This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json) Hash identifier: b7X1HKAXu44jiYNf5NGN3t28iJCHQ/BkuFCB1e8I300= Subject key identifier: 66:01:5C:C0:3C:2B:69:9D:C9:B7:19:CD:37:CB:45:7C:60:BD:3E:5D Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Certificate serial: 019B503C86100C8EC60C9F18CA23A5CA4B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft Manifest number: 06AB Signing time: Wed 24 Dec 2025 12:01:42 +0000 Manifest this update: Wed 24 Dec 2025 12:01:42 +0000 Manifest next update: Thu 25 Dec 2025 12:01:42 +0000 Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=) 2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: N3tEiC+YC84I54tgiU+zPOyu3M290THHTwYiWT16oF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:86:10:0c:8e:c6:0c:9f:18:ca:23:a5:ca:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Validity Not Before: Dec 24 12:01:42 2025 GMT Not After : Dec 25 12:01:42 2025 GMT Subject: CN=66015cc03c2b699dc9b719cd37cb457c60bd3e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:5f:3e:07:b1:e7:3b:3e:76:97:cd:cb:7a: 47:4c:9e:48:bf:be:79:8b:4d:a2:75:54:54:e5:e0: a7:24:1f:77:04:25:cb:59:fa:57:34:52:b7:b2:05: 64:17:bf:79:3e:7a:61:b9:37:f8:68:ad:7e:4d:75: 71:67:53:0b:47:f3:5f:f8:c6:80:1f:c0:cc:48:25: d9:49:b6:0b:23:a6:b3:2a:2f:07:88:55:1f:c2:e4: 75:48:51:8a:ec:b8:65:6a:c9:bc:5c:f9:3d:4d:22: f9:b0:e5:9f:bd:51:de:8c:3a:87:f9:a4:47:c3:64: e6:25:33:6a:ff:b2:10:71:14:6e:e7:68:d5:4a:bc: 51:c7:89:52:26:ac:b5:83:55:17:90:44:8d:03:a5: c7:19:fd:9f:60:14:af:4c:25:df:58:b8:4c:69:74: c9:24:be:7f:1a:37:95:7f:1c:9f:e9:77:07:4f:99: 74:6b:50:8f:15:d8:6b:92:9e:99:46:25:92:35:d7: 3a:e8:8e:83:b9:e8:fa:f1:b7:1f:94:7b:ea:c3:fe: 04:9c:a8:29:76:04:e7:06:3f:6d:55:58:b0:10:05: 83:eb:73:6d:5f:3f:d0:e8:8a:43:43:b7:c9:a6:a3: 80:ef:e9:15:69:d7:fd:b2:6c:f4:88:62:9d:68:51: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:01:5C:C0:3C:2B:69:9D:C9:B7:19:CD:37:CB:45:7C:60:BD:3E:5D X509v3 Authority Key Identifier: keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:8b:8f:a9:21:ee:ea:06:ca:e7:81:fc:63:6a:af:fb:c4:34: c5:f9:76:f9:17:58:d4:f1:f9:fb:8f:20:e2:b4:94:46:10:c4: bd:2b:81:0b:5b:84:70:0d:fe:00:7b:c5:c6:31:4b:e6:99:91: 59:26:f2:69:a1:82:8d:ee:03:e2:07:30:47:94:7f:0b:a3:e2: fc:5b:6b:a8:6e:38:b0:7b:8f:d4:34:a0:9f:b8:df:3e:b9:cf: 40:d0:4e:e0:96:a6:66:c8:18:75:36:3e:43:80:41:6c:1a:8a: be:23:96:34:e9:bc:44:95:a8:b7:8c:f8:1a:cc:18:c8:b9:19: a8:6e:4d:d4:a1:19:f4:5a:8c:b7:79:a4:b6:54:59:aa:1d:a2: 85:69:f8:40:24:3d:32:10:e2:eb:7f:20:bd:56:af:85:3e:fd: 0e:59:f3:32:5c:d0:4c:f8:3f:20:d0:2d:0e:d9:36:29:39:b2: 56:81:a6:c2:62:1d:dc:15:5a:42:33:ac:29:b5:d2:e7:dd:f5: b6:d0:3b:07:c4:a4:ac:d9:f7:b4:47:86:9f:f6:8d:0a:9e:df: cb:57:ec:ce:0e:95:05:c5:83:2a:7c:bc:74:97:e1:53:ac:69: 38:38:01:8e:3a:33:e8:14:ce:34:da:5c:98:a7:dd:60:3c:73: 45:47:24:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPIYQDI7GDJ8YyiOlyks6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk N2EzMDAwHhcNMjUxMjI0MTIwMTQyWhcNMjUxMjI1MTIwMTQyWjAzMTEwLwYDVQQD Eyg2NjAxNWNjMDNjMmI2OTlkYzliNzE5Y2QzN2NiNDU3YzYwYmQzZTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaFfPgex5zs+dpfNy3pHTJ5Iv755 i02idVRU5eCnJB93BCXLWfpXNFK3sgVkF795PnphuTf4aK1+TXVxZ1MLR/Nf+MaA H8DMSCXZSbYLI6azKi8HiFUfwuR1SFGK7Lhlasm8XPk9TSL5sOWfvVHejDqH+aRH w2TmJTNq/7IQcRRu52jVSrxRx4lSJqy1g1UXkESNA6XHGf2fYBSvTCXfWLhMaXTJ JL5/GjeVfxyf6XcHT5l0a1CPFdhrkp6ZRiWSNdc66I6Duej68bcflHvqw/4EnKgp dgTnBj9tVViwEAWD63NtXz/Q6IpDQ7fJpqOA7+kVadf9smz0iGKdaFHm7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYBXMA8K2mdybcZzTfLRXxgvT5dMB8GA1UdIwQY MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYuPqSHu 6gbK54H8Y2qv+8Q0xfl2+RdY1PH5+48g4rSURhDEvSuBC1uEcA3+AHvFxjFL5pmR WSbyaaGCje4D4gcwR5R/C6Pi/FtrqG44sHuP1DSgn7jfPrnPQNBO4JamZsgYdTY+ Q4BBbBqKviOWNOm8RJWot4z4GswYyLkZqG5N1KEZ9FqMt3mktlRZqh2ihWn4QCQ9 MhDi638gvVavhT79DlnzMlzQTPg/INAtDtk2KTmyVoGmwmId3BVaQjOsKbXS5931 ttA7B8SkrNn3tEeGn/aNCp7fy1fszg6VBcWDKny8dJfhU6xpODgBjjoz6BTONNpc mKfdYDxzRUckpA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:38:22 2025 by rpki-client