This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json) Hash identifier: VoWATERcD1uavdHc3uKJ1/rQx/AResiXFNQXojKvVQk= Subject key identifier: 5C:75:88:09:E0:8C:D9:2A:8A:5F:81:D2:A9:06:A2:49:B6:56:5D:3A Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Certificate serial: 019B6542DC1105A092FE885443CA89A5DCEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft Manifest number: 06FC Signing time: Sun 28 Dec 2025 14:00:39 +0000 Manifest this update: Sun 28 Dec 2025 14:00:39 +0000 Manifest next update: Mon 29 Dec 2025 14:00:39 +0000 Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: bC7CgvNW4fw76ztuPO6a2T5nmVZxqBcy4WRekhSLitw=) 2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:42:dc:11:05:a0:92:fe:88:54:43:ca:89:a5:dc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Validity Not Before: Dec 28 14:00:39 2025 GMT Not After : Dec 29 14:00:39 2025 GMT Subject: CN=5c758809e08cd92a8a5f81d2a906a249b6565d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f2:5c:81:a4:19:96:02:07:d0:4b:b9:b4:cd: 59:73:6f:d5:50:cb:44:f9:cd:d7:34:d7:fd:d1:6c: 59:92:86:c5:c5:a3:32:bd:da:b6:ab:af:0b:39:fb: f1:b6:2b:d8:b7:13:d0:5a:f1:d5:74:2f:55:db:ac: 45:af:a4:5b:12:68:e9:e6:18:2b:43:47:ae:6d:95: 66:2a:55:e4:44:8d:a9:cf:ca:66:1c:a9:21:5e:9b: bc:16:92:f8:7b:1f:e6:2f:1c:03:c2:2e:99:e2:35: 54:29:2d:0a:6d:2d:f4:9b:60:fc:3f:97:01:18:7b: a3:ae:c6:f8:10:9d:7d:4e:b6:ff:05:04:a3:16:61: f5:45:3a:94:83:44:ca:2d:32:d5:98:03:c7:90:dd: 91:10:f6:d1:25:94:41:98:59:2d:4d:63:53:45:0b: 3c:82:6f:bc:28:0c:0d:ea:13:aa:51:3c:b7:f2:a1: 54:cd:8f:e4:eb:5c:30:2d:ea:7f:77:bf:b7:b9:26: 7c:60:4c:98:68:82:4d:a5:64:95:94:30:55:db:c3: 11:3c:1a:4e:36:e2:a1:fa:8b:09:00:3e:b7:27:6e: 3e:2f:1c:50:e1:87:52:2a:b1:c8:75:9c:0d:68:3f: ca:b2:2e:b4:f0:6e:ec:27:c6:47:45:6f:d1:f6:68: 8b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:75:88:09:E0:8C:D9:2A:8A:5F:81:D2:A9:06:A2:49:B6:56:5D:3A X509v3 Authority Key Identifier: keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:f1:5f:c5:b9:11:dd:f2:db:47:fe:b4:ed:f1:70:3a:f3:27: d1:4f:30:c7:76:f6:d4:39:fb:95:04:2d:af:67:fb:c1:99:2d: ae:1c:49:91:39:5a:c0:c0:c4:c5:46:9c:7e:32:e6:e0:17:3d: 49:b4:c1:37:bb:66:e3:44:93:23:df:29:e8:0e:cb:87:7d:50: 14:17:59:4d:2d:a2:14:43:03:e5:dc:aa:e7:0b:e4:1b:90:d0: 53:fb:a1:24:6d:ff:b0:5c:e8:2e:0a:dd:11:5e:64:ae:b6:28: 95:d0:b9:eb:6f:97:bc:10:b2:00:cc:df:5c:5a:64:38:97:38: fa:57:f1:ee:54:0a:63:71:d1:b6:ea:05:b4:e3:b0:53:76:52: 56:3d:d3:f8:7a:e2:64:46:f2:f9:e7:66:c2:e8:15:0c:38:20: 07:e0:50:89:ec:78:b8:0a:85:9c:f0:d2:00:28:b8:6d:4a:4b: c5:15:11:53:da:a0:3b:5b:43:e3:6d:65:a8:89:8b:88:f7:19: a0:52:ca:d1:9e:61:f2:17:9a:4e:75:04:31:96:cb:9a:52:a1: c1:0c:1b:c0:4b:77:1b:fd:46:55:4e:35:81:f4:65:15:89:d1: aa:10:9d:ce:af:62:43:f8:fe:fb:c8:8b:75:19:8b:7b:1f:48: 61:b0:96:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQtwRBaCS/ohUQ8qJpdzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2 OWIyMzcwHhcNMjUxMjI4MTQwMDM5WhcNMjUxMjI5MTQwMDM5WjAzMTEwLwYDVQQD Eyg1Yzc1ODgwOWUwOGNkOTJhOGE1ZjgxZDJhOTA2YTI0OWI2NTY1ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vJcgaQZlgIH0Eu5tM1Zc2/VUMtE +c3XNNf90WxZkobFxaMyvdq2q68LOfvxtivYtxPQWvHVdC9V26xFr6RbEmjp5hgr Q0eubZVmKlXkRI2pz8pmHKkhXpu8FpL4ex/mLxwDwi6Z4jVUKS0KbS30m2D8P5cB GHujrsb4EJ19Trb/BQSjFmH1RTqUg0TKLTLVmAPHkN2REPbRJZRBmFktTWNTRQs8 gm+8KAwN6hOqUTy38qFUzY/k61wwLep/d7+3uSZ8YEyYaIJNpWSVlDBV28MRPBpO NuKh+osJAD63J24+LxxQ4YdSKrHIdZwNaD/Ksi608G7sJ8ZHRW/R9miLIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx1iAngjNkqil+B0qkGokm2Vl06MB8GA1UdIwQY MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh/FfxbkR 3fLbR/607fFwOvMn0U8wx3b21Dn7lQQtr2f7wZktrhxJkTlawMDExUacfjLm4Bc9 SbTBN7tm40STI98p6A7Lh31QFBdZTS2iFEMD5dyq5wvkG5DQU/uhJG3/sFzoLgrd EV5krrYoldC562+XvBCyAMzfXFpkOJc4+lfx7lQKY3HRtuoFtOOwU3ZSVj3T+Hri ZEby+edmwugVDDggB+BQiex4uAqFnPDSACi4bUpLxRURU9qgO1tD421lqImLiPcZ oFLK0Z5h8heaTnUEMZbLmlKhwQwbwEt3G/1GVU41gfRlFYnRqhCdzq9iQ/j++8iL dRmLex9IYbCWBA== -----END CERTIFICATE-----Generated at Sun Dec 28 23:27:46 2025 by rpki-client