This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json) Hash identifier: kkOGVyt9deKhA8NFvsB+Pqvydi6+jPerX6ga409MexQ= Subject key identifier: 66:89:C6:91:96:BC:5A:4E:C2:E8:F9:0F:25:E2:F0:11:BA:94:2B:03 Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Certificate serial: 019B38A226E01190010C1E1A30B9368547C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft Manifest number: 1715 Signing time: Fri 19 Dec 2025 22:01:49 +0000 Manifest this update: Fri 19 Dec 2025 22:01:49 +0000 Manifest next update: Sat 20 Dec 2025 22:01:49 +0000 Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: mhKP4QSbJYIW6yUeCESC4iRyLW3k1J/oT8BLL46DBlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:26:e0:11:90:01:0c:1e:1a:30:b9:36:85:47:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Validity Not Before: Dec 19 22:01:49 2025 GMT Not After : Dec 20 22:01:49 2025 GMT Subject: CN=6689c69196bc5a4ec2e8f90f25e2f011ba942b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:d0:fb:21:fd:b1:d2:e7:fa:d4:27:99:bc: a5:d8:f1:c1:9e:80:d7:af:f9:1d:a8:18:b2:e6:05: c5:b8:17:34:f4:94:2b:75:19:6a:f9:c8:dc:30:ed: 76:55:b3:cf:d8:13:da:fc:84:ba:f3:b8:c4:bd:01: ca:97:29:2e:ae:90:6c:98:72:83:70:b7:b8:9a:f8: 16:45:da:72:bd:16:c9:ed:25:17:0a:60:93:55:cc: 20:21:17:2b:9d:b4:60:e3:61:e1:c2:15:ba:e1:22: 53:64:bc:5d:18:f4:b5:4b:e5:8a:1c:8c:58:52:a6: a4:b9:67:c8:26:10:a8:ef:14:05:c0:cf:c5:a4:b8: 87:63:04:f0:da:25:36:ec:28:10:46:9c:c9:a1:2c: 6b:d8:a7:e0:9a:f1:a4:07:cf:6c:a0:48:4f:95:86: 97:56:81:15:7e:45:0a:d6:5f:3e:bf:82:f1:78:1b: ef:34:12:3e:16:e3:f2:2e:a0:be:5f:c1:ed:62:13: 39:62:b3:51:ad:ca:36:15:37:d4:f3:5e:d5:4e:85: 73:95:1b:97:d7:96:b6:55:5c:4c:8a:64:14:3a:9b: 28:2e:a5:1d:38:70:fc:b6:93:36:11:b6:31:b0:b7: bf:a7:17:4d:54:85:a0:e6:d7:4e:f2:5e:6d:49:12: e8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:89:C6:91:96:BC:5A:4E:C2:E8:F9:0F:25:E2:F0:11:BA:94:2B:03 X509v3 Authority Key Identifier: keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c3:fb:b1:81:48:a0:a7:3a:d2:04:93:8c:75:7e:bf:d7:48: b7:2b:da:aa:9d:bc:7c:3f:75:ea:ff:20:2e:d7:bc:b5:c8:ae: 3c:02:9c:2a:47:d8:02:0b:b2:e7:46:04:5b:2f:64:34:b6:93: 90:02:61:3b:3e:e0:8e:ae:d2:21:20:a4:77:55:93:1f:00:a3: cf:3e:4d:e5:3e:aa:35:63:59:66:0a:6b:18:c2:01:6c:17:b6: 05:77:01:a9:84:86:7d:58:b7:42:89:b3:a9:da:31:3f:d9:c5: cb:e5:e4:7d:10:65:03:44:f3:83:b6:d8:89:16:36:fa:73:e6: 43:03:ec:4d:87:05:a4:cd:f8:df:b6:9d:17:38:b4:d4:04:76: 3c:8b:c2:8c:e4:36:8f:99:76:cb:a6:28:98:0a:5d:ab:27:ed: 9d:9e:c9:22:bd:f0:26:f1:47:e3:20:c3:89:38:f4:b8:66:18: 65:2a:6d:7d:91:39:01:75:de:c5:51:96:f1:e0:ed:ce:9b:77: 34:2f:09:6e:31:3d:7a:05:19:7a:b3:e0:24:94:5a:73:67:a1: 73:b9:b9:01:83:82:03:5b:ca:2e:84:49:03:92:34:4c:6a:7b: 9e:35:77:70:9f:8a:b6:ae:96:ae:f2:17:05:20:83:86:b7:51: 28:da:03:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oibgEZABDB4aMLk2hUfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDI0NmJmZmUwNGUyZDZmMWUxOTM5ZmU2Mzg2YTI0ZGZj ZGY3YWUwHhcNMjUxMjE5MjIwMTQ5WhcNMjUxMjIwMjIwMTQ5WjAzMTEwLwYDVQQD Eyg2Njg5YzY5MTk2YmM1YTRlYzJlOGY5MGYyNWUyZjAxMWJhOTQyYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0E/Q+yH9sdLn+tQnmbyl2PHBnoDX r/kdqBiy5gXFuBc09JQrdRlq+cjcMO12VbPP2BPa/IS687jEvQHKlykurpBsmHKD cLe4mvgWRdpyvRbJ7SUXCmCTVcwgIRcrnbRg42HhwhW64SJTZLxdGPS1S+WKHIxY UqakuWfIJhCo7xQFwM/FpLiHYwTw2iU27CgQRpzJoSxr2KfgmvGkB89soEhPlYaX VoEVfkUK1l8+v4LxeBvvNBI+FuPyLqC+X8HtYhM5YrNRrco2FTfU817VToVzlRuX 15a2VVxMimQUOpsoLqUdOHD8tpM2EbYxsLe/pxdNVIWg5tdO8l5tSRLoswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaJxpGWvFpOwuj5DyXi8BG6lCsDMB8GA1UdIwQY MBaAFF4CRr/+BOLW8eGTn+Y4aiTfzfeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQt NGM5MWNiOWVjOThiLzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQtNGM5MWNiOWVjOThi LzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8P7sYFI oKc60gSTjHV+v9dItyvaqp28fD916v8gLte8tciuPAKcKkfYAguy50YEWy9kNLaT kAJhOz7gjq7SISCkd1WTHwCjzz5N5T6qNWNZZgprGMIBbBe2BXcBqYSGfVi3Qomz qdoxP9nFy+XkfRBlA0Tzg7bYiRY2+nPmQwPsTYcFpM3437adFzi01AR2PIvCjOQ2 j5l2y6YomApdqyftnZ7JIr3wJvFH4yDDiTj0uGYYZSptfZE5AXXexVGW8eDtzpt3 NC8JbjE9egUZerPgJJRac2ehc7m5AYOCA1vKLoRJA5I0TGp7njV3cJ+Ktq6WrvIX BSCDhrdRKNoDzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:40:05 2025 by rpki-client