This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft File: XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json) Hash identifier: lWHghY3tSqYCmc1cBjw/MHdKerN1JplX81bLb7osss0= Subject key identifier: 4E:88:1A:36:98:99:AF:F7:50:51:99:55:D5:3C:43:10:5A:E3:1A:AA Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Certificate serial: 019B5975C712C60612D851F21E0A5E728CD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:00:49 +0000 Manifest this update: Fri 26 Dec 2025 07:00:49 +0000 Manifest next update: Sat 27 Dec 2025 07:00:49 +0000 Files and hashes: 1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: 1yD+rbhWfNqtAZ5l5ud8tb93bq+TueyeUpHIYyXFMV0=) 2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:c7:12:c6:06:12:d8:51:f2:1e:0a:5e:72:8c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Validity Not Before: Dec 26 07:00:49 2025 GMT Not After : Dec 27 07:00:49 2025 GMT Subject: CN=4e881a369899aff750519955d53c43105ae31aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:df:08:d2:e0:0c:ed:17:a8:5e:4c:f7:3f: 90:38:f0:40:6d:69:43:36:33:6e:d8:33:71:71:74: 72:a4:55:fe:00:db:15:e5:85:71:bf:f9:b8:c2:2c: 0d:aa:d0:d1:96:b9:90:76:08:f5:9a:ae:aa:e2:42: cd:82:89:b0:3b:15:00:60:d6:66:7c:af:68:e9:d2: fd:78:e9:dc:f5:b4:d0:9f:1a:f4:4c:a7:35:ef:f8: 68:03:e9:6f:59:44:da:da:a1:19:23:36:3c:88:ad: 6e:f0:fd:1d:aa:96:e9:cc:72:63:9a:2e:f7:dc:cd: 98:d7:f4:fa:f1:d1:21:93:cd:ce:74:bb:2a:94:d3: 3b:1a:36:51:1a:6e:cd:55:2e:cf:e3:84:cd:bb:07: f9:91:02:48:f2:2a:74:c9:48:83:b0:ab:00:6d:5a: fd:5a:7b:4d:f0:d9:9c:9d:e3:5f:a6:9f:a4:42:16: 1f:cd:a4:cd:d1:cf:d1:66:55:ba:a0:8c:67:35:18: 15:ab:f0:d7:30:8a:65:58:66:72:64:9e:c0:c2:ac: ee:c3:5b:95:ce:52:56:d9:c7:10:1d:d0:fc:d8:68: 39:43:4a:ce:30:cc:85:8d:ce:d4:7e:d2:fa:dd:93: 94:5d:2f:b5:cf:b4:aa:c2:c9:fc:76:46:27:e8:d5: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:1A:36:98:99:AF:F7:50:51:99:55:D5:3C:43:10:5A:E3:1A:AA X509v3 Authority Key Identifier: keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0d:2d:54:04:d6:5c:47:f5:a0:31:25:d5:68:b6:dd:a8:8f: ba:21:1d:d6:d0:a9:98:d1:90:f2:a0:c9:73:1b:cd:2d:e9:7e: 75:06:e5:b1:04:7d:fa:89:b0:16:bd:51:11:0a:53:b2:ae:66: c9:e4:fe:e8:71:4c:68:33:ac:08:d8:46:0d:ae:16:7f:b4:2b: 0b:7c:bf:eb:46:1f:36:94:73:91:59:7c:bc:bd:05:37:7f:83: 00:d8:1e:04:29:44:4f:59:62:cd:53:d1:8c:15:2b:7c:91:41: 2b:97:02:c3:62:a9:2f:bb:6f:78:09:88:56:b6:51:b7:ac:ed: cc:ac:66:69:62:2d:81:94:f7:93:54:f6:b7:47:eb:ae:d5:58: 67:b5:79:61:e8:4b:da:b8:41:2c:d4:56:44:02:13:d8:5a:fd: 10:a0:54:79:78:44:da:0e:c9:03:17:03:0d:71:5f:ab:fe:1e: 75:26:0f:a6:8a:28:98:2f:b9:b7:ce:01:66:e0:cb:0e:e9:43: b7:73:ca:7d:85:8c:e4:05:d8:cc:73:68:45:a1:7d:2c:b7:be: 1d:c4:33:95:13:79:5c:5a:8f:ee:c1:39:18:0f:0f:d3:79:e1: 03:1e:7d:c5:79:ac:67:5c:c3:ef:98:f2:8c:72:7b:da:c3:94: 8f:c6:4a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdccSxgYS2FHyHgpecozQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3 ZGE3ZWEwHhcNMjUxMjI2MDcwMDQ5WhcNMjUxMjI3MDcwMDQ5WjAzMTEwLwYDVQQD Eyg0ZTg4MWEzNjk4OTlhZmY3NTA1MTk5NTVkNTNjNDMxMDVhZTMxYWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAXfCNLgDO0XqF5M9z+QOPBAbWlD NjNu2DNxcXRypFX+ANsV5YVxv/m4wiwNqtDRlrmQdgj1mq6q4kLNgomwOxUAYNZm fK9o6dL9eOnc9bTQnxr0TKc17/hoA+lvWUTa2qEZIzY8iK1u8P0dqpbpzHJjmi73 3M2Y1/T68dEhk83OdLsqlNM7GjZRGm7NVS7P44TNuwf5kQJI8ip0yUiDsKsAbVr9 WntN8NmcneNfpp+kQhYfzaTN0c/RZlW6oIxnNRgVq/DXMIplWGZyZJ7Awqzuw1uV zlJW2ccQHdD82Gg5Q0rOMMyFjc7UftL63ZOUXS+1z7Sqwsn8dkYn6NXB9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6IGjaYma/3UFGZVdU8QxBa4xqqMB8GA1UdIwQY MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt MzUyMDA0YmMyMjgyLzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFg0tVATW XEf1oDEl1Wi23aiPuiEd1tCpmNGQ8qDJcxvNLel+dQblsQR9+omwFr1REQpTsq5m yeT+6HFMaDOsCNhGDa4Wf7QrC3y/60YfNpRzkVl8vL0FN3+DANgeBClET1lizVPR jBUrfJFBK5cCw2KpL7tveAmIVrZRt6ztzKxmaWItgZT3k1T2t0frrtVYZ7V5YehL 2rhBLNRWRAIT2Fr9EKBUeXhE2g7JAxcDDXFfq/4edSYPpooomC+5t84BZuDLDulD t3PKfYWM5AXYzHNoRaF9LLe+HcQzlRN5XFqP7sE5GA8P03nhAx59xXmsZ1zD75jy jHJ72sOUj8ZKzQ== -----END CERTIFICATE-----Generated at Fri Dec 26 11:16:36 2025 by rpki-client