This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json) Hash identifier: O8/RMn3pGxrIgvoZ0HlTPYvuiSq6WhIhB1GtXxv/H4g= Subject key identifier: 23:DA:67:DA:CE:05:88:01:20:C7:5A:B9:6E:6D:5D:48:FC:65:56:26 Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019B649EA76F4CA4532EF05DE9E96DE65EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft Manifest number: 17A3 Signing time: Sun 28 Dec 2025 11:01:17 +0000 Manifest this update: Sun 28 Dec 2025 11:01:17 +0000 Manifest next update: Mon 29 Dec 2025 11:01:17 +0000 Files and hashes: 1: SohsxVb4_Kx1Rps6s6KZFGiAlBo.roa (hash: DpkDv9v2RNex84dWsyB/0UohYl+9Px9l3sMzjXNHWcY=) 2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: aEvhd8KoF48YIgNTNapLYbBqc1MEr9uuCiupfWweVuc=) 3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:9e:a7:6f:4c:a4:53:2e:f0:5d:e9:e9:6d:e6:5e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Dec 28 11:01:17 2025 GMT Not After : Dec 29 11:01:17 2025 GMT Subject: CN=23da67dace05880120c75ab96e6d5d48fc655626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:c0:03:2b:b5:ab:ac:a6:cc:e7:eb:74:93: b1:44:ae:f0:5b:f7:71:7e:78:06:ab:81:f8:b9:43: 69:4c:d5:fb:10:03:6b:24:2a:a6:ab:ba:6b:2c:dd: bb:09:f2:a8:31:fa:a5:30:99:06:e3:d6:f7:f4:63: 07:01:d1:19:a7:02:00:c8:27:6e:eb:7b:5e:ea:ed: cd:ba:45:34:4d:25:f3:59:2f:52:14:a0:b5:3e:35: cc:2a:d2:d8:06:06:70:29:58:fd:79:80:fe:fa:eb: 5c:76:3b:ee:7f:8d:71:c5:6a:82:4a:05:da:ce:3b: 6e:1d:88:f1:67:c1:11:87:2b:c9:1c:41:a6:a8:25: a0:51:07:ec:dd:53:ff:bd:0c:9d:b9:1a:aa:1e:66: b5:53:0c:c6:e3:86:e9:f2:58:81:29:16:26:b8:68: f6:0a:43:55:64:cd:4b:a1:dd:9f:64:eb:56:ca:52: e9:7d:ae:be:79:83:4e:73:af:fc:8d:6f:a3:13:ea: 07:32:c3:de:ca:f7:b3:0b:b3:5c:5f:c9:43:96:fb: 21:be:60:27:38:8b:43:20:ed:d5:6d:1f:36:86:7b: 96:09:2f:5e:f3:7a:c4:a0:79:a7:1e:b5:2d:60:ca: 31:ab:db:e9:e5:51:6f:65:5d:f1:32:37:a8:8a:56: 99:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DA:67:DA:CE:05:88:01:20:C7:5A:B9:6E:6D:5D:48:FC:65:56:26 X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:7a:9b:9b:63:45:a7:84:0d:94:dd:2f:80:02:02:82:25:2b: 8f:6c:8c:bd:24:56:fd:8f:99:30:f2:64:d7:6b:98:92:1b:f4: bd:29:79:1a:5a:7b:1b:f0:d4:50:73:c4:5f:8e:53:69:00:d7: aa:4b:dc:69:9f:07:77:51:24:60:eb:08:4d:38:4a:27:a6:83: 77:d1:45:c7:b4:34:5e:f1:fc:d4:4e:e5:15:4f:41:3b:11:33: c0:4e:d7:19:1b:44:4c:3e:28:15:12:56:e3:ec:33:39:bf:f5: 48:db:4a:b9:7e:32:00:01:05:f1:10:3c:fa:a9:75:2c:db:33: 30:15:7d:2c:69:4e:7c:0e:ea:4b:a4:47:56:26:0c:58:36:cd: 77:07:11:c9:5a:d9:4b:b9:48:ca:fc:09:6d:00:c8:cb:6f:ad: 11:1e:24:96:8a:c5:96:8e:09:10:37:a3:36:10:ba:d6:46:0f: f2:fc:c4:78:0c:01:33:0e:51:da:31:4b:83:7a:4c:68:d1:9b: d7:6e:54:81:a1:b3:86:8b:fe:2a:6c:b0:b6:af:33:c8:f5:fa: dc:ec:e9:b8:f3:dc:8f:69:7c:6b:74:93:24:0b:5a:c6:ef:30: 66:0c:74:eb:f4:62:0f:88:27:94:a3:a9:7e:67:eb:2a:f2:4a: 57:25:10:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtknqdvTKRTLvBd6elt5l6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjUxMjI4MTEwMTE3WhcNMjUxMjI5MTEwMTE3WjAzMTEwLwYDVQQD EygyM2RhNjdkYWNlMDU4ODAxMjBjNzVhYjk2ZTZkNWQ0OGZjNjU1NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlrAAyu1q6ymzOfrdJOxRK7wW/dx fngGq4H4uUNpTNX7EANrJCqmq7prLN27CfKoMfqlMJkG49b39GMHAdEZpwIAyCdu 63te6u3NukU0TSXzWS9SFKC1PjXMKtLYBgZwKVj9eYD++utcdjvuf41xxWqCSgXa zjtuHYjxZ8ERhyvJHEGmqCWgUQfs3VP/vQyduRqqHma1UwzG44bp8liBKRYmuGj2 CkNVZM1Lod2fZOtWylLpfa6+eYNOc6/8jW+jE+oHMsPeyvezC7NcX8lDlvshvmAn OItDIO3VbR82hnuWCS9e83rEoHmnHrUtYMoxq9vp5VFvZV3xMjeoilaZ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCPaZ9rOBYgBIMdauW5tXUj8ZVYmMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3qbm2NF p4QNlN0vgAICgiUrj2yMvSRW/Y+ZMPJk12uYkhv0vSl5Glp7G/DUUHPEX45TaQDX qkvcaZ8Hd1EkYOsITThKJ6aDd9FFx7Q0XvH81E7lFU9BOxEzwE7XGRtETD4oFRJW 4+wzOb/1SNtKuX4yAAEF8RA8+ql1LNszMBV9LGlOfA7qS6RHViYMWDbNdwcRyVrZ S7lIyvwJbQDIy2+tER4klorFlo4JEDejNhC61kYP8vzEeAwBMw5R2jFLg3pMaNGb 125UgaGzhov+Kmywtq8zyPX63OzpuPPcj2l8a3STJAtaxu8wZgx06/RiD4gnlKOp fmfrKvJKVyUQ2Q== -----END CERTIFICATE-----Generated at Sun Dec 28 18:58:45 2025 by rpki-client