This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft File: X1G82J639bOrCIBu9Rp8L265jvw.mft (raw, json) Hash identifier: pPleYYVHJsuWgK0W9rcpF3udO2l4so0L9QQlY9UU3gU= Subject key identifier: AA:93:8B:21:73:28:8D:B0:30:42:72:E0:E3:B7:33:C9:58:45:9D:B8 Authority key identifier: 5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC Certificate issuer: /CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc Certificate serial: 019B7291692BAA2B23865E2288036CD74179 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft Manifest number: 17AA Signing time: Wed 31 Dec 2025 04:01:30 +0000 Manifest this update: Wed 31 Dec 2025 04:01:30 +0000 Manifest next update: Thu 01 Jan 2026 04:01:30 +0000 Files and hashes: 1: X1G82J639bOrCIBu9Rp8L265jvw.crl (hash: ezybhNWlnlbcLVn2TDVGAWXbsLZ4N4lbOpw5hIJecOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:69:2b:aa:2b:23:86:5e:22:88:03:6c:d7:41:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f51bcd89eb7f5b3ab08806ef51a7c2f6eb98efc Validity Not Before: Dec 31 04:01:30 2025 GMT Not After : Jan 1 04:01:30 2026 GMT Subject: CN=aa938b2173288db0304272e0e3b733c958459db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5f:a9:80:77:02:aa:ab:f5:05:9a:7e:b2:d4: 1a:4f:e5:8f:10:30:5b:d9:13:0a:06:3b:8a:62:3d: 9c:45:5c:43:23:80:4b:6b:8b:f7:60:2e:3f:75:d5: d2:27:e3:9d:62:d7:7e:40:c1:75:ad:e2:af:54:4a: 0b:99:de:11:92:b2:b5:29:97:7b:20:23:b0:4d:dd: 27:08:01:b4:b1:e0:b7:b7:9c:76:d3:2d:4d:24:a5: ee:ec:46:b2:e2:95:a6:a1:6d:7d:86:d9:40:69:45: 7f:c4:ba:57:c8:80:78:08:80:aa:b7:32:c1:84:bf: 15:0c:ac:a8:25:8c:f7:dd:e1:65:45:4c:5a:b1:f6: 70:4c:73:65:b4:2e:d9:c0:9c:25:99:8f:d4:06:9f: 72:0c:ca:9c:ca:55:a0:c7:1d:a2:7b:2c:90:e5:15: f4:c4:bb:35:2f:4f:fc:33:73:dc:14:9c:c4:6d:66: 2b:28:6a:65:43:e6:08:2b:d7:ff:0c:56:57:26:cf: 83:31:17:12:dd:5a:4d:7f:99:61:7c:ff:3e:8e:90: e6:16:e5:5e:aa:37:4e:d9:61:cf:03:55:fd:13:e1: 16:a8:d9:83:7c:a2:b8:80:9c:a5:ce:66:79:cc:29: 0a:47:62:ad:38:05:fb:62:ca:5c:a0:b4:b2:e6:28: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:93:8B:21:73:28:8D:B0:30:42:72:E0:E3:B7:33:C9:58:45:9D:B8 X509v3 Authority Key Identifier: keyid:5F:51:BC:D8:9E:B7:F5:B3:AB:08:80:6E:F5:1A:7C:2F:6E:B9:8E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1G82J639bOrCIBu9Rp8L265jvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/41f6f5-cef0-4a57-8e47-0a85986208a9/1/X1G82J639bOrCIBu9Rp8L265jvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e0:6d:bf:6e:45:c3:30:d7:cf:ec:01:ec:c4:22:1e:e2:69: