This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft File: XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft (raw, json) Hash identifier: xR2ITZqQFyJN31q5FrsSuoJ9ffHVAQE7HAJqKmo15bQ= Subject key identifier: 61:45:47:C7:15:3D:A6:5B:9F:D6:DE:31:AB:C4:F7:54:66:9C:94:75 Authority key identifier: 5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF Certificate issuer: /CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Certificate serial: 019B70D93BC43A3A899FB916ED8D2B8F3520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft Manifest number: 0D17 Signing time: Tue 30 Dec 2025 20:00:43 +0000 Manifest this update: Tue 30 Dec 2025 20:00:43 +0000 Manifest next update: Wed 31 Dec 2025 20:00:43 +0000 Files and hashes: 1: 4nKgTO7nMwv7E5XkGZGra4Dj7eU.roa (hash: /DJ3vJxgq5Ik8hchhiF1sG1wu/bXrSEOv/Tfe2hOIxg=) 2: XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl (hash: zIAahVvrSb01DkRW+IhOVoANhZH06By40yqhx8Zkecc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:d9:3b:c4:3a:3a:89:9f:b9:16:ed:8d:2b:8f:35:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e868b02e519dd7e694c7af1e708bdd66369bddf Validity Not Before: Dec 30 20:00:43 2025 GMT Not After : Dec 31 20:00:43 2025 GMT Subject: CN=614547c7153da65b9fd6de31abc4f754669c9475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:d2:91:e5:2b:04:d9:f7:3b:4d:4a:01:ca: 21:0d:27:eb:76:98:0c:6b:62:ab:75:84:ad:52:96: 32:87:1c:bc:80:20:4e:d7:a5:df:8b:4b:93:ac:05: b8:d7:56:20:81:35:48:fc:10:67:60:bc:4c:d8:c6: 9a:28:c4:7e:a3:72:2d:91:9a:d2:f5:e8:42:29:6e: 4a:8c:44:20:1e:f2:66:49:f5:43:43:df:29:75:68: b9:b6:d3:7d:73:f7:23:5a:d6:2c:0c:98:a6:1d:54: 90:96:19:cb:a3:9c:d4:82:4d:22:d5:9d:3c:23:80: 2e:01:08:77:b9:08:ce:e3:37:68:39:8d:8f:86:19: 01:7e:58:31:d1:e9:91:d1:99:6d:69:4a:b4:ec:87: 62:5f:08:b1:86:a5:a7:31:e8:d4:93:99:56:10:04: 71:26:be:0e:90:a1:92:53:bb:68:24:eb:6d:47:fd: aa:a9:24:b9:d0:73:a3:3e:c4:1c:d8:8a:cd:0c:04: 34:b9:33:e0:ac:4a:9f:a4:d1:c3:3e:58:8d:b7:10: ff:58:52:a0:bb:ea:6f:ad:4a:72:4f:d1:a8:23:fb: 2e:d6:d2:88:fe:a8:a2:2a:15:94:92:16:98:cb:ef: c3:6e:bf:d4:d9:43:e3:99:e5:7d:7c:fa:c6:70:f9: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:45:47:C7:15:3D:A6:5B:9F:D6:DE:31:AB:C4:F7:54:66:9C:94:75 X509v3 Authority Key Identifier: