This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json) Hash identifier: AyeOR6i8IOQYZ0O+Yb6kwcvgE7oqiZsRR46P3MjNS3o= Subject key identifier: 87:0F:71:3C:E0:97:23:9A:B8:BF:25:80:29:15:92:FC:05:75:97:8F Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Certificate serial: 019B4DDF84AB9BEB757D46A93C2986FD7768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft Manifest number: 0E72 Signing time: Wed 24 Dec 2025 01:00:52 +0000 Manifest this update: Wed 24 Dec 2025 01:00:52 +0000 Manifest next update: Thu 25 Dec 2025 01:00:52 +0000 Files and hashes: 1: Ke8e1NAYZzQiPtwwM3L4rP1yhWQ.roa (hash: 4CTO9kGNxwlbcy52jny+xyVS9xLBGZQ5MXz3PD+4Smo=) 2: R43PaYUKZCLqgzcK-39C4LhJkYw.roa (hash: RU4oVL2aN6ItjsLLYNF/Tqi8VXdquafeG/KUtVtAMgo=) 3: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: IX7zcp0GRxBjOfjT8aBcBrvSCX/1Um4DVN5sedNvGc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:84:ab:9b:eb:75:7d:46:a9:3c:29:86:fd:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b Validity Not Before: Dec 24 01:00:52 2025 GMT Not After : Dec 25 01:00:52 2025 GMT Subject: CN=870f713ce097239ab8bf2580291592fc0575978f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:95:c3:00:41:0d:f4:c7:2d:65:7e:35:91:8d: 13:1a:18:91:da:d7:cb:d1:ce:29:ed:a7:34:f1:ee: db:f3:61:35:39:37:90:15:4b:7e:40:92:89:60:d0: fb:2b:91:04:3d:9c:16:c5:8b:87:5b:17:54:21:ec: 0f:7a:88:2c:ba:65:0c:aa:88:ae:f9:42:ce:03:84: c0:f5:01:0b:2e:ec:52:7c:8e:df:43:b2:1f:a6:c1: 28:c1:88:b6:24:7d:b9:c3:f9:69:2a:2a:79:a3:d4: 6c:ac:f4:73:e0:cd:6b:27:c3:09:77:8d:76:fb:76: 0d:a0:22:bf:0c:79:3b:bf:6a:d1:fb:b8:88:8b:cf: 17:a2:bd:2e:c5:c8:82:8f:fa:29:04:eb:e0:a6:0b: 17:38:59:a3:ad:8a:50:f5:0d:1c:79:62:3e:9b:13: 56:c9:75:b6:90:1f:90:29:7e:a9:8c:23:3b:b6:06: 7f:ef:57:52:be:35:fc:e1:73:d6:7a:2e:3d:31:20: 84:af:c8:c0:78:dd:48:fc:db:b2:17:4a:27:da:f7: 63:ad:3e:22:b2:37:64:50:1f:41:43:fb:20:7e:ad: f9:09:ca:f2:97:43:a8:2c:59:a3:3e:77:52:a1:54: c2:f7:bd:b6:96:0e:6d:cd:a4:ab:45:75:75:93:81: 63:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0F:71:3C:E0:97:23:9A:B8:BF:25:80:29:15:92:FC:05:75:97:8F X509v3 Authority Key Identifier: keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:72:e4:91:2d:bb:69:80:7c:2e:3d:85:27:0b:7b:4e:1b:f6: 16:ea:86:00:28:d2:e7:8c:8d:a7:0e:b8:97:3b:e2:75:e9:ac: 8f:b1:34:00:06:32:cf:94:39:18:74:f9:ef:ab:25:56:b1:56: de:ee:02:e6:ac:89:75:b5:b7:8b:16:91:96:35:08:99:d1:a6: bf:f4:24:a8:39:53:80:21:5d:76:36:c3:bd:9d:50:bf:86:cd: 06:fd:fa:5c:71:1e:0e:0f:19:7e:48:64:02:9e:8f:bb:d8:49: 86:a6:48:79:63:1b:d9:80:a5:ce:57:9e:85:9c:eb:8b:1d:4d: 77:3a:3f:12:54:a4:99:19:d0:bc:2d:8c:a3:c7:e7:35:7f:3e: c7:2c:4c:bb:02:7d:3f:76:6a:ed:bb:d0:06:39:b2:87:72:87: 25:25:ec:03:46:96:ca:4a:97:dc:cd:16:1f:18:89:7b:8f:da: 76:34:27:42:70:cd:f0:c8:f4:f2:32:fc:e6:89:c9:30:54:ca: f6:7c:a7:e1:5e:bd:f6:a1:5d:22:8e:43:fb:4a:82:3d:71:02: 29:19:d4:f0:1f:95:cf:21:6c:02:56:18:f2:7b:15:cd:24:2c: 66:dc:bd:fe:72:53:d5:41:e6:53:d3:ab:ea:52:ff:5e:c5:5f: 4d:13:24:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN34Srm+t1fUapPCmG/XdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZDk5ZDQ5YzRiMGU0NmIyNzg2ODQyNzMxZTE1MzQ4NWM4 YWM0OGIwHhcNMjUxMjI0MDEwMDUyWhcNMjUxMjI1MDEwMDUyWjAzMTEwLwYDVQQD Eyg4NzBmNzEzY2UwOTcyMzlhYjhiZjI1ODAyOTE1OTJmYzA1NzU5NzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pXDAEEN9MctZX41kY0TGhiR2tfL 0c4p7ac08e7b82E1OTeQFUt+QJKJYND7K5EEPZwWxYuHWxdUIewPeogsumUMqoiu +ULOA4TA9QELLuxSfI7fQ7IfpsEowYi2JH25w/lpKip5o9RsrPRz4M1rJ8MJd412 +3YNoCK/DHk7v2rR+7iIi88Xor0uxciCj/opBOvgpgsXOFmjrYpQ9Q0ceWI+mxNW yXW2kB+QKX6pjCM7tgZ/71dSvjX84XPWei49MSCEr8jAeN1I/NuyF0on2vdjrT4i sjdkUB9BQ/sgfq35Ccryl0OoLFmjPndSoVTC9722lg5tzaSrRXV1k4FjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcPcTzglyOauL8lgCkVkvwFdZePMB8GA1UdIwQY MBaAFF7ZnUnEsORrJ4aEJzHhU0hcisSLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEt OTBjM2FmYzdjOTQ3LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS85Yjg5M2UtN2IwYy00MWFhLWE5NTEtOTBjM2FmYzdjOTQ3 LzEvWHRtZFNjU3c1R3NuaG9Rbk1lRlRTRnlLeElzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlnLkkS27 aYB8Lj2FJwt7Thv2FuqGACjS54yNpw64lzvidemsj7E0AAYyz5Q5GHT576slVrFW 3u4C5qyJdbW3ixaRljUImdGmv/QkqDlTgCFddjbDvZ1Qv4bNBv36XHEeDg8Zfkhk Ap6Pu9hJhqZIeWMb2YClzleehZzrix1Ndzo/ElSkmRnQvC2Mo8fnNX8+xyxMuwJ9 P3Zq7bvQBjmyh3KHJSXsA0aWykqX3M0WHxiJe4/adjQnQnDN8Mj08jL85onJMFTK 9nyn4V699qFdIo5D+0qCPXECKRnU8B+VzyFsAlYY8nsVzSQsZty9/nJT1UHmU9Or 6lL/XsVfTRMkdQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:00:37 2025 by rpki-client