This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft File: XjFIuezSDl_yRlqc0QGtqa5QjVc.mft (raw, json) Hash identifier: nyJ4dlsoH4qcPY0X/8UrrDXfMnFD8DmehN891+5FxJo= Subject key identifier: 75:8C:19:66:B1:B7:EC:34:F9:E0:26:67:20:EE:85:E2:D0:78:90:33 Authority key identifier: 5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 Certificate issuer: /CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Certificate serial: 019B3AFD9C72899DE57A73A2AF3167170DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft Manifest number: 1345 Signing time: Sat 20 Dec 2025 09:00:57 +0000 Manifest this update: Sat 20 Dec 2025 09:00:57 +0000 Manifest next update: Sun 21 Dec 2025 09:00:57 +0000 Files and hashes: 1: B13oDzfNi3hd7pt4m820H15kyF0.roa (hash: 2JCDi/GBgWbFY9zUUiXZMPd5rlTcvQp+8WchxjTTSRs=) 2: XjFIuezSDl_yRlqc0QGtqa5QjVc.crl (hash: E84r1/dAgHPmTdJFeVH1IxFXeqfAPCUj4RY457Gxseo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:9c:72:89:9d:e5:7a:73:a2:af:31:67:17:0d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3148b9ecd20e5ff2465a9cd101ada9ae508d57 Validity Not Before: Dec 20 09:00:57 2025 GMT Not After : Dec 21 09:00:57 2025 GMT Subject: CN=758c1966b1b7ec34f9e0266720ee85e2d0789033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:8d:50:8a:7e:15:09:20:de:74:b2:73:ed: 60:d8:f9:24:71:92:24:9c:47:f8:ca:9d:18:9b:7d: e6:46:cd:f2:b3:c6:db:27:9e:72:e9:2a:14:9a:6f: 3b:ff:2d:df:06:f3:8c:f6:8d:68:18:e8:33:86:7a: c4:3b:f1:5a:6f:82:5e:a1:a9:33:4f:c3:98:31:af: 4e:b5:3b:b2:c7:74:71:61:68:55:54:75:10:b3:ca: c7:5d:d7:f5:54:dd:92:1f:33:7c:1f:3a:bd:d7:57: b0:cd:08:6f:52:cf:f5:5b:68:68:12:6b:18:0a:fd: a0:51:69:d2:ee:d1:e9:d2:fb:79:eb:5e:e8:5d:40: 31:17:d1:a9:74:15:a1:e7:0d:c0:38:66:e6:7a:f3: 91:19:19:12:b9:cc:75:6a:8e:2e:8d:0c:75:a5:24: 37:a3:93:21:08:ed:c7:bb:d6:db:b1:4a:c4:ca:7b: 13:09:eb:6b:83:75:d3:f3:06:7e:20:f8:1d:5b:58: f5:d4:93:48:e0:c4:6f:c3:12:a5:1d:28:e8:28:c0: 0f:65:93:8e:a4:0e:cb:20:55:75:82:b5:3e:0d:d8: 40:95:2b:cd:0f:29:71:52:42:8f:79:2c:2f:b0:6d: 01:81:6f:94:77:62:63:ca:06:b7:94:f9:12:b1:9d: 90:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:8C:19:66:B1:B7:EC:34:F9:E0:26:67:20:EE:85:E2:D0:78:90:33 X509v3 Authority Key Identifier: keyid:5E:31:48:B9:EC:D2:0E:5F:F2:46:5A:9C:D1:01:AD:A9:AE:50:8D:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjFIuezSDl_yRlqc0QGtqa5QjVc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8f6b15-6ec1-4e60-bfd6-e492d4e1b631/1/XjFIuezSDl_yRlqc0QGtqa5QjVc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:fb:60:bc:ce:bc:65:63:89:b1:04:91:f2:fe:dd:82:e6:8a: