This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json) Hash identifier: K7EcnFT+rRjK6LyohE8y6/hQHz4SlAAJsrJ/mkw9Zuk= Subject key identifier: 1A:89:A2:E9:FA:16:0C:04:1B:56:4F:CD:95:7B:43:7A:4A:9A:02:4E Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019B41DB42F3EA5D0DEFC6B8CBE9BD64B7E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft Manifest number: 1791 Signing time: Sun 21 Dec 2025 17:00:47 +0000 Manifest this update: Sun 21 Dec 2025 17:00:47 +0000 Manifest next update: Mon 22 Dec 2025 17:00:47 +0000 Files and hashes: 1: SohsxVb4_Kx1Rps6s6KZFGiAlBo.roa (hash: DpkDv9v2RNex84dWsyB/0UohYl+9Px9l3sMzjXNHWcY=) 2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: aU2TR/HhYuyWLTeBKSDWDT+fSM5xEyNuZsqsM4AvBto=) 3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:42:f3:ea:5d:0d:ef:c6:b8:cb:e9:bd:64:b7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Dec 21 17:00:47 2025 GMT Not After : Dec 22 17:00:47 2025 GMT Subject: CN=1a89a2e9fa160c041b564fcd957b437a4a9a024e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:67:2a:a8:1f:88:d2:95:06:15:44:7d:23:c0: 51:52:f2:85:1d:6e:c2:a0:cd:e1:bf:34:f9:67:01: 51:6a:2b:9d:ad:6d:f7:06:ce:14:6e:da:67:50:1a: fe:51:8f:67:42:2b:cb:3f:05:c7:a2:20:3c:37:1a: 84:e2:84:e9:60:f3:cd:0c:88:6e:33:07:63:aa:a5: f4:56:9e:53:fd:b9:b4:d1:21:c0:cd:96:7d:2d:a7: 57:c9:ac:87:01:19:25:f0:21:8c:e2:d0:0a:ae:02: 1e:b9:d8:4f:64:d3:d4:3a:91:20:76:77:30:38:26: 02:a5:ce:08:4f:3a:88:f0:9a:e4:69:d9:e4:d1:0c: c8:c4:60:78:5d:28:08:57:5f:d5:52:3c:25:b5:c3: e0:e6:0a:c3:75:fe:02:d9:c1:76:92:43:d9:4d:6f: 26:4a:78:76:6b:ca:41:f2:2e:a2:15:d0:03:ac:a1: c4:36:32:51:54:32:42:b0:50:5a:89:3d:76:11:be: 5d:e0:de:19:fc:e8:fa:d7:a4:ec:44:2e:e8:b6:18: 18:b2:3d:96:84:bd:d3:3c:57:28:73:99:85:6e:cd: 03:aa:3f:e4:68:2d:12:cb:df:90:2b:00:04:de:03: 8e:ac:e4:df:4b:e9:48:65:58:88:98:77:4f:48:4b: 80:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:A2:E9:FA:16:0C:04:1B:56:4F:CD:95:7B:43:7A:4A:9A:02:4E X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:b2:d8:d8:f4:0e:24:42:56:e0:5c:a5:0c:cd:fc:73:f8:f5: 11:4c:c4:e3:e7:52:78:48:39:0b:51:dc:fc:8e:c4:59:8f:5f: 92:79:64:35:18:ee:df:55:4f:cf:21:10:bf:60:78:94:73:2d: 60:be:04:8e:38:13:a3:11:25:31:cf:82:e8:5a:b2:5d:28:4e: 49:32:0a:7d:0d:dc:6e:99:9b:6e:a7:b8:0b:3c:52:16:81:d5: 88:b4:5a:97:50:21:4c:5b:3c:bc:01:c8:fe:48:5b:2e:55:ba: a9:86:78:b4:50:dd:dc:ee:c1:1b:13:12:f2:7d:9b:45:a3:f1: a1:25:59:ff:ac:99:9d:bf:2b:c5:a1:a5:84:98:8c:5f:64:f2: 88:87:34:f9:f0:40:07:bd:16:a3:a8:b5:da:b6:8e:12:5e:da: 59:6f:cb:db:82:a9:fd:86:fc:ed:d0:29:0e:be:d8:5d:1f:6f: 63:39:05:10:97:a4:a8:4c:73:cb:34:c2:c0:48:ad:f0:10:9f: 8f:5a:3f:48:78:82:ca:80:a8:f3:2b:de:08:43:99:1b:b0:2b: b1:8c:b5:d3:91:39:04:98:d1:e5:20:0b:c9:c7:0b:88:1b:67: a9:5f:94:dc:5f:a7:b9:84:d2:4c:94:de:75:15:e6:00:14:a7: 2f:2f:42:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB20Lz6l0N78a4y+m9ZLfpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjUxMjIxMTcwMDQ3WhcNMjUxMjIyMTcwMDQ3WjAzMTEwLwYDVQQD EygxYTg5YTJlOWZhMTYwYzA0MWI1NjRmY2Q5NTdiNDM3YTRhOWEwMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWcqqB+I0pUGFUR9I8BRUvKFHW7C oM3hvzT5ZwFRaiudrW33Bs4UbtpnUBr+UY9nQivLPwXHoiA8NxqE4oTpYPPNDIhu MwdjqqX0Vp5T/bm00SHAzZZ9LadXyayHARkl8CGM4tAKrgIeudhPZNPUOpEgdncw OCYCpc4ITzqI8Jrkadnk0QzIxGB4XSgIV1/VUjwltcPg5grDdf4C2cF2kkPZTW8m Snh2a8pB8i6iFdADrKHENjJRVDJCsFBaiT12Eb5d4N4Z/Oj616TsRC7othgYsj2W hL3TPFcoc5mFbs0Dqj/kaC0Sy9+QKwAE3gOOrOTfS+lIZViImHdPSEuAOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqJoun6FgwEG1ZPzZV7Q3pKmgJOMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbLY2PQO JEJW4FylDM38c/j1EUzE4+dSeEg5C1Hc/I7EWY9fknlkNRju31VPzyEQv2B4lHMt YL4EjjgToxElMc+C6FqyXShOSTIKfQ3cbpmbbqe4CzxSFoHViLRal1AhTFs8vAHI /khbLlW6qYZ4tFDd3O7BGxMS8n2bRaPxoSVZ/6yZnb8rxaGlhJiMX2TyiIc0+fBA B70Wo6i12raOEl7aWW/L24Kp/Yb87dApDr7YXR9vYzkFEJekqExzyzTCwEit8BCf j1o/SHiCyoCo8yveCEOZG7ArsYy105E5BJjR5SALyccLiBtnqV+U3F+nuYTSTJTe dRXmABSnLy9C9w== -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:34 2025 by rpki-client