This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft File: xdXOafzPDGu44rJmfh44-5QPPSY.mft (raw, json) Hash identifier: JbFUSp8XPga3VuCnXKX3fpvFAyNEuuo7gWnqJjegGIw= Subject key identifier: 90:D2:C6:0B:F2:39:54:E7:DF:B3:42:34:D2:00:DF:AD:73:31:79:44 Authority key identifier: C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26 Certificate issuer: /CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26 Certificate serial: 019B3C1087DDF26E1ABB99F8D935FABE9BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft Manifest number: 0BF3 Signing time: Sat 20 Dec 2025 14:01:14 +0000 Manifest this update: Sat 20 Dec 2025 14:01:14 +0000 Manifest next update: Sun 21 Dec 2025 14:01:14 +0000 Files and hashes: 1: 6dkBUwL-mhaODMyRqo4g1V5Aqm0.roa (hash: Qmi5vwRBC8G/em6HsgOnkDIH/4egeMg5iAbwYtXG1+s=) 2: xdXOafzPDGu44rJmfh44-5QPPSY.crl (hash: XNxlrQZPEaVYzRxVnjRy58DkshkK87bNbX7jGx+r/zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:87:dd:f2:6e:1a:bb:99:f8:d9:35:fa:be:9b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5d5ce69fccf0c6bb8e2b2667e1e38fb940f3d26 Validity Not Before: Dec 20 14:01:14 2025 GMT Not After : Dec 21 14:01:14 2025 GMT Subject: CN=90d2c60bf23954e7dfb34234d200dfad73317944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:89:65:1c:56:22:d4:b9:82:e4:08:ae:6a:d4: 31:0a:63:b6:29:be:0d:cc:c3:6a:3e:db:42:6e:ff: 58:4a:46:c5:e6:14:19:4d:d6:f7:86:e0:3b:f6:99: cd:05:4e:c4:c1:a1:d9:1a:46:50:b7:61:38:23:f0: c9:62:79:4d:95:44:5e:d5:80:03:50:7b:7d:7f:28: 95:aa:98:8a:b7:f6:a1:b3:99:c4:fe:eb:07:be:2b: e1:da:21:d2:d3:f6:17:eb:17:01:c1:7b:a6:61:f1: 04:e6:65:9b:72:d9:2c:64:e2:9c:44:7d:88:42:64: 1e:69:39:5c:c0:77:77:9c:9b:42:ac:a3:33:7f:15: 5b:08:67:d8:b5:13:66:ba:71:11:5f:e5:c5:37:ab: e0:a8:8a:95:58:af:c2:0b:01:e0:34:cf:6e:af:1f: 54:b4:4e:f8:d7:46:76:87:4d:a1:b4:57:17:8a:25: ad:e7:f2:19:9c:5a:63:36:38:86:be:65:75:0b:2b: f0:a5:c8:51:43:58:7f:85:1a:4b:94:57:a3:3a:7b: 55:71:e4:36:8e:2e:75:53:c9:8d:37:33:48:18:7f: 22:71:bb:f9:1d:db:fe:62:53:ff:3f:87:02:83:64: 9a:5d:f7:ad:2f:62:10:9a:9e:5e:a1:82:e2:6d:a4: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D2:C6:0B:F2:39:54:E7:DF:B3:42:34:D2:00:DF:AD:73:31:79:44 X509v3 Authority Key Identifier: keyid:C5:D5:CE:69:FC:CF:0C:6B:B8:E2:B2:66:7E:1E:38:FB:94:0F:3D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdXOafzPDGu44rJmfh44-5QPPSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a282cd-ee30-49c3-9c9e-471db7eb719e/1/xdXOafzPDGu44rJmfh44-5QPPSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:cd:72:24:ec:fc:93:d6:b1:8f:8d:cb:ef:c6:d8:2d:1a:9e: 