This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json) Hash identifier: NU/QhAN0805kp81qTVc199G4CM1JiF8ooznx1YuUp8o= Subject key identifier: E0:66:6F:D7:00:A6:69:89:F3:4A:A8:B5:D3:A9:BF:D0:59:BD:96:54 Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Certificate serial: 019B624245B29EE4827A9885926A3A098657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft Manifest number: 05CB Signing time: Sun 28 Dec 2025 00:01:08 +0000 Manifest this update: Sun 28 Dec 2025 00:01:08 +0000 Manifest next update: Mon 29 Dec 2025 00:01:08 +0000 Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=) 2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: umovtObxvyDLRBOiHOjmEzGhToBA2cInUAhIhQu5qqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:45:b2:9e:e4:82:7a:98:85:92:6a:3a:09:86:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Validity Not Before: Dec 28 00:01:08 2025 GMT Not After : Dec 29 00:01:08 2025 GMT Subject: CN=e0666fd700a66989f34aa8b5d3a9bfd059bd9654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:ff:ca:db:a7:bc:5e:3d:71:09:1b:36:2c: 37:0b:b7:6f:e2:03:7f:e9:96:31:4a:63:e2:2a:df: fc:b9:36:a3:99:b4:aa:a2:f0:2f:c4:f4:7e:a9:43: 01:3f:4d:3d:1a:32:02:0f:50:06:1a:60:eb:c8:b2: 7f:9c:d2:d6:44:b8:f2:52:68:49:6b:a4:e3:c2:d7: d2:b3:00:c2:8f:7c:10:72:47:b6:06:90:09:20:87: d2:4e:1a:61:cc:de:86:77:fd:9a:0f:3d:57:dc:22: fc:d7:6d:ca:36:21:37:4e:d4:2f:d0:07:ea:c7:57: ee:9c:16:7f:b4:fe:78:67:ae:20:51:c1:e3:61:c8: 43:bc:5a:88:f7:04:5e:a8:48:b0:32:58:38:ea:76: c3:36:b7:1b:1f:c6:98:4e:4b:49:a7:45:40:00:9c: 57:a8:c1:10:d8:41:ba:c7:80:5f:d2:92:bd:cb:16: 71:6f:c1:98:e2:29:0e:41:cd:47:38:d3:ff:99:ca: 05:2d:d1:53:38:05:b8:3b:f3:f5:1c:24:db:11:c0: 99:83:9b:fa:1d:a9:26:26:f1:f8:2a:a9:2a:52:36: cf:03:58:a3:a7:7d:92:60:68:6d:a6:3a:25:89:a7: cf:84:58:c8:9d:a2:38:22:67:6d:2b:c7:97:9a:eb: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:6F:D7:00:A6:69:89:F3:4A:A8:B5:D3:A9:BF:D0:59:BD:96:54 X509v3 Authority Key Identifier: keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6c:c2:8e:4a:49:0b:80:98:cb:45:11:18:f0:83:51:f9:92: a6:44:ce:26:fc:d2:a4:d1:61:63:45:19:4d:93:74:79:e4:9f: d2:9f:45:64:e0:c8:f7:5e:c4:87:a2:8c:a8:7a:4d:1f:95:b1: c7:9e:73:4b:34:e6:9a:9a:f0:05:a7:f0:b2:8a:88:22:fc:5e: 49:6f:40:a2:80:8e:e3:26:3a:1d:97:c8:83:37:a4:4b:da:d4: 10:05:03:d4:9b:13:3b:83:ea:39:12:cc:ee:ad:59:1a:bc:b9: 9b:0d:dd:70:55:f1:97:8b:f1:e6:86:38:09:6b:cd:66:de:e6: 8f:0c:eb:e1:2c:06:93:86:5c:84:3e:75:fa:e7:f6:99:e7:3b: 52:2d:cc:88:17:34:2d:bb:5c:02:ad:eb:8f:82:cf:75:e5:d7: e8:4f:ee:ad:f1:6c:db:53:58:06:4c:81:e0:5b:37:f1:4a:97: 45:1f:86:90:ac:9d:42:d9:d2:74:9c:77:a1:2e:6f:a1:8b:61: 71:3b:5a:fc:9a:88:56:5d:d9:36:33:2f:37:c5:4c:31:b6:61: 80:5a:43:bd:4d:dc:c9:35:de:3b:64:55:9a:79:da:90:d8:e4: de:da:cd:de:a2:9d:d2:28:e5:3c:c0:f8:97:9b:e9:10:2f:99: a3:cc:41:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQkWynuSCepiFkmo6CYZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3 YjRmZDYwHhcNMjUxMjI4MDAwMTA4WhcNMjUxMjI5MDAwMTA4WjAzMTEwLwYDVQQD EyhlMDY2NmZkNzAwYTY2OTg5ZjM0YWE4YjVkM2E5YmZkMDU5YmQ5NjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb7/ytunvF49cQkbNiw3C7dv4gN/ 6ZYxSmPiKt/8uTajmbSqovAvxPR+qUMBP009GjICD1AGGmDryLJ/nNLWRLjyUmhJ a6TjwtfSswDCj3wQcke2BpAJIIfSThphzN6Gd/2aDz1X3CL8123KNiE3TtQv0Afq x1funBZ/tP54Z64gUcHjYchDvFqI9wReqEiwMlg46nbDNrcbH8aYTktJp0VAAJxX qMEQ2EG6x4Bf0pK9yxZxb8GY4ikOQc1HONP/mcoFLdFTOAW4O/P1HCTbEcCZg5v6 HakmJvH4KqkqUjbPA1ijp32SYGhtpjoliafPhFjInaI4ImdtK8eXmuvlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOBmb9cApmmJ80qotdOpv9BZvZZUMB8GA1UdIwQY MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3 LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmzCjkpJ C4CYy0URGPCDUfmSpkTOJvzSpNFhY0UZTZN0eeSf0p9FZODI917Eh6KMqHpNH5Wx x55zSzTmmprwBafwsoqIIvxeSW9AooCO4yY6HZfIgzekS9rUEAUD1JsTO4PqORLM 7q1ZGry5mw3dcFXxl4vx5oY4CWvNZt7mjwzr4SwGk4ZchD51+uf2mec7Ui3MiBc0 LbtcAq3rj4LPdeXX6E/urfFs21NYBkyB4Fs38UqXRR+GkKydQtnSdJx3oS5voYth cTta/JqIVl3ZNjMvN8VMMbZhgFpDvU3cyTXeO2RVmnnakNjk3trN3qKd0ijlPMD4 l5vpEC+Zo8xB5A== -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:45 2025 by rpki-client