This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json) Hash identifier: B9VyHR5lVkeTqI3tFjkwK71BpXIAB9TATshA+bonckQ= Subject key identifier: 8E:79:6C:5F:87:92:4C:BC:1A:64:BD:63:34:94:0A:29:F0:00:2C:6D Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17 Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917 Certificate serial: 019B59E452F0488A20D8C06D8221453FFC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft Manifest number: 033E Signing time: Fri 26 Dec 2025 09:01:34 +0000 Manifest this update: Fri 26 Dec 2025 09:01:34 +0000 Manifest next update: Sat 27 Dec 2025 09:01:34 +0000 Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: oeigTa5OgyfsdjPjTCrzDh59U4IUxD+hyoSwwe3n4S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:52:f0:48:8a:20:d8:c0:6d:82:21:45:3f:fc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917 Validity Not Before: Dec 26 09:01:34 2025 GMT Not After : Dec 27 09:01:34 2025 GMT Subject: CN=8e796c5f87924cbc1a64bd6334940a29f0002c6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e2:93:cc:61:ab:53:04:f4:63:d7:dd:4e:3c: 8a:cf:cc:2d:61:c0:aa:00:67:d1:d6:cf:c3:2a:82: fa:9b:a4:9b:31:92:3a:c2:eb:1d:34:50:cf:36:23: a0:c0:2b:5c:ab:0f:55:e5:56:9c:6a:67:f2:3e:49: c0:0d:54:2d:06:d2:48:42:88:ab:c2:df:aa:d3:e2: fa:b3:9e:4a:11:70:57:87:4a:54:f3:57:13:51:48: 38:4a:72:7f:1a:28:b0:14:0a:2a:b1:64:4d:a2:ed: 45:c3:a1:2a:3c:cd:48:2c:bd:4a:ed:7a:85:92:6e: 56:45:12:f8:48:0d:98:b7:75:4b:61:d7:c6:3b:5e: b5:e9:2e:ec:d1:f3:08:23:6c:73:c1:39:8d:6b:7b: 84:2c:5b:53:b1:e9:71:bc:b4:79:95:c6:73:57:6d: d1:a6:4e:d5:ca:eb:93:bb:3e:f1:bf:a9:c4:d0:85: aa:be:02:6b:5f:c4:b1:fd:02:8a:dd:94:0b:c0:82: f3:f9:1d:f1:82:ed:4c:b6:44:3e:54:74:be:3f:42: 35:18:07:57:8e:61:2d:60:5b:43:7c:36:57:7f:43: 20:70:18:cd:e4:a7:40:21:f5:56:01:08:6d:7e:df: c4:19:cd:38:cd:66:87:bc:af:f8:21:ac:04:94:83: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:79:6C:5F:87:92:4C:BC:1A:64:BD:63:34:94:0A:29:F0:00:2C:6D X509v3 Authority Key Identifier: keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0f:2b:f5:54:92:46:9f:4d:30:4e:17:23:84:3d:1a:93:50: 90:14:eb:0e:a4:e3:24:e3:5f:de:d8:a7:50:cf:f7:59:e3:36: 3d:02:32:08:4f:7e:cf:23:e1:e5:d1:b1:9a:00:54:8d:f9:9e: 6f:46:f4:15:66:44:79:b4:4a:f5:55:1e:b2:d4:d4:b1:c6:a1: 86:d5:e3:f2:31:ce:f9:3b:09:c0:eb:77:93:79:7a:d6:54:d8: 79:26:18:bd:af:47:13:4f:4f:be:f7:53:54:cb:b9:97:a1:3a: 8f:32:3f:54:1e:17:8c:92:0d:94:d2:9c:1c:4b:a3:9d:bb:3e: 5d:0c:77:41:34:a9:4e:dc:dd:64:e1:b6:36:3e:04:08:4d:ba: 32:c7:cb:90:b3:8d:6a:c0:fb:87:1a:67:4d:42:b7:4f:14:97: 2d:f2:2f:fb:21:a8:54:4e:99:7b:0c:82:26:17:f4:3d:b0:14: ad:a6:63:3a:2a:4c:de:a5:dd:76:b2:99:f3:61:52:bf:48:23: de:fe:38:d3:11:46:cd:e1:2a:da:99:3e:0a:dd:4e:ec:db:33: b4:92:7c:a7:82:9d:8f:a2:8a:35:4a:13:e6:44:57:3a:63:1e: 39:1a:71:d2:c2:db:32:5a:e8:e0:78:c9:3c:3d:f6:bc:49:2e: ba:f5:d0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FLwSIog2MBtgiFFP/xmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTE3N2I0ZjU0ZTY1N2UzODc2NTZlNjczYWY4YzBlZTBh NjA5MTcwHhcNMjUxMjI2MDkwMTM0WhcNMjUxMjI3MDkwMTM0WjAzMTEwLwYDVQQD Eyg4ZTc5NmM1Zjg3OTI0Y2JjMWE2NGJkNjMzNDk0MGEyOWYwMDAyYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOKTzGGrUwT0Y9fdTjyKz8wtYcCq AGfR1s/DKoL6m6SbMZI6wusdNFDPNiOgwCtcqw9V5VacamfyPknADVQtBtJIQoir wt+q0+L6s55KEXBXh0pU81cTUUg4SnJ/GiiwFAoqsWRNou1Fw6EqPM1ILL1K7XqF km5WRRL4SA2Yt3VLYdfGO1616S7s0fMII2xzwTmNa3uELFtTselxvLR5lcZzV23R pk7VyuuTuz7xv6nE0IWqvgJrX8Sx/QKK3ZQLwILz+R3xgu1MtkQ+VHS+P0I1GAdX jmEtYFtDfDZXf0MgcBjN5KdAIfVWAQhtft/EGc04zWaHvK/4IawElINlfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI55bF+Hkky8GmS9YzSUCinwACxtMB8GA1UdIwQY MBaAFFyRd7T1TmV+OHZW5nOvjA7gpgkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2It NmRjMzY5ZGZmNTNmLzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2ItNmRjMzY5ZGZmNTNm LzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsA8r9VSS Rp9NME4XI4Q9GpNQkBTrDqTjJONf3tinUM/3WeM2PQIyCE9+zyPh5dGxmgBUjfme b0b0FWZEebRK9VUestTUscahhtXj8jHO+TsJwOt3k3l61lTYeSYYva9HE09PvvdT VMu5l6E6jzI/VB4XjJINlNKcHEujnbs+XQx3QTSpTtzdZOG2Nj4ECE26MsfLkLON asD7hxpnTUK3TxSXLfIv+yGoVE6ZewyCJhf0PbAUraZjOipM3qXddrKZ82FSv0gj 3v440xFGzeEq2pk+Ct1O7NsztJJ8p4Kdj6KKNUoT5kRXOmMeORpx0sLbMlro4HjJ PD32vEkuuvXQWQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:34 2025 by rpki-client