This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft (raw, json) Hash identifier: ajRk9Su91y6c9jS/bqjAueNV+QN4ku5Hnkz4bKM0WjU= Subject key identifier: B1:D6:D5:6D:2E:D6:AF:4A:1F:CB:39:26:93:59:55:EF:65:2E:38:8A Authority key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 Certificate issuer: /CN=5efccd7d7e308f81807051f8d487e9d829c24868 Certificate serial: 019B52981922DCBBE0144F40387735A79779 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 23:00:58 +0000 Manifest this update: Wed 24 Dec 2025 23:00:58 +0000 Manifest next update: Thu 25 Dec 2025 23:00:58 +0000 Files and hashes: 1: RtI2t-xfA3CVU9o2N66E_VQ0tAE.roa (hash: DL3BEIidpUe9S3B80+Z9r5T7eyCfvhEDaHGpB/iZxlk=) 2: XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl (hash: /9kpBUIHetlixzxpiQwhAjTQOKtCNbmqZ3d5+ZmuATw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:19:22:dc:bb:e0:14:4f:40:38:77:35:a7:97:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efccd7d7e308f81807051f8d487e9d829c24868 Validity Not Before: Dec 24 23:00:58 2025 GMT Not After : Dec 25 23:00:58 2025 GMT Subject: CN=b1d6d56d2ed6af4a1fcb3926935955ef652e388a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:2e:f1:b2:64:86:cd:01:2e:8b:a0:7b:59: 56:05:8e:6a:99:d1:f8:31:a2:91:31:23:7d:57:63: 8c:f8:39:79:b2:af:9e:9e:33:6c:4d:be:8c:53:bd: fd:34:da:7f:00:4f:be:fd:cd:d6:3e:d8:12:a8:39: 74:09:db:90:5a:d7:e2:24:70:3e:d8:d9:51:93:dd: 8e:51:e5:ca:b9:7b:51:21:32:3c:5f:ee:fc:fe:7c: be:bd:75:6e:14:27:f2:12:ba:76:95:9f:7f:15:f2: 26:a7:6c:c9:94:7e:c8:c7:07:91:6b:b7:48:3b:78: 0a:f6:05:64:a3:6e:49:0c:68:6d:61:7f:47:c1:ab: 24:82:fd:07:e2:ae:30:77:f7:d9:7d:a9:14:ed:68: 60:3e:7e:cf:e6:2a:a8:f0:56:1f:5a:db:32:e8:dc: e8:cc:25:d0:c6:bc:9e:ba:0e:e7:18:5f:43:eb:fd: c8:d8:22:ce:07:d2:07:85:d4:3b:32:1c:74:40:5c: 1c:cc:85:c6:b1:64:97:be:46:c9:cb:f5:33:c1:5f: ec:f3:e8:16:29:17:96:a0:d5:2a:09:08:fa:c5:3a: ae:ea:70:d7:fa:43:47:13:94:44:12:7a:56:2d:0e: 2a:e9:97:65:4e:88:8c:64:f6:59:2e:f9:a0:71:10: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D6:D5:6D:2E:D6:AF:4A:1F:CB:39:26:93:59:55:EF:65:2E:38:8A X509v3 Authority Key Identifier: keyid:5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2f:29:e4:e7:e9:37:f3:78:1f:16:1e:a3:97:3c:9d:b7:6c: 11:75:2a:9d:3c:4d:df:63:ca:35:24:5c:49:a1:45:76:fa:26: 91:3c:ee:f1:df:89:a0:b2:f4:9a:dd:3a:16:03:76:cb:e0:46: 4c:6d:91:74:2a:de:fe:d2:aa:6b:38:8f:be:61:4b:aa:0f:90: 61:95:87:fe:aa:63:c2:c4:3f:e5:e5:fc:67:a0:98:e0:dd:da: c7:ed:4d:e4:e7:eb:73:f1:0a:aa:03:ba:11:69:98:2c:54:4f: 50:1f:43:97:7b:72:00:85:f6:6e:92:75:06:17:d8:64:7d:12: cc:71:c9:24:88:31:f6:81:5e:c1:c0:73:22:14:d1:33:12:df: 1c:a9:3b:41:57:e1:f2:d7:b2:4b:4b:b6:d2:ea:9b:37:fe:3b: b0:b7:0a:68:ce:fc:7b:3d:c5:0d:46:d8:f2:16:bc:ba:f4:2e: 28:f2:0b:32:90:1e:26:80:b9:09:16:02:e6:26:da:7b:6b:d9: fc:29:c8:a6:4a:d5:29:21:13:92:b3:49:73:6c:7a:59:28:fe: cb:c1:e5:c9:ff:45:0a:06:8e:86:a3:8d:c4:79:d0:3a:eb:6f: 2b:bc:96:f3:bd:58:40:d6:f2:ef:6b:2b:ef:01:28:90:76:58: aa:2b:32:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmBki3LvgFE9AOHc1p5d5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmNjZDdkN2UzMDhmODE4MDcwNTFmOGQ0ODdlOWQ4Mjlj MjQ4NjgwHhcNMjUxMjI0MjMwMDU4WhcNMjUxMjI1MjMwMDU4WjAzMTEwLwYDVQQD EyhiMWQ2ZDU2ZDJlZDZhZjRhMWZjYjM5MjY5MzU5NTVlZjY1MmUzODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx0u8bJkhs0BLouge1lWBY5qmdH4 MaKRMSN9V2OM+Dl5sq+enjNsTb6MU739NNp/AE++/c3WPtgSqDl0CduQWtfiJHA+ 2NlRk92OUeXKuXtRITI8X+78/ny+vXVuFCfyErp2lZ9/FfImp2zJlH7IxweRa7dI O3gK9gVko25JDGhtYX9Hwaskgv0H4q4wd/fZfakU7WhgPn7P5iqo8FYfWtsy6Nzo zCXQxryeug7nGF9D6/3I2CLOB9IHhdQ7Mhx0QFwczIXGsWSXvkbJy/UzwV/s8+gW KReWoNUqCQj6xTqu6nDX+kNHE5REEnpWLQ4q6ZdlToiMZPZZLvmgcRBRjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHW1W0u1q9KH8s5JpNZVe9lLjiKMB8GA1UdIwQY MBaAFF78zX1+MI+BgHBR+NSH6dgpwkhoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQt ZDFiZDA2ZjViZjAwLzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81OTY1MGQtYzkzNS00YWE5LTk4MDQtZDFiZDA2ZjViZjAw LzEvWHZ6TmZYNHdqNEdBY0ZINDFJZnAyQ25DU0dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjy8p5Ofp N/N4HxYeo5c8nbdsEXUqnTxN32PKNSRcSaFFdvomkTzu8d+JoLL0mt06FgN2y+BG TG2RdCre/tKqaziPvmFLqg+QYZWH/qpjwsQ/5eX8Z6CY4N3ax+1N5Ofrc/EKqgO6 EWmYLFRPUB9Dl3tyAIX2bpJ1BhfYZH0SzHHJJIgx9oFewcBzIhTRMxLfHKk7QVfh 8teyS0u20uqbN/47sLcKaM78ez3FDUbY8ha8uvQuKPILMpAeJoC5CRYC5ibae2vZ /CnIpkrVKSETkrNJc2x6WSj+y8Hlyf9FCgaOhqONxHnQOutvK7yW871YQNby72sr 7wEokHZYqisyAA== -----END CERTIFICATE-----Generated at Thu Dec 25 03:18:11 2025 by rpki-client