This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
File: XGT50E79Wp_C4jtC1bUa79mlAlA.mft (raw, json)
Hash identifier: hovttWkzXdMbCWzK+IHOhoZchlpxAK2goUpyYbxDvTs=
Subject key identifier: 4A:4F:72:FC:72:F2:F1:79:AD:48:43:3F:60:F9:69:40:EC:A0:22:CD
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 019B759239CBB4789C58EA77DC8CEDDC1739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
Manifest number: 17D5
Signing time: Wed 31 Dec 2025 18:01:15 +0000
Manifest this update: Wed 31 Dec 2025 18:01:15 +0000
Manifest next update: Thu 01 Jan 2026 18:01:15 +0000
Files and hashes: 1: 0ttbnnDkszN5UUqiS_T4IajnBss.roa (hash: rpO8oEL9pD1qVz6CQpISXQ8FDsbjMnEXpxfBE5fz0uQ=)
2: 2Y0fe5cLscbhaPE-Pg8hTGXdau0.roa (hash: 3yUHCU4aXv7E9tDqIK2zNp9EHkspgMN6t6urNetfh4c=)
3: 5ILS55HX3ReMEJoaJvPiFDH9fYg.roa (hash: ITuUhFUEIAGYkscfI+hyhPLbGpan1cG71MkoXreG6tQ=)
4: 8qP_rwGfS_erDEkhd__wmflr3D0.roa (hash: uNhvabbwn1Xllj8TcYzhRoFxuzpR3wjSmmlIi7iHy/c=)
5: Gxw_WTtXXlB9ovzVsZ-LJ4z0v8Q.asa (hash: WH1dBt0aNelRDH5woRZUZpaGD5516U5Tlex+HGGo1Mg=)
6: QBYP5f0_ZKeoVqAGpUJXmu3czyA.roa (hash: uEMvExoNHA6VkjNgrlmvXEXtFQzBUe2OYCrsV1Yb4TI=)
7: QuvIHJ_zDp79PlKu2Sbh4NNdspg.roa (hash: hhfcVBSgfoghlGavFr1P4xcaklB4xBtbf4e22DxcY90=)
8: XGT50E79Wp_C4jtC1bUa79mlAlA.crl (hash: K2ysuDmJDRvCYykqbGIEnmS1ao8dV1mHAFONC9goOMw=)
9: ZmCMretj_IKNhbhPW7MGGPPg6QY.roa (hash: 4kecTGFd/jV1xEOhbuwNVp/CnF9j4BLYU+5l4DsS6Q4=)
10: a2zXnZAHmh1NIwZ9fUmSeVc-vBI.roa (hash: Z/HZstAfRIWxIQG++DsdK1OrDaZy2rJY9S8trXlDxcg=)
11: hryCAnXILF_v7a6M_L6UbzP1x0E.roa (hash: KffgzjGeNv+fdBscER8L1iiMJC1SCTAbWKtpEJoIDmc=)
12: qP01jLg9AFTfk3wXCfbU7oR7qCw.roa (hash: /NVQZjV+scAZTm53Kdr7vM2mPxhoccQ1UNN8dQOASVg=)
13: sajSb_i1tx9tltMHBF6uWbYQpL8.roa (hash: EwHPsvt1NTQcBxJBnqTQxodt51gOWP8HXjJ45qFeCrw=)
14: tD3MiVLyx80jHHPgeigx6BWgpuQ.roa (hash: UHu7tvFq5WsP6rH5pg1qHyYUdE7g7HNJ6I8OyKr1nyw=)
15: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (hash: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=)
16: vNHiMEZdd8DjXf6FIPioGw_Nz8s.roa (hash: ZsaxU7fC3YaA3paCfQTFF+K5ZI93iI4NhTUJczYUy2E=)
17: vchnlWc0Fsx6XPg2RwN6AZKMjuQ.roa (hash: +sfsLeR4aA8D9PpU6Hss1oGuVfC35Po3AfH+YNZA+6A=)
18: wdmDU1FgaGs1uyj3K-dsWGNH688.roa (hash: 725uUHQDeUCWiCmMQj9675kxf7ty46STH4meZaz93cA=)
19: xb3vyIEtuTHF1sdQebrEb3z28Q4.roa (hash: 1xi/Jh3IEnrX/jjKazAV/ViHmezAQHHlu2yeCxiDRno=)
