This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft File: xJitV5fK2RUK7SvAtdObiLG_K_Q.mft (raw, json) Hash identifier: nnr1a3np/EcZm+9gDV7vaGjCFNOtN8KOoCJTvp2PZ3A= Subject key identifier: 52:9F:FF:97:C1:93:FC:C8:5A:DB:90:72:96:76:DF:70:44:ED:B6:D4 Authority key identifier: C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4 Certificate issuer: /CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4 Certificate serial: 019B51BD4B9F3E8BF6022C4586C1A2CCC6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft Manifest number: 0B06 Signing time: Wed 24 Dec 2025 19:01:58 +0000 Manifest this update: Wed 24 Dec 2025 19:01:58 +0000 Manifest next update: Thu 25 Dec 2025 19:01:58 +0000 Files and hashes: 1: xJitV5fK2RUK7SvAtdObiLG_K_Q.crl (hash: bGx34cTM5nPZ77x0/x1WLdMMmzjBr6pcUsULmh4uCro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:4b:9f:3e:8b:f6:02:2c:45:86:c1:a2:cc:c6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c498ad5797cad9150aed2bc0b5d39b88b1bf2bf4 Validity Not Before: Dec 24 19:01:58 2025 GMT Not After : Dec 25 19:01:58 2025 GMT Subject: CN=529fff97c193fcc85adb90729676df7044edb6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:98:38:21:9d:73:13:5e:0e:b1:55:ba:e7:51: 4d:a9:d8:b7:ff:e6:c4:b5:c9:63:91:76:ad:af:95: 0a:b1:bf:f0:b2:d0:f9:f5:96:e9:1a:73:e0:8c:dd: e2:d2:7c:20:d4:d2:3e:b5:b0:bc:0b:d4:1d:f2:5b: 25:98:1e:30:62:b9:7a:ba:e9:f9:5d:70:39:be:57: 4e:d6:ba:34:e4:de:5c:f3:cf:aa:45:39:b0:9d:9b: 7e:7b:6f:26:18:ec:66:ac:b1:5f:80:3a:8c:92:de: 69:a9:30:6f:ce:2c:e6:6d:27:84:5e:da:41:86:75: 8a:c9:c8:b7:fc:ef:92:a0:60:02:55:1b:88:a4:29: 38:55:1a:5d:22:db:f6:0b:19:8d:6b:0f:67:26:03: d1:85:91:73:d8:02:91:98:c3:58:f6:20:d0:24:ae: 97:84:2d:ca:4c:9e:b4:8b:a8:cd:4f:db:d0:5f:b5: 9a:ad:c2:e6:c8:35:31:72:9e:ca:90:df:60:ec:f9: a9:80:e9:36:fd:7e:bb:a1:55:4f:b4:79:1e:93:7a: eb:bb:6d:ef:99:5a:ac:c9:d3:34:08:0e:fe:17:2e: 4e:9c:7c:16:6a:15:8d:05:94:b4:47:29:37:ab:e9: c8:3e:7e:78:1a:3f:2d:cb:84:c0:65:7f:be:73:3d: 3e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:FF:97:C1:93:FC:C8:5A:DB:90:72:96:76:DF:70:44:ED:B6:D4 X509v3 Authority Key Identifier: keyid:C4:98:AD:57:97:CA:D9:15:0A:ED:2B:C0:B5:D3:9B:88:B1:BF:2B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJitV5fK2RUK7SvAtdObiLG_K_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ee2e88-8f5e-446a-8372-a6c4cc9f7840/1/xJitV5fK2RUK7SvAtdObiLG_K_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:99:62:a2:8d:57:7c:1e:db:96:e7:b8:c5:48:14:4b:f5:19: