This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json) Hash identifier: eU/+WyTQIdPn2xE6cBtetbZN7Bnf7rZ8/hUGYGMgJFQ= Subject key identifier: CC:BA:5F:B0:45:96:A1:41:EA:EA:87:59:56:F1:0A:42:86:D2:98:42 Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7 Certificate serial: 019B45133FDA2B8ED221F41FC95182A9669D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 08:00:47 +0000 Manifest this update: Mon 22 Dec 2025 08:00:47 +0000 Manifest next update: Tue 23 Dec 2025 08:00:47 +0000 Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: FGqY25z/FOACXsJhC0lsTgTDxEwZbfc/UwwfaZpltDM=) 2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:3f:da:2b:8e:d2:21:f4:1f:c9:51:82:a9:66:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7 Validity Not Before: Dec 22 08:00:47 2025 GMT Not After : Dec 23 08:00:47 2025 GMT Subject: CN=ccba5fb04596a141eaea875956f10a4286d29842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:42:81:de:70:27:b4:05:e1:b6:e6:2f:63: 56:5c:f0:91:d6:38:6f:36:43:e8:89:f9:25:80:19: 6a:ff:e3:45:17:36:e9:6d:65:03:47:dc:5e:3d:7a: 42:9a:45:2e:0a:4e:15:da:90:c9:f7:25:1c:0f:a6: ab:ae:4b:ff:2c:2b:1a:1c:69:19:d3:c0:4a:a0:d5: d5:90:cd:55:79:63:99:de:59:04:0a:6e:ec:ea:90: 8c:71:13:44:d9:49:f2:f8:3b:67:31:cd:41:98:45: fd:fa:b5:36:2c:e3:8e:07:df:88:81:eb:13:a3:a6: 3c:a4:5a:91:f2:8e:d9:a5:a4:68:0a:57:8f:fb:d7: 42:9e:6f:5d:fe:56:8d:88:a8:df:51:86:41:f2:e8: 58:f0:f4:54:ce:df:d4:11:65:6b:28:b9:a5:45:44: 19:d3:94:f8:42:ac:25:d4:01:69:92:17:27:3f:e8: 05:08:50:53:fa:53:6b:63:32:5b:fa:3f:46:a7:5f: ea:f0:3e:c0:3b:4f:8a:69:7b:d9:a8:fb:1e:9a:f5: db:1e:60:2c:4f:fe:f2:3a:8d:3f:00:37:b2:c0:f2: 42:73:ce:26:76:82:3c:69:c9:ba:bf:b1:e8:23:fe: e7:c7:9f:f7:92:27:7a:3e:01:f6:12:78:01:7b:a7: 9c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BA:5F:B0:45:96:A1:41:EA:EA:87:59:56:F1:0A:42:86:D2:98:42 X509v3 Authority Key Identifier: keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:39:c1:1a:a2:65:a5:5e:af:d3:e0:ee:e6:92:b3:79:be:63: a5:b1:97:8f:7f:f4:a6:b5:aa:b2:ee:0f:3a:ca:5c:f9:16:d9: f8:b0:81:b2:8d:b5:d5:e7:3a:32:0b:9a:a2:90:36:aa:f4:65: 75:c6:a0:62:cd:41:9e:7a:22:be:b1:ee:7e:a3:08:2d:dd:d2: 0f:91:3c:14:5f:ad:ff:c0:66:98:43:35:91:c4:eb:8f:90:ce: b7:17:58:29:07:b9:fb:1d:08:91:be:ea:79:21:66:3f:b1:bb: eb:3d:1c:eb:c3:d1:52:c2:76:a6:e7:f4:70:6d:cb:2e:b8:26: c8:f3:ba:5c:b0:dc:25:85:e1:1d:a9:73:e2:1b:66:00:c3:48: 57:0d:43:9d:bc:fb:bc:9c:c8:e9:33:bc:90:7a:62:e0:ac:7d: eb:8f:ea:80:81:ea:b1:81:56:91:60:37:ea:69:c3:d2:a1:73: fe:43:cb:ef:40:08:70:54:73:7e:1c:c7:10:2e:25:b2:1e:4d: 91:bb:d1:8c:76:dc:91:79:12:bf:fc:a7:73:66:11:fe:cc:1d: 1f:4f:2b:57:4f:b5:56:75:7e:94:ed:1e:12:d0:97:48:ad:d8: c9:db:ae:3b:ea:a8:eb:56:d5:9b:2f:19:bf:f0:31:3b:18:3a: 78:40:98:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFEz/aK47SIfQfyVGCqWadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3 NzU5YzcwHhcNMjUxMjIyMDgwMDQ3WhcNMjUxMjIzMDgwMDQ3WjAzMTEwLwYDVQQD EyhjY2JhNWZiMDQ1OTZhMTQxZWFlYTg3NTk1NmYxMGE0Mjg2ZDI5ODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7NCgd5wJ7QF4bbmL2NWXPCR1jhv NkPoifklgBlq/+NFFzbpbWUDR9xePXpCmkUuCk4V2pDJ9yUcD6arrkv/LCsaHGkZ 08BKoNXVkM1VeWOZ3lkECm7s6pCMcRNE2Uny+DtnMc1BmEX9+rU2LOOOB9+IgesT o6Y8pFqR8o7ZpaRoCleP+9dCnm9d/laNiKjfUYZB8uhY8PRUzt/UEWVrKLmlRUQZ 05T4Qqwl1AFpkhcnP+gFCFBT+lNrYzJb+j9Gp1/q8D7AO0+KaXvZqPsemvXbHmAs T/7yOo0/ADeywPJCc84mdoI8acm6v7HoI/7nx5/3kid6PgH2EngBe6ecowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy6X7BFlqFB6uqHWVbxCkKG0phCMB8GA1UdIwQY MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt MTc3NjgxM2U3MjI0LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0 LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDnBGqJl pV6v0+Du5pKzeb5jpbGXj3/0prWqsu4POspc+RbZ+LCBso211ec6MguaopA2qvRl dcagYs1BnnoivrHufqMILd3SD5E8FF+t/8BmmEM1kcTrj5DOtxdYKQe5+x0Ikb7q eSFmP7G76z0c68PRUsJ2puf0cG3LLrgmyPO6XLDcJYXhHalz4htmAMNIVw1Dnbz7 vJzI6TO8kHpi4Kx964/qgIHqsYFWkWA36mnD0qFz/kPL70AIcFRzfhzHEC4lsh5N kbvRjHbckXkSv/ync2YR/swdH08rV0+1VnV+lO0eEtCXSK3YyduuO+qo61bVmy8Z v/AxOxg6eECYAQ== -----END CERTIFICATE-----Generated at Mon Dec 22 10:39:51 2025 by rpki-client