This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft File: XeYTaCVSAQKY86aUoA18WQYGC5U.mft (raw, json) Hash identifier: 7FdZVijZXae5o6mQX/rVTtktZKXmsQWhULOdXmmdp5s= Subject key identifier: C2:CC:8E:10:FA:03:1E:83:2C:2B:E8:15:33:0C:1D:96:62:78:83:38 Authority key identifier: 5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95 Certificate issuer: /CN=5de613682552010298f3a694a00d7c5906060b95 Certificate serial: 019B7524044BD302C89487B59C0E01F0CD4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft Manifest number: 17A8 Signing time: Wed 31 Dec 2025 16:00:53 +0000 Manifest this update: Wed 31 Dec 2025 16:00:53 +0000 Manifest next update: Thu 01 Jan 2026 16:00:53 +0000 Files and hashes: 1: XeYTaCVSAQKY86aUoA18WQYGC5U.crl (hash: gxvmrjii7En7b5Z88UtbQHFiIvP9TqrapUKfC2fFMDc=) 2: auYlcZnEp-yqavQsok9_TPLHAq0.roa (hash: kbe3quRrlIxTjuDhfKrAisNkV8HOTBuxWR/raJshlU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:24:04:4b:d3:02:c8:94:87:b5:9c:0e:01:f0:cd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de613682552010298f3a694a00d7c5906060b95 Validity Not Before: Dec 31 16:00:53 2025 GMT Not After : Jan 1 16:00:53 2026 GMT Subject: CN=c2cc8e10fa031e832c2be815330c1d9662788338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:f6:02:df:05:15:fd:48:cf:58:37:9d:f0: 07:0f:04:bf:bf:34:46:98:56:82:c3:46:4b:6c:97: af:b8:3f:90:fc:e3:c5:d9:24:c3:77:3f:92:f0:86: fd:c0:b7:35:c1:c1:8f:93:f4:3a:28:20:cc:ca:a3: e2:fb:71:be:f6:c5:79:02:73:10:00:24:4d:90:64: f2:bc:af:47:59:0f:91:6b:00:95:a2:00:6b:78:75: 89:c6:ed:51:87:b7:e7:02:50:ab:3d:99:83:61:2b: 95:94:58:6b:d8:ce:e7:c3:52:8f:c5:a9:5d:fc:f1: eb:b9:38:87:0e:18:64:36:35:e3:fd:21:9d:fe:a0: 0f:28:66:4b:3d:68:26:21:cf:7d:c8:80:d2:c4:6e: 07:01:7e:82:77:31:2c:c6:5f:11:6e:91:2f:2d:d5: 7e:40:da:4b:d4:7f:3b:08:f4:11:98:f6:3c:fa:f5: f4:8d:2a:4f:e5:9e:34:bb:39:9d:b1:c4:ac:e6:7f: 79:89:5a:1c:bc:2d:b4:77:c7:41:a0:ce:0e:d3:a3: b2:b1:4e:6c:f1:4d:52:57:55:61:18:32:d7:72:2a: 48:47:fc:54:b0:d7:43:c1:2e:a6:77:d6:2d:11:78: c5:c0:97:98:02:25:2e:0b:64:ed:c8:03:27:2b:79: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CC:8E:10:FA:03:1E:83:2C:2B:E8:15:33:0C:1D:96:62:78:83:38 X509v3 Authority Key Identifier: keyid:5D:E6:13:68:25:52:01:02:98:F3:A6:94:A0:0D:7C:59:06:06:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeYTaCVSAQKY86aUoA18WQYGC5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c2320-ba95-4531-8c81-22295df12b27/1/XeYTaCVSAQKY86aUoA18WQYGC5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:49:c8:ae:39:5c:93:f1:62:00:50:31:67:1f:a3:3a:fc:ed: 