This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json) Hash identifier: 0/znIqsVS1PilwAmK3BmK5unto7ErP83s0MbfAuOeQ8= Subject key identifier: 6F:B4:D1:BB:D8:60:6A:13:71:9A:3F:A8:49:8B:FB:4D:97:AC:66:B8 Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Certificate serial: 019B45140717E671326733793916B9BC74DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft Manifest number: 0EEC Signing time: Mon 22 Dec 2025 08:01:38 +0000 Manifest this update: Mon 22 Dec 2025 08:01:38 +0000 Manifest next update: Tue 23 Dec 2025 08:01:38 +0000 Files and hashes: 1: Q4-WTo5cCXeD-w1sheBv_gjD51g.roa (hash: YXa3b/p8YeGWH77UlVMEIh9uzLUPpaYfJzmKNDjEbns=) 2: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: JLtl5Omh73TlnGNF0vx0sc38XlyUaulzZMh0aFKQoTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:14:07:17:e6:71:32:67:33:79:39:16:b9:bc:74:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df Validity Not Before: Dec 22 08:01:38 2025 GMT Not After : Dec 23 08:01:38 2025 GMT Subject: CN=6fb4d1bbd8606a13719a3fa8498bfb4d97ac66b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:8c:b8:21:fa:a4:be:84:aa:43:10:d6:a3: eb:90:5d:02:ba:57:e3:4e:c6:fa:a8:4f:d1:ba:b3: b8:84:ef:b1:f8:22:3d:75:02:c0:6b:c0:9c:79:4f: ea:ce:aa:04:28:5e:33:30:6e:6f:50:5a:2c:f4:86: bf:4f:25:58:2f:04:a4:6e:8c:9c:b8:b8:f1:7c:17: 3d:51:d6:1a:ec:ed:8a:01:66:3e:e5:9f:76:83:3b: ba:0a:91:40:90:1b:ea:93:61:05:d2:b5:e8:7b:42: 1b:4d:fc:cd:c5:37:36:9a:67:a9:ac:e1:25:66:3b: 77:7d:8b:a1:e2:df:5e:1b:8f:06:84:d4:fe:88:a0: b2:07:d5:48:c0:a8:44:5d:e8:eb:ad:da:75:35:57: f0:ea:db:70:65:ed:5d:80:23:bb:4b:29:f5:96:90: 8d:95:3a:46:44:45:1b:99:11:20:19:65:47:2f:b3: 37:b6:65:86:61:fb:a1:9d:8d:7a:7f:ab:24:c5:e0: d1:28:5e:50:da:f3:2e:25:e7:2d:41:2a:5d:9b:2a: df:44:95:4d:23:00:2f:7d:23:5a:4a:e3:8f:c9:b9: 08:9a:b8:91:7e:df:ac:48:18:c5:69:4e:ad:aa:c8: 8b:d6:65:69:6d:09:cd:ef:80:38:07:b5:43:6a:b2: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B4:D1:BB:D8:60:6A:13:71:9A:3F:A8:49:8B:FB:4D:97:AC:66:B8 X509v3 Authority Key Identifier: keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:74:f8:3b:b2:58:87:5e:d7:a6:95:35:7e:79:fc:7c:90:cc: 99:2b:12:b0:63:68:39:0e:28:77:66:e2:e0:46:5f:8c:29:11: ee:c8:b9:88:36:6b:a0:d5:40:5c:b3:a4:61:d3:c7:0c:d3:46: 96:f8:2a:4d:e8:71:81:b8:73:a5:15:3c:be:7b:11:02:d1:45: 87:a8:ea:b3:35:da:04:3a:71:5d:26:81:de:ce:30:2b:58:f2: 53:26:9c:93:09:f0:67:65:14:6a:3b:16:be:a7:9e:87:19:f2: c8:03:89:6d:8c:26:7b:e2:36:26:28:4c:d2:5d:96:f1:6a:1c: 4b:d0:7e:27:26:78:9c:92:26:2e:72:5a:b8:f6:cb:c9:c9:cd: 90:0b:41:be:72:de:9f:9d:3b:b8:c6:30:ef:74:94:5b:f2:78: 2c:9d:b4:bd:c8:7e:a3:80:bb:96:b9:3b:1a:97:89:eb:4d:f7: d9:f1:77:5c:b3:e2:c1:c9:d9:ee:70:a0:87:3f:41:75:b2:0e: 60:03:4e:62:7e:ea:88:87:6a:27:2e:ed:31:b7:e1:53:3c:88: 42:c8:a4:78:b4:31:d6:7a:0d:fd:a3:d6:a7:22:e0:ad:e2:6e: ae:3f:04:a2:0f:e3:2f:87:a8:8f:df:92:6d:d8:f6:ff:63:24: 88:09:ee:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFFAcX5nEyZzN5ORa5vHTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2NiN2Q5ODJjN2Y5ZWRiYzkzZDRjYjQyYjk0ZmEwMjlj MzgyZGYwHhcNMjUxMjIyMDgwMTM4WhcNMjUxMjIzMDgwMTM4WjAzMTEwLwYDVQQD Eyg2ZmI0ZDFiYmQ4NjA2YTEzNzE5YTNmYTg0OThiZmI0ZDk3YWM2NmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt16MuCH6pL6EqkMQ1qPrkF0Culfj Tsb6qE/RurO4hO+x+CI9dQLAa8CceU/qzqoEKF4zMG5vUFos9Ia/TyVYLwSkboyc uLjxfBc9UdYa7O2KAWY+5Z92gzu6CpFAkBvqk2EF0rXoe0IbTfzNxTc2mmeprOEl Zjt3fYuh4t9eG48GhNT+iKCyB9VIwKhEXejrrdp1NVfw6ttwZe1dgCO7Syn1lpCN lTpGREUbmREgGWVHL7M3tmWGYfuhnY16f6skxeDRKF5Q2vMuJectQSpdmyrfRJVN IwAvfSNaSuOPybkImriRft+sSBjFaU6tqsiL1mVpbQnN74A4B7VDarLX/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+00bvYYGoTcZo/qEmL+02XrGa4MB8GA1UdIwQY MBaAFF48t9mCx/ntvJPUy0K5T6Apw4LfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYt OWYyY2M2NGUwNzQ1LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZjhiYjgtNjM0Mi00NDBmLWIwNWYtOWYyY2M2NGUwNzQ1 LzEvWGp5MzJZTEgtZTI4azlUTFFybFBvQ25EZ3Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHT4O7JY h17XppU1fnn8fJDMmSsSsGNoOQ4od2bi4EZfjCkR7si5iDZroNVAXLOkYdPHDNNG lvgqTehxgbhzpRU8vnsRAtFFh6jqszXaBDpxXSaB3s4wK1jyUyackwnwZ2UUajsW vqeehxnyyAOJbYwme+I2JihM0l2W8WocS9B+JyZ4nJImLnJauPbLycnNkAtBvnLe n507uMYw73SUW/J4LJ20vch+o4C7lrk7GpeJ60332fF3XLPiwcnZ7nCghz9BdbIO YANOYn7qiIdqJy7tMbfhUzyIQsikeLQx1noN/aPWpyLgreJurj8Eog/jL4eoj9+S bdj2/2MkiAnu/g== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:25 2025 by rpki-client