This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json) Hash identifier: nt8GUT5LsXsUvqgvJvkrv16aqj72osqE2FGMZMPCsFc= Subject key identifier: C4:DE:6A:14:DA:7A:6F:9A:66:DF:AE:3C:8E:1F:74:58:A5:A3:6E:EE Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Certificate serial: 019B3C7FB7A6711074FACE13DCDA6D888D80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:02:41 +0000 Manifest this update: Sat 20 Dec 2025 16:02:41 +0000 Manifest next update: Sun 21 Dec 2025 16:02:41 +0000 Files and hashes: 1: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: 4Ai6cXw9mvlwBaLEqiLnkLptnoEANjulSCmxt20hvOE=) 2: xHeFV7LDVFZB_AXsHUMISj0MMpM.roa (hash: zr19PczTacMTyJWF70Jrv9gJyDfg+hRdchb2JoAvSkU=) 3: xd68Uzc7_M44plAufbmV8mthICI.roa (hash: n4Lxnlhf3i7uy3oySy0zpwQYnbK5dqfAn++RkVBCL/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:b7:a6:71:10:74:fa:ce:13:dc:da:6d:88:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93 Validity Not Before: Dec 20 16:02:41 2025 GMT Not After : Dec 21 16:02:41 2025 GMT Subject: CN=c4de6a14da7a6f9a66dfae3c8e1f7458a5a36eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6a:fc:ca:9f:1f:30:2b:9a:80:a3:06:15:a6: bb:63:79:27:20:c0:64:a1:d2:05:d2:c5:77:a9:b7: c3:96:20:fd:f5:06:c1:d0:cf:1e:3c:6b:46:50:31: a2:d7:e6:f4:99:8f:a4:03:d1:db:50:5f:c9:0e:ee: 49:09:96:64:89:ca:a7:b2:e2:53:3a:0f:e2:c9:fc: 6e:6f:fa:b4:04:e7:31:90:60:f0:1d:4a:32:df:3a: 66:39:26:1a:4d:c2:8c:07:d0:e7:a7:af:cd:75:6e: 68:57:32:33:4e:4b:66:2c:02:96:65:21:be:dd:e7: a9:11:49:07:15:ce:aa:37:5d:48:0c:2d:34:2c:ba: 05:4c:39:a3:73:4a:df:14:c4:bc:9c:ec:1d:2c:60: b3:12:63:95:6d:6a:7a:a0:72:ec:ad:13:73:d3:9a: 00:63:3d:41:52:26:bf:1c:fe:d9:15:65:06:a0:56: d7:1b:08:ed:89:28:9b:c3:4a:17:a8:e6:e8:a8:60: 4e:f6:3a:2e:78:40:a3:24:2b:40:12:81:d0:71:42: c1:33:80:e7:84:d9:88:67:84:7a:08:e5:fd:7f:bd: d5:06:1c:89:20:9d:76:98:06:ec:50:14:37:67:24: 6b:82:d6:ea:68:0f:dd:f7:18:d5:fc:f2:bc:6c:43: f7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DE:6A:14:DA:7A:6F:9A:66:DF:AE:3C:8E:1F:74:58:A5:A3:6E:EE X509v3 Authority Key Identifier: keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9f:47:86:3c:a0:e0:12:88:95:6f:4d:91:c0:79:12:d5:d7: 09:ac:7c:d5:ff:f0:30:b1:67:2e:5e:1e:13:b0:37:bd:ea:20: ee:b1:80:71:83:ec:6e:f3:a3:f1:c5:97:cd:1b:46:e6:79:b7: 0c:94:07:38:25:47:1b:c8:eb:fa:3b:40:17:ca:77:32:b3:6a: 1f:ec:4c:14:4c:69:c3:41:86:6c:88:ee:e7:c7:6b:6a:69:6c: ec:6c:90:ca:52:b8:e6:cb:d7:3c:6a:38:4e:79:b5:92:7f:4a: 51:e7:11:48:af:66:ff:5c:d8:fd:2e:65:f7:e0:20:80:76:83: 48:3a:90:09:5c:02:1a:6f:d1:fa:ce:6b:03:40:43:54:08:da: 64:7b:de:f7:e2:0c:08:34:00:c1:f7:f1:68:6c:5f:a3:3e:08: c1:23:ff:ac:a5:eb:74:97:23:24:e9:d4:8b:bc:5c:ed:20:8c: 46:00:44:0d:5d:f2:11:ba:7b:0d:4e:91:01:a0:21:6b:98:01: 02:97:db:5c:ff:97:56:97:cf:96:8e:61:ba:df:d3:e1:84:a6: 38:fc:bd:18:88:fc:80:da:79:a8:98:39:56:e9:a7:59:8c:69: cb:5f:65:cf:f1:f0:45:44:d7:ab:4d:9e:ba:40:ee:23:fe:0a: 7c:42:e0:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f7emcRB0+s4T3NptiI2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmYyZTQ5YTMxZThkZjljNWFhMDhhYWYyNDBiNWM4MzJi OWNiOTMwHhcNMjUxMjIwMTYwMjQxWhcNMjUxMjIxMTYwMjQxWjAzMTEwLwYDVQQD EyhjNGRlNmExNGRhN2E2ZjlhNjZkZmFlM2M4ZTFmNzQ1OGE1YTM2ZWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmr8yp8fMCuagKMGFaa7Y3knIMBk odIF0sV3qbfDliD99QbB0M8ePGtGUDGi1+b0mY+kA9HbUF/JDu5JCZZkicqnsuJT Og/iyfxub/q0BOcxkGDwHUoy3zpmOSYaTcKMB9Dnp6/NdW5oVzIzTktmLAKWZSG+ 3eepEUkHFc6qN11IDC00LLoFTDmjc0rfFMS8nOwdLGCzEmOVbWp6oHLsrRNz05oA Yz1BUia/HP7ZFWUGoFbXGwjtiSibw0oXqOboqGBO9joueECjJCtAEoHQcULBM4Dn hNmIZ4R6COX9f73VBhyJIJ12mAbsUBQ3ZyRrgtbqaA/d9xjV/PK8bEP3nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTeahTaem+aZt+uPI4fdFilo27uMB8GA1UdIwQY MBaAFF1vLkmjHo35xaoIqvJAtcgyucuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgt MmU5ZGUyNTJkMWY2LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81NTIxZjctMmY3MS00YmY5LWExNDgtMmU5ZGUyNTJkMWY2 LzEvWFc4dVNhTWVqZm5GcWdpcThrQzF5REs1eTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOp9Hhjyg 4BKIlW9NkcB5EtXXCax81f/wMLFnLl4eE7A3veog7rGAcYPsbvOj8cWXzRtG5nm3 DJQHOCVHG8jr+jtAF8p3MrNqH+xMFExpw0GGbIju58dramls7GyQylK45svXPGo4 Tnm1kn9KUecRSK9m/1zY/S5l9+AggHaDSDqQCVwCGm/R+s5rA0BDVAjaZHve9+IM CDQAwffxaGxfoz4IwSP/rKXrdJcjJOnUi7xc7SCMRgBEDV3yEbp7DU6RAaAha5gB ApfbXP+XVpfPlo5hut/T4YSmOPy9GIj8gNp5qJg5VumnWYxpy19lz/HwRUTXq02e ukDuI/4KfELgYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:25:59 2025 by rpki-client