This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json) Hash identifier: jNM75ETLtQexxPkNGLT8jLTDEPJl36XJ2fY9SWXclYw= Subject key identifier: 40:3F:D0:90:B4:22:5E:4C:54:A5:21:A0:0E:75:97:15:57:3D:F0:51 Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03 Certificate serial: 019B72228A44E2E79231CAE76E491E103131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft Manifest number: 0372 Signing time: Wed 31 Dec 2025 02:00:24 +0000 Manifest this update: Wed 31 Dec 2025 02:00:24 +0000 Manifest next update: Thu 01 Jan 2026 02:00:24 +0000 Files and hashes: 1: TCQdEf5OkmR_hyFaSJHAcpQiWBg.roa (hash: ui4nGeDk3vmrgHUT1uzBGDl50T1i4iyiNWD1GcPY30k=) 2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: JgRTlc9LkEutUgypmSP2r1COk6BfyoY4vsdA21kEsjU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 02:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:8a:44:e2:e7:92:31:ca:e7:6e:49:1e:10:31:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03 Validity Not Before: Dec 31 02:00:24 2025 GMT Not After : Jan 1 02:00:24 2026 GMT Subject: CN=403fd090b4225e4c54a521a00e759715573df051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:24:49:67:53:dd:1d:1c:f8:1d:4a:31:9c:df: 79:1a:26:22:c6:1c:3a:70:aa:69:49:ff:d1:cc:a8: c0:6a:8c:81:9e:da:65:c8:37:bf:d5:fd:67:85:ab: 22:f5:af:a2:81:da:02:35:4b:f0:6c:26:98:ef:46: 66:cd:0a:b6:87:09:df:a4:ec:48:59:d5:7d:94:18: c3:a5:98:27:26:02:40:7e:3e:b2:92:60:a5:cd:66: 56:b9:1b:e4:3c:f0:76:f4:f6:55:1a:e2:f0:f0:62: ff:93:47:08:c5:a0:89:6c:90:c9:79:87:6c:b3:cc: c4:38:87:3a:17:29:0a:28:7a:65:5b:94:be:a3:7a: 86:f4:d6:8e:ea:f0:0a:ad:8f:b3:d0:81:25:8d:ed: 62:d9:82:55:0c:1d:4e:27:36:4c:5f:69:cb:1a:55: 7e:0a:6e:46:fa:f0:ad:1c:b7:08:df:05:a4:2c:aa: 72:c4:3e:63:0c:e7:e2:ab:bb:3d:d7:17:8d:76:ef: 79:f3:41:b3:c3:95:d4:08:7b:13:c6:91:0b:67:49: 87:be:a3:87:14:e7:4d:85:f9:39:1e:5d:5e:a7:c4: e6:47:a3:0e:cb:ec:96:40:9c:7b:28:ac:b6:8d:09: 6f:69:75:4f:1a:af:4f:15:76:3a:4f:11:0a:e9:29: c2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3F:D0:90:B4:22:5E:4C:54:A5:21:A0:0E:75:97:15:57:3D:F0:51 X509v3 Authority Key Identifier: keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:80:88:24:13:cd:c9:e6:fc:e1:4f:7c:fe:e1:88:92:94:42: 28:ae:37:3c:ff:51:3e:7f:ee:14:69:6d:ea:48:10:35:36:4a: dd:44:c1:f7:7a:1a:76:4b:ee:03:ba:5f:b7:a6:f7:ef:d0:43: bc:bd:bd:93:40:94:67:c0:5b:c7:29:7e:6a:2b:88:32:55:40: b4:a5:da:3e:b1:5a:7a:35:e2:69:91:5c:fc:0a:53:08:9c:15: 6c:3f:d4:c6:f6:07:c2:b0:8a:a3:0a:6b:92:1d:3f:89:08:0b: fa:d9:e2:60:b0:a8:fb:49:ca:bc:bb:e8:3b:2b:c9:fd:bf:1d: 8a:14:26:b5:9a:c2:0f:05:9e:9d:34:13:7c:89:15:4c:89:d5: c2:86:3e:80:6d:0a:f0:d0:92:7a:8e:99:50:86:db:75:ec:8c: 26:b6:15:80:5b:90:d2:6c:c7:bf:7c:f1:d4:40:ae:be:9c:ba: e7:8a:e6:3b:a4:dd:54:72:f9:c5:4f:59:0c:b7:fa:0f:38:95: e1:76:50:bc:99:6a:dd:5c:3c:00:17:ff:a6:42:68:bd:69:a1: 02:2d:fa:51:47:ab:93:56:6b:c4:b3:b3:04:00:64:bf:59:35: 14:e3:a3:a5:6b:bd:5d:be:f4:5a:c6:c0:c1:3d:df:f1:49:77: 4c:08:80:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIopE4ueSMcrnbkkeEDExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1 ZDJhMDMwHhcNMjUxMjMxMDIwMDI0WhcNMjYwMTAxMDIwMDI0WjAzMTEwLwYDVQQD Eyg0MDNmZDA5MGI0MjI1ZTRjNTRhNTIxYTAwZTc1OTcxNTU3M2RmMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iRJZ1PdHRz4HUoxnN95GiYixhw6 cKppSf/RzKjAaoyBntplyDe/1f1nhasi9a+igdoCNUvwbCaY70ZmzQq2hwnfpOxI WdV9lBjDpZgnJgJAfj6ykmClzWZWuRvkPPB29PZVGuLw8GL/k0cIxaCJbJDJeYds s8zEOIc6FykKKHplW5S+o3qG9NaO6vAKrY+z0IElje1i2YJVDB1OJzZMX2nLGlV+ Cm5G+vCtHLcI3wWkLKpyxD5jDOfiq7s91xeNdu9580Gzw5XUCHsTxpELZ0mHvqOH FOdNhfk5Hl1ep8TmR6MOy+yWQJx7KKy2jQlvaXVPGq9PFXY6TxEK6SnCEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEA/0JC0Il5MVKUhoA51lxVXPfBRMB8GA1UdIwQY MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4CIJBPN yeb84U98/uGIkpRCKK43PP9RPn/uFGlt6kgQNTZK3UTB93oadkvuA7pft6b379BD vL29k0CUZ8Bbxyl+aiuIMlVAtKXaPrFaejXiaZFc/ApTCJwVbD/UxvYHwrCKowpr kh0/iQgL+tniYLCo+0nKvLvoOyvJ/b8dihQmtZrCDwWenTQTfIkVTInVwoY+gG0K 8NCSeo6ZUIbbdeyMJrYVgFuQ0mzHv3zx1ECuvpy654rmO6TdVHL5xU9ZDLf6DziV 4XZQvJlq3Vw8ABf/pkJovWmhAi36UUerk1ZrxLOzBABkv1k1FOOjpWu9Xb70WsbA wT3f8Ul3TAiAQQ== -----END CERTIFICATE-----Generated at Wed Dec 31 10:26:37 2025 by rpki-client