This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json) Hash identifier: S2pRk/mOsjexLTkufgdhxzei4ZVNn3UrmlwPQ984HFE= Subject key identifier: 7C:5D:F9:32:0B:17:B6:A6:BF:9F:F7:C0:65:B6:82:84:08:D1:8B:B2 Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Certificate serial: 019B4FCDDCA2465A659EDE26EAACE3B57E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 10:00:49 +0000 Manifest this update: Wed 24 Dec 2025 10:00:49 +0000 Manifest next update: Thu 25 Dec 2025 10:00:49 +0000 Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: JCGLbw0V35joc4LBKAzW8+tcz5O9ZW1kFVqBBFhEIjw=) 2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cd:dc:a2:46:5a:65:9e:de:26:ea:ac:e3:b5:7e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Validity Not Before: Dec 24 10:00:49 2025 GMT Not After : Dec 25 10:00:49 2025 GMT Subject: CN=7c5df9320b17b6a6bf9ff7c065b6828408d18bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:08:b3:52:57:e9:ca:89:c5:46:69:05:ac:68: 8d:e8:3f:60:61:30:3e:23:c5:33:7d:4d:c8:31:07: d5:be:79:67:ae:4f:54:a2:a3:a0:43:ab:90:46:97: 31:68:a1:db:38:b8:e9:47:1e:e4:c3:dc:8a:59:f6: a7:22:4a:ea:9c:74:c0:36:6c:f4:8c:05:2b:60:b3: 8f:d3:3c:e1:33:96:1a:3d:83:f5:00:cb:2f:74:a3: 3a:5c:35:79:41:a9:6f:12:0f:26:87:76:52:09:18: 9f:01:2e:2b:86:de:97:28:0e:49:48:9f:76:f5:5c: 82:42:17:80:f4:b6:63:4f:58:97:17:09:7f:08:f9: f3:83:23:2e:51:96:1e:51:27:12:c3:c0:d0:32:fe: a9:ff:7e:be:d2:71:7b:a1:04:4b:84:fc:17:2d:9e: 4f:08:36:0d:aa:7a:9d:3e:f4:a8:ab:57:88:2a:2a: fa:a6:3b:68:55:ce:13:22:23:37:8f:cb:a7:43:d4: b7:48:cb:d3:4d:36:e8:a2:7a:02:4f:cc:2f:2e:0e: 4e:a5:6f:b1:46:0f:82:53:d0:ca:d9:13:e2:d3:3d: b7:a2:98:26:25:7b:c7:3e:f2:ca:2f:62:f5:d4:1d: 3c:11:91:81:42:f1:c3:48:3e:a8:96:18:9f:69:fd: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:5D:F9:32:0B:17:B6:A6:BF:9F:F7:C0:65:B6:82:84:08:D1:8B:B2 X509v3 Authority Key Identifier: keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:7d:e0:60:14:15:42:cb:40:1f:6e:3a:89:c9:a8:94:c8:a0: 73:8e:d9:f5:66:60:ae:c1:19:7c:bc:82:16:96:b2:5b:e0:50: 70:a0:cb:21:04:2b:8f:a2:8d:7c:4e:5f:16:e4:d9:99:2a:7a: 0c:27:e0:df:be:8d:eb:9a:e8:8c:35:15:b8:73:d4:16:ae:40: ca:8c:02:53:f0:3f:b3:e6:d4:82:b6:75:ea:d4:7e:cd:f7:fb: c5:6e:fd:9c:42:08:6b:6f:7c:58:50:b7:07:2e:9e:19:87:c0: 81:ac:f2:f8:20:95:15:db:bd:db:da:6b:c0:1f:97:a7:34:00: 41:aa:20:fd:23:90:3b:87:94:12:f6:37:b1:dd:45:c2:2c:aa: 1a:0c:27:43:77:3a:9d:00:32:9b:25:e6:a4:40:ef:ad:63:44: c1:8b:d5:27:e9:4a:b4:f5:9c:42:91:5e:ef:68:29:9d:5f:25: 38:2d:12:8e:00:18:b7:48:23:01:b8:5f:98:2f:c0:87:a6:7a: df:49:a7:4f:be:57:8c:a6:23:be:0b:99:7b:78:83:eb:8e:22: b7:37:35:3f:c1:da:53:a3:89:d7:31:41:ba:98:49:e2:27:4d: 9f:7f:04:e0:a7:fe:c1:fb:98:97:86:85:5a:8b:c6:3c:15:bd: 00:4a:8f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzdyiRlplnt4m6qzjtX4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi Yzk5MjMwHhcNMjUxMjI0MTAwMDQ5WhcNMjUxMjI1MTAwMDQ5WjAzMTEwLwYDVQQD Eyg3YzVkZjkzMjBiMTdiNmE2YmY5ZmY3YzA2NWI2ODI4NDA4ZDE4YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQizUlfpyonFRmkFrGiN6D9gYTA+ I8UzfU3IMQfVvnlnrk9UoqOgQ6uQRpcxaKHbOLjpRx7kw9yKWfanIkrqnHTANmz0 jAUrYLOP0zzhM5YaPYP1AMsvdKM6XDV5QalvEg8mh3ZSCRifAS4rht6XKA5JSJ92 9VyCQheA9LZjT1iXFwl/CPnzgyMuUZYeUScSw8DQMv6p/36+0nF7oQRLhPwXLZ5P CDYNqnqdPvSoq1eIKir6pjtoVc4TIiM3j8unQ9S3SMvTTTboonoCT8wvLg5OpW+x Rg+CU9DK2RPi0z23opgmJXvHPvLKL2L11B08EZGBQvHDSD6olhifaf2iewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxd+TILF7amv5/3wGW2goQI0YuyMB8GA1UdIwQY MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb33gYBQV QstAH246icmolMigc47Z9WZgrsEZfLyCFpayW+BQcKDLIQQrj6KNfE5fFuTZmSp6 DCfg376N65rojDUVuHPUFq5AyowCU/A/s+bUgrZ16tR+zff7xW79nEIIa298WFC3 By6eGYfAgazy+CCVFdu929prwB+XpzQAQaog/SOQO4eUEvY3sd1FwiyqGgwnQ3c6 nQAymyXmpEDvrWNEwYvVJ+lKtPWcQpFe72gpnV8lOC0SjgAYt0gjAbhfmC/Ah6Z6 30mnT75XjKYjvguZe3iD644itzc1P8HaU6OJ1zFBuphJ4idNn38E4Kf+wfuYl4aF WovGPBW9AEqPSw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:34:17 2025 by rpki-client