This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json) Hash identifier: 6TtEk8DRz3z5wPl6AYnTAVCOM5A+KEnTXrZ2NlvSp04= Subject key identifier: D0:A6:93:91:68:B0:DD:89:22:EF:20:E0:A4:04:3E:E4:A8:8C:03:7E Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Certificate serial: 019B424AD7A1F71FFD42A6E673CA2BD42BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft Manifest number: 0A55 Signing time: Sun 21 Dec 2025 19:02:39 +0000 Manifest this update: Sun 21 Dec 2025 19:02:39 +0000 Manifest next update: Mon 22 Dec 2025 19:02:39 +0000 Files and hashes: 1: 6HNEABw1T6hIB0q4QQqsLY38I1Q.roa (hash: zNEGrf7ZrXB8v0Wt79viHUTyVYmykBBzT2YgGkxwTIA=) 2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: akzMfLir6Wg537DTjSSnwrQyjthC6PduIXz5G8V++s0=) 3: gZbuhHcsb_1lO2Xiu3dypyQrrvI.roa (hash: K0MEtWJdFKd4YOcyYI4uKnZtszhLsEQLNua4LTuOi4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:d7:a1:f7:1f:fd:42:a6:e6:73:ca:2b:d4:2b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a Validity Not Before: Dec 21 19:02:39 2025 GMT Not After : Dec 22 19:02:39 2025 GMT Subject: CN=d0a6939168b0dd8922ef20e0a4043ee4a88c037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:b5:d3:fa:30:fd:e0:9f:fc:8d:d7:c4:dc: fe:e2:d5:47:37:97:4a:d8:6c:ee:a1:11:95:79:84: 8d:be:ef:8a:3f:3a:ff:41:ef:7c:f3:b5:6e:e3:b9: 3b:de:74:05:51:0f:1d:75:df:e4:9f:09:31:59:cb: 69:99:9a:37:ca:4c:ed:08:89:fb:99:1b:88:6e:f8: 74:ff:be:5e:6a:02:32:9c:a3:eb:30:75:bd:c7:ed: 78:38:d2:32:7f:ce:4b:64:11:a8:a1:a2:be:ef:0e: 05:cd:2d:35:14:f5:61:4b:e5:4c:41:e7:9b:21:02: cd:e1:a1:a1:65:5d:e7:0d:33:1a:1b:17:8d:99:77: 9e:f1:60:42:08:82:a6:52:26:a3:eb:e9:59:e8:d6: dd:b4:2d:60:d2:37:8a:fa:1c:6c:78:18:52:1b:5d: 21:8b:0f:c6:49:0e:87:8a:e5:42:a4:8b:d5:58:2c: 5e:df:a4:93:74:91:9c:71:dc:6d:b7:71:db:09:fe: 5d:c5:d8:eb:91:2b:f5:f6:07:cb:21:43:54:d2:3e: 14:0c:1d:46:ba:6c:3a:73:c9:f3:a6:af:51:50:94: c6:67:6a:38:72:f0:57:bb:7f:fb:eb:30:8f:6e:64: 4f:a1:e2:64:39:67:b9:9f:42:58:96:c8:83:38:9e: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:93:91:68:B0:DD:89:22:EF:20:E0:A4:04:3E:E4:A8:8C:03:7E X509v3 Authority Key Identifier: keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:e4:eb:0d:f1:87:0f:83:8a:04:59:10:bd:d0:b6:a2:5e:28: 58:54:ad:25:08:01:f7:04:b5:8b:ce:33:81:2b:35:ad:9b:ac: 65:0b:22:82:b1:d5:09:1f:e3:08:fa:78:f2:e3:3d:3a:40:e9: 1c:e3:62:51:ee:69:28:69:fc:e6:63:59:cd:b5:4f:45:29:f2: 3f:b0:3d:f3:34:2b:d6:20:87:96:fe:e2:9e:a8:89:44:e1:7e: 18:a2:81:23:3a:46:c9:ac:be:2f:cc:df:4c:38:06:8b:57:95: 74:94:e6:4b:bb:34:e5:0c:68:49:94:01:f7:97:78:bc:7c:d4: 49:6a:e9:77:23:ba:5e:41:54:07:15:7d:46:c6:3a:21:75:57: fd:c6:23:e5:a8:d1:fb:b2:82:d3:06:29:fc:c1:52:b2:17:c3: f5:80:4d:81:c1:27:64:5e:50:61:f7:cc:c0:62:23:2e:ad:9b: 2a:70:44:0d:33:b2:86:e4:36:e2:2e:96:1b:ea:86:8e:06:5f: 90:1d:ba:88:fb:3a:ed:d8:08:b7:92:c5:d3:53:02:9b:b6:e3: 29:29:7e:ee:47:a2:d0:fe:3f:07:8d:b4:97:c3:eb:9a:33:9c: 00:9e:70:45:06:3a:71:a2:cc:11:b8:b6:17:ac:f8:b8:a0:d8: 8a:62:fa:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSteh9x/9Qqbmc8or1CuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMzIzMTE5NTI1NjZkMWNlMThmMDg4ZThiYjZjZWFiZTdl NzkzNWEwHhcNMjUxMjIxMTkwMjM5WhcNMjUxMjIyMTkwMjM5WjAzMTEwLwYDVQQD EyhkMGE2OTM5MTY4YjBkZDg5MjJlZjIwZTBhNDA0M2VlNGE4OGMwMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymu10/ow/eCf/I3XxNz+4tVHN5dK 2GzuoRGVeYSNvu+KPzr/Qe9887Vu47k73nQFUQ8ddd/knwkxWctpmZo3ykztCIn7 mRuIbvh0/75eagIynKPrMHW9x+14ONIyf85LZBGooaK+7w4FzS01FPVhS+VMQeeb IQLN4aGhZV3nDTMaGxeNmXee8WBCCIKmUiaj6+lZ6NbdtC1g0jeK+hxseBhSG10h iw/GSQ6HiuVCpIvVWCxe36STdJGccdxtt3HbCf5dxdjrkSv19gfLIUNU0j4UDB1G umw6c8nzpq9RUJTGZ2o4cvBXu3/76zCPbmRPoeJkOWe5n0JYlsiDOJ7GRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCmk5FosN2JIu8g4KQEPuSojAN+MB8GA1UdIwQY MBaAFFwyMRlSVm0c4Y8Ijou2zqvn55NaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMt MGQzOGRkZGIwNzgwLzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81ZGZkODktNGQ3OS00YmI2LThiZjMtMGQzOGRkZGIwNzgw LzEvWERJeEdWSldiUnpoandpT2k3Yk9xLWZuazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+TrDfGH D4OKBFkQvdC2ol4oWFStJQgB9wS1i84zgSs1rZusZQsigrHVCR/jCPp48uM9OkDp HONiUe5pKGn85mNZzbVPRSnyP7A98zQr1iCHlv7inqiJROF+GKKBIzpGyay+L8zf TDgGi1eVdJTmS7s05QxoSZQB95d4vHzUSWrpdyO6XkFUBxV9RsY6IXVX/cYj5ajR +7KC0wYp/MFSshfD9YBNgcEnZF5QYffMwGIjLq2bKnBEDTOyhuQ24i6WG+qGjgZf kB26iPs67dgIt5LF01MCm7bjKSl+7kei0P4/B420l8PrmjOcAJ5wRQY6caLMEbi2 F6z4uKDYimL6kQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:51:18 2025 by rpki-client