keyid:5E:86:8B:02:E5:19:DD:7E:69:4C:7A:F1:E7:08:BD:D6:63:69:BD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoaLAuUZ3X5pTHrx5wi91mNpvd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/802e05-0d5b-4589-916b-90c17eb751f4/1/XoaLAuUZ3X5pTHrx5wi91mNpvd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:cb:16:7e:95:3d:6b:d0:7e:65:d0:40:a1:98:2b:61:5e:ef: 8e:74:d7:4d:a4:ec:fa:e5:ae:55:85:3b:5d:be:9a:24:d4:18: de:93:3b:85:84:78:e6:df:b9:db:94:0b:85:8e:04:0a:64:c9: 1d:93:68:ee:b5:12:04:45:bd:2a:9e:0e:28:cb:6b:c4:26:e4: 8b:c2:7e:34:a6:d2:f5:14:e9:ec:11:42:24:b4:0c:c8:64:70: c0:93:40:89:5e:60:97:7f:fe:d8:27:d7:5e:6a:8a:61:13:fd: 71:fc:1e:42:bb:2c:9d:9d:c1:ca:71:81:41:7c:9b:57:e4:a1: 53:b9:a9:9e:fb:1b:4b:04:54:21:9a:8b:c5:77:03:18:66:22: 32:ce:33:97:b3:03:b2:60:8a:80:55:81:27:af:d3:cf:99:73: 4f:10:f3:66:22:72:db:2e:69:2d:01:1b:85:77:48:46:8a:82: 80:51:ef:fa:5b:82:c7:e1:da:a8:8a:03:d2:fc:fd:af:ef:45: 2b:d9:c5:0b:e7:21:53:4a:20:ca:02:69:07:36:e3:94:82:ee: b0:43:5e:4b:99:53:c5:59:ab:a1:4a:02:17:3d:3d:99:2b:8d: 66:49:f1:93:2f:75:e8:d2:3f:21:58:15:f6:be:73:71:6c:79: 23:d1:14:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtw2TvEOjqJn7kW7Y0rjzUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlODY4YjAyZTUxOWRkN2U2OTRjN2FmMWU3MDhiZGQ2NjM2 OWJkZGYwHhcNMjUxMjMwMjAwMDQzWhcNMjUxMjMxMjAwMDQzWjAzMTEwLwYDVQQD Eyg2MTQ1NDdjNzE1M2RhNjViOWZkNmRlMzFhYmM0Zjc1NDY2OWM5NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgrSkeUrBNn3O01KAcohDSfrdpgM a2KrdYStUpYyhxy8gCBO16Xfi0uTrAW411YggTVI/BBnYLxM2MaaKMR+o3ItkZrS 9ehCKW5KjEQgHvJmSfVDQ98pdWi5ttN9c/cjWtYsDJimHVSQlhnLo5zUgk0i1Z08 I4AuAQh3uQjO4zdoOY2PhhkBflgx0emR0ZltaUq07IdiXwixhqWnMejUk5lWEARx Jr4OkKGSU7toJOttR/2qqSS50HOjPsQc2IrNDAQ0uTPgrEqfpNHDPliNtxD/WFKg u+pvrUpyT9GoI/su1tKI/qiiKhWUkhaYy+/Dbr/U2UPjmeV9fPrGcPmVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFFR8cVPaZbn9beMavE91RmnJR1MB8GA1UdIwQY MBaAFF6GiwLlGd1+aUx68ecIvdZjab3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmIt OTBjMTdlYjc1MWY0LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84MDJlMDUtMGQ1Yi00NTg5LTkxNmItOTBjMTdlYjc1MWY0 LzEvWG9hTEF1VVozWDVwVEhyeDV3aTkxbU5wdmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacsWfpU9 a9B+ZdBAoZgrYV7vjnTXTaTs+uWuVYU7Xb6aJNQY3pM7hYR45t+525QLhY4ECmTJ HZNo7rUSBEW9Kp4OKMtrxCbki8J+NKbS9RTp7BFCJLQMyGRwwJNAiV5gl3/+2CfX XmqKYRP9cfweQrssnZ3BynGBQXybV+ShU7mpnvsbSwRUIZqLxXcDGGYiMs4zl7MD smCKgFWBJ6/Tz5lzTxDzZiJy2y5pLQEbhXdIRoqCgFHv+luCx+HaqIoD0vz9r+9F K9nFC+chU0ogygJpBzbjlILusENeS5lTxVmroUoCFz09mSuNZknxky916NI/IVgV 9r5zcWx5I9EUfg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:10:53 2025 by rpki-client