02:9d:6d:ee:03:a8:86:32:0c:b3:93:15:9b:11:a2:00:49:22: ce:8b:da:f8:95:21:b5:44:25:fa:4e:b7:f6:1c:4e:8c:25:62: 1c:64:c9:05:17:2d:27:12:70:1b:3a:14:44:48:cc:9f:e2:bd: 24:eb:8a:94:1b:84:25:71:f8:4f:ec:8d:fc:91:e4:4c:09:a2: c8:b8:af:4d:1d:69:d5:87:4e:e8:1d:c9:88:49:b4:62:52:89: 3f:e9:4e:f7:e8:a0:17:af:70:70:1b:9b:bb:06:9a:91:7f:9b: 9e:6f:09:fe:31:a8:f3:56:e3:ac:1c:67:54:cb:d4:ae:d5:78: dd:58:c9:d5:fc:f4:e2:76:11:f2:84:e8:4f:2b:79:12:d9:4b: 47:eb:82:13:a4:08:2a:a1:c9:83:6c:b3:dd:68:d8:88:40:c4: aa:90:ff:65:ee:ab:8e:3c:48:ce:66:69:d1:ac:9f:8e:59:b7: ab:e6:fb:10:5a:65:51:9b:0f:79:1e:38:bb:07:7f:79:e4:2f: 1d:89:a2:d0:68:a9:f9:c5:c9:78:1b:2a:6e:2c:4e:c8:4d:54: 61:54:46:14:10:97:28:07:39:3c:12:74:7a:dd:98:07:bf:f9: 15:04:56:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIfd8m4au5n42TX6vpvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZDVjZTY5ZmNjZjBjNmJiOGUyYjI2NjdlMWUzOGZiOTQw ZjNkMjYwHhcNMjUxMjIwMTQwMTE0WhcNMjUxMjIxMTQwMTE0WjAzMTEwLwYDVQQD Eyg5MGQyYzYwYmYyMzk1NGU3ZGZiMzQyMzRkMjAwZGZhZDczMzE3OTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIllHFYi1LmC5AiuatQxCmO2Kb4N zMNqPttCbv9YSkbF5hQZTdb3huA79pnNBU7EwaHZGkZQt2E4I/DJYnlNlURe1YAD UHt9fyiVqpiKt/ahs5nE/usHvivh2iHS0/YX6xcBwXumYfEE5mWbctksZOKcRH2I QmQeaTlcwHd3nJtCrKMzfxVbCGfYtRNmunERX+XFN6vgqIqVWK/CCwHgNM9urx9U tE7410Z2h02htFcXiiWt5/IZnFpjNjiGvmV1CyvwpchRQ1h/hRpLlFejOntVceQ2 ji51U8mNNzNIGH8icbv5Hdv+YlP/P4cCg2SaXfetL2IQmp5eoYLibaR8uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDSxgvyOVTn37NCNNIA361zMXlEMB8GA1UdIwQY MBaAFMXVzmn8zwxruOKyZn4eOPuUDz0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGRYT2FmelBER3U0NHJKbWZoNDQtNVFQUFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMjgyY2QtZWUzMC00OWMzLTljOWUt NDcxZGI3ZWI3MTllLzEveGRYT2FmelBER3U0NHJKbWZoNDQtNVFQUFNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMjgyY2QtZWUzMC00OWMzLTljOWUtNDcxZGI3ZWI3MTll LzEveGRYT2FmelBER3U0NHJKbWZoNDQtNVFQUFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjM1yJOz8 k9axj43L78bYLRqeAp1t7gOohjIMs5MVmxGiAEkizova+JUhtUQl+k639hxOjCVi HGTJBRctJxJwGzoUREjMn+K9JOuKlBuEJXH4T+yN/JHkTAmiyLivTR1p1YdO6B3J iEm0YlKJP+lO9+igF69wcBubuwaakX+bnm8J/jGo81bjrBxnVMvUrtV43VjJ1fz0 4nYR8oToTyt5EtlLR+uCE6QIKqHJg2yz3WjYiEDEqpD/Ze6rjjxIzmZp0ayfjlm3 q+b7EFplUZsPeR44uwd/eeQvHYmi0Gip+cXJeBsqbixOyE1UYVRGFBCXKAc5PBJ0 et2YB7/5FQRWRw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:05:56 2025 by rpki-client