This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft File: XICE2xnxE9gbZEg5P60cEyxYT80.mft (raw, json) Hash identifier: o2tz8eGXQiV8zTe9QX43a3CPAMUmv3yI/Ra2EmpLxUM= Subject key identifier: 5F:88:EA:11:86:8D:64:B0:47:33:C5:2F:3D:47:1B:DD:0C:87:90:F6 Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd Certificate serial: 019B41372C906F61BD56C2F1462B003F0358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft Manifest number: 108D Signing time: Sun 21 Dec 2025 14:01:33 +0000 Manifest this update: Sun 21 Dec 2025 14:01:33 +0000 Manifest next update: Mon 22 Dec 2025 14:01:33 +0000 Files and hashes: 1: RopsaNkgpHpRL2oKJRAlnWazjYk.roa (hash: hePdDKhYq7jZJBW0X9xyUlZ0MuRDMypI160xH9eb0s0=) 2: XICE2xnxE9gbZEg5P60cEyxYT80.crl (hash: jMOKzwiZJUGnNtrUfTn2fuS1QmQ4vYpYyhHBHirXMoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:2c:90:6f:61:bd:56:c2:f1:46:2b:00:3f:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd Validity Not Before: Dec 21 14:01:33 2025 GMT Not After : Dec 22 14:01:33 2025 GMT Subject: CN=5f88ea11868d64b04733c52f3d471bdd0c8790f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:a5:71:d4:5b:33:ca:05:63:f5:76:c4:62: e1:62:c0:2f:00:65:e0:24:ff:46:89:8b:06:9e:5f: ca:bf:12:9d:ec:23:9e:3d:e1:21:9f:d1:a0:42:03: c6:ee:f9:79:e7:30:a8:36:a2:0c:31:a4:ad:fc:98: 78:10:6e:a3:bc:9f:5d:34:43:3d:d9:c0:7b:85:71: 35:59:cc:71:c0:6b:03:c7:25:e4:7e:51:f0:86:87: 08:5e:98:39:e0:ec:d3:ae:2a:87:d4:24:e8:58:ad: f3:8c:cb:ec:5e:7d:ef:d7:3c:ea:58:e0:26:4f:b8: 67:7e:5d:e6:1f:10:98:8b:9a:5d:72:3d:42:85:e0: 44:d1:a0:ee:18:c3:53:13:4a:7b:04:04:cb:3c:3f: af:b4:c6:9c:28:4b:00:fa:29:34:5a:d3:ff:8d:41: b7:72:f3:a7:5c:8b:eb:08:5e:de:ec:7c:d8:65:6e: 0f:70:0d:a2:8d:c2:f4:16:ee:3d:48:c3:34:86:c0: de:73:dc:5c:ec:e9:54:29:af:04:9c:66:f0:36:8d: 32:17:d2:46:12:f9:f3:e7:63:f9:16:5b:ed:e1:57: 14:85:93:c5:15:81:88:0a:29:21:3f:80:6a:7a:d8: e4:da:ad:2a:b2:b6:c7:bd:43:85:26:3b:8d:d0:ea: a6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:88:EA:11:86:8D:64:B0:47:33:C5:2F:3D:47:1B:DD:0C:87:90:F6 X509v3 Authority Key Identifier: keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:75:74:5e:13:f4:82:2d:7c:21:29:c1:80:33:49:32:49:f4: 46:4e:20:58:23:f1:74:b6:d8:d9:e6:5e:10:9a:7c:a0:cb:ad: df:56:cb:41:b6:ec:8b:95:ea:3e:fa:37:85:4d:b4:9a:42:d3: 22:93:63:43:e7:60:87:76:40:17:17:23:13:f6:85:61:ac:84: b9:59:96:c5:d1:70:6a:08:5b:de:0b:5e:34:c6:0c:b6:a5:97: 0f:83:8b:bc:58:e8:12:cb:41:88:cf:df:84:0c:ac:3f:0b:07: 93:40:99:7f:91:f2:1a:bb:f5:44:f3:b2:4f:41:7d:40:2e:75: eb:79:37:45:89:d2:84:b8:31:91:90:94:21:3d:e3:0a:af:17: 64:73:8a:e9:b0:f8:7d:8d:4f:f6:c5:a3:c2:55:59:61:bc:a3: 2e:be:81:f4:ed:10:fe:29:d2:80:4b:53:be:cf:1d:79:79:ee: 49:c9:a9:ab:75:ca:e2:5b:f7:1f:97:fc:a7:f7:57:e7:66:3e: 9f:68:61:5f:3a:da:d0:e5:c9:c8:ce:56:1d:81:47:6f:10:4c: 03:08:93:2d:e2:c9:3a:f1:49:ac:1b:d4:cc:79:ae:8f:bd:de: f0:ff:b3:75:1c:de:d2:df:8a:95:0a:64:26:1a:b3:92:c9:c8: 19:2d:13:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNyyQb2G9VsLxRisAPwNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1 ODRmY2QwHhcNMjUxMjIxMTQwMTMzWhcNMjUxMjIyMTQwMTMzWjAzMTEwLwYDVQQD Eyg1Zjg4ZWExMTg2OGQ2NGIwNDczM2M1MmYzZDQ3MWJkZDBjODc5MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI6lcdRbM8oFY/V2xGLhYsAvAGXg JP9GiYsGnl/KvxKd7COePeEhn9GgQgPG7vl55zCoNqIMMaSt/Jh4EG6jvJ9dNEM9 2cB7hXE1WcxxwGsDxyXkflHwhocIXpg54OzTriqH1CToWK3zjMvsXn3v1zzqWOAm T7hnfl3mHxCYi5pdcj1CheBE0aDuGMNTE0p7BATLPD+vtMacKEsA+ik0WtP/jUG3 cvOnXIvrCF7e7HzYZW4PcA2ijcL0Fu49SMM0hsDec9xc7OlUKa8EnGbwNo0yF9JG Evnz52P5Flvt4VcUhZPFFYGICikhP4Bqetjk2q0qsrbHvUOFJjuN0OqmkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+I6hGGjWSwRzPFLz1HG90Mh5D2MB8GA1UdIwQY MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt ODE5MDYyYTEyZjNkLzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXV0XhP0 gi18ISnBgDNJMkn0Rk4gWCPxdLbY2eZeEJp8oMut31bLQbbsi5XqPvo3hU20mkLT IpNjQ+dgh3ZAFxcjE/aFYayEuVmWxdFwaghb3gteNMYMtqWXD4OLvFjoEstBiM/f hAysPwsHk0CZf5HyGrv1RPOyT0F9QC5163k3RYnShLgxkZCUIT3jCq8XZHOK6bD4 fY1P9sWjwlVZYbyjLr6B9O0Q/inSgEtTvs8deXnuScmpq3XK4lv3H5f8p/dX52Y+ n2hhXzra0OXJyM5WHYFHbxBMAwiTLeLJOvFJrBvUzHmuj73e8P+zdRze0t+KlQpk JhqzksnIGS0T1Q== -----END CERTIFICATE-----Generated at Sun Dec 21 21:13:11 2025 by rpki-client