This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json) Hash identifier: lLRr02+rqItI1HoZEW7EedSY+QQeVtgl5/oYdDTLquc= Subject key identifier: 6D:05:0D:73:73:15:DF:40:73:71:89:6F:67:48:FE:07:40:86:2C:95 Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Certificate serial: 019B5AF621A8EA782A931D06386233E3CDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft Manifest number: 0827 Signing time: Fri 26 Dec 2025 14:00:38 +0000 Manifest this update: Fri 26 Dec 2025 14:00:38 +0000 Manifest next update: Sat 27 Dec 2025 14:00:38 +0000 Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: JLv6xrpOQ4FyYNk3TZYYH2YmveW6PBDWO2jXWau9YS4=) 2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:21:a8:ea:78:2a:93:1d:06:38:62:33:e3:cd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Validity Not Before: Dec 26 14:00:38 2025 GMT Not After : Dec 27 14:00:38 2025 GMT Subject: CN=6d050d737315df407371896f6748fe0740862c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:fe:f1:d6:4e:55:81:51:2d:63:80:88:90: 28:b1:65:c4:2f:9f:24:bc:a5:ea:e0:68:f7:7f:7d: 78:3f:ce:06:74:6e:dd:2f:21:41:42:73:86:e0:8b: 9b:0f:c6:e8:e1:4f:58:96:3f:b6:71:c2:2c:1c:56: 89:72:1f:eb:dc:d0:a6:ff:d5:02:80:87:fe:8d:90: f6:91:36:15:fa:84:a0:9f:4c:18:7e:b2:fb:e4:b4: 04:91:2c:a7:1c:be:4e:b3:a3:47:5b:c4:55:9c:98: a2:90:51:6d:09:44:d5:bc:41:7c:fc:68:aa:e9:b4: 30:f6:8c:e3:59:0a:79:f5:06:35:5b:f2:09:dc:f5: 8f:5b:e3:57:f8:5a:14:b6:a7:7f:d6:2a:ce:0b:02: f7:ad:0a:20:8f:57:20:02:5a:4a:8b:e8:df:54:ec: b9:3d:ca:76:c7:76:1d:1b:4e:86:0f:c4:a4:02:8b: 61:3c:a9:f0:73:fa:09:40:37:fc:ce:0f:03:84:6e: 18:e2:73:11:2c:36:2b:ed:09:2c:02:c2:9c:2d:87: 3e:e3:cb:fa:ee:1c:9f:9f:36:ff:7e:0f:a7:59:81: 8b:09:f3:70:87:84:02:ca:c3:3a:64:fa:46:ea:af: c2:ad:7d:8e:96:e7:f5:27:a7:d4:11:d7:de:ca:78: 3d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:0D:73:73:15:DF:40:73:71:89:6F:67:48:FE:07:40:86:2C:95 X509v3 Authority Key Identifier: keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:02:12:b0:de:84:6b:ee:61:fc:e1:a2:e9:d8:ad:1e:7d:68: 2b:8b:08:f7:0f:f4:a4:84:95:3a:6b:28:fa:3c:27:1c:7e:b5: 06:8f:6d:b1:d5:f5:fa:75:51:35:0f:81:95:ef:d4:95:4b:e6: 07:ae:91:91:9b:d5:55:ec:33:b9:64:7b:59:0c:41:2c:65:ff: 11:15:10:2c:fe:e5:b6:69:60:b5:e5:6d:cc:67:14:48:cb:2d: 1b:80:4e:99:6d:b1:05:ab:2e:a6:30:1b:53:bb:6e:f8:59:94: 0b:c9:cb:99:df:cf:78:69:e2:36:ce:53:1a:b1:57:a8:b4:f9: 48:45:a9:b0:4f:12:55:6b:11:74:07:6a:8c:bc:37:fa:b9:bd: 12:c8:8d:5c:c6:5b:45:ad:b2:be:9f:94:77:d2:2a:f9:f9:75: 67:b2:5b:ca:e6:d5:31:55:74:4b:99:da:3d:d2:96:50:f0:75: d3:df:d9:66:2c:69:c1:09:b4:d5:b0:d8:de:fa:39:c0:a9:e4: 2f:58:e4:ed:c8:36:64:48:26:03:c5:1b:06:6b:ba:2b:4b:ee: 06:8b:f1:0a:e4:d0:e2:c6:6c:56:b7:60:9e:97:83:16:b2:66: 5f:1f:eb:65:b7:ef:3c:6a:d9:28:1f:f4:91:a0:2a:97:14:f6: 01:88:56:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9iGo6ngqkx0GOGIz482nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh MWQxOTUwHhcNMjUxMjI2MTQwMDM4WhcNMjUxMjI3MTQwMDM4WjAzMTEwLwYDVQQD Eyg2ZDA1MGQ3MzczMTVkZjQwNzM3MTg5NmY2NzQ4ZmUwNzQwODYyYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUr+8dZOVYFRLWOAiJAosWXEL58k vKXq4Gj3f314P84GdG7dLyFBQnOG4IubD8bo4U9Ylj+2ccIsHFaJch/r3NCm/9UC gIf+jZD2kTYV+oSgn0wYfrL75LQEkSynHL5Os6NHW8RVnJiikFFtCUTVvEF8/Giq 6bQw9ozjWQp59QY1W/IJ3PWPW+NX+FoUtqd/1irOCwL3rQogj1cgAlpKi+jfVOy5 Pcp2x3YdG06GD8SkAothPKnwc/oJQDf8zg8DhG4Y4nMRLDYr7QksAsKcLYc+48v6 7hyfnzb/fg+nWYGLCfNwh4QCysM6ZPpG6q/CrX2Oluf1J6fUEdfeyng9owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0FDXNzFd9Ac3GJb2dI/gdAhiyVMB8GA1UdIwQY MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwISsN6E a+5h/OGi6ditHn1oK4sI9w/0pISVOmso+jwnHH61Bo9tsdX1+nVRNQ+Ble/UlUvm B66RkZvVVewzuWR7WQxBLGX/ERUQLP7ltmlgteVtzGcUSMstG4BOmW2xBasupjAb U7tu+FmUC8nLmd/PeGniNs5TGrFXqLT5SEWpsE8SVWsRdAdqjLw3+rm9EsiNXMZb Ra2yvp+Ud9Iq+fl1Z7JbyubVMVV0S5naPdKWUPB109/ZZixpwQm01bDY3vo5wKnk L1jk7cg2ZEgmA8UbBmu6K0vuBovxCuTQ4sZsVrdgnpeDFrJmXx/rZbfvPGrZKB/0 kaAqlxT2AYhWug== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:48 2025 by rpki-client