This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft File: XiNRj6qblKQtGjtNn2O5dDlNBmI.mft (raw, json) Hash identifier: KJgKgxXBG+4hzLlHmvZLFlAv/PRR93gB7WvF9iZ+qW8= Subject key identifier: E4:E2:49:6E:AD:62:F6:4B:6E:D5:08:3B:A5:6A:D0:A8:71:29:A2:40 Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B3F4846D6C2A5A8F38B7B8AAA57F2F8BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft Manifest number: 05CA Signing time: Sun 21 Dec 2025 05:00:59 +0000 Manifest this update: Sun 21 Dec 2025 05:00:59 +0000 Manifest next update: Mon 22 Dec 2025 05:00:59 +0000 Files and hashes: 1: B7HcX8a5R4VJ0aJu7BcgMxsPGeM.roa (hash: +dMXfXtmqoKsILaxrYWUxAUDipxnRmqzhhjRXeSfmOo=) 2: Vv1ze4oV_8jujUNihoptQXR-XLA.roa (hash: L3WLtaibPG3x61zfWcu415AL/a1HwynhXMRR//VRus0=) 3: XiNRj6qblKQtGjtNn2O5dDlNBmI.crl (hash: V6+sjNS9zTiA84OXnFlcC4kyOi19bHuiu6TRCw97Tuw=) 4: wwZy967K0kaiULGURPRIujSTcOo.roa (hash: vNjif0ZJvkMUe2G7dAUGl4j4TYsS+I8BRRbofJk7BNE=) 5: yXSI300Xb0fHUGX2H4LyzLugHJw.roa (hash: lfxMflPHK3x8X2DTET3r/QnFen44eiLQvcUftmVoo/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:46:d6:c2:a5:a8:f3:8b:7b:8a:aa:57:f2:f8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Dec 21 05:00:59 2025 GMT Not After : Dec 22 05:00:59 2025 GMT Subject: CN=e4e2496ead62f64b6ed5083ba56ad0a87129a240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:83:b6:12:9e:c4:0d:28:ad:aa:cc:e4:68: c5:7c:63:b8:60:1c:cb:21:6b:99:46:49:97:77:c2: dc:1f:df:7c:96:9f:91:79:42:b4:ee:ac:7b:19:35: 7c:d6:b9:8f:79:b7:6a:bc:e9:6e:18:fe:97:f0:59: 53:70:db:12:31:72:bc:33:71:a8:35:2c:8e:33:0f: c7:dd:9c:48:77:24:b9:b5:d7:f3:21:02:e1:d3:fe: d8:65:e3:7a:20:b3:01:c5:91:aa:f5:2f:55:50:a2: 36:71:69:a0:1b:f6:39:2a:c2:44:37:de:15:45:3d: 7e:97:e0:c2:4e:23:1a:37:21:4c:f6:17:c8:81:bf: 12:b2:13:6f:14:47:ea:13:9a:13:d1:7c:ed:09:ac: d7:00:59:00:37:c1:88:b7:de:0e:0d:50:a3:67:83: 2e:28:c6:85:a3:30:42:c7:41:47:0e:b6:09:1f:79: 7b:80:9d:50:59:47:68:79:b9:07:19:88:b2:59:e4: 10:73:02:28:bb:41:4b:ea:a8:e9:a3:00:e0:ce:98: eb:98:27:14:e9:3b:e5:1e:06:b7:92:13:ae:93:ba: 1b:11:3e:b4:dc:c8:aa:d4:ee:50:05:02:88:62:19: f6:1c:f0:04:64:42:de:0c:a4:48:3e:d6:5f:bc:c9: e5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E2:49:6E:AD:62:F6:4B:6E:D5:08:3B:A5:6A:D0:A8:71:29:A2:40 X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:48:d0:9e:3e:91:5e:a4:5d:ea:77:b7:78:ec:f4:6c:41:c6: 62:f0:65:23:bb:de:60:cd:13:9b:89:d0:54:d7:21:80:f1:7a: 42:97:92:37:b9:30:c5:c1:b6:56:8e:eb:99:0c:f3:ff:41:a0: 10:5d:91:bb:56:4b:b8:f4:3a:57:c9:2a:b8:a5:22:a7:79:6c: ee:4d:6f:56:9c:0d:95:91:77:37:42:d9:d5:ef:64:19:c1:20: 37:a9:0f:9e:ad:a6:99:09:76:20:9a:6a:f5:5e:96:8d:d7:de: 78:e1:3d:8f:13:13:ee:37:9b:45:84:73:56:ef:93:59:af:cc: 2b:5e:45:c0:9a:e0:cb:76:e4:09:19:d9:ce:00:1a:14:90:3e: 39:27:c9:9e:58:b2:88:fb:8f:37:89:aa:62:e5:44:3b:d1:97: e2:e6:2f:5c:19:b5:b5:fb:30:6c:f2:34:51:79:c7:cb:83:4e: 21:1c:ce:af:37:ca:c2:3f:e3:64:8d:46:ab:58:db:b0:f3:39: 73:f6:75:0d:7a:1b:9c:4a:dd:4b:95:25:38:75:c7:f5:18:1e: 3f:97:32:eb:ee:e9:63:95:d1:d1:f9:ce:fb:1b:90:48:59:c4: 3b:26:67:73:9a:30:23:06:6f:90:03:68:e4:d1:ab:c1:76:cf: cb:f9:73:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SEbWwqWo84t7iqpX8vi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjUxMjIxMDUwMDU5WhcNMjUxMjIyMDUwMDU5WjAzMTEwLwYDVQQD EyhlNGUyNDk2ZWFkNjJmNjRiNmVkNTA4M2JhNTZhZDBhODcxMjlhMjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRuDthKexA0orarM5GjFfGO4YBzL IWuZRkmXd8LcH998lp+ReUK07qx7GTV81rmPebdqvOluGP6X8FlTcNsSMXK8M3Go NSyOMw/H3ZxIdyS5tdfzIQLh0/7YZeN6ILMBxZGq9S9VUKI2cWmgG/Y5KsJEN94V RT1+l+DCTiMaNyFM9hfIgb8SshNvFEfqE5oT0XztCazXAFkAN8GIt94ODVCjZ4Mu KMaFozBCx0FHDrYJH3l7gJ1QWUdoebkHGYiyWeQQcwIou0FL6qjpowDgzpjrmCcU 6TvlHga3khOuk7obET603Miq1O5QBQKIYhn2HPAEZELeDKRIPtZfvMnlUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTiSW6tYvZLbtUIO6Vq0KhxKaJAMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUjQnj6R XqRd6ne3eOz0bEHGYvBlI7veYM0Tm4nQVNchgPF6QpeSN7kwxcG2Vo7rmQzz/0Gg EF2Ru1ZLuPQ6V8kquKUip3ls7k1vVpwNlZF3N0LZ1e9kGcEgN6kPnq2mmQl2IJpq 9V6WjdfeeOE9jxMT7jebRYRzVu+TWa/MK15FwJrgy3bkCRnZzgAaFJA+OSfJnliy iPuPN4mqYuVEO9GX4uYvXBm1tfswbPI0UXnHy4NOIRzOrzfKwj/jZI1Gq1jbsPM5 c/Z1DXobnErdS5UlOHXH9RgeP5cy6+7pY5XR0fnO+xuQSFnEOyZnc5owIwZvkANo 5NGrwXbPy/lz8A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:32 2025 by rpki-client