This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json) Hash identifier: A/1El10gsKi65OUYQ9X6tie6XdY5ZRRj2NCy/c2Gb5g= Subject key identifier: 3E:B6:B0:16:FB:06:CC:B8:17:80:B7:66:CD:77:F5:09:98:29:B3:2D Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Certificate serial: 019B435BF312198C3FA7FF5383B941617478 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft Manifest number: 0776 Signing time: Mon 22 Dec 2025 00:00:57 +0000 Manifest this update: Mon 22 Dec 2025 00:00:57 +0000 Manifest next update: Tue 23 Dec 2025 00:00:57 +0000 Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: 2xJHAzl71o1E0nprLsrTqkRIK8JvXAELu+r0FRz+9pk=) 2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:f3:12:19:8c:3f:a7:ff:53:83:b9:41:61:74:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Validity Not Before: Dec 22 00:00:57 2025 GMT Not After : Dec 23 00:00:57 2025 GMT Subject: CN=3eb6b016fb06ccb81780b766cd77f5099829b32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:69:b9:68:91:11:25:2d:47:ed:eb:bb:da: 2f:db:5a:3e:9f:4b:66:ee:26:63:89:ee:37:1f:ff: b9:8b:6b:83:26:90:89:06:2a:43:9e:e7:ea:b7:4f: ef:7f:a1:35:6c:35:15:d7:b8:51:41:5d:99:59:7c: 77:1a:0c:b1:a5:96:05:1d:f8:08:80:ac:d8:de:ea: eb:a6:28:f6:6f:ad:81:f7:fa:4b:e0:5c:8e:13:78: 15:1a:0d:ad:e2:23:f2:49:9b:60:d9:d8:31:fe:60: e8:78:6c:fd:7f:12:51:f8:3f:26:db:3e:e5:6d:57: e8:61:2a:7f:86:64:44:93:b5:9c:25:e2:58:a6:14: 9c:e4:6d:93:81:c0:ae:79:9e:c7:f7:e1:29:ca:55: 58:44:e0:8f:69:69:25:e2:fd:0d:14:ea:d8:ca:63: fc:19:c0:8f:33:f8:a0:9a:30:06:32:16:51:84:37: fc:75:6d:bb:39:e1:5a:d1:79:bd:1d:01:a1:2e:df: 03:dc:6b:ab:fd:85:79:3c:63:3a:f8:b0:7b:45:f0: 38:7e:07:5e:e6:02:47:71:85:ad:48:28:a2:00:1a: 7b:8f:00:b4:19:3e:90:73:e4:1f:13:9f:a1:32:09: e7:9c:da:67:5e:12:15:ca:48:0f:4d:3a:67:fa:82: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B6:B0:16:FB:06:CC:B8:17:80:B7:66:CD:77:F5:09:98:29:B3:2D X509v3 Authority Key Identifier: keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:52:58:b3:ee:ce:6e:16:92:fb:82:60:c2:7f:06:37:fb:74: b8:7a:56:f7:48:2b:df:56:08:9b:49:cf:7b:1a:0d:64:33:40: e4:49:b5:29:cf:1c:d0:19:28:25:53:cc:a1:63:33:17:c7:40: f2:ee:8b:2d:b9:3d:b2:4f:5c:e7:c7:c3:83:51:ea:f5:3a:06: 5b:1f:ff:57:c7:41:b6:9d:cc:4c:39:c7:85:ab:60:b7:ab:a0: 9a:34:62:40:a5:2d:c0:79:7a:43:c7:bf:29:8f:e3:5a:6e:7d: f9:9d:38:d9:24:26:ac:2a:83:a1:bc:6b:45:a8:fb:f8:d0:5a: 0d:ae:c8:4b:5b:f7:37:ab:fb:e7:56:bd:b1:7f:54:72:36:19: 5b:29:6d:a5:7e:d5:c9:2e:05:d1:b4:1f:69:84:6e:ee:91:be: 1b:80:a6:bc:06:98:81:39:ba:6c:9e:cf:7d:71:7f:dd:23:fc: 78:03:3d:80:7b:2a:e1:ee:de:d1:a4:1d:a4:13:e1:89:55:33: 03:65:d7:ef:18:dd:b9:57:48:4a:22:c9:0c:1c:32:34:31:44: 0c:37:d3:ae:5f:52:ee:59:99:06:d7:c9:74:9a:76:c4:27:2a: e7:6a:d5:fc:51:76:13:46:fa:bb:99:32:ff:67:72:77:cc:c1: 50:72:a5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW/MSGYw/p/9Tg7lBYXR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk YmNhMDYwHhcNMjUxMjIyMDAwMDU3WhcNMjUxMjIzMDAwMDU3WjAzMTEwLwYDVQQD EygzZWI2YjAxNmZiMDZjY2I4MTc4MGI3NjZjZDc3ZjUwOTk4MjliMzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf1puWiRESUtR+3ru9ov21o+n0tm 7iZjie43H/+5i2uDJpCJBipDnufqt0/vf6E1bDUV17hRQV2ZWXx3GgyxpZYFHfgI gKzY3urrpij2b62B9/pL4FyOE3gVGg2t4iPySZtg2dgx/mDoeGz9fxJR+D8m2z7l bVfoYSp/hmREk7WcJeJYphSc5G2TgcCueZ7H9+EpylVYROCPaWkl4v0NFOrYymP8 GcCPM/igmjAGMhZRhDf8dW27OeFa0Xm9HQGhLt8D3Gur/YV5PGM6+LB7RfA4fgde 5gJHcYWtSCiiABp7jwC0GT6Qc+QfE5+hMgnnnNpnXhIVykgPTTpn+oIR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD62sBb7Bsy4F4C3Zs139QmYKbMtMB8GA1UdIwQY MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFJYs+7O bhaS+4Jgwn8GN/t0uHpW90gr31YIm0nPexoNZDNA5Em1Kc8c0BkoJVPMoWMzF8dA 8u6LLbk9sk9c58fDg1Hq9ToGWx//V8dBtp3MTDnHhatgt6ugmjRiQKUtwHl6Q8e/ KY/jWm59+Z042SQmrCqDobxrRaj7+NBaDa7IS1v3N6v751a9sX9UcjYZWyltpX7V yS4F0bQfaYRu7pG+G4CmvAaYgTm6bJ7PfXF/3SP8eAM9gHsq4e7e0aQdpBPhiVUz A2XX7xjduVdISiLJDBwyNDFEDDfTrl9S7lmZBtfJdJp2xCcq52rV/FF2E0b6u5ky /2dyd8zBUHKluA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:31:01 2025 by rpki-client