This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft File: _xcGtTYa7OO3e5sag2JA1IS9C1Q.mft (raw, json) Hash identifier: SsnpPoMyi41hB4BcXrRoGG1Tr3XS6bWqoTFiKzRZC68= Subject key identifier: 4E:A8:99:12:DE:B8:58:A6:6A:FA:3A:52:4E:5E:A1:01:C8:F4:83:3B Authority key identifier: FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54 Certificate issuer: /CN=ff1706b5361aece3b77b9b1a836240d484bd0b54 Certificate serial: 019B5A51E337A6F4E6E36B730798D93D9478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft Manifest number: 39 Signing time: Fri 26 Dec 2025 11:01:14 +0000 Manifest this update: Fri 26 Dec 2025 11:01:14 +0000 Manifest next update: Sat 27 Dec 2025 11:01:14 +0000 Files and hashes: 1: _xcGtTYa7OO3e5sag2JA1IS9C1Q.crl (hash: oef5F8s75D4iAU7Uoz3LZqG2XRWmoWCYCzgvJIqTJoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e3:37:a6:f4:e6:e3:6b:73:07:98:d9:3d:94:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1706b5361aece3b77b9b1a836240d484bd0b54 Validity Not Before: Dec 26 11:01:14 2025 GMT Not After : Dec 27 11:01:14 2025 GMT Subject: CN=4ea89912deb858a66afa3a524e5ea101c8f4833b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:4c:02:6e:dd:95:06:fc:3f:38:d9:f4:5f: 78:7f:62:f7:d0:c9:24:92:d6:35:d0:52:99:8a:09: 7a:b8:c3:a4:da:9c:c9:63:4f:fd:06:5c:80:67:89: 5c:23:2d:fd:60:fc:79:99:06:d5:eb:60:d9:b7:f0: 52:48:a8:f8:88:9e:9e:13:9e:83:d2:b9:3a:65:82: 41:d9:1f:d6:d4:98:2d:7f:d0:30:c2:73:ae:62:a3: e5:d6:25:34:fe:a8:e9:8e:c4:fe:68:dc:73:23:d8: 4a:6b:fb:6f:cd:7f:8e:f5:b9:d0:c2:75:73:c0:b4: 3a:c1:c6:52:61:12:09:56:80:dd:54:58:b8:08:54: f9:06:2f:9c:86:ed:e2:30:23:c0:85:d9:78:4a:d9: d8:fa:cb:9d:7d:83:a8:57:ca:1e:b9:e2:ab:35:27: c4:5b:9e:9d:7f:f2:de:15:ea:41:8e:bf:ef:57:6b: 48:10:a2:d9:4f:26:7e:17:74:2f:3c:c0:54:d4:62: 1c:ce:96:f7:f7:9b:49:f6:cc:90:c6:d0:69:75:68: ef:56:05:c0:e1:e1:37:bd:7e:c3:0c:52:af:5a:d4: e9:0c:a5:ce:b8:0d:bb:7e:0c:69:24:c5:a1:d6:91: 32:78:2c:89:32:ab:f0:33:c8:bf:a6:ef:81:c8:31: 44:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A8:99:12:DE:B8:58:A6:6A:FA:3A:52:4E:5E:A1:01:C8:F4:83:3B X509v3 Authority Key Identifier: keyid:FF:17:06:B5:36:1A:EC:E3:B7:7B:9B:1A:83:62:40:D4:84:BD:0B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xcGtTYa7OO3e5sag2JA1IS9C1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1f95ab-f2a5-40fc-90c4-ac854cc5d051/1/_xcGtTYa7OO3e5sag2JA1IS9C1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:76:53:4d:c3:00:09:51:a4:04:27:82:4f:31:24:07:54:1f: 