This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft File: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft (raw, json) Hash identifier: hHRDAu+21hbq4yIh+8IGS1uwENgNWBJ13IMGagJHUPE= Subject key identifier: 82:51:E8:CA:18:3B:9B:7A:B0:13:9D:9A:1F:BF:AB:27:68:4A:82:6C Authority key identifier: 5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 Certificate issuer: /CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Certificate serial: 019B3CEC062E9131B780B41A0D7438B8BB10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft Manifest number: 11E1 Signing time: Sat 20 Dec 2025 18:00:59 +0000 Manifest this update: Sat 20 Dec 2025 18:00:59 +0000 Manifest next update: Sun 21 Dec 2025 18:00:59 +0000 Files and hashes: 1: XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl (hash: Zc3zptRYVkp8iYFZJdFtCD2zdSoACDuInkWAqdUKVj8=) 2: o5qKOTRfTPnYThdIYO9xUeKi2sc.roa (hash: EOStnDBrp4FRFcFGDjBhhWwMtuAGb36N8+2XArtelwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:06:2e:91:31:b7:80:b4:1a:0d:74:38:b8:bb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c02f981bee79521a304b68f667feaed81ea3ff6 Validity Not Before: Dec 20 18:00:59 2025 GMT Not After : Dec 21 18:00:59 2025 GMT Subject: CN=8251e8ca183b9b7ab0139d9a1fbfab27684a826c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:70:d3:5a:0e:09:25:0d:eb:a9:2e:7d:96:6a: 0d:3b:53:73:cb:74:a2:6d:49:f8:6d:40:f5:bd:d9: ac:7e:11:95:81:9c:e0:4d:bb:61:45:cd:51:39:ef: 43:37:47:3c:15:8d:94:1c:03:fa:2f:7b:d5:81:d2: f5:53:60:91:6d:47:c2:ef:4c:30:15:ea:64:c8:c3: 82:fc:ff:84:ea:9a:48:7d:9c:04:0a:e4:43:4c:70: b1:20:54:59:64:e0:1f:50:56:d1:58:67:10:dc:f7: 5f:30:e7:28:26:a5:7b:84:ae:09:cd:2e:d8:99:59: c5:2d:74:ae:44:0c:6b:fb:42:51:14:e3:83:d0:51: e3:80:60:e4:ab:d8:f4:76:1c:f3:12:b9:8b:2c:b1: 3f:dd:45:19:f8:7c:74:e1:1b:27:21:2b:d5:3b:8b: bf:e4:54:57:f4:4e:fa:ff:f6:37:a8:56:6c:b0:20: 91:e3:07:13:cf:d6:9c:4a:e2:28:06:32:7b:13:bc: 4b:bf:11:c5:d2:47:1f:75:eb:99:45:b4:7a:92:b2: d3:78:68:84:a1:d4:a8:6b:77:56:85:bf:29:1f:a5: 86:6d:fb:f6:c3:c7:b3:83:fb:21:3e:f4:f2:22:1f: 24:8b:39:37:38:b8:f6:58:87:d2:20:ce:43:2b:80: b7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:E8:CA:18:3B:9B:7A:B0:13:9D:9A:1F:BF:AB:27:68:4A:82:6C X509v3 Authority Key Identifier: