This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json) Hash identifier: E/+0O5j99xwTy8/uerSsXNsQCz6BdkRpDFMvrUrUiTU= Subject key identifier: 9F:54:F8:D8:C0:78:F4:1D:5B:A5:84:EF:7D:86:90:87:78:39:19:A9 Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba Certificate serial: 019B435BCA0F04D736AB5331EE2DE446D17D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft Manifest number: 13C7 Signing time: Mon 22 Dec 2025 00:00:47 +0000 Manifest this update: Mon 22 Dec 2025 00:00:47 +0000 Manifest next update: Tue 23 Dec 2025 00:00:47 +0000 Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: CrbffymkCjladSCOMxtKfp9WP8ucWlCPU4dJoA8MhZU=) 2: uOaT4j9EVJiz8EIOTgjvWTshz84.roa (hash: 6VQK7lQU8B+WO6nBknTZwm7r/sjint5WViRnRUFwHxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:ca:0f:04:d7:36:ab:53:31:ee:2d:e4:46:d1:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba Validity Not Before: Dec 22 00:00:47 2025 GMT Not After : Dec 23 00:00:47 2025 GMT Subject: CN=9f54f8d8c078f41d5ba584ef7d869087783919a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2a:d2:b1:8a:28:15:17:78:2c:26:da:a9:52: a2:6d:f8:19:b4:77:88:1d:09:6d:32:60:27:19:f6: df:65:0b:cf:af:d5:b2:f4:c5:85:a9:0a:9d:92:e4: 34:aa:ac:9e:0a:55:9c:f7:bd:81:4e:75:ec:7c:6a: 4c:66:47:db:c4:93:6a:20:b9:ba:df:fd:96:e6:d0: 32:22:e6:3d:80:a1:4c:53:3c:8d:9e:53:6d:ed:d4: c0:b9:a2:6e:58:04:8f:f6:83:f9:b1:b8:59:f4:b7: 5e:f7:9d:37:ca:ef:21:a6:d9:9c:b3:cf:93:1f:df: 09:66:85:92:a6:f4:5c:cc:f1:70:60:5c:20:4f:43: f1:9e:2f:72:3c:23:99:32:58:21:13:dc:fa:66:e2: 53:96:b9:58:d8:ae:f1:c6:1e:8c:97:54:34:78:ef: a8:7b:5e:14:ff:9b:dc:9b:08:c2:aa:88:d6:6f:67: 66:de:49:d8:3f:8c:1a:6a:91:2c:10:27:c5:3f:7b: b3:02:00:fe:b2:ab:47:45:ed:c1:09:47:ea:80:7d: ee:76:08:b0:ee:49:bc:dd:80:b1:c1:0e:e7:e2:6b: ca:6a:a2:1f:61:57:27:9b:31:c0:ec:b5:04:5d:44: f5:fb:e2:0c:a0:e2:f6:4d:f6:36:d4:ac:35:bf:f2: 2c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:F8:D8:C0:78:F4:1D:5B:A5:84:EF:7D:86:90:87:78:39:19:A9 X509v3 Authority Key Identifier: keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:d1:0b:f3:a8:70:b9:59:b1:80:ca:9f:96:ac:c9:be:d3:ac: 70:3d:b8:e8:b9:66:c4:93:fd:18:2f:e0:02:42:89:d1:95:e3: 43:86:c9:86:fe:07:57:94:ee:5d:ae:d5:1b:b8:48:60:c7:2f: 89:28:5f:69:b9:c7:8e:58:9d:ac:1a:71:6d:df:29:26:b0:3d: e6:d0:7e:2b:90:74:6d:28:72:5a:03:ad:6d:20:c6:b1:23:e7: b5:c7:dc:10:a4:7e:85:20:3f:f6:24:aa:35:3c:ba:a6:f9:50: f5:62:ab:2b:a0:66:b9:ed:8c:7e:6f:8b:34:f1:41:cb:c2:da: ab:1f:30:04:6c:99:08:88:33:e2:00:c8:7d:3c:fa:98:81:38: 21:2f:5f:f0:79:a1:92:37:c3:05:d3:c8:55:64:bc:b2:9e:26: 2b:cf:93:2f:7d:35:60:31:8b:a9:af:2a:f9:96:77:4a:7d:c6: e7:60:99:82:21:7b:c2:bd:62:55:30:31:f1:9a:0b:87:ba:40: 76:fe:12:d4:1b:63:30:14:00:c7:05:98:3f:d0:f2:e6:16:71: 9a:d2:cb:e7:23:e6:93:f3:7e:5d:60:c7:38:33:8c:23:30:9e: 40:11:07:72:b2:30:e7:e6:db:83:9c:8c:f9:af:c8:95:8c:02: d9:98:09:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW8oPBNc2q1Mx7i3kRtF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODI2NjcyZTY4ZjNkYTVkYjUwZWQ4MWJhZGI4ZDMzYmRj Y2QyYmEwHhcNMjUxMjIyMDAwMDQ3WhcNMjUxMjIzMDAwMDQ3WjAzMTEwLwYDVQQD Eyg5ZjU0ZjhkOGMwNzhmNDFkNWJhNTg0ZWY3ZDg2OTA4Nzc4MzkxOWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CrSsYooFRd4LCbaqVKibfgZtHeI HQltMmAnGfbfZQvPr9Wy9MWFqQqdkuQ0qqyeClWc972BTnXsfGpMZkfbxJNqILm6 3/2W5tAyIuY9gKFMUzyNnlNt7dTAuaJuWASP9oP5sbhZ9Lde9503yu8hptmcs8+T H98JZoWSpvRczPFwYFwgT0Pxni9yPCOZMlghE9z6ZuJTlrlY2K7xxh6Ml1Q0eO+o e14U/5vcmwjCqojWb2dm3knYP4waapEsECfFP3uzAgD+sqtHRe3BCUfqgH3udgiw 7km83YCxwQ7n4mvKaqIfYVcnmzHA7LUEXUT1++IMoOL2TfY21Kw1v/IsHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9U+NjAePQdW6WE732GkId4ORmpMB8GA1UdIwQY MBaAFF2CZnLmjz2l21DtgbrbjTO9zNK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNzlkMTMtOWVhMi00ZWVkLThkZDIt Y2VkYWI0NjNlZTViLzEvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jNzlkMTMtOWVhMi00ZWVkLThkZDItY2VkYWI0NjNlZTVi LzEvWFlKbWN1YVBQYVhiVU8yQnV0dU5NNzNNMHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttEL86hw uVmxgMqflqzJvtOscD246LlmxJP9GC/gAkKJ0ZXjQ4bJhv4HV5TuXa7VG7hIYMcv iShfabnHjlidrBpxbd8pJrA95tB+K5B0bShyWgOtbSDGsSPntcfcEKR+hSA/9iSq NTy6pvlQ9WKrK6Bmue2Mfm+LNPFBy8Laqx8wBGyZCIgz4gDIfTz6mIE4IS9f8Hmh kjfDBdPIVWS8sp4mK8+TL301YDGLqa8q+ZZ3Sn3G52CZgiF7wr1iVTAx8ZoLh7pA dv4S1BtjMBQAxwWYP9Dy5hZxmtLL5yPmk/N+XWDHODOMIzCeQBEHcrIw5+bbg5yM +a/IlYwC2ZgJrg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:56 2025 by rpki-client