28:f1:a6:44:22:66:00:01:6e:7c:2d:de:ab:e6:50:c8:9e:d0: 39:1a:aa:b7:0a:4d:d3:aa:d0:a6:29:cb:e3:1b:ab:f5:68:40: 18:7b:ab:4f:57:d2:c7:d4:a2:0f:c5:c1:13:2e:cf:f8:74:f5: f7:b5:99:45:96:77:c8:a4:6d:86:4d:f8:b2:f5:df:a0:e7:98: 8b:21:cf:d1:c1:26:6a:07:be:3c:8f:61:17:c5:9a:00:40:27: 8c:e6:32:25:73:4b:24:5d:28:32:4a:f9:b6:c2:66:3d:f3:1a: e2:2f:54:3a:77:a4:00:c0:5c:98:13:e9:c9:63:bc:b6:44:97: 59:40:0a:ab:e2:42:fc:cd:40:32:12:a5:ea:a5:54:38:85:bc: b5:30:52:c2:41:d2:90:80:33:4b:8b:39:e1:c6:04:23:a5:41: 46:1e:81:71:63:4a:c9:1f:48:cd:e6:ef:e3:a0:65:7b:ec:60: 17:97:d8:8d:3c:9a:8a:d3:9d:30:11:43:6d:47:a5:dc:4a:92: fe:48:ed:33:a3:ec:d7:a2:7f:ef:18:4c:32:e6:2e:b0:0a:7a: 42:a2:92:be:b2:d5:17:43:ec:ed:d1:ef:38:e4:87:1f:74:17: 06:66:ac:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUeM3pvTm42tzB5jZPZR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMTcwNmI1MzYxYWVjZTNiNzdiOWIxYTgzNjI0MGQ0ODRi ZDBiNTQwHhcNMjUxMjI2MTEwMTE0WhcNMjUxMjI3MTEwMTE0WjAzMTEwLwYDVQQD Eyg0ZWE4OTkxMmRlYjg1OGE2NmFmYTNhNTI0ZTVlYTEwMWM4ZjQ4MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIJMAm7dlQb8PzjZ9F94f2L30Mkk ktY10FKZigl6uMOk2pzJY0/9BlyAZ4lcIy39YPx5mQbV62DZt/BSSKj4iJ6eE56D 0rk6ZYJB2R/W1Jgtf9AwwnOuYqPl1iU0/qjpjsT+aNxzI9hKa/tvzX+O9bnQwnVz wLQ6wcZSYRIJVoDdVFi4CFT5Bi+chu3iMCPAhdl4StnY+sudfYOoV8oeueKrNSfE W56df/LeFepBjr/vV2tIEKLZTyZ+F3QvPMBU1GIczpb395tJ9syQxtBpdWjvVgXA 4eE3vX7DDFKvWtTpDKXOuA27fgxpJMWh1pEyeCyJMqvwM8i/pu+ByDFEGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6omRLeuFimavo6Uk5eoQHI9IM7MB8GA1UdIwQY MBaAFP8XBrU2Guzjt3ubGoNiQNSEvQtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3hjR3RUWWE3T08zZTVzYWcySkExSVM5QzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xZjk1YWItZjJhNS00MGZjLTkwYzQt YWM4NTRjYzVkMDUxLzEvX3hjR3RUWWE3T08zZTVzYWcySkExSVM5QzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xZjk1YWItZjJhNS00MGZjLTkwYzQtYWM4NTRjYzVkMDUx LzEvX3hjR3RUWWE3T08zZTVzYWcySkExSVM5QzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHZTTcMA CVGkBCeCTzEkB1QfKPGmRCJmAAFufC3eq+ZQyJ7QORqqtwpN06rQpinL4xur9WhA GHurT1fSx9SiD8XBEy7P+HT197WZRZZ3yKRthk34svXfoOeYiyHP0cEmage+PI9h F8WaAEAnjOYyJXNLJF0oMkr5tsJmPfMa4i9UOnekAMBcmBPpyWO8tkSXWUAKq+JC /M1AMhKl6qVUOIW8tTBSwkHSkIAzS4s54cYEI6VBRh6BcWNKyR9Izebv46Ble+xg F5fYjTyaitOdMBFDbUel3EqS/kjtM6Ps16J/7xhMMuYusAp6QqKSvrLVF0Ps7dHv OOSHH3QXBmasrw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:20 2025 by rpki-client