This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json) Hash identifier: 53PWpBrHKPW+6UxN9YQee0iNDerGzPu4kfiHiQOn3cM= Subject key identifier: F4:02:96:EA:2E:55:6F:19:0D:64:74:EA:7D:3D:C8:5A:14:20:7C:A6 Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Certificate serial: 019B360ECCC08342826670ACA4A3F247118B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 10:01:38 +0000 Manifest this update: Fri 19 Dec 2025 10:01:38 +0000 Manifest next update: Sat 20 Dec 2025 10:01:38 +0000 Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=) 2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: 8ZQ4myzAADf760hNhAeE4G6Hx73mk04TrvWBDt/I9sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:cc:c0:83:42:82:66:70:ac:a4:a3:f2:47:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Validity Not Before: Dec 19 10:01:38 2025 GMT Not After : Dec 20 10:01:38 2025 GMT Subject: CN=f40296ea2e556f190d6474ea7d3dc85a14207ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f2:c8:0a:67:67:f8:94:e9:e0:92:2d:17:b9: e4:dd:47:48:05:3c:41:92:65:ae:99:32:09:4e:7a: 4b:b6:5f:94:99:bd:92:0f:72:21:b8:6d:9f:ff:fb: 67:d9:71:ab:70:91:4d:7b:f0:b6:21:c3:52:7b:e8: 8a:00:b2:3b:f2:f9:54:5b:64:8a:b4:0a:b6:52:5e: 8b:37:2e:8e:37:82:17:65:33:27:88:7b:6b:e3:01: 50:ea:d7:13:41:f4:cb:ec:24:30:45:21:cb:f0:7a: 03:ae:25:20:7d:5f:73:e7:d9:71:fd:dd:0f:48:bb: 38:60:c9:a8:70:c8:fe:90:97:0f:0b:29:36:53:8e: 23:8a:ad:50:6d:b8:e7:6a:6b:c4:e8:f2:91:1c:c4: 1a:f9:2d:ce:2d:ae:4d:b9:ec:fa:cd:09:bb:1b:74: ac:b9:b9:f6:61:0e:95:5b:bf:4c:c1:b3:32:55:d4: bf:14:31:be:b2:d8:2e:96:94:23:b2:ec:ba:81:db: 69:e4:b9:ed:ea:fc:cd:dc:bd:84:35:dc:e3:d8:35: 11:35:44:11:54:73:9a:62:dd:5a:90:78:46:2c:4e: f5:31:0d:73:73:4c:3c:0b:23:7d:6a:a6:2d:47:4b: 99:e2:58:e7:16:1a:8c:28:1f:78:f8:67:24:0d:e2: c4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:02:96:EA:2E:55:6F:19:0D:64:74:EA:7D:3D:C8:5A:14:20:7C:A6 X509v3 Authority Key Identifier: keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:b7:de:b9:43:c5:be:98:85:d3:79:a8:d6:4a:1d:ba:73: e2:7a:1e:93:7c:a9:a8:97:48:b6:21:30:1d:78:67:be:f0:c6: 6f:af:de:69:6c:86:b6:db:c6:4e:b2:7d:90:7e:37:7f:9c:c0: 9c:2e:11:e4:0e:51:4c:b9:d8:6a:0e:9c:fb:a7:a8:c2:74:28: 2f:1a:00:64:15:05:31:1f:ce:2d:5f:25:90:58:b0:4b:94:d8: 4f:4c:23:2e:65:e2:78:de:db:3b:d5:9b:1c:97:0e:62:96:e2: 29:86:05:e0:fc:a8:e2:fd:fc:8d:72:30:64:21:da:42:a6:ca: ad:48:1d:6b:d7:81:ab:c5:35:3e:2c:6f:fa:c3:d0:b9:75:f8: af:f9:0a:c0:8c:ef:c2:43:ae:5b:23:c2:e1:77:ce:06:dd:08: 5e:d6:bd:ad:40:45:76:af:d6:ca:32:83:67:0c:00:93:c5:62: 59:a4:7f:e1:25:72:3c:a7:1d:3f:c6:c7:ea:08:ac:e6:ca:5b: 7d:5d:61:9e:2e:3a:a1:88:1b:f1:de:e8:5d:30:05:c2:fc:dd: 3e:73:64:6e:6e:c9:04:39:f3:6e:6d:9f:1f:81:9c:03:fc:83: cf:f7:7a:97:92:1d:1b:6f:86:0b:39:28:fb:9d:16:cc:88:d5: 05:64:13:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DszAg0KCZnCspKPyRxGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2NlYjljOTMxY2IxNzk1ZTIyN2FlMmM4NjQ3NTUxM2Fl NDkxNWMwHhcNMjUxMjE5MTAwMTM4WhcNMjUxMjIwMTAwMTM4WjAzMTEwLwYDVQQD EyhmNDAyOTZlYTJlNTU2ZjE5MGQ2NDc0ZWE3ZDNkYzg1YTE0MjA3Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vLICmdn+JTp4JItF7nk3UdIBTxB kmWumTIJTnpLtl+Umb2SD3IhuG2f//tn2XGrcJFNe/C2IcNSe+iKALI78vlUW2SK tAq2Ul6LNy6ON4IXZTMniHtr4wFQ6tcTQfTL7CQwRSHL8HoDriUgfV9z59lx/d0P SLs4YMmocMj+kJcPCyk2U44jiq1QbbjnamvE6PKRHMQa+S3OLa5Nuez6zQm7G3Ss ubn2YQ6VW79MwbMyVdS/FDG+stgulpQjsuy6gdtp5Lnt6vzN3L2ENdzj2DURNUQR VHOaYt1akHhGLE71MQ1zc0w8CyN9aqYtR0uZ4ljnFhqMKB94+GckDeLENQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQCluouVW8ZDWR06n09yFoUIHymMB8GA1UdIwQY MBaAFF5865yTHLF5XiJ64shkdVE65JFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYt MjQyMmFiZjM0MmFjLzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYtMjQyMmFiZjM0MmFj LzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed+33rlD xb6YhdN5qNZKHbpz4noek3ypqJdItiEwHXhnvvDGb6/eaWyGttvGTrJ9kH43f5zA nC4R5A5RTLnYag6c+6eownQoLxoAZBUFMR/OLV8lkFiwS5TYT0wjLmXieN7bO9Wb HJcOYpbiKYYF4Pyo4v38jXIwZCHaQqbKrUgda9eBq8U1Pixv+sPQuXX4r/kKwIzv wkOuWyPC4XfOBt0IXta9rUBFdq/WyjKDZwwAk8ViWaR/4SVyPKcdP8bH6gis5spb fV1hni46oYgb8d7oXTAFwvzdPnNkbm7JBDnzbm2fH4GcA/yDz/d6l5IdG2+GCzko +50WzIjVBWQTrw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:21 2025 by rpki-client