This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json) Hash identifier: ix2kQlAWx/dS1Yq4C1Jzt3oN+OTOFZDasU7ZgJawb44= Subject key identifier: 56:92:7E:E1:74:5F:18:86:44:43:E1:79:7E:00:60:5C:18:DE:E9:E6 Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Certificate serial: 019B578794D05517A0541BA3A8E0AC6C561C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft Manifest number: 16C1 Signing time: Thu 25 Dec 2025 22:01:01 +0000 Manifest this update: Thu 25 Dec 2025 22:01:01 +0000 Manifest next update: Fri 26 Dec 2025 22:01:01 +0000 Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: MSaCjbh2DcA8ndhjSOJcg6U8dbQqFVYFSR6N8d3mdMg=) 2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:94:d0:55:17:a0:54:1b:a3:a8:e0:ac:6c:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Validity Not Before: Dec 25 22:01:01 2025 GMT Not After : Dec 26 22:01:01 2025 GMT Subject: CN=56927ee1745f18864443e1797e00605c18dee9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:e7:b8:18:e1:bb:8e:d3:d5:ea:92:4a:18: 8a:9c:d1:9e:4f:dc:cc:c7:33:59:8c:26:29:99:95: fb:06:d1:6d:f3:4d:6a:27:dc:95:74:4f:4b:fc:fb: e6:80:79:2c:bd:20:f8:0e:9d:92:23:69:e6:31:78: 15:f0:1b:a3:00:52:b6:ca:4f:9b:5c:c7:79:78:42: 1a:72:c6:9b:08:c5:a3:c2:1e:92:36:44:c8:a6:0c: 05:64:54:83:f9:b8:0a:a3:a0:eb:d1:fa:13:4b:2e: 27:e9:7f:db:3b:ff:a0:0d:21:73:ca:72:f4:a2:ed: 8a:76:9f:62:fb:ba:8e:4a:e7:e8:69:60:10:62:5d: 60:25:74:69:a5:b0:6f:e2:c8:80:7f:c0:b6:ac:5e: d0:3f:8e:5b:64:e8:01:60:88:5a:b7:e9:67:2a:f6: 78:21:e8:2a:a6:e9:39:8e:5d:7f:26:59:01:73:35: d8:40:29:0d:36:5e:ab:50:52:20:d1:c7:22:d2:70: bd:63:43:5a:f6:01:0f:d0:56:43:aa:64:cc:eb:19: 45:8e:33:91:87:bc:46:cf:6b:b3:65:54:6b:e7:ac: 2a:7c:50:23:d4:9b:3a:0e:83:e4:91:66:0d:0f:ed: b6:54:d9:4f:07:1c:34:65:24:19:11:2a:56:78:fd: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:92:7E:E1:74:5F:18:86:44:43:E1:79:7E:00:60:5C:18:DE:E9:E6 X509v3 Authority Key Identifier: keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:21:16:dd:ca:e5:4f:57:da:83:e7:79:17:17:29:25:39:2f: e5:a2:de:0a:c7:c7:64:f1:f0:8c:a2:79:eb:5d:48:2a:16:5c: b0:26:7a:14:dc:af:f5:63:4a:d3:f4:26:ef:74:2a:de:fb:30: 80:ee:ea:45:15:2c:7f:4c:da:db:b7:76:d1:c3:b5:69:e1:c7: 7a:bf:c0:1e:11:cb:28:cd:cd:c3:fa:d7:20:c3:89:0d:c8:37: de:16:67:cd:73:ad:19:71:f6:e5:b9:b6:16:c9:b3:b4:67:11: 42:fe:fd:7c:81:a9:d2:56:e8:d6:ef:6d:ff:b3:34:13:22:2e: ba:bc:a4:f8:d7:6d:80:39:aa:13:17:55:4a:cc:ed:73:89:7e: a6:87:12:76:c5:7d:fe:12:ea:eb:e0:0b:ea:dc:65:bf:b7:13: 89:5e:b5:2e:08:ef:4c:a5:67:83:15:c9:3d:4f:c8:6d:47:61: 28:b8:89:6a:5a:58:d4:41:45:97:d5:d0:23:ca:d4:17:e5:ee: e6:b3:ab:e0:a8:07:2e:26:73:eb:5c:9b:af:58:68:34:c8:47: 5b:48:51:3d:bf:d4:43:97:74:20:78:57:e6:d5:be:86:1e:dc: 06:08:43:83:83:6d:c7:68:79:ed:6b:4a:27:84:5d:0f:20:05: 57:11:27:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh5TQVRegVBujqOCsbFYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy YmQ4NmEwHhcNMjUxMjI1MjIwMTAxWhcNMjUxMjI2MjIwMTAxWjAzMTEwLwYDVQQD Eyg1NjkyN2VlMTc0NWYxODg2NDQ0M2UxNzk3ZTAwNjA1YzE4ZGVlOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQLnuBjhu47T1eqSShiKnNGeT9zM xzNZjCYpmZX7BtFt801qJ9yVdE9L/PvmgHksvSD4Dp2SI2nmMXgV8BujAFK2yk+b XMd5eEIacsabCMWjwh6SNkTIpgwFZFSD+bgKo6Dr0foTSy4n6X/bO/+gDSFzynL0 ou2Kdp9i+7qOSufoaWAQYl1gJXRppbBv4siAf8C2rF7QP45bZOgBYIhat+lnKvZ4 Iegqpuk5jl1/JlkBczXYQCkNNl6rUFIg0cci0nC9Y0Na9gEP0FZDqmTM6xlFjjOR h7xGz2uzZVRr56wqfFAj1Js6DoPkkWYND+22VNlPBxw0ZSQZESpWeP39EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaSfuF0XxiGREPheX4AYFwY3unmMB8GA1UdIwQY MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICEW3crl T1fag+d5FxcpJTkv5aLeCsfHZPHwjKJ5611IKhZcsCZ6FNyv9WNK0/Qm73Qq3vsw gO7qRRUsf0za27d20cO1aeHHer/AHhHLKM3Nw/rXIMOJDcg33hZnzXOtGXH25bm2 FsmztGcRQv79fIGp0lbo1u9t/7M0EyIuuryk+NdtgDmqExdVSsztc4l+pocSdsV9 /hLq6+AL6txlv7cTiV61LgjvTKVngxXJPU/IbUdhKLiJalpY1EFFl9XQI8rUF+Xu 5rOr4KgHLiZz61ybr1hoNMhHW0hRPb/UQ5d0IHhX5tW+hh7cBghDg4Ntx2h57WtK J4RdDyAFVxEnjQ== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:32 2025 by rpki-client