This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json) Hash identifier: HYjVVtFc2yPQNEZasIVGb5JqcFQfMji0PuGmzTAEu7E= Subject key identifier: EA:8D:02:A9:F6:B5:C6:E0:B2:80:8E:56:29:B2:E0:88:E9:B0:0A:D9 Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f Certificate serial: 019B1FF42E856F2319E7C89D301AC96A5B48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 03:00:54 +0000 Manifest this update: Mon 15 Dec 2025 03:00:54 +0000 Manifest next update: Tue 16 Dec 2025 03:00:54 +0000 Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=) 2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: /x7SgvpTz5W42qlNG8fpR6YYS7+GnwWNneWglmmtYHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:2e:85:6f:23:19:e7:c8:9d:30:1a:c9:6a:5b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f Validity Not Before: Dec 15 03:00:54 2025 GMT Not After : Dec 16 03:00:54 2025 GMT Subject: CN=ea8d02a9f6b5c6e0b2808e5629b2e088e9b00ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:6b:75:a2:a9:9f:09:11:72:b2:16:12:cb: 29:c3:fb:af:6f:9f:04:61:57:e8:53:b9:1d:a7:d6: 1e:52:3e:35:f2:19:2f:cf:17:f8:2f:94:62:f0:45: 67:3a:1b:0b:33:d7:4a:7f:ea:63:79:8c:a6:18:0f: 69:c1:24:9b:34:d6:1f:2c:77:d5:85:36:de:3f:5b: 62:99:06:b2:05:b8:fa:24:e7:e9:54:5b:b7:c7:6b: 27:d2:f3:61:08:92:43:08:78:03:e5:22:15:9c:cd: b0:69:06:42:7c:63:51:44:3d:1a:18:65:6c:97:7e: cc:c5:33:fd:4a:45:d0:1c:b3:0b:2c:83:36:e8:19: 52:24:a8:14:cf:c0:5c:fd:68:ec:45:fa:17:57:ee: 9d:37:ac:3c:5f:9c:49:b0:6f:81:49:07:3a:4e:eb: 41:71:94:80:f7:f6:ee:35:9b:a7:7a:38:d5:87:61: 95:16:16:42:80:69:5d:24:bd:18:16:6e:62:dc:14: 26:7f:91:2b:ef:cf:d2:5e:42:c0:79:9f:2b:47:ce: 89:76:a3:cc:d1:79:f6:cd:e6:cf:36:b1:2c:dd:0c: c6:3c:7c:a3:d1:17:34:ad:3f:54:29:d9:94:9b:f0: f0:c6:80:ee:f4:c4:58:7c:5e:17:b8:e6:71:8e:ff: 0b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:8D:02:A9:F6:B5:C6:E0:B2:80:8E:56:29:B2:E0:88:E9:B0:0A:D9 X509v3 Authority Key Identifier: keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:93:48:dc:a9:e3:53:a2:e5:ee:61:45:ff:4a:0f:f8:b4:5a: 21:13:14:b2:82:89:e7:01:99:4e:25:38:67:c1:95:19:bc:83: 05:70:c1:a1:2d:03:e9:f2:c3:e9:36:1f:f7:f8:69:4e:ad:83: 8d:cf:3e:17:fb:92:d6:75:1e:77:d6:7d:bc:a2:7e:29:40:10: c3:6e:dc:1d:09:0d:e3:26:2e:ba:c7:ab:e8:53:be:68:bf:03: 08:bb:44:43:ea:0a:ef:09:9e:a8:70:15:a5:7a:c6:f4:e0:50: ef:ec:49:6b:75:a9:14:b4:4b:35:bc:01:48:88:7d:25:1e:45: 39:a4:e3:a0:e1:14:ce:58:60:d1:65:1f:b2:db:e6:e4:19:9f: 77:b8:60:c9:d5:e1:9c:56:57:26:c4:a9:d4:e6:0f:d5:bf:1c: 94:ec:cf:93:bb:cd:1f:71:ea:15:ea:b0:12:bb:a6:e3:24:da: bb:9f:7f:9e:3a:44:59:b8:2b:6f:03:39:2a:40:38:6d:00:f3: 55:a5:a5:c3:7a:66:8f:e8:64:80:33:4f:5a:fb:53:f1:38:fb: f4:ed:33:94:57:b2:85:52:ae:1d:38:02:33:a7:96:af:3e:cf: 54:88:80:5e:16:f2:f4:2f:5d:8d:fb:47:15:1a:7a:81:78:b0: 95:06:5d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9C6FbyMZ58idMBrJaltIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1 MWYyMWYwHhcNMjUxMjE1MDMwMDU0WhcNMjUxMjE2MDMwMDU0WjAzMTEwLwYDVQQD EyhlYThkMDJhOWY2YjVjNmUwYjI4MDhlNTYyOWIyZTA4OGU5YjAwYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX9rdaKpnwkRcrIWEsspw/uvb58E YVfoU7kdp9YeUj418hkvzxf4L5Ri8EVnOhsLM9dKf+pjeYymGA9pwSSbNNYfLHfV hTbeP1timQayBbj6JOfpVFu3x2sn0vNhCJJDCHgD5SIVnM2waQZCfGNRRD0aGGVs l37MxTP9SkXQHLMLLIM26BlSJKgUz8Bc/WjsRfoXV+6dN6w8X5xJsG+BSQc6TutB cZSA9/buNZunejjVh2GVFhZCgGldJL0YFm5i3BQmf5Er78/SXkLAeZ8rR86JdqPM 0Xn2zebPNrEs3QzGPHyj0Rc0rT9UKdmUm/DwxoDu9MRYfF4XuOZxjv8LjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqNAqn2tcbgsoCOVimy4IjpsArZMB8GA1UdIwQY MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5 LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZNI3Knj U6Ll7mFF/0oP+LRaIRMUsoKJ5wGZTiU4Z8GVGbyDBXDBoS0D6fLD6TYf9/hpTq2D jc8+F/uS1nUed9Z9vKJ+KUAQw27cHQkN4yYuuser6FO+aL8DCLtEQ+oK7wmeqHAV pXrG9OBQ7+xJa3WpFLRLNbwBSIh9JR5FOaTjoOEUzlhg0WUfstvm5Bmfd7hgydXh nFZXJsSp1OYP1b8clOzPk7vNH3HqFeqwErum4yTau59/njpEWbgrbwM5KkA4bQDz VaWlw3pmj+hkgDNPWvtT8Tj79O0zlFeyhVKuHTgCM6eWrz7PVIiAXhby9C9djftH FRp6gXiwlQZdjQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:19:09 2025 by rpki-client