This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json) Hash identifier: x1az4L5buvPnBEk6fLp3eG3DyVESo+PHrjN34xCtOfg= Subject key identifier: CE:8B:DA:04:BD:1F:B6:88:DC:AE:C2:D0:4F:CF:72:13:D7:95:57:CC Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Certificate serial: 019B390F9808E6F4831C860DC4B9DB6361E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft Manifest number: 069F Signing time: Sat 20 Dec 2025 00:01:21 +0000 Manifest this update: Sat 20 Dec 2025 00:01:21 +0000 Manifest next update: Sun 21 Dec 2025 00:01:21 +0000 Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=) 2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: DlF8nyheTFU5ZcOOSVTElKfkHJd+Q/E2463dgo9R6W4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:98:08:e6:f4:83:1c:86:0d:c4:b9:db:63:61:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Validity Not Before: Dec 20 00:01:21 2025 GMT Not After : Dec 21 00:01:21 2025 GMT Subject: CN=ce8bda04bd1fb688dcaec2d04fcf7213d79557cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:dd:b9:23:93:1d:c1:22:ee:c6:38:f7:4b: 1f:f3:98:44:85:ac:61:55:c7:e2:fc:17:37:e9:67: 14:47:cd:ff:b9:6b:dc:b3:c3:67:71:af:33:fc:0e: 6c:8e:0c:76:77:f8:3e:05:f3:de:3d:e4:9c:53:40: 41:21:ea:c7:b2:e8:0c:e1:ef:4f:cc:90:95:94:64: 3a:d7:c6:12:0f:8e:72:20:59:1b:52:f4:5b:9d:0f: da:5c:cd:18:55:56:fb:a5:ef:3f:65:86:47:29:ff: 9c:43:75:5b:0a:61:a8:2b:e7:d9:ee:e6:80:20:ae: 71:d8:0a:d8:77:b2:43:1b:05:7f:fc:d3:d4:45:d9: 83:3f:a9:a1:77:44:6a:6e:5b:5d:30:cb:e9:8d:a7: d6:73:d0:c9:3e:e8:82:f7:bc:ed:1e:55:b0:ac:47: 5b:41:a8:d1:b2:46:7d:9e:e5:8c:e7:1d:5a:b9:f4: 81:74:a8:18:98:65:5d:1d:d2:b9:8c:2b:ff:84:7b: 81:c8:32:7e:ed:3c:74:8f:e1:60:0e:94:ac:7f:6b: 6f:ce:47:7b:00:41:ca:68:11:62:43:f2:15:82:bb: 00:14:20:7a:ef:82:9e:25:b9:f5:9d:60:33:b6:ed: dc:f5:da:72:a1:46:dd:b9:f4:f1:cc:15:a6:2e:09: 19:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8B:DA:04:BD:1F:B6:88:DC:AE:C2:D0:4F:CF:72:13:D7:95:57:CC X509v3 Authority Key Identifier: keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8d:2c:77:7e:c1:d3:3c:66:4a:0e:d0:66:fd:52:34:48:41: 53:aa:b3:79:80:2d:f2:7e:8b:c4:28:0d:45:cf:2c:21:42:d5: ca:59:11:d5:5f:d6:b5:ca:b7:0d:35:64:57:8a:9f:73:cd:35: fd:bd:97:94:f0:ea:57:85:ac:49:68:0a:cd:ec:1f:8c:76:68: ad:97:f6:22:24:87:27:b9:8c:5a:23:66:8d:fb:53:cb:2e:1b: 96:94:21:76:d8:18:2c:b2:dd:85:67:e6:21:6b:76:47:34:2a: 39:a2:ee:d3:47:62:52:94:b6:de:e2:59:e8:ef:24:59:4d:04: c9:25:ec:22:2c:4f:d2:15:5d:ac:c3:ed:54:57:6e:bc:86:ca: 46:c5:f2:0f:43:79:70:50:cd:44:c2:dc:48:88:f9:02:e3:ca: 14:7a:7f:20:fa:56:62:01:9d:2f:4d:95:84:6b:c8:1a:28:41: 9e:8b:47:8e:85:b9:19:12:b7:b1:bf:ad:47:1c:d9:8a:2a:e5: 0a:ef:7d:ab:f1:11:c6:df:63:bf:c0:47:28:1c:16:e0:4b:48: 79:7b:ab:91:87:45:5a:e0:8a:59:e9:3c:56:d2:c9:e1:33:e1: da:7a:6e:24:ca:2a:a0:23:a1:d0:b8:85:5f:a3:11:02:75:6f: 7f:15:c5:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D5gI5vSDHIYNxLnbY2HpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk N2EzMDAwHhcNMjUxMjIwMDAwMTIxWhcNMjUxMjIxMDAwMTIxWjAzMTEwLwYDVQQD EyhjZThiZGEwNGJkMWZiNjg4ZGNhZWMyZDA0ZmNmNzIxM2Q3OTU1N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhabduSOTHcEi7sY490sf85hEhaxh Vcfi/Bc36WcUR83/uWvcs8Nnca8z/A5sjgx2d/g+BfPePeScU0BBIerHsugM4e9P zJCVlGQ618YSD45yIFkbUvRbnQ/aXM0YVVb7pe8/ZYZHKf+cQ3VbCmGoK+fZ7uaA IK5x2ArYd7JDGwV//NPURdmDP6mhd0RqbltdMMvpjafWc9DJPuiC97ztHlWwrEdb QajRskZ9nuWM5x1aufSBdKgYmGVdHdK5jCv/hHuByDJ+7Tx0j+FgDpSsf2tvzkd7 AEHKaBFiQ/IVgrsAFCB674KeJbn1nWAztu3c9dpyoUbdufTxzBWmLgkZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6L2gS9H7aI3K7C0E/PchPXlVfMMB8GA1UdIwQY MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb40sd37B 0zxmSg7QZv1SNEhBU6qzeYAt8n6LxCgNRc8sIULVylkR1V/Wtcq3DTVkV4qfc801 /b2XlPDqV4WsSWgKzewfjHZorZf2IiSHJ7mMWiNmjftTyy4blpQhdtgYLLLdhWfm IWt2RzQqOaLu00diUpS23uJZ6O8kWU0EySXsIixP0hVdrMPtVFduvIbKRsXyD0N5 cFDNRMLcSIj5AuPKFHp/IPpWYgGdL02VhGvIGihBnotHjoW5GRK3sb+tRxzZiirl Cu99q/ERxt9jv8BHKBwW4EtIeXurkYdFWuCKWek8VtLJ4TPh2npuJMoqoCOh0LiF X6MRAnVvfxXFaA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:49 2025 by rpki-client