This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json) Hash identifier: okua/ga338Rzo/HObxyB6qvCkmm6gg3Hf4uI4y223uo= Subject key identifier: AA:E2:6A:9A:0F:60:E1:88:3E:78:15:35:14:60:94:7D:1D:6E:13:51 Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Certificate serial: 019B5975B723B5D876B3D222DF9D16C24585 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:00:45 +0000 Manifest this update: Fri 26 Dec 2025 07:00:45 +0000 Manifest next update: Sat 27 Dec 2025 07:00:45 +0000 Files and hashes: 1: Q0ZblCsN6JQUnX3udQDuap6c2-I.roa (hash: I2xlD4uVVWvOFoGpUCm96IHEkG1bjZkLPW0exqxVsw0=) 2: TlDCQOh10UlQ796GS1cAAc1JE1M.roa (hash: pcd2lbTTd2y5ARZY73OsqPA+0niqtCAf82HtT92KDWw=) 3: UvT-ik743JDt1vdojO7D5Hy8riI.roa (hash: w83cJePf0jK45fQwHEKQOjcAlugYhfHD/eFh3NZpxgs=) 4: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: L3704JIpKjKCpzT20S4G0C3NdZfhkdaES+Wk5AMoJH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:b7:23:b5:d8:76:b3:d2:22:df:9d:16:c2:45:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d Validity Not Before: Dec 26 07:00:45 2025 GMT Not After : Dec 27 07:00:45 2025 GMT Subject: CN=aae26a9a0f60e1883e7815351460947d1d6e1351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:55:c9:74:e3:10:d5:0f:51:85:dd:59:0b:dd: 63:bb:2d:83:0a:76:11:2e:38:e9:6e:1f:88:e0:e7: 19:cf:f9:ad:3c:e6:bb:cb:d0:2b:46:0f:2c:08:90: 81:2f:93:c3:0f:5d:29:27:bf:85:40:f5:c0:b2:37: 00:cb:d4:6b:d8:b9:a3:9c:1d:e2:d1:a7:c9:2a:ed: d8:67:ad:c6:83:8b:0f:70:3a:0c:b8:f7:5a:54:f8: d8:a4:70:bd:bf:0c:dd:4b:ae:69:cb:4f:c5:ba:08: 0e:9b:b2:fd:30:7e:5d:f1:97:b0:57:d2:49:76:3c: 92:6e:da:f0:e3:bd:d9:aa:53:13:e7:db:16:86:4f: 90:8c:9f:53:fa:0b:0f:10:de:4c:be:c4:cc:b1:d7: cd:0e:a1:f1:a4:8e:14:c0:f5:f4:06:a0:53:72:67: 4a:32:07:7f:81:1d:9f:6c:62:c1:fe:69:e5:0b:50: 14:3e:81:b7:94:43:d6:94:e6:67:a2:e4:50:23:53: 27:54:49:d8:d1:4c:d2:84:c9:07:c3:15:91:f6:ce: 36:b9:49:3a:98:a9:e4:fd:f4:92:bf:bb:00:93:ef: e4:65:af:97:98:82:4b:1d:c4:bc:1f:fb:d5:f7:3c: 02:7a:47:78:a2:da:55:ce:77:a0:ea:93:9b:0f:65: 76:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:6A:9A:0F:60:E1:88:3E:78:15:35:14:60:94:7D:1D:6E:13:51 X509v3 Authority Key Identifier: keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:cd:b7:e2:f9:92:47:1a:66:f1:4a:81:65:ba:13:0a:9b: 43:8b:cb:04:47:18:53:ce:9b:ba:44:75:57:17:d4:24:15:92: 35:40:6f:98:e3:0f:ba:f0:4b:3f:a3:0f:66:83:8b:b4:cf:04: 8e:55:72:05:27:cd:23:82:aa:ac:36:c3:50:e6:12:db:f9:7d: 7f:29:d4:42:d0:67:31:9d:62:a9:d7:0e:a8:00:2b:d9:2a:b7: 0e:8f:89:74:a0:65:20:94:11:38:7c:80:18:dd:47:56:da:79: 04:ad:0a:37:5b:e1:7e:d3:3d:23:fb:fb:54:f5:e4:b1:b1:da: 49:fe:9a:5a:b3:50:e4:7f:4a:8b:b5:d3:eb:2f:74:7f:28:61: 9a:75:c9:09:ae:05:8c:de:bf:86:5c:49:23:93:70:7e:44:af: 39:b1:57:50:6f:f7:cc:bc:0f:cb:f6:3d:9f:0a:c7:3f:6d:ca: c1:f1:1a:f3:e1:24:e9:11:24:b9:19:0b:e7:bc:f8:19:6f:90: 3c:90:9f:ce:0b:b2:46:42:1e:ef:63:23:3f:ea:fd:73:c9:33: 0d:7b:2b:5c:61:e8:c1:03:52:2e:93:dd:a1:f1:b6:e3:71:8f: 3c:db:7f:80:28:cb:54:10:2f:d4:45:a4:b9:d4:29:df:2d:19: 24:44:0d:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdbcjtdh2s9Ii350WwkWFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDIzYzdhYzZlNjgyZmJjNTNiZTFhMGU5MzE4ZjZjY2Fl NzE5M2QwHhcNMjUxMjI2MDcwMDQ1WhcNMjUxMjI3MDcwMDQ1WjAzMTEwLwYDVQQD EyhhYWUyNmE5YTBmNjBlMTg4M2U3ODE1MzUxNDYwOTQ3ZDFkNmUxMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVXJdOMQ1Q9Rhd1ZC91juy2DCnYR Ljjpbh+I4OcZz/mtPOa7y9ArRg8sCJCBL5PDD10pJ7+FQPXAsjcAy9Rr2LmjnB3i 0afJKu3YZ63Gg4sPcDoMuPdaVPjYpHC9vwzdS65py0/FuggOm7L9MH5d8ZewV9JJ djySbtrw473ZqlMT59sWhk+QjJ9T+gsPEN5MvsTMsdfNDqHxpI4UwPX0BqBTcmdK Mgd/gR2fbGLB/mnlC1AUPoG3lEPWlOZnouRQI1MnVEnY0UzShMkHwxWR9s42uUk6 mKnk/fSSv7sAk+/kZa+XmIJLHcS8H/vV9zwCekd4otpVzneg6pObD2V28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKriapoPYOGIPngVNRRglH0dbhNRMB8GA1UdIwQY MBaAFF3SPHrG5oL7xTvhoOkxj2zK5xk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWIt ZWJlMjMzMmNhZjFjLzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hNDJlOWMtZDkyZC00YjIwLWE1ZWItZWJlMjMzMmNhZjFj LzEvWGRJOGVzYm1ndnZGTy1HZzZUR1BiTXJuR1QwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK7Nt+L5 kkcaZvFKgWW6EwqbQ4vLBEcYU86bukR1VxfUJBWSNUBvmOMPuvBLP6MPZoOLtM8E jlVyBSfNI4KqrDbDUOYS2/l9fynUQtBnMZ1iqdcOqAAr2Sq3Do+JdKBlIJQROHyA GN1HVtp5BK0KN1vhftM9I/v7VPXksbHaSf6aWrNQ5H9Ki7XT6y90fyhhmnXJCa4F jN6/hlxJI5NwfkSvObFXUG/3zLwPy/Y9nwrHP23KwfEa8+Ek6REkuRkL57z4GW+Q PJCfzguyRkIe72MjP+r9c8kzDXsrXGHowQNSLpPdofG243GPPNt/gCjLVBAv1EWk udQp3y0ZJEQNMw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:07 2025 by rpki-client