ba:69:8e:19:21:30:d8:e6:bd:ec:2a:1e:5a:0e:4e:89:f1:f9: 1f:f6:d0:ce:72:d8:48:46:8c:55:3e:3f:f3:be:cd:b3:60:dc: 88:25:5d:98:c5:dd:b7:b1:17:3d:53:45:84:1c:9c:39:b8:47: 05:dd:42:cb:ad:52:e2:90:48:5f:c8:96:5a:b6:eb:79:dd:78: a7:50:68:6d:d0:3c:00:ad:fc:f9:95:bf:3e:ae:6f:86:62:6e: 76:29:49:65:62:45:cb:54:d6:0f:c4:99:a6:a3:ac:57:51:d3: 8d:1e:97:b0:a6:3d:ad:a8:b5:19:86:f5:95:45:40:1a:10:b7: 45:79:e6:0d:19:5a:6f:06:98:bd:65:10:97:46:6c:c1:fb:c5: eb:64:1a:6c:0e:e4:b0:ca:b9:71:1b:c0:c5:a7:bd:5f:a0:43: d5:f2:7d:a6:33:86:52:9f:92:9d:d2:fc:fc:aa:00:dd:14:9b: ed:34:75:5f:ff:95:34:38:5a:29:94:79:a5:3e:c9:81:80:70: 61:a2:f5:1f:6f:e5:9a:e7:fb:1d:1f:73:b4:83:7a:e6:5f:d9: eb:cd:0e:b6:a2:b4:3f:e1:c6:67:ef:7d:de:b8:05:cd:e0:48: 28:5d:bb:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvUufPov2AixFhsGizMb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OThhZDU3OTdjYWQ5MTUwYWVkMmJjMGI1ZDM5Yjg4YjFi ZjJiZjQwHhcNMjUxMjI0MTkwMTU4WhcNMjUxMjI1MTkwMTU4WjAzMTEwLwYDVQQD Eyg1MjlmZmY5N2MxOTNmY2M4NWFkYjkwNzI5Njc2ZGY3MDQ0ZWRiNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppg4IZ1zE14OsVW651FNqdi3/+bE tcljkXatr5UKsb/wstD59ZbpGnPgjN3i0nwg1NI+tbC8C9Qd8lslmB4wYrl6uun5 XXA5vldO1ro05N5c88+qRTmwnZt+e28mGOxmrLFfgDqMkt5pqTBvzizmbSeEXtpB hnWKyci3/O+SoGACVRuIpCk4VRpdItv2CxmNaw9nJgPRhZFz2AKRmMNY9iDQJK6X hC3KTJ60i6jNT9vQX7WarcLmyDUxcp7KkN9g7PmpgOk2/X67oVVPtHkek3rru23v mVqsydM0CA7+Fy5OnHwWahWNBZS0Ryk3q+nIPn54Gj8ty4TAZX++cz0+BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKf/5fBk/zIWtuQcpZ233BE7bbUMB8GA1UdIwQY MBaAFMSYrVeXytkVCu0rwLXTm4ixvyv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzIt YTZjNGNjOWY3ODQwLzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lZTJlODgtOGY1ZS00NDZhLTgzNzItYTZjNGNjOWY3ODQw LzEveEppdFY1ZksyUlVLN1N2QXRkT2JpTEdfS19RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVplioo1X fB7blue4xUgUS/UZummOGSEw2Oa97CoeWg5OifH5H/bQznLYSEaMVT4/877Ns2Dc iCVdmMXdt7EXPVNFhBycObhHBd1Cy61S4pBIX8iWWrbred14p1BobdA8AK38+ZW/ Pq5vhmJudilJZWJFy1TWD8SZpqOsV1HTjR6XsKY9rai1GYb1lUVAGhC3RXnmDRla bwaYvWUQl0ZswfvF62QabA7ksMq5cRvAxae9X6BD1fJ9pjOGUp+SndL8/KoA3RSb 7TR1X/+VNDhaKZR5pT7JgYBwYaL1H2/lmuf7HR9ztIN65l/Z680OtqK0P+HGZ+99 3rgFzeBIKF27EA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:22 2025 by rpki-client