51:f6:7b:9f:66:18:9d:a7:63:1d:c4:0e:26:27:f1:cf:e8:55: 8a:61:5c:28:53:c1:1b:71:87:aa:d8:76:74:a0:54:a5:4c:5f: e9:c2:29:d2:56:47:d9:76:01:92:05:99:be:c0:4f:a5:0d:5e: 5c:ce:17:b9:d8:62:0b:30:c0:0c:4d:9e:ab:b9:09:0a:a6:f9: a5:3a:b4:ed:46:23:23:11:d3:09:f6:ce:db:91:0c:17:50:91: 60:ab:4e:2f:a5:63:64:3d:95:65:ae:3b:66:c0:e4:57:49:9d: e8:7d:17:ba:9f:c0:4c:ca:3b:d6:2a:bc:34:b7:f1:5c:db:23: 0b:6f:a3:b3:aa:87:e8:c7:31:b3:37:21:c8:f7:f9:5e:10:8b: 33:67:53:2b:df:98:b6:17:bb:17:c6:79:cd:a7:02:58:48:c5: bf:12:25:a8:51:69:c9:87:0a:1e:fa:c2:1e:57:e6:9c:7c:11: 0f:e7:16:ab:ca:88:bc:93:52:86:89:c3:c4:d6:04:d8:fe:ea: fd:e6:67:50:7e:bd:d2:18:82:5b:d8:cf:73:df:2d:1d:a4:aa: ae:66:ab:b1:06:90:11:0e:d2:9f:dd:29:2b:49:59:b4:50:9d: 61:cc:ef:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1JARL0wLIlIe1nA4B8M1MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTYxMzY4MjU1MjAxMDI5OGYzYTY5NGEwMGQ3YzU5MDYw NjBiOTUwHhcNMjUxMjMxMTYwMDUzWhcNMjYwMTAxMTYwMDUzWjAzMTEwLwYDVQQD EyhjMmNjOGUxMGZhMDMxZTgzMmMyYmU4MTUzMzBjMWQ5NjYyNzg4MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUD2At8FFf1Iz1g3nfAHDwS/vzRG mFaCw0ZLbJevuD+Q/OPF2STDdz+S8Ib9wLc1wcGPk/Q6KCDMyqPi+3G+9sV5AnMQ ACRNkGTyvK9HWQ+RawCVogBreHWJxu1Rh7fnAlCrPZmDYSuVlFhr2M7nw1KPxald /PHruTiHDhhkNjXj/SGd/qAPKGZLPWgmIc99yIDSxG4HAX6CdzEsxl8RbpEvLdV+ QNpL1H87CPQRmPY8+vX0jSpP5Z40uzmdscSs5n95iVocvC20d8dBoM4O06OysU5s 8U1SV1VhGDLXcipIR/xUsNdDwS6md9YtEXjFwJeYAiUuC2TtyAMnK3nY8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLMjhD6Ax6DLCvoFTMMHZZieIM4MB8GA1UdIwQY MBaAFF3mE2glUgECmPOmlKANfFkGBguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wYzIzMjAtYmE5NS00NTMxLThjODEt MjIyOTVkZjEyYjI3LzEvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wYzIzMjAtYmE5NS00NTMxLThjODEtMjIyOTVkZjEyYjI3 LzEvWGVZVGFDVlNBUUtZODZhVW9BMThXUVlHQzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0nIrjlc k/FiAFAxZx+jOvztUfZ7n2YYnadjHcQOJifxz+hVimFcKFPBG3GHqth2dKBUpUxf 6cIp0lZH2XYBkgWZvsBPpQ1eXM4XudhiCzDADE2eq7kJCqb5pTq07UYjIxHTCfbO 25EMF1CRYKtOL6VjZD2VZa47ZsDkV0md6H0Xup/ATMo71iq8NLfxXNsjC2+js6qH 6McxszchyPf5XhCLM2dTK9+Ythe7F8Z5zacCWEjFvxIlqFFpyYcKHvrCHlfmnHwR D+cWq8qIvJNShonDxNYE2P7q/eZnUH690hiCW9jPc98tHaSqrmarsQaQEQ7Sn90p K0lZtFCdYczvrQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:07:40 2025 by rpki-client