20: xqiEKTyhKuNrl68GGGDu_QWOqaQ.roa (hash: ZLUbmXuAQc0QVjTQUIs5lv1W0eJjT/BryddjMTmQqOc=)
21: zkXVECFz6EcGyeltj31aM4Xe0zo.roa (hash: av1tyEYUg7j2JgW3Q+4iVzSldfjpMOTaoK8sujOhnPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Jan 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:75:92:39:cb:b4:78:9c:58:ea:77:dc:8c:ed:dc:17:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Dec 31 18:01:15 2025 GMT
Not After : Jan 1 18:01:15 2026 GMT
Subject: CN=4a4f72fc72f2f179ad48433f60f96940eca022cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:fb:bf:17:87:a6:b5:c3:66:5b:e1:33:f3:
51:79:cd:a1:39:3b:f1:7f:27:21:e5:d2:45:af:57:
62:c5:83:e2:ab:23:8a:9c:b5:ec:79:a1:73:52:f5:
ef:c0:47:0b:89:52:b5:94:bd:06:01:cc:57:25:d6:
3b:32:b0:fe:20:f3:70:3f:60:68:fb:86:31:f1:e9:
9a:f7:98:22:5f:03:2b:92:8b:09:e5:5f:6f:70:6a:
a1:ca:36:77:6c:f3:3a:b2:18:73:95:e4:d3:18:5f:
5e:50:96:99:d3:08:9b:3c:3e:b6:da:b4:75:5b:f4:
c6:80:b7:67:a2:03:3a:8d:54:20:b0:dd:d6:27:7d:
8f:fa:87:37:fc:c9:b1:70:3c:2a:cb:ab:3c:e4:f2:
57:ed:47:81:0b:8a:ae:22:46:eb:f9:07:21:59:ea:
19:87:84:cb:e7:7a:4f:f6:62:cb:7b:c4:ee:16:a3:
93:dd:d0:8b:6a:4e:3e:3c:f3:56:37:bd:ad:b6:4a:
c0:a1:f4:5a:55:73:56:08:9a:54:71:2a:fe:8a:36:
9f:31:da:54:48:b9:f2:87:c8:a3:fd:aa:69:bd:3a:
6d:96:d4:80:dd:80:15:7e:94:36:80:1a:ac:79:d4:
ea:89:79:36:ef:2e:ea:5d:04:98:91:38:b7:53:06:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4F:72:FC:72:F2:F1:79:AD:48:43:3F:60:F9:69:40:EC:A0:22:CD
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f5:d1:83:21:1c:a3:b5:9f:e6:ed:e0:52:4f:da:a1:d6:a5:
b4:85:c7:0d:3d:2a:26:18:62:a6:20:f5:35:b6:74:13:1b:61:
07:59:85:9e:91:1e:a2:68:35:be:e4:94:b4:e5:03:a4:30:d7:
8b:13:14:35:87:50:63:0b:12:4c:cf:15:09:9e:c2:a8:f7:a7:
9c:93:59:c5:36:5a:40:ab:e4:ee:ea:65:2a:4c:5d:bb:ef:ac:
c7:df:18:cc:6f:08:5a:9b:15:e3:1a:4a:1a:aa:f9:a8:61:42:
01:a9:80:06:27:bc:45:ef:f4:c9:ee:76:90:bd:e1:c4:5d:ac:
1c:e3:53:0f:e6:4a:13:ca:55:65:23:3a:40:ac:02:c6:ac:56:
c2:45:00:5b:d8:db:85:1a:cb:15:25:6c:72:95:60:2a:05:af:
43:35:f1:00:9d:8f:95:95:c4:87:f1:bf:87:64:1d:f8:00:62:
7f:2c:62:96:5b:e5:97:13:4c:4d:8d:b6:e8:95:0c:af:ab:c8:
84:15:57:44:e6:f9:56:ce:7c:bd:88:e8:55:f3:37:1a:42:73:
1c:d5:af:63:27:97:b7:f9:e3:79:0f:b4:7c:e5:48:89:60:87:
65:4d:89:51:0a:08:ce:04:ed:04:cb:4f:93:18:21:b5:fb:a0:
6e:79:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:54:33 2026 by rpki-client