This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json) Hash identifier: QZzZ29mn+bMowVW6WeQ6hW6l/hObhcrfwXrWUwDn2Bw= Subject key identifier: 7C:52:83:3F:B7:16:A3:97:7A:1A:B2:79:63:7F:B4:42:B3:7E:AA:55 Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Certificate serial: 019B69C4B217D1B55E0E21FC4153F41AA4AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft Manifest number: 124E Signing time: Mon 29 Dec 2025 11:00:56 +0000 Manifest this update: Mon 29 Dec 2025 11:00:56 +0000 Manifest next update: Tue 30 Dec 2025 11:00:56 +0000 Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: AyfWLZglMriexL59WitUZNoHCyVdI88xnL65NU2KyTg=) 2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:b2:17:d1:b5:5e:0e:21:fc:41:53:f4:1a:a4:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Validity Not Before: Dec 29 11:00:56 2025 GMT Not After : Dec 30 11:00:56 2025 GMT Subject: CN=7c52833fb716a3977a1ab279637fb442b37eaa55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:aa:63:f0:05:a7:1d:73:9f:67:ba:0b:08: a5:5f:96:49:15:f7:e5:5b:2d:ac:8d:f8:38:d5:8b: 83:2f:93:13:b6:ef:29:24:04:28:49:fc:bb:cd:03: 9d:55:72:58:30:2b:37:d4:d9:47:c4:4c:70:6e:77: 6e:ef:06:98:41:44:1a:43:bc:37:0b:00:34:57:e0: 99:63:64:ab:e3:b6:2f:1b:70:f2:14:3f:db:ee:b1: d7:a2:b1:d4:26:cf:77:08:45:72:15:37:c7:4e:1d: 33:ba:00:04:4f:c6:28:f9:b3:1f:b9:2f:90:e8:f1: e7:31:37:07:0e:fb:34:0a:54:62:de:46:29:11:ff: b0:5e:dd:04:97:78:3f:ca:1a:e1:7e:3c:9d:d0:ca: d9:61:20:96:c8:ff:aa:ca:d3:c6:8e:dd:47:eb:8d: 63:12:f3:13:f1:2a:44:d5:60:bb:f0:0f:ab:fc:02: 03:de:c2:d6:99:b5:0f:af:ea:e0:ff:e1:6a:f5:79: 96:79:0a:b0:76:c5:77:20:22:81:27:3e:24:a0:09: 0d:e6:7d:36:b5:8d:4c:dc:52:31:6f:58:82:50:18: 11:d0:e8:92:36:0b:34:c0:ce:cb:af:74:39:9b:1f: 71:12:ea:e7:3b:a2:6f:52:e0:d3:e8:aa:75:45:14: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:52:83:3F:B7:16:A3:97:7A:1A:B2:79:63:7F:B4:42:B3:7E:AA:55 X509v3 Authority Key Identifier: keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cf:ba:84:10:86:d7:87:09:44:5a:4c:33:0d:d9:01:35:10: 8d:16:fa:8b:c3:03:59:1b:bd:e7:e3:1b:5c:98:3a:93:6a:a6: 2e:89:0c:82:3d:c8:8c:90:11:4f:da:59:84:df:68:97:60:46: cf:31:a6:1f:75:9d:ea:c5:7e:21:c8:95:b4:cc:d7:62:cf:fb: d1:b4:4a:7e:35:64:93:68:b8:ae:9f:26:0d:f5:8f:f1:ff:1d: 3d:6b:d0:fe:27:7c:0c:8b:49:e8:11:be:97:81:c2:b1:a4:68: 34:4a:21:87:34:c9:63:75:b7:89:57:32:75:e3:be:e8:1d:e4: f5:57:5b:a3:e4:2b:6c:66:e9:4c:36:51:53:68:8f:8b:6f:93: 62:2c:f3:39:d3:4d:6c:aa:04:fb:ee:5c:ab:f9:14:47:79:cb: 05:1f:95:28:d0:40:0a:49:2b:03:78:56:2e:8d:42:88:43:f0: 6b:ac:71:57:2f:8b:08:e4:b0:98:0b:4a:ed:d5:8d:a4:ce:6e: 0d:a5:ec:3e:0d:14:47:b3:a0:6a:dd:91:50:7b:b4:bf:8d:05: 8b:a0:4b:c3:69:82:70:80:26:97:2c:9b:b1:a3:4b:46:db:a2: 68:d8:7c:4b:73:e8:97:ea:ae:09:e1:38:bb:b2:de:73:fe:25: 21:cf:f9:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxLIX0bVeDiH8QVP0GqSrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk OGM2MGYwHhcNMjUxMjI5MTEwMDU2WhcNMjUxMjMwMTEwMDU2WjAzMTEwLwYDVQQD Eyg3YzUyODMzZmI3MTZhMzk3N2ExYWIyNzk2MzdmYjQ0MmIzN2VhYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEeqY/AFpx1zn2e6CwilX5ZJFffl Wy2sjfg41YuDL5MTtu8pJAQoSfy7zQOdVXJYMCs31NlHxExwbndu7waYQUQaQ7w3 CwA0V+CZY2Sr47YvG3DyFD/b7rHXorHUJs93CEVyFTfHTh0zugAET8Yo+bMfuS+Q 6PHnMTcHDvs0ClRi3kYpEf+wXt0El3g/yhrhfjyd0MrZYSCWyP+qytPGjt1H641j EvMT8SpE1WC78A+r/AID3sLWmbUPr+rg/+Fq9XmWeQqwdsV3ICKBJz4koAkN5n02 tY1M3FIxb1iCUBgR0OiSNgs0wM7Lr3Q5mx9xEurnO6JvUuDT6Kp1RRQhdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxSgz+3FqOXehqyeWN/tEKzfqpVMB8GA1UdIwQY MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct MDczNjM5OTM4NDM3LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3 LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc+6hBCG 14cJRFpMMw3ZATUQjRb6i8MDWRu95+MbXJg6k2qmLokMgj3IjJART9pZhN9ol2BG zzGmH3Wd6sV+IciVtMzXYs/70bRKfjVkk2i4rp8mDfWP8f8dPWvQ/id8DItJ6BG+ l4HCsaRoNEohhzTJY3W3iVcydeO+6B3k9Vdbo+QrbGbpTDZRU2iPi2+TYizzOdNN bKoE++5cq/kUR3nLBR+VKNBACkkrA3hWLo1CiEPwa6xxVy+LCOSwmAtK7dWNpM5u DaXsPg0UR7Ogat2RUHu0v40Fi6BLw2mCcIAmlyybsaNLRtuiaNh8S3Pol+quCeE4 u7Lec/4lIc/5Zg== -----END CERTIFICATE-----Generated at Mon Dec 29 18:00:29 2025 by rpki-client