This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json) Hash identifier: eKD6wA7LnY62AKc4tTCWGfMYYFKvYvX+GoMqrLAHYOU= Subject key identifier: 98:08:D6:4B:9C:D7:5A:B3:99:AF:15:8C:A4:5C:A0:DC:46:21:B2:75 Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Certificate serial: 019B334481B26F98E8520464D8DF065FA2D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft Manifest number: 11DC Signing time: Thu 18 Dec 2025 21:01:26 +0000 Manifest this update: Thu 18 Dec 2025 21:01:26 +0000 Manifest next update: Fri 19 Dec 2025 21:01:26 +0000 Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: 3o1/oWHce/VrPOjS6Zhc2QHzo4Xc1RKvTruYHam3IA8=) 2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:81:b2:6f:98:e8:52:04:64:d8:df:06:5f:a2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Validity Not Before: Dec 18 21:01:26 2025 GMT Not After : Dec 19 21:01:26 2025 GMT Subject: CN=9808d64b9cd75ab399af158ca45ca0dc4621b275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:50:a2:5a:73:43:22:ec:b4:57:ab:ff:1b: 8f:df:c2:5c:b6:5a:10:b9:13:d1:77:03:6b:3c:1a: f0:f3:7b:c3:ad:1d:7b:88:c9:dc:fc:d2:16:ec:ab: c6:32:a6:63:34:f6:44:31:a3:61:19:52:6b:f1:e2: 82:8d:43:9b:cf:7e:74:76:8f:64:0c:c9:0d:cc:34: fb:bb:71:cc:d3:cf:79:c9:cb:9e:f8:d8:1c:73:9d: d3:3b:cf:f4:5f:56:98:6c:a4:44:c3:54:3a:96:26: b0:d4:2e:15:da:89:9d:bc:ec:c0:0c:4c:38:0e:26: 7a:a1:63:e0:8b:f7:ec:6c:fd:17:6f:bc:c4:52:a4: 45:fb:41:b6:93:ca:b5:2a:31:38:53:df:b1:1c:00: a9:c3:78:3b:93:b9:89:ce:8a:d5:f4:7d:a5:ce:16: 7b:cf:c6:48:56:d7:44:5e:64:d1:e6:c3:6c:30:01: 61:1e:a2:01:3b:ba:9d:cf:d3:9d:c3:4a:e1:84:79: 37:1b:52:0f:d0:30:08:13:4a:4c:a2:5f:f3:52:be: 3b:a2:f6:fa:3c:a1:5d:69:fd:c0:d4:19:da:2d:59: 39:d1:c4:da:e4:6b:49:0f:84:f1:37:08:16:f9:4d: 9c:7f:5f:a8:55:cd:34:3c:43:95:a8:07:5e:e3:70: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:08:D6:4B:9C:D7:5A:B3:99:AF:15:8C:A4:5C:A0:DC:46:21:B2:75 X509v3 Authority Key Identifier: keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:88:d3:97:28:f5:76:54:c8:43:1e:95:d8:2c:49:47:c7:7d: ba:c2:e0:24:d3:cd:73:66:62:58:99:4e:3f:c3:2e:bf:fe:95: 89:25:e4:1d:2a:c9:1e:ea:93:29:ed:aa:69:89:f2:ad:62:4c: 93:f7:c5:e1:3c:2e:0c:84:b1:6d:ee:41:9e:a0:fb:14:3d:a9: 90:2d:c1:04:3c:63:f4:68:00:f6:47:9f:06:2f:22:af:72:c4: 8d:a8:f9:d4:5c:15:5f:44:6a:12:37:ec:69:57:c4:ac:39:45: 79:60:8b:af:00:34:7b:08:43:9d:ad:30:c0:4a:d9:bc:6e:cd: 5b:2e:20:e3:dc:08:9a:1e:30:74:c7:ab:e1:a9:ec:58:ff:2e: b2:74:0c:30:8e:5a:48:a2:5e:12:6a:2e:15:a2:4e:79:ca:f0: 7d:9d:c8:27:94:1e:da:9c:97:c5:50:59:54:1a:54:8d:6e:a3: 52:0c:33:8f:4a:63:94:4e:0f:63:b1:7e:6b:9c:cc:f5:3e:4b: b6:ce:a8:97:02:a1:c2:61:98:ae:7c:61:d3:a1:75:31:51:e6: 23:88:e9:b0:6f:2e:c7:3f:4e:7b:e0:2e:d1:5a:9d:5f:b5:99: 93:cb:1c:cd:ed:89:8d:16:16:50:74:96:7b:18:5b:fd:a3:cc: 2c:8f:69:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRIGyb5joUgRk2N8GX6LVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDJmOTgxYmVlNzk1MjFhMzA0YjY4ZjY2N2ZlYWVkODFl YTNmZjYwHhcNMjUxMjE4MjEwMTI2WhcNMjUxMjE5MjEwMTI2WjAzMTEwLwYDVQQD Eyg5ODA4ZDY0YjljZDc1YWIzOTlhZjE1OGNhNDVjYTBkYzQ2MjFiMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDNQolpzQyLstFer/xuP38JctloQ uRPRdwNrPBrw83vDrR17iMnc/NIW7KvGMqZjNPZEMaNhGVJr8eKCjUObz350do9k DMkNzDT7u3HM0895ycue+Ngcc53TO8/0X1aYbKREw1Q6liaw1C4V2omdvOzADEw4 DiZ6oWPgi/fsbP0Xb7zEUqRF+0G2k8q1KjE4U9+xHACpw3g7k7mJzorV9H2lzhZ7 z8ZIVtdEXmTR5sNsMAFhHqIBO7qdz9Odw0rhhHk3G1IP0DAIE0pMol/zUr47ovb6 PKFdaf3A1BnaLVk50cTa5GtJD4TxNwgW+U2cf1+oVc00PEOVqAde43A1AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgI1kuc11qzma8VjKRcoNxGIbJ1MB8GA1UdIwQY MBaAFFwC+YG+55UhowS2j2Z/6u2B6j/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMt MzdkMmIwMzJiYTU3LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMtMzdkMmIwMzJiYTU3 LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIjTlyj1 dlTIQx6V2CxJR8d9usLgJNPNc2ZiWJlOP8Muv/6ViSXkHSrJHuqTKe2qaYnyrWJM k/fF4TwuDISxbe5BnqD7FD2pkC3BBDxj9GgA9kefBi8ir3LEjaj51FwVX0RqEjfs aVfErDlFeWCLrwA0ewhDna0wwErZvG7NWy4g49wImh4wdMer4ansWP8usnQMMI5a SKJeEmouFaJOecrwfZ3IJ5Qe2pyXxVBZVBpUjW6jUgwzj0pjlE4PY7F+a5zM9T5L ts6olwKhwmGYrnxh06F1MVHmI4jpsG8uxz9Oe+Au0VqdX7WZk8scze2JjRYWUHSW exhb/aPMLI9p2g== -----END CERTIFICATE-----Generated at Fri Dec 19 01:08:31 2025 by rpki-client