This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json) Hash identifier: tBxZtDTPePQc+MaHPXkLxQxJkKxVNBd7zcXbBKYeMlI= Subject key identifier: 5B:14:E2:44:25:47:0A:36:98:AF:0E:1B:63:E5:02:2A:65:68:28:9D Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb Certificate serial: 019B6E0F6210EF835736E3E8E3185D4A0AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 07:01:00 +0000 Manifest this update: Tue 30 Dec 2025 07:01:00 +0000 Manifest next update: Wed 31 Dec 2025 07:01:00 +0000 Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: WhcI8t40JD6phKIB2NfnYiyHRSVbe98LxeDFxIQEleY=) 2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:62:10:ef:83:57:36:e3:e8:e3:18:5d:4a:0a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb Validity Not Before: Dec 30 07:01:00 2025 GMT Not After : Dec 31 07:01:00 2025 GMT Subject: CN=5b14e24425470a3698af0e1b63e5022a6568289d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:b0:e9:40:24:64:3a:7f:64:2c:8f:ec:5f: c5:bc:b0:1a:23:13:52:de:f2:fd:34:8f:2a:a9:b3: 21:d3:c3:18:8a:0f:43:68:24:78:df:31:43:7e:1d: 05:45:82:db:cb:7b:1e:37:38:7c:a5:fa:84:c6:a2: 94:f8:05:d5:89:3c:15:9a:fe:f9:ff:85:8a:b3:60: 05:f7:a9:69:27:28:62:89:99:0f:b9:cc:ea:49:99: ea:9e:45:4f:4b:77:04:26:99:92:ee:3c:a9:7d:6b: 37:b5:48:bd:c9:45:0d:be:b9:61:f9:4d:27:cd:89: 38:e9:47:6c:53:62:b1:fe:fb:3b:6a:97:4b:2c:19: 82:d5:fa:15:c1:42:75:b2:64:30:73:6b:ae:af:2c: 09:c8:58:ca:c1:be:22:48:c6:dc:09:47:07:9e:b5: 3c:c3:ec:af:85:08:8a:b8:0d:1e:6d:3b:eb:fa:ec: 58:b0:ec:79:42:78:86:c4:6f:db:a5:60:30:11:ea: f5:9d:71:87:e3:1b:33:83:4b:22:ca:ca:d0:7d:06: 96:c7:bd:06:c6:0c:31:a4:c7:36:09:13:ea:98:ca: f7:f6:b6:b8:62:99:eb:9b:60:d4:7b:49:a5:94:b5: 2d:18:9f:5d:50:ed:c1:3d:03:39:af:30:49:ba:e3: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:E2:44:25:47:0A:36:98:AF:0E:1B:63:E5:02:2A:65:68:28:9D X509v3 Authority Key Identifier: keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:9f:c2:d8:8e:ef:32:ff:f0:31:a6:58:c4:cf:57:a1:da:73: ac:7d:21:8b:36:76:53:6c:ff:0c:69:9e:51:36:c3:b4:06:a5: 38:c7:68:a0:7a:d5:e8:e0:77:8b:69:a5:85:ef:40:9b:a4:a5: 2b:bd:a6:8f:f5:39:ad:f3:e9:9d:cb:b5:a8:bb:05:11:46:40: c6:2e:bc:bb:a4:d8:24:2f:9f:b4:5a:07:fd:c7:f2:1b:85:39: 0d:19:b9:ad:ee:e8:eb:69:b9:13:a3:49:1f:23:f9:62:45:1d: cd:d3:58:f0:5f:23:b3:57:05:0c:d4:00:dd:f0:1a:06:03:5c: e1:ec:83:7c:a0:b9:55:16:3d:7c:e8:8b:e6:95:6f:dc:db:9b: 20:0a:88:09:b2:23:af:40:5b:76:8f:b9:05:2f:5c:ed:70:83: bf:31:48:e1:39:0b:cf:5f:ef:44:89:2c:f9:62:9e:fa:5f:31: 28:eb:9d:c9:47:17:a9:87:f0:d7:29:95:df:58:3b:b7:08:85: 86:a2:24:04:05:14:e2:13:c9:67:eb:10:43:51:8f:8c:27:31: f2:9b:26:44:27:68:91:36:ea:27:9f:9a:3c:ef:a9:e8:2d:52: 25:ac:bc:87:e8:4c:f4:77:a9:d5:12:4e:7d:8a:8d:a3:3a:66: db:42:4e:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD2IQ74NXNuPo4xhdSgrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm MmFhY2IwHhcNMjUxMjMwMDcwMTAwWhcNMjUxMjMxMDcwMTAwWjAzMTEwLwYDVQQD Eyg1YjE0ZTI0NDI1NDcwYTM2OThhZjBlMWI2M2U1MDIyYTY1NjgyODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hew6UAkZDp/ZCyP7F/FvLAaIxNS 3vL9NI8qqbMh08MYig9DaCR43zFDfh0FRYLby3seNzh8pfqExqKU+AXViTwVmv75 /4WKs2AF96lpJyhiiZkPuczqSZnqnkVPS3cEJpmS7jypfWs3tUi9yUUNvrlh+U0n zYk46UdsU2Kx/vs7apdLLBmC1foVwUJ1smQwc2uurywJyFjKwb4iSMbcCUcHnrU8 w+yvhQiKuA0ebTvr+uxYsOx5QniGxG/bpWAwEer1nXGH4xszg0siysrQfQaWx70G xgwxpMc2CRPqmMr39ra4Ypnrm2DUe0mllLUtGJ9dUO3BPQM5rzBJuuM1mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsU4kQlRwo2mK8OG2PlAiplaCidMB8GA1UdIwQY MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ/C2I7v Mv/wMaZYxM9XodpzrH0hizZ2U2z/DGmeUTbDtAalOMdooHrV6OB3i2mlhe9Am6Sl K72mj/U5rfPpncu1qLsFEUZAxi68u6TYJC+ftFoH/cfyG4U5DRm5re7o62m5E6NJ HyP5YkUdzdNY8F8js1cFDNQA3fAaBgNc4eyDfKC5VRY9fOiL5pVv3NubIAqICbIj r0Bbdo+5BS9c7XCDvzFI4TkLz1/vRIks+WKe+l8xKOudyUcXqYfw1ymV31g7twiF hqIkBAUU4hPJZ+sQQ1GPjCcx8psmRCdokTbqJ5+aPO+p6C1SJay8h+hM9Hep1RJO fYqNozpm20JOnA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:21 2025 by rpki-client