This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json) Hash identifier: 0BdGxCemxvg41p5qIt42AoZfnQfskVcEtZVyzp1RJuc= Subject key identifier: 63:CC:50:55:08:19:BF:0A:C4:92:A1:EB:F5:09:98:A2:F9:D2:30:5E Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Certificate serial: 019B3EA3726167BD07AEC1F23D1F39EEC54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft Manifest number: 0DB4 Signing time: Sun 21 Dec 2025 02:00:57 +0000 Manifest this update: Sun 21 Dec 2025 02:00:57 +0000 Manifest next update: Mon 22 Dec 2025 02:00:57 +0000 Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=) 2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: mjWesGgYTsIKmZR6iq1ApvwvZTFh18JSGNze9MGTtmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:72:61:67:bd:07:ae:c1:f2:3d:1f:39:ee:c5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Validity Not Before: Dec 21 02:00:57 2025 GMT Not After : Dec 22 02:00:57 2025 GMT Subject: CN=63cc50550819bf0ac492a1ebf50998a2f9d2305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:9f:3c:18:78:fc:57:dd:4a:69:a0:4a:93: 69:68:e4:49:de:21:67:2c:27:de:ea:1d:a2:35:c6: ee:b4:52:0f:c4:34:43:88:3d:3d:c7:95:cf:00:b0: 05:66:cf:12:8c:f0:99:0b:2d:22:51:e9:07:21:29: 51:f7:19:92:06:5d:63:65:3f:46:f9:4f:67:8a:84: 8e:af:05:46:16:fe:8f:e4:de:5d:da:ce:4a:2f:0a: ce:45:9c:35:aa:aa:57:f7:bd:bf:bb:79:e2:c1:21: 3a:8d:c0:f1:cb:2a:c6:23:1d:9e:9b:ba:67:fb:b3: 85:f2:5b:51:97:a4:c3:7a:b3:d8:60:bb:53:fb:44: 96:64:38:bf:fd:da:05:00:77:ee:b5:c7:c1:46:05: 35:08:61:ce:4b:46:6a:16:14:f1:a0:22:1a:f7:57: 6a:a6:00:52:9a:51:12:b8:11:e4:10:9e:70:9e:c1: 0a:a0:f2:df:5b:be:3d:17:c8:3e:96:a2:d6:16:a4: a6:e7:b3:8d:b0:2e:d0:6e:ef:e3:98:34:c3:27:a9: c1:d2:19:fb:32:f0:68:45:d6:d7:d9:2c:dc:2d:3a: aa:72:bb:d4:53:51:2c:65:4e:72:07:2f:d7:da:bd: 5a:ab:3e:d4:63:78:ab:b2:14:4c:b9:c1:89:63:9a: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CC:50:55:08:19:BF:0A:C4:92:A1:EB:F5:09:98:A2:F9:D2:30:5E X509v3 Authority Key Identifier: keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e8:a3:fe:af:50:b4:f9:6c:f3:b0:70:d5:2f:a0:9f:f2:8f: d3:28:a6:2f:10:83:b7:d2:e2:46:41:50:95:3f:59:62:4c:ce: c7:92:bd:cf:50:f8:30:62:65:23:28:33:e1:62:8d:75:33:d6: 2d:4c:c1:14:b7:9d:c7:e6:b6:6d:36:22:c0:00:0d:30:bf:78: a6:13:59:b3:35:dd:e3:ac:03:31:dc:ea:12:e2:9c:da:b2:d6: 78:23:5f:ee:ac:bc:4f:4d:32:28:ee:6e:35:cb:97:ab:e6:39: d4:4f:de:16:8e:13:88:0e:5a:34:8b:59:a5:31:54:4f:8f:85: fd:81:d6:b3:73:f2:f2:81:ea:a1:a2:ac:0a:a9:5e:9e:7c:c7: e5:0e:63:12:bd:80:c4:20:6b:9c:b5:16:80:95:58:f6:6b:a5: 3d:e7:69:d7:07:9d:d4:e6:f8:51:5e:b2:55:f9:e3:9f:d3:34: 5f:7a:06:9f:fd:8c:d2:4f:32:5d:de:a5:37:75:dc:47:71:4a: 8b:1e:35:50:b3:3d:41:4e:51:45:06:f3:5f:18:0d:67:7e:2c: 1c:2e:d9:22:77:67:8d:c4:1c:d4:d9:c5:00:d0:0b:a3:44:26: 94:47:60:11:52:70:c1:e2:36:be:b7:f7:65:61:e0:98:05:c9: 61:41:2b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3JhZ70HrsHyPR857sVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjgxM2UwOWM5OTU1ZTBiZGE3MDQxZjgzNzNhOGZjNWRh ZTZiOWQwHhcNMjUxMjIxMDIwMDU3WhcNMjUxMjIyMDIwMDU3WjAzMTEwLwYDVQQD Eyg2M2NjNTA1NTA4MTliZjBhYzQ5MmExZWJmNTA5OThhMmY5ZDIzMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU+fPBh4/FfdSmmgSpNpaORJ3iFn LCfe6h2iNcbutFIPxDRDiD09x5XPALAFZs8SjPCZCy0iUekHISlR9xmSBl1jZT9G +U9nioSOrwVGFv6P5N5d2s5KLwrORZw1qqpX972/u3niwSE6jcDxyyrGIx2em7pn +7OF8ltRl6TDerPYYLtT+0SWZDi//doFAHfutcfBRgU1CGHOS0ZqFhTxoCIa91dq pgBSmlESuBHkEJ5wnsEKoPLfW749F8g+lqLWFqSm57ONsC7Qbu/jmDTDJ6nB0hn7 MvBoRdbX2SzcLTqqcrvUU1EsZU5yBy/X2r1aqz7UY3irshRMucGJY5oevQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPMUFUIGb8KxJKh6/UJmKL50jBeMB8GA1UdIwQY MBaAFFy4E+CcmVXgvacEH4NzqPxdrmudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEt NmM2MmI5MzY2NzA1LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEtNmM2MmI5MzY2NzA1 LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOij/q9Q tPls87Bw1S+gn/KP0yimLxCDt9LiRkFQlT9ZYkzOx5K9z1D4MGJlIygz4WKNdTPW LUzBFLedx+a2bTYiwAANML94phNZszXd46wDMdzqEuKc2rLWeCNf7qy8T00yKO5u NcuXq+Y51E/eFo4TiA5aNItZpTFUT4+F/YHWs3Py8oHqoaKsCqlennzH5Q5jEr2A xCBrnLUWgJVY9mulPedp1wed1Ob4UV6yVfnjn9M0X3oGn/2M0k8yXd6lN3XcR3FK ix41ULM9QU5RRQbzXxgNZ34sHC7ZIndnjcQc1NnFANALo0QmlEdgEVJwweI2vrf3 ZWHgmAXJYUEruQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:31 2025 by rpki-client