This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json) Hash identifier: MGUSkEML4gBczU7mDqvDmAT9gyd9q1Y1G/CzGnMF/+A= Subject key identifier: 5D:AD:B9:04:C5:3D:F8:CF:E0:CE:C8:BE:0F:7F:FD:74:A2:20:96:A7 Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Certificate serial: 019B3F7F5F8C468585D65C677CACCDC7F857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft Manifest number: 05B9 Signing time: Sun 21 Dec 2025 06:01:10 +0000 Manifest this update: Sun 21 Dec 2025 06:01:10 +0000 Manifest next update: Mon 22 Dec 2025 06:01:10 +0000 Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=) 2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: vJWRHw5h1DijupmCtGIC9Z/N5gfHPIZXTUsuhFeFkSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:5f:8c:46:85:85:d6:5c:67:7c:ac:cd:c7:f8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Validity Not Before: Dec 21 06:01:10 2025 GMT Not After : Dec 22 06:01:10 2025 GMT Subject: CN=5dadb904c53df8cfe0cec8be0f7ffd74a22096a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:c0:d4:53:b6:c2:ff:de:86:b5:50:a0:61: 6e:8e:c8:b5:3f:28:8e:50:74:62:47:f8:a9:5c:d6: 06:ab:77:96:9e:69:b6:f2:93:ec:59:3d:3b:4f:cf: 35:77:da:3b:41:47:7e:30:ef:8e:37:d4:fc:0e:2b: 70:fc:51:aa:5c:29:ba:92:35:05:eb:db:4c:c6:4a: cb:47:f2:68:44:30:c7:98:17:81:e8:bf:96:8f:71: 54:4c:84:87:33:5c:c9:1b:d9:d5:77:6c:3d:92:6c: ef:bb:cd:ab:58:70:3d:21:03:2e:f9:6e:fb:90:70: 99:05:c0:2f:ac:47:29:8e:25:8d:71:98:6a:90:e2: 76:77:2a:e9:13:0e:2e:0a:d0:4e:b2:aa:9e:5f:6f: cc:74:94:b9:e4:7f:34:da:4d:f5:bf:bc:8f:d2:ae: b9:ef:cb:4a:2e:18:16:e2:36:85:b0:16:58:a7:b5: f2:40:37:fc:92:0a:68:f5:1a:35:8b:53:31:4b:a3: f0:55:de:6c:6a:2c:f0:bb:c6:db:39:13:93:59:72: fa:4d:50:75:3f:de:b0:9c:af:31:31:85:fe:81:b0: d8:e1:db:de:7d:6d:4f:3b:c4:8d:3f:08:2a:b4:83: ce:d7:c5:66:73:e7:b2:ba:e5:99:9e:59:ac:8a:81: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AD:B9:04:C5:3D:F8:CF:E0:CE:C8:BE:0F:7F:FD:74:A2:20:96:A7 X509v3 Authority Key Identifier: keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b7:d4:e0:d1:d2:91:ae:b6:75:7f:cd:a2:8d:df:31:30:03: 74:bf:3f:d7:69:a8:89:b7:50:da:98:2d:42:e0:65:8f:62:24: 73:bf:52:0c:5a:65:ff:7a:9b:18:4b:5a:35:99:9e:09:b5:87: 60:a7:b3:37:5f:17:c8:73:a3:1a:c9:39:69:b2:e5:6d:d8:c4: ae:74:af:eb:e2:c4:9c:f4:01:35:5d:9a:05:15:d1:62:75:f6: 40:0e:9b:08:5b:4f:2c:2a:b4:ac:c6:d3:5a:eb:ad:ad:b1:55: 31:f7:21:e7:21:90:83:b6:26:2d:e6:cf:81:08:80:b1:66:33: 57:7c:8e:6f:69:bd:3d:9b:cd:26:d2:e1:40:84:26:29:87:c0: c7:7c:c6:8b:e9:9e:d9:5f:a4:76:39:fe:1d:99:b7:3f:de:e9: 55:bf:6a:b3:8e:ff:6e:3c:23:0e:9f:81:30:ea:52:c9:d7:41: 76:ce:1e:67:3c:73:70:ff:63:1b:2b:c3:e8:29:1c:3b:2c:3d: 64:36:29:6a:d4:fe:e4:fa:18:08:6e:bf:ba:fb:c8:8d:c1:b6: ca:c7:24:ac:b2:26:57:26:2f:60:f5:f5:88:22:36:11:32:17: 43:8a:a9:be:69:3f:8b:43:6c:bf:0e:88:af:a5:63:66:9a:e5: f6:a2:0d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f1+MRoWF1lxnfKzNx/hXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3 YjRmZDYwHhcNMjUxMjIxMDYwMTEwWhcNMjUxMjIyMDYwMTEwWjAzMTEwLwYDVQQD Eyg1ZGFkYjkwNGM1M2RmOGNmZTBjZWM4YmUwZjdmZmQ3NGEyMjA5NmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRLA1FO2wv/ehrVQoGFujsi1PyiO UHRiR/ipXNYGq3eWnmm28pPsWT07T881d9o7QUd+MO+ON9T8Ditw/FGqXCm6kjUF 69tMxkrLR/JoRDDHmBeB6L+Wj3FUTISHM1zJG9nVd2w9kmzvu82rWHA9IQMu+W77 kHCZBcAvrEcpjiWNcZhqkOJ2dyrpEw4uCtBOsqqeX2/MdJS55H802k31v7yP0q65 78tKLhgW4jaFsBZYp7XyQDf8kgpo9Ro1i1MxS6PwVd5saizwu8bbOROTWXL6TVB1 P96wnK8xMYX+gbDY4dvefW1PO8SNPwgqtIPO18Vmc+eyuuWZnlmsioFO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2tuQTFPfjP4M7Ivg9//XSiIJanMB8GA1UdIwQY MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3 LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7fU4NHS ka62dX/Noo3fMTADdL8/12moibdQ2pgtQuBlj2Ikc79SDFpl/3qbGEtaNZmeCbWH YKezN18XyHOjGsk5abLlbdjErnSv6+LEnPQBNV2aBRXRYnX2QA6bCFtPLCq0rMbT WuutrbFVMfch5yGQg7YmLebPgQiAsWYzV3yOb2m9PZvNJtLhQIQmKYfAx3zGi+me 2V+kdjn+HZm3P97pVb9qs47/bjwjDp+BMOpSyddBds4eZzxzcP9jGyvD6CkcOyw9 ZDYpatT+5PoYCG6/uvvIjcG2ysckrLImVyYvYPX1iCI2ETIXQ4qpvmk/i0Nsvw6I r6VjZprl9qINQQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:38:02 2025 by rpki-client