This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json) Hash identifier: YE4qkKBDOwcmZ9jTkUiRVuZ1XdYG84+Chc10/TyUMQg= Subject key identifier: 9C:2A:FD:B7:00:35:57:FC:2E:8E:A1:3B:69:57:88:A2:40:4B:2E:B9 Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Certificate serial: 019B0ECA1D9A5EF011CCF47FCBB2361CC04E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft Manifest number: 154A Signing time: Thu 11 Dec 2025 19:01:25 +0000 Manifest this update: Thu 11 Dec 2025 19:01:25 +0000 Manifest next update: Fri 12 Dec 2025 19:01:25 +0000 Files and hashes: 1: 1-odAb-HXEiGLPx5y_PADnZMBf0g.roa (hash: 4z0B6lGqXvXr1EDmabK3iy+SlaX1WPh7Y1Hx0zBd0iM=) 2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: pip9aCFeEu79mWQSOjIzLVnuyvRnRmu+uSV8M2BhQyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:1d:9a:5e:f0:11:cc:f4:7f:cb:b2:36:1c:c0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e Validity Not Before: Dec 11 19:01:25 2025 GMT Not After : Dec 12 19:01:25 2025 GMT Subject: CN=9c2afdb7003557fc2e8ea13b695788a2404b2eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:48:93:5e:6f:73:58:d2:13:73:e2:b6:2d: 27:11:9c:95:cd:7b:31:f2:f5:53:39:14:b1:5a:bb: 7b:19:1f:7b:98:cc:e3:b5:4a:75:18:50:93:44:d9: 80:cd:61:bb:6c:1b:9b:fe:cf:06:69:45:04:af:6b: e8:56:74:17:3c:7a:f7:68:d0:49:74:23:b9:fc:cf: c5:a2:af:3b:55:7a:0c:0a:9a:f1:9e:18:79:5b:34: 0b:6d:97:8b:75:7f:2a:26:1a:e4:f5:c6:c5:3d:92: 73:20:5f:6b:00:ca:04:28:f0:2f:0e:24:1a:6a:38: 82:e2:76:63:37:ae:2b:aa:95:08:96:84:de:df:22: 0e:bd:6e:69:ed:65:6d:ce:c1:5c:12:32:7f:da:e2: 75:b3:65:6d:56:74:ba:07:5a:7e:f1:e9:af:b0:e8: f9:34:23:40:0d:7a:92:58:48:4b:79:11:f9:49:ba: a1:1e:5e:39:04:2e:6f:b4:86:18:13:44:fa:27:86: 9a:4d:43:fd:90:a4:e5:01:96:49:b6:5a:32:cd:4c: 2c:53:f0:cc:13:ad:dc:bf:05:85:e2:27:f2:4b:cb: 52:18:45:a7:e5:c4:90:fc:8e:4d:3c:17:6f:6b:3b: 7a:43:e2:3c:1a:f5:90:d2:fe:9f:5f:92:be:bc:93: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2A:FD:B7:00:35:57:FC:2E:8E:A1:3B:69:57:88:A2:40:4B:2E:B9 X509v3 Authority Key Identifier: keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:59:46:23:f1:7b:c1:08:61:dc:20:97:33:8d:fd:cc:89:d7: 95:ad:52:f7:dc:19:52:2c:96:6d:bc:e4:85:e2:e3:6c:8a:af: 38:3d:80:70:c2:79:a2:4b:fb:9b:9d:55:1a:8c:c6:fe:39:5b: 85:53:fb:8a:7a:a6:46:47:c8:6e:91:e7:e7:fa:be:d4:0d:d0: 6a:97:e8:c3:12:a5:3a:9c:bb:a7:b9:50:2c:02:dd:f4:1d:30: 48:82:46:39:f9:71:73:06:a3:58:e7:88:5e:62:61:55:77:52: f7:41:5a:ee:80:05:20:6d:a2:eb:33:35:f7:59:c8:99:76:d3: 68:af:1b:2a:41:c3:39:2a:bb:4f:90:1e:55:55:28:d1:e3:1c: aa:f9:9c:ef:c3:b8:06:9c:08:42:24:c7:f7:c6:c8:22:1e:f0: b2:e8:fc:ab:3f:bb:d7:26:72:06:c0:a8:ea:28:e3:6e:f5:99: 46:80:71:95:bd:7e:8a:36:c9:6c:8b:39:93:15:5d:73:46:a0: c7:e9:8c:1e:96:0c:3b:62:39:a6:41:81:1d:a7:40:8e:9a:7d: 04:15:86:2a:0d:08:5b:ea:e3:c5:22:27:52:b1:ee:5a:e0:ad: d3:98:c8:ca:35:20:1d:21:4b:ee:eb:bc:9a:17:47:74:d0:02: 63:53:5f:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyh2aXvARzPR/y7I2HMBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl MGZiNGUwHhcNMjUxMjExMTkwMTI1WhcNMjUxMjEyMTkwMTI1WjAzMTEwLwYDVQQD Eyg5YzJhZmRiNzAwMzU1N2ZjMmU4ZWExM2I2OTU3ODhhMjQwNGIyZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+xIk15vc1jSE3Piti0nEZyVzXsx 8vVTORSxWrt7GR97mMzjtUp1GFCTRNmAzWG7bBub/s8GaUUEr2voVnQXPHr3aNBJ dCO5/M/Foq87VXoMCprxnhh5WzQLbZeLdX8qJhrk9cbFPZJzIF9rAMoEKPAvDiQa ajiC4nZjN64rqpUIloTe3yIOvW5p7WVtzsFcEjJ/2uJ1s2VtVnS6B1p+8emvsOj5 NCNADXqSWEhLeRH5SbqhHl45BC5vtIYYE0T6J4aaTUP9kKTlAZZJtloyzUwsU/DM E63cvwWF4ifyS8tSGEWn5cSQ/I5NPBdvazt6Q+I8GvWQ0v6fX5K+vJOtEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwq/bcANVf8Lo6hO2lXiKJASy65MB8GA1UdIwQY MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut Zjk5OTViNzhhODVmLzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFlGI/F7 wQhh3CCXM439zInXla1S99wZUiyWbbzkheLjbIqvOD2AcMJ5okv7m51VGozG/jlb hVP7inqmRkfIbpHn5/q+1A3QapfowxKlOpy7p7lQLALd9B0wSIJGOflxcwajWOeI XmJhVXdS90Fa7oAFIG2i6zM191nImXbTaK8bKkHDOSq7T5AeVVUo0eMcqvmc78O4 BpwIQiTH98bIIh7wsuj8qz+71yZyBsCo6ijjbvWZRoBxlb1+ijbJbIs5kxVdc0ag x+mMHpYMO2I5pkGBHadAjpp9BBWGKg0IW+rjxSInUrHuWuCt05jIyjUgHSFL7uu8 mhdHdNACY1Nfog== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:08 2025 by rpki-client