This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: 3WMfTANWSckqfrvLu5CaKqlMJbCKP2jpkDqIcVYMHBc= Subject key identifier: 3D:E4:6B:BF:8F:A7:26:E0:EE:71:F7:B3:45:92:D5:C8:A7:54:03:27 Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019B3DFE55837ED8C08A6674C794555B38E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 0357 Signing time: Sat 20 Dec 2025 23:00:36 +0000 Manifest this update: Sat 20 Dec 2025 23:00:36 +0000 Manifest next update: Sun 21 Dec 2025 23:00:36 +0000 Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: +d7A7MeoCTYJfA7NKdjH3JJti85/ouTG/tdYSVPWG5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:55:83:7e:d8:c0:8a:66:74:c7:94:55:5b:38:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Dec 20 23:00:36 2025 GMT Not After : Dec 21 23:00:36 2025 GMT Subject: CN=3de46bbf8fa726e0ee71f7b34592d5c8a7540327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:76:9c:5e:b1:23:d1:2b:64:a9:d6:55:22: e7:07:bb:d5:08:82:ff:bf:9a:56:1c:5a:d9:63:e1: ce:eb:aa:fa:1a:b8:9c:b7:1d:7b:21:19:2f:be:b6: 6c:97:98:67:12:b5:1f:8b:05:b2:99:86:55:70:48: 92:2a:7a:9c:7c:9b:11:60:e1:6a:e4:bc:bf:40:eb: b7:c7:7c:e6:c9:63:58:10:fe:94:88:b6:4f:1d:6c: bf:fc:74:5c:48:88:5c:70:4f:a7:ba:8c:af:3d:0b: 29:4a:fa:e2:de:d6:01:e2:ec:a5:b4:cf:0d:b9:c1: 99:00:5a:a4:f8:12:82:41:d7:18:a7:92:95:c9:91: ef:b1:e0:6b:8b:97:b5:9e:ed:a6:2d:c3:e6:27:f3: 1a:ab:16:ed:50:06:be:e8:51:0d:a2:05:a9:32:50: b8:22:0c:68:09:83:03:c8:56:1a:aa:5e:0f:72:7b: 6d:f5:2d:07:a5:5b:2f:61:81:0a:18:ee:87:89:39: 44:f3:96:24:13:04:20:84:a5:08:93:53:70:15:99: 5d:62:58:8a:a7:6f:77:ba:3a:6a:bc:52:02:8d:15: e5:da:03:9d:7f:64:a8:5e:32:01:ac:bc:13:a2:52: f6:12:ae:7b:95:61:0f:7c:81:8a:45:37:fd:90:f8: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E4:6B:BF:8F:A7:26:E0:EE:71:F7:B3:45:92:D5:C8:A7:54:03:27 X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e8:14:c5:d4:86:fb:5c:e9:05:af:c8:21:9f:bb:6a:7a:af: 69:ea:46:5c:ec:00:a8:d0:c7:37:91:04:70:15:9e:bc:0d:fb: 56:90:f3:5d:9b:16:d9:82:3a:41:08:cd:db:ce:45:3f:b4:4d: 40:f7:93:2c:a9:0c:8b:43:89:86:90:79:c1:2c:57:dc:67:ac: e5:b4:4a:2a:d2:76:83:e8:e1:bb:cf:f2:09:e0:19:09:37:fa: 22:30:20:16:30:42:8a:50:58:a8:59:99:76:e6:01:95:35:cd: 0f:dc:f5:fb:c3:61:97:5b:f8:ff:e0:3b:cc:91:4d:52:66:13: ae:d5:6c:96:c7:7c:c2:a3:b0:8e:45:d8:5b:a7:95:a2:ab:65: 1f:e7:7c:86:92:1c:92:e8:a3:1c:87:d2:b3:d0:c3:df:d7:60: 4a:14:62:55:ab:6a:83:7f:c8:18:0b:64:a2:9e:a4:ea:fd:73: 90:b4:c1:bb:d3:93:a7:69:e9:05:2c:11:f6:f2:7d:75:01:b1: 0c:5c:a2:a7:86:1e:a7:15:47:ce:80:d3:c4:b5:b4:4c:17:02: 23:b0:6a:50:39:ab:7b:a4:09:05:f0:83:08:8b:71:4a:2a:f9: 08:28:1e:ca:e4:10:10:8d:bb:9e:d1:9b:6b:4d:90:85:f8:a4: 5f:c0:f1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lWDftjAimZ0x5RVWzjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjUxMjIwMjMwMDM2WhcNMjUxMjIxMjMwMDM2WjAzMTEwLwYDVQQD EygzZGU0NmJiZjhmYTcyNmUwZWU3MWY3YjM0NTkyZDVjOGE3NTQwMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLZ2nF6xI9ErZKnWVSLnB7vVCIL/ v5pWHFrZY+HO66r6Grictx17IRkvvrZsl5hnErUfiwWymYZVcEiSKnqcfJsRYOFq 5Ly/QOu3x3zmyWNYEP6UiLZPHWy//HRcSIhccE+nuoyvPQspSvri3tYB4uyltM8N ucGZAFqk+BKCQdcYp5KVyZHvseBri5e1nu2mLcPmJ/MaqxbtUAa+6FENogWpMlC4 IgxoCYMDyFYaql4Pcntt9S0HpVsvYYEKGO6HiTlE85YkEwQghKUIk1NwFZldYliK p293ujpqvFICjRXl2gOdf2SoXjIBrLwTolL2Eq57lWEPfIGKRTf9kPhu/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3ka7+Ppybg7nH3s0WS1cinVAMnMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOgUxdSG +1zpBa/IIZ+7anqvaepGXOwAqNDHN5EEcBWevA37VpDzXZsW2YI6QQjN285FP7RN QPeTLKkMi0OJhpB5wSxX3Ges5bRKKtJ2g+jhu8/yCeAZCTf6IjAgFjBCilBYqFmZ duYBlTXND9z1+8Nhl1v4/+A7zJFNUmYTrtVslsd8wqOwjkXYW6eVoqtlH+d8hpIc kuijHIfSs9DD39dgShRiVatqg3/IGAtkop6k6v1zkLTBu9OTp2npBSwR9vJ9dQGx DFyip4YepxVHzoDTxLW0TBcCI7BqUDmre6QJBfCDCItxSir5CCgeyuQQEI27ntGb a02QhfikX8DxLA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:51 2025 by rpki-client