This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json) Hash identifier: uBU0uUOh8O/PmrAjuRZuwmf1BuX+nUkvX4+BTHZToUs= Subject key identifier: 83:BC:29:04:74:5A:A7:4A:3C:FF:8F:E5:8F:46:BA:51:DE:EE:A5:46 Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Certificate serial: 019B5A88B0D7F830F2A24F25B9223A104B4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft Manifest number: 06CD Signing time: Fri 26 Dec 2025 12:01:06 +0000 Manifest this update: Fri 26 Dec 2025 12:01:06 +0000 Manifest next update: Sat 27 Dec 2025 12:01:06 +0000 Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=) 2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: LrA8LGjo1lE9s2x40ABZ372R/jlpcpYTvCm2O8n8dG8=) 3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:b0:d7:f8:30:f2:a2:4f:25:b9:22:3a:10:4b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Validity Not Before: Dec 26 12:01:06 2025 GMT Not After : Dec 27 12:01:06 2025 GMT Subject: CN=83bc2904745aa74a3cff8fe58f46ba51deeea546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:4b:20:70:da:ea:a5:f6:df:6f:10:5c:db: 81:09:44:a0:22:d1:ca:65:10:cb:f4:1e:52:91:42: 6d:fc:9c:47:2b:e9:31:ac:e4:3c:0d:d7:57:1f:97: 5d:08:0f:7f:a5:c2:ca:9f:19:e1:b4:a3:9e:ac:1b: 96:a0:98:41:09:1a:63:ed:d4:c3:8e:77:f0:78:c0: db:e7:cb:e5:84:d8:3e:ab:51:ff:e2:01:40:af:a0: f8:8d:6e:72:0e:cc:db:19:ef:d2:05:63:eb:12:b3: b3:51:3e:ed:df:4b:e1:1d:68:3b:d8:c8:23:1d:13: eb:f7:7d:1e:0a:e2:c7:cc:f6:75:ba:e4:3d:ce:4a: cd:2b:75:2e:d1:77:79:37:d4:bb:7e:45:b5:57:99: 6b:30:0b:47:8e:9a:25:35:dc:af:38:2c:ff:a2:a1: ff:a8:45:e5:0e:9b:50:84:8f:2b:43:cd:dd:4a:60: c8:06:ff:3a:d2:c2:6f:b3:4d:55:d2:cd:d8:d5:03: 60:85:f0:dd:f5:29:d3:3c:f4:9b:dd:2f:d2:bd:a8: 8d:f9:6c:6f:4a:28:88:38:80:ee:1a:31:e2:21:34: 8b:72:4e:b7:27:29:9b:52:70:ae:c5:9b:21:1b:7e: 5f:75:12:9f:81:9f:6e:72:68:43:e8:c7:18:07:fb: f3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BC:29:04:74:5A:A7:4A:3C:FF:8F:E5:8F:46:BA:51:DE:EE:A5:46 X509v3 Authority Key Identifier: keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:e2:e6:22:98:1a:39:49:2c:6d:cf:5a:fd:20:72:b3:7a:50: 71:75:e2:b4:06:23:ef:01:3b:e1:7b:fb:31:62:7c:58:8c:eb: af:17:3c:34:20:b0:7d:6e:2d:20:e6:d6:dc:8b:79:cc:c4:3c: 9e:b7:52:f9:88:d6:1c:dd:91:69:8c:01:20:54:8a:16:d5:ac: 9d:41:56:df:b6:af:5a:48:4a:fa:6a:99:da:4c:2d:c1:5d:06: a0:0a:06:4c:25:23:25:fa:0b:df:aa:46:74:19:ac:55:f4:e1: b6:17:f0:ce:eb:82:35:e5:d8:28:46:f2:fe:53:62:db:14:9f: e2:e0:84:9f:35:69:e7:80:5f:53:4b:14:2c:57:05:74:ed:e9: 31:cc:86:07:4f:62:b9:2f:02:a6:f8:a3:ff:80:a7:61:81:82: f3:19:a6:d2:5d:5e:91:c5:27:76:f3:c1:4a:63:88:3f:fb:f0: 4e:88:3d:3b:b7:c0:32:d0:98:0d:b8:c2:6e:9f:6c:ce:88:1c: bd:7b:d0:4a:a0:aa:59:9b:4f:e6:ed:3b:b8:f3:1a:f7:95:91: a5:e3:15:38:5a:6b:0e:bc:d2:81:87:66:30:c2:6f:8e:91:52: ee:4c:df:af:00:8d:d6:50:c8:c1:d4:a9:bb:e2:c6:fc:ba:fc: 96:a9:b4:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLDX+DDyok8luSI6EEtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0 ZjRlOWEwHhcNMjUxMjI2MTIwMTA2WhcNMjUxMjI3MTIwMTA2WjAzMTEwLwYDVQQD Eyg4M2JjMjkwNDc0NWFhNzRhM2NmZjhmZTU4ZjQ2YmE1MWRlZWVhNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N9LIHDa6qX2328QXNuBCUSgItHK ZRDL9B5SkUJt/JxHK+kxrOQ8DddXH5ddCA9/pcLKnxnhtKOerBuWoJhBCRpj7dTD jnfweMDb58vlhNg+q1H/4gFAr6D4jW5yDszbGe/SBWPrErOzUT7t30vhHWg72Mgj HRPr930eCuLHzPZ1uuQ9zkrNK3Uu0Xd5N9S7fkW1V5lrMAtHjpolNdyvOCz/oqH/ qEXlDptQhI8rQ83dSmDIBv860sJvs01V0s3Y1QNghfDd9SnTPPSb3S/SvaiN+Wxv SiiIOIDuGjHiITSLck63JymbUnCuxZshG35fdRKfgZ9ucmhD6McYB/vzxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIO8KQR0WqdKPP+P5Y9GulHe7qVGMB8GA1UdIwQY MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+LmIpga OUksbc9a/SBys3pQcXXitAYj7wE74Xv7MWJ8WIzrrxc8NCCwfW4tIObW3It5zMQ8 nrdS+YjWHN2RaYwBIFSKFtWsnUFW37avWkhK+mqZ2kwtwV0GoAoGTCUjJfoL36pG dBmsVfThthfwzuuCNeXYKEby/lNi2xSf4uCEnzVp54BfU0sULFcFdO3pMcyGB09i uS8Cpvij/4CnYYGC8xmm0l1ekcUndvPBSmOIP/vwTog9O7fAMtCYDbjCbp9szogc vXvQSqCqWZtP5u07uPMa95WRpeMVOFprDrzSgYdmMMJvjpFS7kzfrwCN1lDIwdSp u+LG/Lr8lqm0qg== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:30 2025 by rpki-client