ad:24:92:da:d5:10:a7:87:16:41:98:50:5b:fe:f2:99:1b:ec: 35:ae:79:03:89:b4:df:d7:a6:bc:26:da:72:af:2c:2c:59:fa: 25:dd:62:a2:f5:09:fd:f0:ba:9a:75:ae:a9:36:2f:01:18:07: 53:49:d8:12:80:df:54:e0:73:b7:18:74:18:62:05:12:c6:77: 69:47:4c:a1:16:4f:8f:61:19:fd:2e:77:a2:26:4e:c9:e3:89: 50:14:6e:87:a8:f9:f1:44:52:60:ed:37:49:15:d9:0b:e2:67: 3f:e4:11:1b:0a:92:7a:57:c6:74:c3:96:01:a9:0b:87:70:ab: 43:6f:5a:37:86:5b:00:06:c4:ee:dd:2c:0d:7b:7f:b2:72:21: 0d:e2:cc:5e:21:ad:68:71:5d:a2:05:30:d1:c1:b6:71:5b:ad: 37:54:5e:65:45:64:08:d1:27:8e:a4:7d:48:d4:cf:3a:62:fc: f0:a7:45:62:41:4e:0c:6d:1b:97:45:13:94:8a:41:8a:9b:b0: 24:f6:d6:ac:34:66:e3:69:04:5c:17:41:ec:e6:fe:8f:07:29: 40:66:51:50:78:26:42:4f:01:16:85:01:84:8e:20:3d:cd:e3: 14:2b:72:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/ZxyiZ3lenOirzFnFw2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzE0OGI5ZWNkMjBlNWZmMjQ2NWE5Y2QxMDFhZGE5YWU1 MDhkNTcwHhcNMjUxMjIwMDkwMDU3WhcNMjUxMjIxMDkwMDU3WjAzMTEwLwYDVQQD Eyg3NThjMTk2NmIxYjdlYzM0ZjllMDI2NjcyMGVlODVlMmQwNzg5MDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBuNUIp+FQkg3nSyc+1g2PkkcZIk nEf4yp0Ym33mRs3ys8bbJ55y6SoUmm87/y3fBvOM9o1oGOgzhnrEO/Fab4Jeoakz T8OYMa9OtTuyx3RxYWhVVHUQs8rHXdf1VN2SHzN8Hzq911ewzQhvUs/1W2hoEmsY Cv2gUWnS7tHp0vt5617oXUAxF9GpdBWh5w3AOGbmevORGRkSucx1ao4ujQx1pSQ3 o5MhCO3Hu9bbsUrEynsTCetrg3XT8wZ+IPgdW1j11JNI4MRvwxKlHSjoKMAPZZOO pA7LIFV1grU+DdhAlSvNDylxUkKPeSwvsG0BgW+Ud2Jjyga3lPkSsZ2QhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWMGWaxt+w0+eAmZyDuheLQeJAzMB8GA1UdIwQY MBaAFF4xSLns0g5f8kZanNEBramuUI1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYt ZTQ5MmQ0ZTFiNjMxLzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84ZjZiMTUtNmVjMS00ZTYwLWJmZDYtZTQ5MmQ0ZTFiNjMx LzEvWGpGSXVlelNEbF95UmxxYzBRR3RxYTVRalZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvtgvM68 ZWOJsQSR8v7dguaKrSSS2tUQp4cWQZhQW/7ymRvsNa55A4m039emvCbacq8sLFn6 Jd1iovUJ/fC6mnWuqTYvARgHU0nYEoDfVOBztxh0GGIFEsZ3aUdMoRZPj2EZ/S53 oiZOyeOJUBRuh6j58URSYO03SRXZC+JnP+QRGwqSelfGdMOWAakLh3CrQ29aN4Zb AAbE7t0sDXt/snIhDeLMXiGtaHFdogUw0cG2cVutN1ReZUVkCNEnjqR9SNTPOmL8 8KdFYkFODG0bl0UTlIpBipuwJPbWrDRm42kEXBdB7Ob+jwcpQGZRUHgmQk8BFoUB hI4gPc3jFCtyhA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:45:10 2025 by rpki-client