This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json) Hash identifier: FAwQ+CiDSu068IyGmlE2s8yw0gPp9k+uQipyqVrBR/s= Subject key identifier: 18:12:F5:33:13:D9:F3:1E:5C:8F:AA:58:F5:AF:FA:8B:8F:C2:1C:93 Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Certificate serial: 019B3EA39F39C328DE23609D11C107D559F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:01:09 +0000 Manifest this update: Sun 21 Dec 2025 02:01:09 +0000 Manifest next update: Mon 22 Dec 2025 02:01:09 +0000 Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: Rh6l7VQmvHQCqt3oLO5Z3Yx2PJclfa8lLYa46ySNJ0E=) 2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9f:39:c3:28:de:23:60:9d:11:c1:07:d5:59:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Validity Not Before: Dec 21 02:01:09 2025 GMT Not After : Dec 22 02:01:09 2025 GMT Subject: CN=1812f53313d9f31e5c8faa58f5affa8b8fc21c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:2f:a1:a6:d5:c3:81:cd:2d:58:16:26:a4: 78:eb:ee:94:de:87:bb:57:8c:d7:91:c5:57:f2:a5: f3:0a:29:7c:b7:06:0e:bd:f0:c1:44:c4:ec:e7:6e: 0f:5f:21:81:f4:26:4e:11:c5:61:93:c0:a9:e8:1f: c0:b4:3f:a5:bc:cd:a7:61:55:1f:66:ed:42:b8:ef: 91:6d:2c:39:dc:3f:20:68:98:94:e1:4a:c6:f3:04: 56:94:fa:7a:96:93:28:2f:6a:ee:ea:bb:37:80:e1: de:39:27:ab:b0:3b:f8:b1:32:20:66:33:3b:eb:80: fe:ba:dd:db:e2:4a:e1:bc:4c:0e:37:3d:51:0f:20: b7:2b:2e:33:bc:9c:76:f1:89:a1:97:7a:24:7f:ff: 3c:c2:98:70:7d:b3:78:7e:7c:8d:dc:09:b6:17:4e: 81:cd:90:d7:3a:06:04:9b:ee:46:a6:b6:c1:e2:ce: 78:d0:16:c4:55:14:a9:d3:49:e0:43:da:cc:bd:bb: e9:26:c2:94:06:9f:f1:e7:c4:d1:2e:59:de:3e:8d: 52:c4:b5:31:1a:59:7d:4b:d7:7d:4f:90:6b:ad:b9: 6d:fb:4a:50:2d:4e:b5:ff:ce:e7:88:67:f9:ff:6a: 4b:88:fa:cd:c9:6c:40:9b:ae:b3:e8:57:4f:f1:ee: c5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:12:F5:33:13:D9:F3:1E:5C:8F:AA:58:F5:AF:FA:8B:8F:C2:1C:93 X509v3 Authority Key Identifier: keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:be:10:69:bc:b7:de:ff:b2:d7:de:b3:b6:39:98:6b:63:d2: 58:6c:ac:12:f4:91:0e:30:7a:9c:9d:70:db:a3:1a:fa:c7:a9: a7:f4:a9:43:4a:e4:c4:58:ba:41:cd:26:e0:0f:ce:ce:0f:8b: 92:73:4a:dd:40:3b:1c:ff:dd:3f:3d:43:c3:ba:b9:de:83:02: bf:88:ab:95:93:80:77:ae:d2:50:c2:1a:a9:ae:9b:c2:bc:14: 0f:d9:56:63:e0:15:f7:e1:13:9e:d2:9d:b3:36:a6:b2:11:ec: 4f:19:07:93:82:e2:1a:fd:1a:5d:4f:dd:9b:92:f9:10:3a:56: 33:16:e3:a1:8f:0a:b8:e8:45:d9:d9:a9:1e:61:bd:87:b7:e9: 1a:5a:43:a6:77:3c:1f:a3:d9:b2:28:b2:02:73:14:c4:9b:97: 2f:fd:5d:5d:aa:14:0c:93:46:75:4e:2a:74:2f:8e:e9:0d:18: e8:7a:7e:95:03:a7:95:37:04:e3:a0:65:a3:e7:fb:cb:1e:25: ad:d7:37:35:94:71:8d:d1:96:11:7b:6b:72:ff:aa:9c:d0:f2: 3f:db:fe:8c:2a:ba:de:92:77:08:f6:79:58:da:2f:87:83:8b: 98:6a:c9:10:32:9b:b3:85:0a:93:9f:cd:6c:f6:dc:0d:69:81: 6b:63:f5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o585wyjeI2CdEcEH1Vn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0 Y2M4ZWQwHhcNMjUxMjIxMDIwMTA5WhcNMjUxMjIyMDIwMTA5WjAzMTEwLwYDVQQD EygxODEyZjUzMzEzZDlmMzFlNWM4ZmFhNThmNWFmZmE4YjhmYzIxYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogIvoabVw4HNLVgWJqR46+6U3oe7 V4zXkcVX8qXzCil8twYOvfDBRMTs524PXyGB9CZOEcVhk8Cp6B/AtD+lvM2nYVUf Zu1CuO+RbSw53D8gaJiU4UrG8wRWlPp6lpMoL2ru6rs3gOHeOSersDv4sTIgZjM7 64D+ut3b4krhvEwONz1RDyC3Ky4zvJx28Ymhl3okf/88wphwfbN4fnyN3Am2F06B zZDXOgYEm+5GprbB4s540BbEVRSp00ngQ9rMvbvpJsKUBp/x58TRLlnePo1SxLUx Gll9S9d9T5Brrblt+0pQLU61/87niGf5/2pLiPrNyWxAm66z6FdP8e7F3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgS9TMT2fMeXI+qWPWv+ouPwhyTMB8GA1UdIwQY MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5 LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX74Qaby3 3v+y196ztjmYa2PSWGysEvSRDjB6nJ1w26Ma+sepp/SpQ0rkxFi6Qc0m4A/Ozg+L knNK3UA7HP/dPz1Dw7q53oMCv4irlZOAd67SUMIaqa6bwrwUD9lWY+AV9+ETntKd szamshHsTxkHk4LiGv0aXU/dm5L5EDpWMxbjoY8KuOhF2dmpHmG9h7fpGlpDpnc8 H6PZsiiyAnMUxJuXL/1dXaoUDJNGdU4qdC+O6Q0Y6Hp+lQOnlTcE46Blo+f7yx4l rdc3NZRxjdGWEXtrcv+qnNDyP9v+jCq63pJ3CPZ5WNovh4OLmGrJEDKbs4UKk5/N bPbcDWmBa2P1GA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:59:45 2025 by rpki-client