This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json) Hash identifier: xsAwn607o+53NBsPLTMJMhj8gtn1MLuIeAO9d86DD68= Subject key identifier: 22:27:D7:65:F5:B2:97:DC:BC:1B:F7:92:9C:3A:EB:DF:D6:6E:2A:1F Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Certificate serial: 019B39B41F9D63016853872E8853783CABD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft Manifest number: 06BC Signing time: Sat 20 Dec 2025 03:01:04 +0000 Manifest this update: Sat 20 Dec 2025 03:01:04 +0000 Manifest next update: Sun 21 Dec 2025 03:01:04 +0000 Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=) 2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: PNLxwo2vqxkGbogxf5Bddl5zIJ9SVpHk2V6vyV4q7ZE=) 3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:1f:9d:63:01:68:53:87:2e:88:53:78:3c:ab:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Validity Not Before: Dec 20 03:01:04 2025 GMT Not After : Dec 21 03:01:04 2025 GMT Subject: CN=2227d765f5b297dcbc1bf7929c3aebdfd66e2a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:f1:89:2d:d9:85:e0:06:9b:aa:32:83:99: 97:4a:7d:d1:e2:33:35:4a:69:ea:79:c4:3c:0d:3d: 80:23:6e:03:a6:2a:d1:7e:21:b8:19:e9:8e:64:e0: 3f:68:3a:21:b9:32:b3:53:f5:37:19:4e:11:25:3e: 10:5f:f2:55:db:7c:bc:49:1b:cd:28:5a:b2:6a:53: cd:89:94:15:1d:98:0d:18:62:6a:1e:60:ec:6a:8f: 4f:b6:1c:75:f2:3d:e3:59:9b:61:b4:fc:25:26:4e: 5f:89:4d:92:1b:e0:44:93:66:05:72:f9:38:76:24: 59:77:11:9e:8e:df:bf:7d:98:d7:2b:e8:68:45:62: bc:6d:d8:33:9d:bb:99:28:68:b8:8f:3f:28:db:7a: 57:c2:4e:1e:60:27:34:df:7d:e5:64:74:2b:a8:4b: c5:8b:ba:dd:ba:da:cd:fb:d9:a4:cc:7c:5e:9b:66: a6:18:b6:5b:a1:ef:c5:5b:b4:04:b4:8a:e0:44:f1: e3:8d:cc:de:c6:26:4d:94:89:3f:29:42:74:11:ad: cc:78:91:a6:16:08:05:e9:35:e1:4b:c3:d9:6e:32: da:2c:ac:8c:00:6f:8e:63:15:65:db:83:c7:07:49: 78:e9:1f:69:28:5e:29:62:c9:ed:e8:cb:c4:b5:20: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:27:D7:65:F5:B2:97:DC:BC:1B:F7:92:9C:3A:EB:DF:D6:6E:2A:1F X509v3 Authority Key Identifier: keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:61:be:cd:de:80:cf:b6:32:4b:8e:36:dd:fa:ac:26:6c:90: 13:32:26:4b:28:20:67:c7:ae:1d:d3:12:6f:ee:5a:f9:78:2d: d4:51:04:f7:03:7d:62:8f:1a:cd:7f:73:e8:e3:45:28:6f:3a: 65:2b:7c:01:77:7e:04:2b:5e:ca:10:7e:a6:b8:21:84:ed:09: 66:19:3a:7e:4e:a2:4a:a3:61:49:9a:1c:ff:7d:85:6f:e3:c7: 15:27:76:f7:d5:33:51:a0:bf:51:07:e6:48:e7:0e:a0:b9:45: 8e:8d:a1:6c:ef:7b:be:d4:2b:19:d7:9d:b0:96:8b:65:71:8a: e2:f4:d4:75:83:f9:97:33:e0:3c:95:f0:b1:0a:9d:d1:73:72: ae:b6:b0:fe:24:1c:dc:11:f6:af:05:17:79:26:cd:30:4f:00: a9:b5:9e:44:74:a2:4f:2c:ef:2c:fc:1d:74:01:c7:a2:9d:23: 0d:ba:92:6b:b6:0f:43:e0:9c:6f:0a:29:ac:95:61:b9:9d:d4: 1e:35:11:a4:69:01:55:03:90:c8:80:81:88:6b:44:9e:61:32: 35:57:30:d3:01:2b:fd:cb:94:2f:43:a3:ea:9b:cb:92:0a:d4: 85:f4:33:01:4b:f6:42:a6:56:d1:82:3e:29:6e:07:5f:b7:d2: 87:03:48:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tB+dYwFoU4cuiFN4PKvZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0 ZjRlOWEwHhcNMjUxMjIwMDMwMTA0WhcNMjUxMjIxMDMwMTA0WjAzMTEwLwYDVQQD EygyMjI3ZDc2NWY1YjI5N2RjYmMxYmY3OTI5YzNhZWJkZmQ2NmUyYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ3xiS3ZheAGm6oyg5mXSn3R4jM1 SmnqecQ8DT2AI24DpirRfiG4GemOZOA/aDohuTKzU/U3GU4RJT4QX/JV23y8SRvN KFqyalPNiZQVHZgNGGJqHmDsao9Pthx18j3jWZthtPwlJk5fiU2SG+BEk2YFcvk4 diRZdxGejt+/fZjXK+hoRWK8bdgznbuZKGi4jz8o23pXwk4eYCc0333lZHQrqEvF i7rdutrN+9mkzHxem2amGLZboe/FW7QEtIrgRPHjjczexiZNlIk/KUJ0Ea3MeJGm FggF6TXhS8PZbjLaLKyMAG+OYxVl24PHB0l46R9pKF4pYsnt6MvEtSC18QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIn12X1spfcvBv3kpw669/WbiofMB8GA1UdIwQY MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmG+zd6A z7YyS4423fqsJmyQEzImSyggZ8euHdMSb+5a+Xgt1FEE9wN9Yo8azX9z6ONFKG86 ZSt8AXd+BCteyhB+prghhO0JZhk6fk6iSqNhSZoc/32Fb+PHFSd299UzUaC/UQfm SOcOoLlFjo2hbO97vtQrGdedsJaLZXGK4vTUdYP5lzPgPJXwsQqd0XNyrraw/iQc 3BH2rwUXeSbNME8AqbWeRHSiTyzvLPwddAHHop0jDbqSa7YPQ+CcbwoprJVhuZ3U HjURpGkBVQOQyICBiGtEnmEyNVcw0wEr/cuUL0Oj6pvLkgrUhfQzAUv2QqZW0YI+ KW4HX7fShwNI5A== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:34 2025 by rpki-client