This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json) Hash identifier: Tq/HCUQJ5lrQjhPcDUplRjmwKFo7PkpA6dcnqq+670w= Subject key identifier: EC:4B:03:ED:33:49:12:15:EA:26:5D:D0:E9:52:AE:4F:28:FD:92:8F Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd Certificate serial: 019B4ADF0DACB79F5A49B8EFAAC727FD35FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft Manifest number: 1092 Signing time: Tue 23 Dec 2025 11:01:30 +0000 Manifest this update: Tue 23 Dec 2025 11:01:30 +0000 Manifest next update: Wed 24 Dec 2025 11:01:30 +0000 Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=) 2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: R1sQZ2tN3vZCXZtfxbUbUNIQSsKxwSXGtb0Cjz6g8Mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:df:0d:ac:b7:9f:5a:49:b8:ef:aa:c7:27:fd:35:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd Validity Not Before: Dec 23 11:01:30 2025 GMT Not After : Dec 24 11:01:30 2025 GMT Subject: CN=ec4b03ed33491215ea265dd0e952ae4f28fd928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:8b:23:e6:c9:0c:15:8f:74:51:69:05:25: 0d:64:69:b3:cf:16:2f:82:84:df:82:5b:b4:de:b9: 69:89:fb:f5:0f:13:69:d9:5d:ef:65:5e:1a:51:ac: 0e:0b:42:36:db:6f:07:5d:cd:4b:87:65:36:54:fe: 66:ea:0b:0f:10:86:37:82:fb:3d:0e:52:d3:08:07: c9:bd:be:3a:63:8a:0a:1f:3b:b8:d8:5f:22:c9:30: 75:ab:9b:42:4e:c4:9d:40:b6:80:c1:a6:7b:ae:a7: 6b:d7:e2:b6:8b:57:a8:e7:34:6d:e8:a5:34:9b:a7: e0:da:31:8a:2f:9f:f3:c9:b4:41:e8:76:8d:38:d5: d4:47:98:6f:af:58:cd:84:a6:0a:f9:ef:dd:82:86: 98:ed:3a:cd:0e:1f:f0:ac:53:ea:b7:1e:9a:4f:c7: 03:c1:cd:4b:8c:92:50:6c:b6:68:08:f9:fc:78:a5: 89:9d:54:4f:c6:b3:1f:01:52:4d:15:63:c9:7d:f9: ad:2a:5b:d9:85:d2:be:f9:57:08:b3:c6:04:1c:4b: 2b:24:b8:97:12:47:5b:df:d3:a4:16:1a:81:26:95: 38:d2:bb:e5:62:86:90:bb:a8:60:f0:20:6b:26:83: d5:57:d6:6c:74:63:c7:af:04:3d:74:30:b4:f9:84: 79:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4B:03:ED:33:49:12:15:EA:26:5D:D0:E9:52:AE:4F:28:FD:92:8F X509v3 Authority Key Identifier: keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:34:91:23:4e:0e:ea:4d:87:fd:73:63:81:40:4e:50:9a:01: f5:17:29:b1:2f:90:e7:59:19:51:8f:f8:72:f7:6c:42:32:a2: e1:a0:62:9d:c4:b2:02:90:cc:3c:f0:7a:50:5a:db:14:49:12: 25:42:b1:99:46:2c:19:d7:93:63:5c:e0:0d:1f:88:b8:de:0a: 80:2c:14:75:d3:5f:97:8f:8d:c9:78:ae:cb:9f:a2:9c:75:8b: 1e:b0:25:a6:f9:97:01:bd:26:a9:34:b2:7d:c6:f3:21:5b:d5: e2:00:4e:bc:84:83:93:5b:8d:dd:a7:98:f5:a2:6b:ac:83:40: ce:e7:3c:37:1f:96:e8:1f:9a:d4:2f:84:a5:e6:41:fb:8c:b0: 7c:c9:8c:63:76:b8:90:88:91:4d:cf:1f:0c:f6:3b:87:88:31: 70:93:af:e0:d1:91:66:68:33:89:fd:31:fa:ed:45:1a:10:1e: 83:36:63:10:f4:cc:0b:f4:b4:81:9d:74:b0:51:e9:ab:c1:9f: cb:ba:a7:4a:d3:b8:e6:47:a8:26:d6:54:23:38:9f:f7:e8:da: b0:eb:bd:13:87:fb:45:42:0b:96:4c:bb:c6:b7:fa:7c:44:ca: db:f9:0b:5f:8c:36:f1:b4:43:f0:77:08:cf:46:b3:13:a0:03: 83:09:05:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3w2st59aSbjvqscn/TX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1 ODRmY2QwHhcNMjUxMjIzMTEwMTMwWhcNMjUxMjI0MTEwMTMwWjAzMTEwLwYDVQQD EyhlYzRiMDNlZDMzNDkxMjE1ZWEyNjVkZDBlOTUyYWU0ZjI4ZmQ5MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPWLI+bJDBWPdFFpBSUNZGmzzxYv goTfglu03rlpifv1DxNp2V3vZV4aUawOC0I2228HXc1Lh2U2VP5m6gsPEIY3gvs9 DlLTCAfJvb46Y4oKHzu42F8iyTB1q5tCTsSdQLaAwaZ7rqdr1+K2i1eo5zRt6KU0 m6fg2jGKL5/zybRB6HaNONXUR5hvr1jNhKYK+e/dgoaY7TrNDh/wrFPqtx6aT8cD wc1LjJJQbLZoCPn8eKWJnVRPxrMfAVJNFWPJffmtKlvZhdK++VcIs8YEHEsrJLiX Ekdb39OkFhqBJpU40rvlYoaQu6hg8CBrJoPVV9ZsdGPHrwQ9dDC0+YR5QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOxLA+0zSRIV6iZd0OlSrk8o/ZKPMB8GA1UdIwQY MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezSRI04O 6k2H/XNjgUBOUJoB9RcpsS+Q51kZUY/4cvdsQjKi4aBincSyApDMPPB6UFrbFEkS JUKxmUYsGdeTY1zgDR+IuN4KgCwUddNfl4+NyXiuy5+inHWLHrAlpvmXAb0mqTSy fcbzIVvV4gBOvISDk1uN3aeY9aJrrINAzuc8Nx+W6B+a1C+EpeZB+4ywfMmMY3a4 kIiRTc8fDPY7h4gxcJOv4NGRZmgzif0x+u1FGhAegzZjEPTMC/S0gZ10sFHpq8Gf y7qnStO45keoJtZUIzif9+jasOu9E4f7RUILlky7xrf6fETK2/kLX4w28bRD8HcI z0azE6ADgwkF/Q== -----END CERTIFICATE-----Generated at Tue Dec 23 15:19:11 2025 by rpki-client