This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json) Hash identifier: Ar9jjSNykj6zh8MOFviZyxW/97DquP/l2jbE7K2cWAg= Subject key identifier: F2:70:D7:34:AF:72:D2:A3:34:EB:90:3B:DD:9D:EB:0C:B9:B2:AF:11 Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Certificate serial: 019B3A8F7EAE9197C74B72C3726D543A132A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft Manifest number: 05ED Signing time: Sat 20 Dec 2025 07:00:41 +0000 Manifest this update: Sat 20 Dec 2025 07:00:41 +0000 Manifest next update: Sun 21 Dec 2025 07:00:41 +0000 Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=) 2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: XmTNHA8vgjABZ5JMPr60Sb99CuIb1L6//ohCmG/h7Xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:7e:ae:91:97:c7:4b:72:c3:72:6d:54:3a:13:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Validity Not Before: Dec 20 07:00:41 2025 GMT Not After : Dec 21 07:00:41 2025 GMT Subject: CN=f270d734af72d2a334eb903bdd9deb0cb9b2af11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:13:12:73:00:fa:6f:6e:a7:76:3e:2b:11: f9:fc:a3:38:79:b1:f9:95:e8:6b:17:ad:8b:68:f4: 73:9b:e0:d6:33:04:cf:a1:ee:8c:68:cc:da:f7:6a: cb:50:68:82:f8:ef:2d:d7:d9:b9:5f:b3:9d:27:72: 3b:45:89:1e:62:ed:9a:8e:fe:f9:a3:73:77:87:00: 04:f3:ca:35:14:91:c5:db:c6:12:cb:a3:fb:f6:86: 7e:c9:4b:70:6b:15:99:3d:65:c4:b3:79:a6:14:52: 9e:22:7c:f2:e3:34:a2:7c:11:3d:53:b8:34:ef:cb: 2d:b6:18:70:36:df:d0:2d:65:52:55:b3:e6:a1:82: c9:4c:aa:1b:6c:ee:12:e3:68:df:38:e3:eb:f0:58: 4f:2c:d4:9d:81:38:13:23:02:1d:30:40:68:17:a1: 5f:2a:ec:75:f4:4e:55:9d:63:a8:a6:da:21:ee:e0: 74:31:70:fa:dc:f6:f2:da:02:a6:50:63:06:c7:5b: 20:46:70:55:eb:0d:b5:e0:b0:ff:2c:76:e7:2a:61: ce:f7:56:52:27:51:7e:29:b0:ab:1f:e1:bb:ac:5a: cc:30:c2:04:b2:a3:4f:ea:2f:5a:83:fc:1a:d7:87: f8:49:06:40:62:73:7c:65:cc:5a:20:71:7f:72:53: 25:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:70:D7:34:AF:72:D2:A3:34:EB:90:3B:DD:9D:EB:0C:B9:B2:AF:11 X509v3 Authority Key Identifier: keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c1:81:08:48:88:41:e3:16:d2:18:f2:1a:74:e0:dc:83:aa: 45:a7:e4:a9:b3:49:26:68:55:f2:fa:01:d0:b0:8f:10:67:1d: 1a:6a:4a:3e:64:0b:75:f4:ea:49:ee:90:63:2b:02:94:a5:1b: 10:a0:bf:7e:07:60:7b:2f:e2:13:24:d8:76:73:5d:69:d3:87: 72:6d:5d:b0:0b:cc:45:d9:23:a3:19:90:ba:75:8e:9a:88:35: 04:b3:d1:52:11:b9:90:2c:4d:cc:7e:c7:3d:7d:0e:fb:a0:2e: e9:d6:0c:e8:c8:24:b1:54:41:b0:c7:44:69:98:b0:6d:43:4b: d3:23:95:73:b5:54:06:70:f9:fd:24:f2:c7:dc:c2:46:31:da: f0:bf:32:4b:88:3b:82:4f:34:de:90:9d:b2:c9:60:93:cf:d9: 88:37:5d:35:f2:3b:46:32:8a:11:38:cd:6a:a1:c7:8f:5e:98: 38:ab:ef:dc:e7:86:b0:db:81:8e:9b:78:3d:13:fe:08:99:17: 74:ef:fb:49:af:89:4d:d8:26:fe:aa:75:9b:70:26:c6:0b:5c: 49:a4:14:e4:7a:45:33:bb:91:b2:48:c6:f9:fd:d8:6b:11:fb: a5:e8:19:01:e6:ec:fc:f4:51:4e:75:a0:71:d6:7f:e7:6c:19: 22:29:ed:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j36ukZfHS3LDcm1UOhMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy MmFjNGYwHhcNMjUxMjIwMDcwMDQxWhcNMjUxMjIxMDcwMDQxWjAzMTEwLwYDVQQD EyhmMjcwZDczNGFmNzJkMmEzMzRlYjkwM2JkZDlkZWIwY2I5YjJhZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmETEnMA+m9up3Y+KxH5/KM4ebH5 lehrF62LaPRzm+DWMwTPoe6MaMza92rLUGiC+O8t19m5X7OdJ3I7RYkeYu2ajv75 o3N3hwAE88o1FJHF28YSy6P79oZ+yUtwaxWZPWXEs3mmFFKeInzy4zSifBE9U7g0 78stthhwNt/QLWVSVbPmoYLJTKobbO4S42jfOOPr8FhPLNSdgTgTIwIdMEBoF6Ff Kux19E5VnWOoptoh7uB0MXD63Pby2gKmUGMGx1sgRnBV6w214LD/LHbnKmHO91ZS J1F+KbCrH+G7rFrMMMIEsqNP6i9ag/wa14f4SQZAYnN8ZcxaIHF/clMlsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJw1zSvctKjNOuQO92d6wy5sq8RMB8GA1UdIwQY MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2 LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMcGBCEiI QeMW0hjyGnTg3IOqRafkqbNJJmhV8voB0LCPEGcdGmpKPmQLdfTqSe6QYysClKUb EKC/fgdgey/iEyTYdnNdadOHcm1dsAvMRdkjoxmQunWOmog1BLPRUhG5kCxNzH7H PX0O+6Au6dYM6MgksVRBsMdEaZiwbUNL0yOVc7VUBnD5/STyx9zCRjHa8L8yS4g7 gk803pCdsslgk8/ZiDddNfI7RjKKETjNaqHHj16YOKvv3OeGsNuBjpt4PRP+CJkX dO/7Sa+JTdgm/qp1m3AmxgtcSaQU5HpFM7uRskjG+f3YaxH7pegZAebs/PRRTnWg cdZ/52wZIintjg== -----END CERTIFICATE-----Generated at Sat Dec 20 14:09:18 2025 by rpki-client