This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json) Hash identifier: e3nXxeqCdlpMDVrfT0AKQ5XgFDgiuEGSzluZp3HxZBQ= Subject key identifier: E3:E2:C2:E7:64:04:32:35:2A:D7:F6:B2:A8:5D:11:46:35:BD:CD:D9 Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf Certificate serial: 019B2F309E9713D58265271E22AA42346CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 02:01:14 +0000 Manifest this update: Thu 18 Dec 2025 02:01:14 +0000 Manifest next update: Fri 19 Dec 2025 02:01:14 +0000 Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: kFtkvxbJUfLijNtp+/iASReQYzU2d4TKtYExwfs3gGY=) 2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:9e:97:13:d5:82:65:27:1e:22:aa:42:34:6c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf Validity Not Before: Dec 18 02:01:14 2025 GMT Not After : Dec 19 02:01:14 2025 GMT Subject: CN=e3e2c2e7640432352ad7f6b2a85d114635bdcdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:40:8b:54:11:38:cc:5c:9a:85:b8:6f:85: cf:19:5d:b3:dc:41:5f:36:f2:46:1e:a6:e2:98:d5: fa:48:9f:d2:f7:78:5f:73:35:cb:c5:d5:53:9c:ba: 02:b8:3b:af:be:6e:61:de:4b:29:cf:99:e1:9b:85: 6a:e7:c9:d2:4c:b3:99:d9:af:34:31:37:f8:2e:d5: 19:e8:b0:2c:6e:5a:53:f0:a4:54:68:73:f3:5b:33: 3e:96:cf:fb:d3:22:36:c8:cb:bf:e4:fa:a0:da:ed: 1c:bb:c6:9b:a0:64:0b:38:9f:e7:15:04:e3:2d:b1: 44:97:4b:9d:c2:d9:b1:79:d1:9f:0c:6e:6a:01:7a: a5:f4:81:ea:ca:f5:32:8a:e2:30:d1:5e:61:bc:8f: 98:d6:96:6c:54:ac:d7:f5:83:8f:99:f4:54:89:46: cb:50:07:b7:6b:8d:d2:32:2a:0e:2d:e8:9e:10:04: 0b:3f:03:92:cc:e0:72:14:c0:3b:db:e1:6e:f8:1b: ff:3b:ac:00:28:20:42:9d:89:1d:34:4c:e8:ac:a8: 4f:dc:42:26:86:8d:62:61:1d:09:1b:38:83:e0:f5: 7d:78:be:2b:90:dc:5b:07:60:df:da:61:56:6b:f8: 3c:96:cf:a7:ca:f5:b8:03:fa:ec:a7:e3:57:67:7c: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E2:C2:E7:64:04:32:35:2A:D7:F6:B2:A8:5D:11:46:35:BD:CD:D9 X509v3 Authority Key Identifier: keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:dc:13:60:9f:48:fc:09:e1:c4:aa:34:8a:a3:d4:7d:60:f2: 34:5c:61:3a:89:3f:57:33:b5:26:65:28:d2:58:d2:37:77:c5: 19:86:90:e3:f6:87:5d:37:2f:75:d3:8b:2d:60:ec:73:22:65: 9f:a2:3c:0f:14:50:bc:94:e6:9d:25:0b:c9:78:f7:ab:7e:e7: a7:b7:d8:57:9c:6e:98:d9:0d:f1:e5:fe:33:d2:6e:c2:8f:b2: 85:57:93:97:c6:c3:5c:eb:cb:35:38:64:fb:8e:41:35:9b:93: 99:a4:56:1f:3d:47:84:66:98:28:62:b1:42:2c:83:56:dc:d2: d6:de:17:0f:76:d6:ff:3d:96:65:59:88:c2:db:96:4b:4c:d4: e6:6a:f3:3e:44:8d:9f:96:50:9f:0f:6b:45:70:90:00:63:07: 17:f9:9b:66:11:c1:46:6a:8f:17:e6:97:59:73:07:17:c5:9a: 7c:8a:a7:5e:e9:c0:96:ba:d9:9f:c3:3f:26:86:fb:01:0d:08: 67:db:98:98:19:fc:55:ff:64:96:23:00:1e:e0:f6:9f:5f:c0: 8b:01:ff:65:3a:0a:c6:42:7a:cf:7b:95:ec:e8:35:8f:2d:84: 4b:25:a8:a0:69:47:2b:6a:2b:16:8e:b6:68:db:b1:2d:40:32: d1:2b:a2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMJ6XE9WCZSceIqpCNGzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw ODRmZGYwHhcNMjUxMjE4MDIwMTE0WhcNMjUxMjE5MDIwMTE0WjAzMTEwLwYDVQQD EyhlM2UyYzJlNzY0MDQzMjM1MmFkN2Y2YjJhODVkMTE0NjM1YmRjZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7JAi1QROMxcmoW4b4XPGV2z3EFf NvJGHqbimNX6SJ/S93hfczXLxdVTnLoCuDuvvm5h3kspz5nhm4Vq58nSTLOZ2a80 MTf4LtUZ6LAsblpT8KRUaHPzWzM+ls/70yI2yMu/5Pqg2u0cu8aboGQLOJ/nFQTj LbFEl0udwtmxedGfDG5qAXql9IHqyvUyiuIw0V5hvI+Y1pZsVKzX9YOPmfRUiUbL UAe3a43SMioOLeieEAQLPwOSzOByFMA72+Fu+Bv/O6wAKCBCnYkdNEzorKhP3EIm ho1iYR0JGziD4PV9eL4rkNxbB2Df2mFWa/g8ls+nyvW4A/rsp+NXZ3wjGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOPiwudkBDI1Ktf2sqhdEUY1vc3ZMB8GA1UdIwQY MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9wTYJ9I /AnhxKo0iqPUfWDyNFxhOok/VzO1JmUo0ljSN3fFGYaQ4/aHXTcvddOLLWDscyJl n6I8DxRQvJTmnSULyXj3q37np7fYV5xumNkN8eX+M9Juwo+yhVeTl8bDXOvLNThk +45BNZuTmaRWHz1HhGaYKGKxQiyDVtzS1t4XD3bW/z2WZVmIwtuWS0zU5mrzPkSN n5ZQnw9rRXCQAGMHF/mbZhHBRmqPF+aXWXMHF8WafIqnXunAlrrZn8M/Job7AQ0I Z9uYmBn8Vf9kliMAHuD2n1/AiwH/ZToKxkJ6z3uV7Og1jy2ESyWooGlHK2orFo62 aNuxLUAy0SuiBw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:18:57 2025 by rpki-client