This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json) Hash identifier: TNtl7Zu4DepNS27MMVfs8hJIfGn6s22hl05owAILN/k= Subject key identifier: 24:40:F3:02:CC:12:56:77:0C:79:21:18:47:B8:60:E8:9B:17:24:08 Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Certificate serial: 019B50E08A118FE139E7088D55F7E6F58A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft Manifest number: 1723 Signing time: Wed 24 Dec 2025 15:00:51 +0000 Manifest this update: Wed 24 Dec 2025 15:00:51 +0000 Manifest next update: Thu 25 Dec 2025 15:00:51 +0000 Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=) 2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: Ko9n3Tz9vppzykgq9Momv0RTX1pA7Ol88xPTT0BkWGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:8a:11:8f:e1:39:e7:08:8d:55:f7:e6:f5:8a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Validity Not Before: Dec 24 15:00:51 2025 GMT Not After : Dec 25 15:00:51 2025 GMT Subject: CN=2440f302cc1256770c79211847b860e89b172408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:69:18:8e:83:d3:94:a3:f7:22:ee:8c:22:ac: b4:36:f7:d0:b4:e5:69:ac:00:56:a4:3e:6c:a9:fa: de:a2:35:06:31:a4:83:3a:e4:ab:3d:66:87:98:f6: 65:56:ad:61:61:5a:10:a9:af:a0:0b:1c:53:4d:53: 5f:1a:91:7b:40:e0:af:15:5d:01:e2:15:32:3f:2e: 1a:ec:ec:d0:fe:f9:6f:0f:2f:a1:75:ac:5a:45:3f: c5:0b:31:f6:5e:ee:c4:13:cb:9f:16:35:0d:c8:05: f6:84:22:cc:62:38:c9:20:0f:b5:3e:89:81:90:e1: 95:04:04:33:54:7f:84:2e:12:57:15:1b:aa:1d:dd: 2c:2d:7e:99:d6:fd:7e:c0:be:d6:cf:a4:73:29:a3: cf:f8:28:bc:37:d9:51:9f:19:71:4c:e1:d8:d4:7d: 1c:1d:af:6a:32:a0:2c:0d:5d:97:c5:20:dd:25:a3: 3f:a2:49:f6:5f:37:f5:3b:3d:1c:8e:7b:e2:44:e3: 5a:f4:11:03:2a:27:fb:d7:ec:06:7f:d6:67:5e:e7: 2f:9d:8b:61:8e:9c:2e:9e:2c:ce:6d:86:42:72:2e: b9:05:34:d9:09:ae:72:ed:3a:d4:24:b2:81:ae:8e: 82:66:12:31:80:7c:f6:e3:c0:1c:bf:44:02:62:ab: b3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:F3:02:CC:12:56:77:0C:79:21:18:47:B8:60:E8:9B:17:24:08 X509v3 Authority Key Identifier: keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:1e:47:19:17:ef:f8:08:42:50:2f:65:dc:83:c5:ff:54:18: b1:94:25:c1:19:de:64:57:f1:99:88:ab:3d:14:4a:1e:09:c0: fe:4e:d6:0c:8b:de:92:2b:42:ff:5a:3e:76:71:74:d5:de:30: 9e:80:3b:41:d4:a7:dc:77:e1:08:82:98:e3:e0:68:33:32:39: ac:be:25:f2:80:75:e2:0f:f4:a4:0e:2f:d8:05:28:4b:9f:0b: 63:cb:80:9a:e2:13:55:8c:86:8a:94:87:ab:9b:85:d4:a4:9c: 58:45:49:5c:94:94:ce:62:0e:57:ca:e3:56:bb:ac:7d:c4:15: 5d:ef:b7:d8:14:37:3d:e1:16:7a:54:5c:81:81:10:f6:3a:d5: b4:28:de:8e:ab:2d:f5:cf:e5:90:a8:29:4d:e0:96:64:16:df: d6:9e:6f:89:85:62:de:e5:87:aa:5c:2c:a9:42:d6:1c:b2:3b: 18:e7:74:44:c1:a8:0a:c0:17:56:0f:c3:c7:aa:e6:db:8f:ae: 85:a0:4a:2a:cc:3c:f0:5d:31:9c:04:a9:c0:e7:2b:e1:71:36: 22:b6:cf:cd:f3:4a:78:02:f1:63:ad:33:18:e6:02:99:1a:1b: f3:64:2e:ae:2e:e6:46:ed:21:1d:dd:50:84:9b:a2:e5:ae:6a: b6:53:11:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4IoRj+E55wiNVffm9YqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTgxMDU1N2NiMDY3MGJjOWMwOTMzZTAyN2U5YmQ4MmFi MTU2ZGYwHhcNMjUxMjI0MTUwMDUxWhcNMjUxMjI1MTUwMDUxWjAzMTEwLwYDVQQD EygyNDQwZjMwMmNjMTI1Njc3MGM3OTIxMTg0N2I4NjBlODliMTcyNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9WkYjoPTlKP3Iu6MIqy0NvfQtOVp rABWpD5sqfreojUGMaSDOuSrPWaHmPZlVq1hYVoQqa+gCxxTTVNfGpF7QOCvFV0B 4hUyPy4a7OzQ/vlvDy+hdaxaRT/FCzH2Xu7EE8ufFjUNyAX2hCLMYjjJIA+1PomB kOGVBAQzVH+ELhJXFRuqHd0sLX6Z1v1+wL7Wz6RzKaPP+Ci8N9lRnxlxTOHY1H0c Ha9qMqAsDV2XxSDdJaM/okn2Xzf1Oz0cjnviRONa9BEDKif71+wGf9ZnXucvnYth jpwunizObYZCci65BTTZCa5y7TrUJLKBro6CZhIxgHz248Acv0QCYquzrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRA8wLMElZ3DHkhGEe4YOibFyQIMB8GA1UdIwQY MBaAFF5YEFV8sGcLycCTPgJ+m9gqsVbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAt YTQ0MDdhNWQzMjFhLzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAtYTQ0MDdhNWQzMjFh LzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApR5HGRfv +AhCUC9l3IPF/1QYsZQlwRneZFfxmYirPRRKHgnA/k7WDIvekitC/1o+dnF01d4w noA7QdSn3HfhCIKY4+BoMzI5rL4l8oB14g/0pA4v2AUoS58LY8uAmuITVYyGipSH q5uF1KScWEVJXJSUzmIOV8rjVrusfcQVXe+32BQ3PeEWelRcgYEQ9jrVtCjejqst 9c/lkKgpTeCWZBbf1p5viYVi3uWHqlwsqULWHLI7GOd0RMGoCsAXVg/Dx6rm24+u haBKKsw88F0xnASpwOcr4XE2IrbPzfNKeALxY60zGOYCmRob82Quri7mRu0hHd1Q hJui5a5qtlMRdw== -----END CERTIFICATE-----Generated at Wed Dec 24 21:35:33 2025 by rpki-client