keyid:5C:02:F9:81:BE:E7:95:21:A3:04:B6:8F:66:7F:EA:ED:81:EA:3F:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7c3c40-87a1-482b-97f3-37d2b032ba57/1/XAL5gb7nlSGjBLaPZn_q7YHqP_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:55:71:68:43:4b:50:ea:01:ee:62:35:49:db:8e:92:c9:e1: c2:01:ca:17:9f:be:79:86:6f:79:2b:43:bf:fa:0c:22:d6:1f: ed:1f:3f:9d:b2:b3:a1:ba:8d:29:92:43:8d:33:0e:99:ef:3e: 7f:31:b6:56:e5:08:25:75:f5:7b:30:52:60:d5:ec:6b:64:55: c8:81:fc:4a:26:dd:16:97:f0:fc:f3:27:be:e9:05:90:a1:eb: 37:fb:d9:4a:79:82:7d:48:d8:80:8a:13:af:af:59:7a:d3:bc: 41:fc:f9:93:f8:e6:76:3a:ed:71:cb:0d:12:04:17:e3:40:7e: 28:a7:2f:9b:cd:e6:1f:65:c1:6f:65:a4:04:57:dd:d3:05:74: de:06:52:9b:44:10:ee:1e:b3:6e:70:08:21:55:c0:37:75:f3: 96:b5:c7:82:60:b0:06:44:a0:3e:ec:34:70:2c:c0:16:a7:c3: 48:49:02:b8:e4:b0:e3:0f:79:ab:e8:33:1d:e1:24:73:4f:32: ad:f7:2c:1a:d4:87:b0:d7:1a:2d:79:2d:2d:f0:6f:88:ba:47: 85:9d:8c:9c:d7:e8:aa:95:5e:da:60:d2:e5:44:90:dd:f2:92: 5e:d1:e7:00:17:3b:0d:27:73:a1:39:dc:93:6c:b7:76:da:51: 96:ad:83:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87AYukTG3gLQaDXQ4uLsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDJmOTgxYmVlNzk1MjFhMzA0YjY4ZjY2N2ZlYWVkODFl YTNmZjYwHhcNMjUxMjIwMTgwMDU5WhcNMjUxMjIxMTgwMDU5WjAzMTEwLwYDVQQD Eyg4MjUxZThjYTE4M2I5YjdhYjAxMzlkOWExZmJmYWIyNzY4NGE4MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXDTWg4JJQ3rqS59lmoNO1Nzy3Si bUn4bUD1vdmsfhGVgZzgTbthRc1ROe9DN0c8FY2UHAP6L3vVgdL1U2CRbUfC70ww FepkyMOC/P+E6ppIfZwECuRDTHCxIFRZZOAfUFbRWGcQ3PdfMOcoJqV7hK4JzS7Y mVnFLXSuRAxr+0JRFOOD0FHjgGDkq9j0dhzzErmLLLE/3UUZ+Hx04RsnISvVO4u/ 5FRX9E76//Y3qFZssCCR4wcTz9acSuIoBjJ7E7xLvxHF0kcfdeuZRbR6krLTeGiE odSoa3dWhb8pH6WGbfv2w8ezg/shPvTyIh8kizk3OLj2WIfSIM5DK4C34wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJR6MoYO5t6sBOdmh+/qydoSoJsMB8GA1UdIwQY MBaAFFwC+YG+55UhowS2j2Z/6u2B6j/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMt MzdkMmIwMzJiYTU3LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83YzNjNDAtODdhMS00ODJiLTk3ZjMtMzdkMmIwMzJiYTU3 LzEvWEFMNWdiN25sU0dqQkxhUFpuX3E3WUhxUF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFVxaENL UOoB7mI1SduOksnhwgHKF5++eYZveStDv/oMItYf7R8/nbKzobqNKZJDjTMOme8+ fzG2VuUIJXX1ezBSYNXsa2RVyIH8SibdFpfw/PMnvukFkKHrN/vZSnmCfUjYgIoT r69ZetO8Qfz5k/jmdjrtccsNEgQX40B+KKcvm83mH2XBb2WkBFfd0wV03gZSm0QQ 7h6zbnAIIVXAN3XzlrXHgmCwBkSgPuw0cCzAFqfDSEkCuOSw4w95q+gzHeEkc08y rfcsGtSHsNcaLXktLfBviLpHhZ2MnNfoqpVe2mDS5USQ3fKSXtHnABc7DSdzoTnc k2y3dtpRlq2DuA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:08 2025 by rpki-client