This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json) Hash identifier: Uc+BDFEuZv2mP+kihVWISW7tIPXdPms+ffGzUqIo83Y= Subject key identifier: E1:F4:37:F7:2E:5D:01:C8:10:E5:C7:93:99:A8:E9:06:4F:17:23:18 Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf Certificate serial: 019B51F39101BE93FF7FE69BF35019180D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft Manifest number: 0F49 Signing time: Wed 24 Dec 2025 20:01:15 +0000 Manifest this update: Wed 24 Dec 2025 20:01:15 +0000 Manifest next update: Thu 25 Dec 2025 20:01:15 +0000 Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=) 2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: +PRNKIdgi3LG0oVQS1LpGeUKUuNF2RxxXHqG4pO96/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:91:01:be:93:ff:7f:e6:9b:f3:50:19:18:0d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf Validity Not Before: Dec 24 20:01:15 2025 GMT Not After : Dec 25 20:01:15 2025 GMT Subject: CN=e1f437f72e5d01c810e5c79399a8e9064f172318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:4a:d6:4e:2a:f0:8a:34:ba:1c:f8:f7:05: cf:e2:ef:fb:7b:a1:07:23:5a:2f:2f:fb:94:63:00: 07:5f:d5:20:fe:c2:e1:99:8b:3c:e7:da:03:31:12: 02:8d:44:d0:98:01:aa:93:35:41:00:bb:cc:d8:64: ae:2b:c7:67:f3:81:52:45:00:49:af:6e:25:43:b6: 44:2c:fd:97:71:ca:ed:d0:11:dd:e6:a3:81:21:92: 0c:19:95:6f:55:d0:ef:44:f7:1a:e9:02:ae:d2:b6: fb:9e:ca:c8:f8:10:89:40:0a:b1:89:dc:c6:46:06: 99:8a:64:e5:e1:6f:1c:9f:23:78:57:16:80:02:71: 6c:a6:c2:9a:19:89:a9:10:6d:a5:a9:64:b8:4a:c3: e7:9a:82:5b:5c:4a:fe:b3:9a:1c:27:e1:b7:60:5f: 48:e0:cf:34:41:1d:35:5a:cc:a2:55:b3:bf:9b:29: 6c:8f:bb:2e:67:bf:21:75:b4:71:90:0b:d3:6e:fb: 64:3e:fa:2e:0a:13:f4:b8:72:04:a7:30:ad:c8:68: 39:b9:a8:e8:9f:5b:a3:6a:ab:33:04:49:a7:63:60: ac:1d:3f:c9:65:6f:cb:65:cb:3c:ef:54:5b:07:70: 7f:a0:aa:0c:75:89:ac:60:86:89:91:49:9a:4d:54: d1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F4:37:F7:2E:5D:01:C8:10:E5:C7:93:99:A8:E9:06:4F:17:23:18 X509v3 Authority Key Identifier: keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5d:d6:e8:95:88:9b:45:76:7c:e3:d3:c9:cb:63:be:3b:c1: 5d:31:f6:d9:b7:7d:08:4b:da:51:5a:2d:53:09:7a:25:51:b0: 99:56:da:80:98:1c:cd:f3:05:7c:0a:f4:c8:04:a3:58:cf:93: f4:3d:18:d9:c4:91:fb:64:1c:8f:3e:77:19:ca:47:8e:8c:19: d7:d2:24:42:40:ee:2d:8b:cd:88:5a:65:f7:4f:af:a6:ca:79: 98:80:50:d8:14:da:af:03:39:b0:ac:ce:7e:77:53:e0:e5:cf: 4b:63:25:a5:a9:2a:42:69:0c:bb:5d:a0:2e:fe:97:2d:aa:b9: 1d:49:c0:3a:9e:d3:b7:1e:43:de:9b:50:65:94:07:87:7f:97: 33:96:c3:d5:41:4e:7c:9d:17:ce:0c:0e:91:18:5b:60:dd:ef: 21:43:4b:b3:e2:fa:07:c8:12:0f:1d:c1:fe:82:85:c6:28:ee: bd:06:48:51:2f:e6:09:73:15:40:a4:f0:fe:91:3e:b8:ad:99: a4:de:e2:4b:a5:3a:ee:ae:37:d1:8d:9a:01:af:1a:75:da:a6: a1:3a:df:19:e7:38:3f:39:27:9b:ca:1e:a2:b7:86:c0:28:88: 94:97:7c:04:2d:b9:2c:e1:ec:e8:a8:01:df:c0:a2:63:c0:7b: 8f:cd:e3:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR85EBvpP/f+ab81AZGA0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2UyYWJhMDUxNWVjOTBkMTA5MTEwNjBmY2YyOTIzNmQ3 NmRkZGYwHhcNMjUxMjI0MjAwMTE1WhcNMjUxMjI1MjAwMTE1WjAzMTEwLwYDVQQD EyhlMWY0MzdmNzJlNWQwMWM4MTBlNWM3OTM5OWE4ZTkwNjRmMTcyMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxK1k4q8Io0uhz49wXP4u/7e6EH I1ovL/uUYwAHX9Ug/sLhmYs859oDMRICjUTQmAGqkzVBALvM2GSuK8dn84FSRQBJ r24lQ7ZELP2Xccrt0BHd5qOBIZIMGZVvVdDvRPca6QKu0rb7nsrI+BCJQAqxidzG RgaZimTl4W8cnyN4VxaAAnFspsKaGYmpEG2lqWS4SsPnmoJbXEr+s5ocJ+G3YF9I 4M80QR01WsyiVbO/mylsj7suZ78hdbRxkAvTbvtkPvouChP0uHIEpzCtyGg5uajo n1ujaqszBEmnY2CsHT/JZW/LZcs871RbB3B/oKoMdYmsYIaJkUmaTVTRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOH0N/cuXQHIEOXHk5mo6QZPFyMYMB8GA1UdIwQY MBaAFMU+KroFFeyQ0QkRBg/PKSNtdt3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQt MTIwNTNhZGU5ZmFmLzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQtMTIwNTNhZGU5ZmFm LzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV3W6JWI m0V2fOPTyctjvjvBXTH22bd9CEvaUVotUwl6JVGwmVbagJgczfMFfAr0yASjWM+T 9D0Y2cSR+2Qcjz53GcpHjowZ19IkQkDuLYvNiFpl90+vpsp5mIBQ2BTarwM5sKzO fndT4OXPS2MlpakqQmkMu12gLv6XLaq5HUnAOp7Ttx5D3ptQZZQHh3+XM5bD1UFO fJ0XzgwOkRhbYN3vIUNLs+L6B8gSDx3B/oKFxijuvQZIUS/mCXMVQKTw/pE+uK2Z pN7iS6U67q430Y2aAa8addqmoTrfGec4Pzknm8oeoreGwCiIlJd8BC25LOHs6KgB 38CiY8B7j83jsg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:31 2025 by rpki-client