bd:b2:43:bf:b5:f4:6e:36:99:3b:dc:12:ab:88:a1:4d:25:5b: 31:e1:17:37:e5:02:34:6c:db:9c:c3:6e:97:40:ad:4e:d9:c4: 51:41:a4:71:31:19:0a:3e:44:b0:ab:e6:e5:41:0b:02:b4:55: 90:96:13:44:20:a7:d0:18:0f:c8:cb:30:d1:cc:ca:86:39:1f: 52:b3:13:d2:ee:e1:b2:4e:79:94:53:16:a3:e0:31:6f:b1:66: d3:68:4f:9f:09:ad:e9:16:7c:9f:15:15:1b:8e:7d:e4:cf:30: fe:7f:0f:53:29:46:52:76:6d:7a:78:31:27:6c:cd:b3:06:54: 9c:36:fa:f9:56:76:23:fd:6f:9f:e0:64:ed:48:73:76:10:44: c0:e1:a5:96:30:17:88:85:f7:b2:46:3e:66:00:0b:f4:7a:8f: 51:e3:31:83:49:36:0f:c7:ad:f0:9f:57:b3:56:30:c1:f6:e0: c5:6d:d3:b4:97:7a:2c:cf:9a:e8:33:eb:d8:0c:8e:dc:95:f9: b5:66:94:1b:6b:63:0f:36:b9:27:48:92:a5:4c:09:e1:33:a7: c7:5f:16:6c:ec:07:af:14:d6:5f:aa:f5:31:26:ad:1c:a6:df: 37:15:0b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykWkrqisjhl4iiANs10F5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTFiY2Q4OWViN2Y1YjNhYjA4ODA2ZWY1MWE3YzJmNmVi OThlZmMwHhcNMjUxMjMxMDQwMTMwWhcNMjYwMTAxMDQwMTMwWjAzMTEwLwYDVQQD EyhhYTkzOGIyMTczMjg4ZGIwMzA0MjcyZTBlM2I3MzNjOTU4NDU5ZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV+pgHcCqqv1BZp+stQaT+WPEDBb 2RMKBjuKYj2cRVxDI4BLa4v3YC4/ddXSJ+OdYtd+QMF1reKvVEoLmd4RkrK1KZd7 ICOwTd0nCAG0seC3t5x20y1NJKXu7Eay4pWmoW19htlAaUV/xLpXyIB4CICqtzLB hL8VDKyoJYz33eFlRUxasfZwTHNltC7ZwJwlmY/UBp9yDMqcylWgxx2ieyyQ5RX0 xLs1L0/8M3PcFJzEbWYrKGplQ+YIK9f/DFZXJs+DMRcS3VpNf5lhfP8+jpDmFuVe qjdO2WHPA1X9E+EWqNmDfKK4gJylzmZ5zCkKR2KtOAX7YspcoLSy5igjLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqTiyFzKI2wMEJy4OO3M8lYRZ24MB8GA1UdIwQY MBaAFF9RvNiet/WzqwiAbvUafC9uuY78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDct MGE4NTk4NjIwOGE5LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MWY2ZjUtY2VmMC00YTU3LThlNDctMGE4NTk4NjIwOGE5 LzEvWDFHODJKNjM5Yk9yQ0lCdTlScDhMMjY1anZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+Btv25F wzDXz+wB7MQiHuJpvbJDv7X0bjaZO9wSq4ihTSVbMeEXN+UCNGzbnMNul0CtTtnE UUGkcTEZCj5EsKvm5UELArRVkJYTRCCn0BgPyMsw0czKhjkfUrMT0u7hsk55lFMW o+Axb7Fm02hPnwmt6RZ8nxUVG4595M8w/n8PUylGUnZtengxJ2zNswZUnDb6+VZ2 I/1vn+Bk7UhzdhBEwOGlljAXiIX3skY+ZgAL9HqPUeMxg0k2D8et8J9Xs1Ywwfbg xW3TtJd6LM+a6DPr2AyO3JX5tWaUG2tjDza5J0iSpUwJ4TOnx18WbOwHrxTWX6r1 MSatHKbfNxULXw== -----END CERTIFICATE-----Generated at Wed Dec 31 09:22:57 2025 by rpki-client