This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json) Hash identifier: X6UkS+uCleas16tsBv9KmqSU9897+EqJdSPtu4SkFXk= Subject key identifier: F4:F7:98:B4:82:DC:82:8A:AF:38:6C:3E:DF:84:94:70:07:F1:1B:33 Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Certificate serial: 019B51177371A41A847D814C48DCD714E091 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft Manifest number: 0B7B Signing time: Wed 24 Dec 2025 16:00:49 +0000 Manifest this update: Wed 24 Dec 2025 16:00:49 +0000 Manifest next update: Thu 25 Dec 2025 16:00:49 +0000 Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: bBF0JYpR2PeDlCr7hkkUKy7bv+NdoX3VnhFd3BRh0lY=) 2: gSiRx4os8QFHcIb_8HNB1oNvcB4.roa (hash: xKETz16WqJ7ei2SjBEUSJgDLxyYrlv9+GX/GJKUW2iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:73:71:a4:1a:84:7d:81:4c:48:dc:d7:14:e0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1 Validity Not Before: Dec 24 16:00:49 2025 GMT Not After : Dec 25 16:00:49 2025 GMT Subject: CN=f4f798b482dc828aaf386c3edf84947007f11b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:9c:ed:3a:4b:3e:cf:d6:fd:f3:ec:e2:e9: 5a:8c:02:a1:0c:e4:e6:d8:9d:9a:c4:72:4b:ff:ef: 15:7a:20:b5:77:ec:53:88:19:12:19:71:71:5b:41: 1d:41:bb:aa:d8:24:58:e2:18:89:cd:8e:a4:e8:a6: e7:eb:7c:b5:9f:66:06:22:61:e8:08:74:12:dc:27: 83:62:4b:de:5b:d2:55:fa:d3:78:82:89:ec:2f:34: ee:54:11:b5:ce:87:4e:03:f9:49:b3:50:49:58:82: 06:75:21:f1:c1:89:d0:a9:c4:24:e7:82:25:db:57: 56:76:72:bd:86:b4:60:f5:c5:1a:fb:2f:ff:89:00: 75:f4:eb:e3:f9:7f:33:b0:fe:f3:bc:d0:f0:e7:00: 71:14:47:7d:1e:77:1f:48:f3:f9:d3:bc:11:fd:f2: 71:32:9d:9c:cf:b4:2c:ec:61:e2:3c:f4:9e:c6:f2: 66:57:d1:04:23:23:0d:bd:24:28:82:7c:81:cc:59: 47:6b:c6:37:e7:7d:e8:10:b5:24:87:29:df:3a:3c: 92:99:d1:30:fc:45:a7:a9:09:30:65:7e:d9:72:7b: 34:4c:f1:b8:65:38:11:14:b4:ef:cf:a6:ec:87:0b: 15:b1:bb:2e:23:07:36:4b:5d:b3:5b:e3:2b:2f:e9: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:98:B4:82:DC:82:8A:AF:38:6C:3E:DF:84:94:70:07:F1:1B:33 X509v3 Authority Key Identifier: keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:76:36:b6:49:2c:b7:0b:c8:cb:e4:86:52:fd:48:4b:15:e7: 55:9a:fd:80:89:b9:f4:50:e3:e3:af:f2:2d:15:bc:5e:93:ce: 75:e3:52:69:9c:01:86:46:5a:a0:47:19:49:0f:4e:a6:97:e0: cf:c4:e7:89:5e:5a:eb:7e:ae:e8:07:f0:35:81:7f:e0:1b:83: cb:bc:0d:d7:d8:c1:95:64:4e:00:5c:bb:0d:f6:ee:ad:a1:90: 77:b0:67:0c:1c:bb:81:c9:36:66:7d:ba:76:06:7c:f4:6d:86: de:c1:f7:f5:20:1c:91:6e:a1:ca:2c:93:26:08:21:a6:3f:c2: 8a:ea:44:5f:f2:6a:54:17:59:bf:f1:27:cc:99:aa:e3:b5:7c: 82:89:fa:a1:50:78:dc:2d:9e:24:d1:62:c1:4b:9a:60:d1:ea: dd:61:1d:61:5c:3a:a3:74:76:60:b2:23:63:eb:c9:54:ca:30: b5:0a:62:f0:4b:57:28:a7:67:5e:0d:b0:d5:6d:cb:e9:89:f8: 3d:24:98:ce:83:ef:db:ee:58:d5:c6:ec:fd:bb:53:36:3f:41: f3:ba:d4:de:dd:90:dd:e3:86:d2:87:af:dd:b6:21:8e:44:9a: 38:6a:91:5f:9e:6d:37:3b:61:45:38:4c:a4:da:20:3a:44:be: 8b:c0:46:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF3NxpBqEfYFMSNzXFOCRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2MxM2Y1ZmYxNjlhZmVkODI1Yjc1ZDhmYzA3N2FmY2E1 MGQ2YTEwHhcNMjUxMjI0MTYwMDQ5WhcNMjUxMjI1MTYwMDQ5WjAzMTEwLwYDVQQD EyhmNGY3OThiNDgyZGM4MjhhYWYzODZjM2VkZjg0OTQ3MDA3ZjExYjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKc7TpLPs/W/fPs4ulajAKhDOTm 2J2axHJL/+8VeiC1d+xTiBkSGXFxW0EdQbuq2CRY4hiJzY6k6Kbn63y1n2YGImHo CHQS3CeDYkveW9JV+tN4gonsLzTuVBG1zodOA/lJs1BJWIIGdSHxwYnQqcQk54Il 21dWdnK9hrRg9cUa+y//iQB19Ovj+X8zsP7zvNDw5wBxFEd9HncfSPP507wR/fJx Mp2cz7Qs7GHiPPSexvJmV9EEIyMNvSQognyBzFlHa8Y3533oELUkhynfOjySmdEw /EWnqQkwZX7Zcns0TPG4ZTgRFLTvz6bshwsVsbsuIwc2S12zW+MrL+kDXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT3mLSC3IKKrzhsPt+ElHAH8RszMB8GA1UdIwQY MBaAFF58E/X/Fpr+2CW3XY/Ad6/KUNahMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQt OWU1OWMxMTFhYTM4LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85NGY2NDItNTVmNy00YzFjLTgxZDQtOWU1OWMxMTFhYTM4 LzEvWG53VDlmOFdtdjdZSmJkZGo4QjNyOHBRMXFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnY2tkks twvIy+SGUv1ISxXnVZr9gIm59FDj46/yLRW8XpPOdeNSaZwBhkZaoEcZSQ9Oppfg z8TniV5a636u6AfwNYF/4BuDy7wN19jBlWROAFy7DfburaGQd7BnDBy7gck2Zn26 dgZ89G2G3sH39SAckW6hyiyTJgghpj/CiupEX/JqVBdZv/EnzJmq47V8gon6oVB4 3C2eJNFiwUuaYNHq3WEdYVw6o3R2YLIjY+vJVMowtQpi8EtXKKdnXg2w1W3L6Yn4 PSSYzoPv2+5Y1cbs/btTNj9B87rU3t2Q3eOG0oev3bYhjkSaOGqRX55tNzthRThM pNogOkS+i8BGQA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:36:23 2025 by rpki-client