This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft File: XtjeCCBk6z_rQCqHPli7aM9dSR4.mft (raw, json) Hash identifier: jfdxCw3hmIfECmgO/mHhLi1p7XGVjVwC9bilRPHO3ec= Subject key identifier: 82:D7:DD:E3:05:DA:21:DC:78:C3:46:27:B0:51:D7:17:1C:7A:AF:5B Authority key identifier: 5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E Certificate issuer: /CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Certificate serial: 019B736C720A8F91FADB39E1BD09198D7722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft Manifest number: 0961 Signing time: Wed 31 Dec 2025 08:00:45 +0000 Manifest this update: Wed 31 Dec 2025 08:00:45 +0000 Manifest next update: Thu 01 Jan 2026 08:00:45 +0000 Files and hashes: 1: LDDIaTBR1fej7cpOLEZhnI_qSEE.roa (hash: hQxFsYpuJ6NMu49tchYpm+6BQ9fOGR3Z//8DQxrcOIY=) 2: XtjeCCBk6z_rQCqHPli7aM9dSR4.crl (hash: QGkRlTE70vwGtW/Q536qCt5lX0quAQcE9G0yCGSDBWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:72:0a:8f:91:fa:db:39:e1:bd:09:19:8d:77:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed8de082064eb3feb402a873e58bb68cf5d491e Validity Not Before: Dec 31 08:00:45 2025 GMT Not After : Jan 1 08:00:45 2026 GMT Subject: CN=82d7dde305da21dc78c34627b051d7171c7aaf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:b4:61:d7:10:8f:ee:b6:5b:16:6d:c6:dc: f6:3b:95:e6:c6:78:c1:95:67:9f:ef:85:2d:c5:e2: a7:2c:8c:35:65:51:ce:20:13:fa:06:33:38:05:12: d4:b1:a6:5b:1e:ed:11:16:36:86:ce:eb:18:97:ed: 93:a9:73:fe:62:ec:5e:1b:44:f1:58:f4:07:62:cc: 47:1e:ac:60:89:dc:a8:45:74:90:c9:c6:55:b1:ac: da:b1:52:80:07:3a:cd:8e:e5:24:66:3e:08:44:cd: ec:59:ee:91:f4:3c:e5:e1:63:be:bb:9d:f5:b5:6c: e1:8d:a6:8e:15:be:90:51:2c:09:d6:71:a5:91:2b: 7e:5e:18:1a:da:68:4c:9a:9b:04:2b:10:79:b3:a7: 87:a8:53:d6:7f:b5:5a:3b:63:16:77:25:f2:ea:16: 85:dc:88:31:a1:6a:7a:6b:bf:2d:bd:7c:0a:3a:55: f4:9a:9b:af:e4:c4:9b:48:59:8a:f1:54:5d:bf:74: 8a:42:e2:c4:dd:c5:ad:86:df:1c:99:df:66:5e:6b: fc:2b:de:ea:ff:da:2f:77:b6:1b:67:14:25:4e:c2: ca:e2:da:84:30:6a:32:a0:1d:c0:23:3c:fc:1d:65: 20:6f:72:15:7e:86:3e:1c:a1:99:32:d4:88:6a:dc: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:DD:E3:05:DA:21:DC:78:C3:46:27:B0:51:D7:17:1C:7A:AF:5B X509v3 Authority Key Identifier: keyid:5E:D8:DE:08:20:64:EB:3F:EB:40:2A:87:3E:58:BB:68:CF:5D:49:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtjeCCBk6z_rQCqHPli7aM9dSR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ad1b40-0785-4a76-81af-aea2c4e26770/1/XtjeCCBk6z_rQCqHPli7aM9dSR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:0a:f5:33:08:0b:83:c1:cf:97:e6:d0:e4:35:43:51:b4: bf:c6:c4:55:68:81:87:7f:23:10:70:c4:34:df:17:4d:ac:6c: 30:88:6e:34:f2:73:65:11:11:87:20:a2:60:ef:fc:f8:d1:b8: ee:26:70:1d:21:a6:3b:a8:3c:25:5c:6a:a0:2b:ab:93:14:21: 02:15:c2:1b:06:5c:e3:f9:91:79:fd:10:32:6c:7e:4c:21:6f: 8d:36:9c:97:9d:d2:06:1c:49:8c:b9:9c:20:b4:89:61:bc:4c: 8e:d6:e0:9e:33:39:15:d5:3d:a2:69:39:be:db:bd:e1:7d:b2: 14:5d:59:ce:3b:7a:fe:3a:20:cb:95:39:b5:4a:54:38:fb:b3: b9:ac:5b:5e:4b:1e:78:fe:4d:1e:ee:3e:f0:f2:eb:7a:ee:8d: 6e:2f:c6:d6:fc:e2:eb:d0:a6:f9:9a:8c:de:15:2c:0c:f3:b5: e1:8f:7b:b3:02:bf:0a:88:18:63:29:04:00:bf:95:34:3a:97: e6:42:67:d0:32:b4:a4:17:8d:70:7c:59:df:f3:88:4f:28:48: aa:7c:e5:12:76:87:33:21:d6:c0:88:80:f6:28:17:84:75:ae: ec:42:cd:6a:82:cb:7d:08:df:41:05:32:1d:c8:68:3a:10:bf: c7:45:80:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbHIKj5H62znhvQkZjXciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDhkZTA4MjA2NGViM2ZlYjQwMmE4NzNlNThiYjY4Y2Y1 ZDQ5MWUwHhcNMjUxMjMxMDgwMDQ1WhcNMjYwMTAxMDgwMDQ1WjAzMTEwLwYDVQQD Eyg4MmQ3ZGRlMzA1ZGEyMWRjNzhjMzQ2MjdiMDUxZDcxNzFjN2FhZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouy0YdcQj+62WxZtxtz2O5XmxnjB lWef74UtxeKnLIw1ZVHOIBP6BjM4BRLUsaZbHu0RFjaGzusYl+2TqXP+YuxeG0Tx WPQHYsxHHqxgidyoRXSQycZVsazasVKABzrNjuUkZj4IRM3sWe6R9Dzl4WO+u531 tWzhjaaOFb6QUSwJ1nGlkSt+Xhga2mhMmpsEKxB5s6eHqFPWf7VaO2MWdyXy6haF 3IgxoWp6a78tvXwKOlX0mpuv5MSbSFmK8VRdv3SKQuLE3cWtht8cmd9mXmv8K97q /9ovd7YbZxQlTsLK4tqEMGoyoB3AIzz8HWUgb3IVfoY+HKGZMtSIatzm8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILX3eMF2iHceMNGJ7BR1xcceq9bMB8GA1UdIwQY MBaAFF7Y3gggZOs/60Aqhz5Yu2jPXUkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYt YWVhMmM0ZTI2NzcwLzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9hZDFiNDAtMDc4NS00YTc2LTgxYWYtYWVhMmM0ZTI2Nzcw LzEvWHRqZUNDQms2el9yUUNxSFBsaTdhTTlkU1I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5YK9TMI C4PBz5fm0OQ1Q1G0v8bEVWiBh38jEHDENN8XTaxsMIhuNPJzZRERhyCiYO/8+NG4 7iZwHSGmO6g8JVxqoCurkxQhAhXCGwZc4/mRef0QMmx+TCFvjTacl53SBhxJjLmc ILSJYbxMjtbgnjM5FdU9omk5vtu94X2yFF1Zzjt6/jogy5U5tUpUOPuzuaxbXkse eP5NHu4+8PLreu6Nbi/G1vzi69Cm+ZqM3hUsDPO14Y97swK/CogYYykEAL+VNDqX 5kJn0DK0pBeNcHxZ3/OITyhIqnzlEnaHMyHWwIiA9igXhHWu7ELNaoLLfQjfQQUy HchoOhC/x0WALA== -----END CERTIFICATE-----Generated at Wed Dec 31 13:28:21 2025 by rpki-client