This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json) Hash identifier: 4ncGcW7Zobkn3b84Qfv0OLgUWdfDKo4rFxYBc2b4uCQ= Subject key identifier: F8:3A:D8:61:55:6B:3D:4E:8D:36:6A:F5:F0:7A:C3:2A:3A:57:30:3B Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Certificate serial: 019B48143EBAD0437F534C0B8BE350E60B24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft Manifest number: 1791 Signing time: Mon 22 Dec 2025 22:00:44 +0000 Manifest this update: Mon 22 Dec 2025 22:00:44 +0000 Manifest next update: Tue 23 Dec 2025 22:00:44 +0000 Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: bijRRLHlcaKeq1T/QOoz7w0oqfXwOCp/FniScEghQfI=) 2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=) 3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:3e:ba:d0:43:7f:53:4c:0b:8b:e3:50:e6:0b:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Validity Not Before: Dec 22 22:00:44 2025 GMT Not After : Dec 23 22:00:44 2025 GMT Subject: CN=f83ad861556b3d4e8d366af5f07ac32a3a57303b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:cd:b6:08:9c:0b:fc:35:4b:4d:0d:e5:c1: d5:03:6d:0d:61:bb:a3:ae:16:89:16:58:f6:14:8a: f5:d9:68:ec:e2:bb:f7:c0:d6:f4:c5:59:cd:51:9d: 58:fd:55:56:19:aa:b1:0f:9e:91:49:d6:89:bf:d9: a9:1f:b5:6d:63:86:29:5a:12:75:7a:d2:17:29:99: 94:8b:69:b4:c2:8b:0f:9e:17:62:f2:46:c2:76:a7: ca:20:94:80:ba:d8:2b:76:96:90:f5:97:b4:22:68: ad:45:f6:49:51:a0:3c:3f:55:a5:15:44:de:47:fd: 8d:8d:f8:4b:06:5b:b2:64:15:7c:2d:5c:0f:49:7b: e4:30:be:52:42:a9:17:33:74:b4:76:8d:8c:10:86: 5a:f8:33:65:2f:67:f9:e3:18:b0:5b:7c:d8:f7:9b: 93:8e:56:14:b9:4e:c5:82:75:d5:26:3a:6b:ee:c0: 94:f7:90:91:a3:22:a8:3b:d9:62:f9:00:1c:56:6d: 1f:b0:f7:3b:85:03:a8:5a:ac:6d:f1:21:5c:e5:52: 1a:cd:f6:71:db:43:a0:2b:db:21:a7:84:af:1b:41: 19:83:a2:da:90:f5:b4:81:21:b7:16:9a:da:a1:76: 25:7e:68:a7:2a:e2:f9:55:d5:64:62:c9:b4:b5:a4: 3f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3A:D8:61:55:6B:3D:4E:8D:36:6A:F5:F0:7A:C3:2A:3A:57:30:3B X509v3 Authority Key Identifier: keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:29:9e:cd:76:32:44:76:8f:3c:42:e1:bf:9e:4e:37:99:7a: ef:d4:e3:28:11:53:3b:86:34:9a:10:76:fb:64:66:56:32:07: b5:7d:b0:98:a8:07:f5:f1:7e:ed:4f:5e:09:d9:fb:1d:a2:48: a3:3b:c1:da:77:77:53:cb:01:e9:45:20:eb:ec:83:cc:a3:db: 73:39:87:61:ad:71:ca:7e:e2:6f:18:c3:80:06:e2:e1:35:d1: 30:3f:c4:82:1d:4b:e8:8e:a5:3d:60:5b:97:18:15:57:a8:39: 24:e4:78:b8:bc:d3:8d:65:85:d4:d1:0a:e5:cc:0e:cc:73:b5: 81:22:00:21:c2:d7:a6:e9:91:cd:8a:3e:7b:71:ac:28:07:c7: a3:d7:fc:2e:44:3b:fd:41:16:88:82:f8:ba:9d:72:31:a3:93: 62:d6:6c:c8:db:54:8f:12:fc:b4:3e:96:cf:9c:6d:74:63:de: 1a:36:c5:cd:7e:5b:4a:cb:7e:4e:15:16:7b:34:f9:61:3f:01: 54:1e:e8:3b:fa:6d:ed:45:d8:7f:ea:da:da:fe:b1:a6:7e:4c: 96:e5:a5:10:c7:16:f7:db:b4:cb:ee:7c:12:57:18:70:5c:52: af:dd:f6:f8:f1:e3:43:89:48:2b:02:4b:74:3f:1c:1c:7e:c6: 69:15:47:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFD660EN/U0wLi+NQ5gskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3 ZmQ0ZmEwHhcNMjUxMjIyMjIwMDQ0WhcNMjUxMjIzMjIwMDQ0WjAzMTEwLwYDVQQD EyhmODNhZDg2MTU1NmIzZDRlOGQzNjZhZjVmMDdhYzMyYTNhNTczMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk7NtgicC/w1S00N5cHVA20NYbuj rhaJFlj2FIr12Wjs4rv3wNb0xVnNUZ1Y/VVWGaqxD56RSdaJv9mpH7VtY4YpWhJ1 etIXKZmUi2m0wosPnhdi8kbCdqfKIJSAutgrdpaQ9Ze0ImitRfZJUaA8P1WlFUTe R/2NjfhLBluyZBV8LVwPSXvkML5SQqkXM3S0do2MEIZa+DNlL2f54xiwW3zY95uT jlYUuU7FgnXVJjpr7sCU95CRoyKoO9li+QAcVm0fsPc7hQOoWqxt8SFc5VIazfZx 20OgK9shp4SvG0EZg6LakPW0gSG3FpraoXYlfminKuL5VdVkYsm0taQ/BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPg62GFVaz1OjTZq9fB6wyo6VzA7MB8GA1UdIwQY MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5 LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEymezXYy RHaPPELhv55ON5l679TjKBFTO4Y0mhB2+2RmVjIHtX2wmKgH9fF+7U9eCdn7HaJI ozvB2nd3U8sB6UUg6+yDzKPbczmHYa1xyn7ibxjDgAbi4TXRMD/Egh1L6I6lPWBb lxgVV6g5JOR4uLzTjWWF1NEK5cwOzHO1gSIAIcLXpumRzYo+e3GsKAfHo9f8LkQ7 /UEWiIL4up1yMaOTYtZsyNtUjxL8tD6Wz5xtdGPeGjbFzX5bSst+ThUWezT5YT8B VB7oO/pt7UXYf+ra2v6xpn5MluWlEMcW99u0y+58ElcYcFxSr932+PHjQ4lIKwJL dD8cHH7GaRVHkQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:37:33 2025 by rpki-client