This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json) Hash identifier: KGuRUCLKiSqiJ8JTU8f1epHWZfejdrYqU9ka+iRiW7E= Subject key identifier: E6:F8:B7:5B:01:50:98:3F:38:02:F6:DA:E7:91:9A:6C:F8:A5:2E:D6 Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Certificate serial: 019B446E9593EFB9F125630C95AE63530FE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft Manifest number: 0D00 Signing time: Mon 22 Dec 2025 05:00:56 +0000 Manifest this update: Mon 22 Dec 2025 05:00:56 +0000 Manifest next update: Tue 23 Dec 2025 05:00:56 +0000 Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=) 2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: syBYH14cDCisgeDjEchZGkKMPrQ53JrlAnwNrPod7Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:95:93:ef:b9:f1:25:63:0c:95:ae:63:53:0f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Validity Not Before: Dec 22 05:00:56 2025 GMT Not After : Dec 23 05:00:56 2025 GMT Subject: CN=e6f8b75b0150983f3802f6dae7919a6cf8a52ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:8e:dd:83:4d:96:91:4f:6c:98:f0:f2:3e: 6f:ec:7b:c9:c9:87:71:42:aa:2f:ef:b8:1d:d3:fc: ee:b5:f1:45:9f:81:49:37:5f:76:63:5d:90:dd:57: 66:9f:76:38:62:9b:6c:02:27:43:f3:ce:d0:98:9d: c5:94:3f:18:93:16:95:5c:f8:5d:1d:a9:43:53:06: 68:be:94:9c:25:4b:87:de:e9:ed:8f:55:6f:7e:35: 90:44:a1:b5:38:cc:9f:0f:81:42:98:8d:91:84:a1: db:c6:a6:c4:f4:a3:3d:64:94:a8:e0:80:1d:99:31: d2:af:5e:d4:cd:fb:e4:3b:38:c7:e2:29:29:fe:0b: d6:bc:ca:0a:d8:7d:01:eb:ce:d7:e2:ce:16:97:a2: 6d:03:26:e6:62:60:4f:13:a4:79:44:cd:47:69:17: cd:69:c0:c5:f6:37:64:e3:54:fb:29:71:be:fa:8d: 35:13:2c:b1:53:32:6e:9a:05:35:64:ff:2d:31:9d: a5:0d:5b:1a:5d:2a:a6:4f:ca:e9:26:3e:77:b1:f4: 88:20:4e:ab:48:2d:16:ab:79:da:e6:c6:26:0c:c6: f0:8f:89:d6:7e:08:73:74:64:5e:d4:24:80:34:af: 68:44:52:9c:ec:3d:32:09:d3:84:f9:02:3f:cd:de: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F8:B7:5B:01:50:98:3F:38:02:F6:DA:E7:91:9A:6C:F8:A5:2E:D6 X509v3 Authority Key Identifier: keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:aa:bf:b9:e3:ce:98:2e:bf:a3:15:47:1f:e2:ea:d1:66:b4: 47:e8:18:0d:a3:31:fd:c4:db:10:96:b1:a8:8e:63:7b:a3:bc: 2c:2b:6f:5f:4a:4a:d9:ad:7b:4f:2e:e0:97:6c:24:e7:3f:b0: 56:47:c3:e9:8f:20:08:ae:16:aa:a8:4f:8f:a2:63:ef:c9:bd: 6d:46:1e:53:52:8b:5d:30:82:1e:35:4e:0d:15:42:a4:be:be: d8:d9:e0:58:6a:b3:ea:31:69:e2:35:9d:71:8a:d7:13:b1:9d: 89:30:77:fd:7b:59:fe:bc:c9:89:71:eb:f2:48:6a:17:42:5f: 97:f3:fa:76:37:ab:19:91:0b:c4:fd:d6:97:a5:23:c4:d3:4b: 89:97:e6:5b:72:5d:44:ad:1f:76:c8:3c:ad:45:d7:21:8a:ca: 7e:75:d9:04:ce:84:fa:03:75:f5:93:f1:bd:ba:99:8c:54:f5: 3d:a8:36:ee:9c:ee:9f:c9:60:08:28:98:e8:39:1a:23:7c:09: d5:79:d5:ff:09:39:b1:09:46:83:69:cb:9c:5d:ec:75:e1:fc: f6:1d:9d:f3:45:2a:ab:52:ba:4e:7e:bd:c8:50:90:88:8a:ec: 52:d5:47:a0:43:21:75:5f:36:73:4d:74:1e:c0:a4:45:ff:de: 25:19:0f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbpWT77nxJWMMla5jUw/jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2 OWJkZGYwHhcNMjUxMjIyMDUwMDU2WhcNMjUxMjIzMDUwMDU2WjAzMTEwLwYDVQQD EyhlNmY4Yjc1YjAxNTA5ODNmMzgwMmY2ZGFlNzkxOWE2Y2Y4YTUyZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uKO3YNNlpFPbJjw8j5v7HvJyYdx Qqov77gd0/zutfFFn4FJN192Y12Q3Vdmn3Y4YptsAidD887QmJ3FlD8YkxaVXPhd HalDUwZovpScJUuH3untj1VvfjWQRKG1OMyfD4FCmI2RhKHbxqbE9KM9ZJSo4IAd mTHSr17UzfvkOzjH4ikp/gvWvMoK2H0B687X4s4Wl6JtAybmYmBPE6R5RM1HaRfN acDF9jdk41T7KXG++o01EyyxUzJumgU1ZP8tMZ2lDVsaXSqmT8rpJj53sfSIIE6r SC0Wq3na5sYmDMbwj4nWfghzdGRe1CSANK9oRFKc7D0yCdOE+QI/zd79KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb4t1sBUJg/OAL22ueRmmz4pS7WMB8GA1UdIwQY MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0 LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKq/uePO mC6/oxVHH+Lq0Wa0R+gYDaMx/cTbEJaxqI5je6O8LCtvX0pK2a17Ty7gl2wk5z+w VkfD6Y8gCK4WqqhPj6Jj78m9bUYeU1KLXTCCHjVODRVCpL6+2NngWGqz6jFp4jWd cYrXE7GdiTB3/XtZ/rzJiXHr8khqF0Jfl/P6djerGZELxP3Wl6UjxNNLiZfmW3Jd RK0fdsg8rUXXIYrKfnXZBM6E+gN19ZPxvbqZjFT1Pag27pzun8lgCCiY6DkaI3wJ 1XnV/wk5sQlGg2nLnF3sdeH89h2d80Uqq1K6Tn69yFCQiIrsUtVHoEMhdV82c010 HsCkRf/eJRkPEw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:05:11 2025 by rpki-client