1c:86: 24:77:ac:36:cd:71:ff:2b:6c:71:b4:c7:f7:f0:2d:63:eb:de: ac:e5:bc:c3:d3:eb:0a:34:4a:1a:60:58:6b:1b:c5:d3:e3:eb: c9:31:aa:02:c5:38:33:0d:f9:65:20:bd:fe:1b:0c:0a:af:88: 1e:ce:d6:1d:06:b1:4a:ff:f9:5c:03:1a:15:59:1a:76:84:96: c9:80:e2:d4:5b:b2:71:ae:ab:16:76:bb:53:e5:ac:6f:47:62: c4:79:dd:60:a0:b3:6e:e0:28:7f:49:5c:b6:e5:f4:2c:6c:b6: 5f:51:06:1b:87:b2:3f:dd:9d:f9:24:d6:46:7f:f7:c9:6d:0c: 96:f5:d6:b6:84:95:b7:dd:58:f9:b0:d5:4b:cb:7c:22:73:ee: c4:41:e5:03:38:f8:a5:c1:dd:15:7b:b5:a5:1d:20:8a:2a:a6: f8:55:51:a9:b7:81:5c:e2:d7:94:c7:9c:30:c0:80:b9:ba:2f: 53:16:3a:58:b5:5e:fe:a7:64:90:c8:24:a0:b0:47:e7:d4:79: 0e:eb:0f:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8uZ6SCx7HaWoEDL63QTcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl NzkzNWEwHhcNMjUxMjIzMTYwMjQ4WhcNMjUxMjI0MTYwMjQ4WjAzMTEwLwYDVQQD EyhhN2IyZjM2OGI4YTJkZmM1YjYxYWQ3YmQwZmE0NjU4ZDRiNjA0ZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA130kVZAR1XWN3r03feCENWdQ6lmf HHsorpKHkmohZqy/edvTB+GxMD+D5VmS8Ao4jdyJ29jCjnCzOC7wBbZ4LOcItHYn oG0Lrf3UY0JU1cR8usxqF4dh7UqA0QkZhfTVdsP/XPtshSzNXACs15uf7lBgaVKl 0btssaSIkyvJ+wASf1ZibkMTzpcVWQpHOdiPHMWpHmayS0pT3/rq+QS9YBQ206z6 cdSbvuy3aiqgzmlHava1LHJGu5sighrQXB1FBn7+0Q84lIAmIEXy1ZHLsQQ/0Z2v ZMBxjYCiioSHSbsYwr1IXb3ZqTfhAoxJPwmHJdYXthbtFs1x41zBCENmkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKey82i4ot/FthrXvQ+kZY1LYE9/MB8GA1UdIwQY MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8FmPv+n uC0Ri5/CuL3tAKLJVODjkn4TS0iMWqpSVYhZO6Xek+28tjTzNSpNxMOSpYhqUhyG JHesNs1x/ytscbTH9/AtY+verOW8w9PrCjRKGmBYaxvF0+PryTGqAsU4Mw35ZSC9 /hsMCq+IHs7WHQaxSv/5XAMaFVkadoSWyYDi1Fuyca6rFna7U+Wsb0dixHndYKCz buAof0lctuX0LGy2X1EGG4eyP92d+STWRn/3yW0MlvXWtoSVt91Y+bDVS8t8InPu xEHlAzj4pcHdFXu1pR0giiqm+FVRqbeBXOLXlMecMMCAubovUxY6WLVe/qdkkMgk oLBH59R5DusPmQ== -----END CERTIFICATE-----Generated at Wed Dec 24 00:14:12 2025 by rpki-client