This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json) Hash identifier: LyN7aDVR9b12BET9TmNbB8RS6pFlKo/q+MelzU7jLDQ= Subject key identifier: E8:8B:29:D1:0F:55:20:2C:53:D2:CD:10:39:E4:23:68:29:C2:AE:4E Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Certificate serial: 019B334482C010A2196D49B4B2F8CDB632FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft Manifest number: 0D68 Signing time: Thu 18 Dec 2025 21:01:26 +0000 Manifest this update: Thu 18 Dec 2025 21:01:26 +0000 Manifest next update: Fri 19 Dec 2025 21:01:26 +0000 Files and hashes: 1: 1-4QYL3zSIvubO19_zc5_sPHbtmM.roa (hash: RSu12j4NBBmo2Fros21N8BPczXB3VUvZpIMKKBoV+WA=) 2: GVUHIfvKpJdOHNnRnG93-HDINEI.roa (hash: /GunX5DVAaqCLeh5vLqdmjbmgKNjplZucj4LzeQ5W4Y=) 3: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 6EwKwwEReOugom4MZJnI0evOr5y2wnbCg5RTIYv+Z+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:82:c0:10:a2:19:6d:49:b4:b2:f8:cd:b6:32:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04 Validity Not Before: Dec 18 21:01:26 2025 GMT Not After : Dec 19 21:01:26 2025 GMT Subject: CN=e88b29d10f55202c53d2cd1039e4236829c2ae4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9c:e5:72:6e:43:d4:3d:b2:76:fa:34:37:80: f4:3a:31:6d:0f:3b:4c:c7:b6:9a:b1:92:05:fb:42: 74:40:c3:8e:0a:92:a8:80:b2:a1:b0:58:70:5e:c5: d9:2d:2d:e4:7b:5a:25:78:a2:2c:d2:f3:bf:f8:4d: 95:80:64:51:d8:26:b9:e0:a4:76:69:e3:5b:6e:71: a0:ea:98:fd:61:f9:97:cb:3f:19:f4:4d:0d:bb:63: 1e:0c:1a:2e:60:5b:86:9e:2c:08:10:1e:8b:4f:d3: 19:70:f6:e3:4c:ef:a2:d2:5e:e1:e0:2e:d0:f6:8a: c4:90:5f:fe:e1:48:48:5c:ea:5d:8d:3d:75:b9:33: 83:45:ae:af:44:f7:48:73:02:23:5b:b5:01:da:3d: 26:7d:88:84:62:9a:ee:b9:96:ff:88:99:72:65:39: 83:d8:92:f3:ff:ab:4c:76:53:5b:c3:a4:ae:b7:bb: 1d:7d:e0:77:17:b0:0d:71:6f:21:73:e3:8f:1d:ed: 53:ee:94:df:75:ed:ba:57:4d:d7:46:5f:7e:41:00: f5:6b:12:05:0b:ad:f4:df:dc:98:f5:6a:6d:8e:07: ac:72:f0:a1:db:0d:10:38:a6:08:15:87:0d:b1:07: ec:fb:ab:98:80:ec:76:91:0b:42:14:26:6d:00:e9: a2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8B:29:D1:0F:55:20:2C:53:D2:CD:10:39:E4:23:68:29:C2:AE:4E X509v3 Authority Key Identifier: keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:41:e3:54:e6:ef:fb:86:64:4a:ad:15:f1:27:3f:2d:0a:55: 36:03:5a:ff:5a:d4:fe:25:57:3d:c5:8e:2f:16:bd:9f:59:d5: 77:79:37:7f:32:aa:57:73:5f:5f:8c:68:0e:ea:00:da:9d:58: e3:ce:c5:cf:8f:16:2b:a2:07:b1:21:f3:e6:ae:85:6a:96:db: 53:14:f2:54:ee:46:8b:cf:8b:df:03:18:f2:a5:6e:52:54:c9: 14:16:45:83:fb:b3:26:f5:35:bf:65:a7:a1:69:d1:3a:9d:fe: 8d:f9:16:96:4a:20:03:ff:1d:7c:87:ba:af:bd:88:b5:cd:3f: d3:84:f4:30:1e:d6:c9:b5:65:f4:b7:3d:69:95:4d:28:38:c4: e9:03:a3:9b:0f:5d:d8:aa:bf:98:be:9b:4d:a1:86:4a:42:18: e5:02:6e:4f:d2:7d:3e:d5:32:12:3b:36:e8:00:f4:b8:ae:02: e4:4a:e0:15:e2:df:eb:8f:1a:4d:da:f7:60:58:0b:ba:6d:1f: 46:31:d9:ae:d6:6a:f1:12:8a:3e:85:69:6e:d4:db:2c:fd:3e: ad:a0:f7:70:f2:f3:37:0f:c5:62:f1:5a:3e:d2:34:ac:87:95: e7:74:4c:71:e7:22:c4:15:56:6e:2f:80:0f:e6:d7:88:8a:5e: 7e:9b:2b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRILAEKIZbUm0svjNtjL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZWRkNmIwZTM2ZjRiZDhmMWQ1N2UyNmNjMWMyZDE4YzY5 OTNjMDQwHhcNMjUxMjE4MjEwMTI2WhcNMjUxMjE5MjEwMTI2WjAzMTEwLwYDVQQD EyhlODhiMjlkMTBmNTUyMDJjNTNkMmNkMTAzOWU0MjM2ODI5YzJhZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05zlcm5D1D2ydvo0N4D0OjFtDztM x7aasZIF+0J0QMOOCpKogLKhsFhwXsXZLS3ke1oleKIs0vO/+E2VgGRR2Ca54KR2 aeNbbnGg6pj9YfmXyz8Z9E0Nu2MeDBouYFuGniwIEB6LT9MZcPbjTO+i0l7h4C7Q 9orEkF/+4UhIXOpdjT11uTODRa6vRPdIcwIjW7UB2j0mfYiEYpruuZb/iJlyZTmD 2JLz/6tMdlNbw6Sut7sdfeB3F7ANcW8hc+OPHe1T7pTfde26V03XRl9+QQD1axIF C63039yY9WptjgescvCh2w0QOKYIFYcNsQfs+6uYgOx2kQtCFCZtAOmiWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiLKdEPVSAsU9LNEDnkI2gpwq5OMB8GA1UdIwQY MBaAFF3t1rDjb0vY8dV+JswcLRjGmTwEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODkt YzY5ODcxZjVkMzA1LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9mMDNjZGMtMjk0NS00MDhjLTg4ODktYzY5ODcxZjVkMzA1 LzEvWGUzV3NPTnZTOWp4MVg0bXpCd3RHTWFaUEFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkHjVObv +4ZkSq0V8Sc/LQpVNgNa/1rU/iVXPcWOLxa9n1nVd3k3fzKqV3NfX4xoDuoA2p1Y 487Fz48WK6IHsSHz5q6FapbbUxTyVO5Gi8+L3wMY8qVuUlTJFBZFg/uzJvU1v2Wn oWnROp3+jfkWlkogA/8dfIe6r72Itc0/04T0MB7WybVl9Lc9aZVNKDjE6QOjmw9d 2Kq/mL6bTaGGSkIY5QJuT9J9PtUyEjs26AD0uK4C5ErgFeLf648aTdr3YFgLum0f RjHZrtZq8RKKPoVpbtTbLP0+raD3cPLzNw/FYvFaPtI0rIeV53RMcecixBVWbi+A D+bXiIpefpsrOA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:55 2025 by rpki-client