This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json) Hash identifier: DBe1UNFUPMxpRg4xAMJrDaMsuiL7Q9iy0X0Nu66Y/ok= Subject key identifier: AB:23:FD:AB:5A:98:51:D9:88:86:3E:85:F3:65:F0:B4:35:A8:35:CE Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824 Certificate serial: 019B3B6BA57145EFCB222FB94E64A0CE97DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft Manifest number: 0748 Signing time: Sat 20 Dec 2025 11:01:08 +0000 Manifest this update: Sat 20 Dec 2025 11:01:08 +0000 Manifest next update: Sun 21 Dec 2025 11:01:08 +0000 Files and hashes: 1: TbP72HU__x5-xpUX6PI_i9iyDaM.roa (hash: FLkmCrV+1GGkGMAjoDFB0RSF/lM4teoeIsYHwGZQivI=) 2: U5LzRtt7TqgwcmDyAykCjfC_tyg.roa (hash: MnSBkpXKCh2/fnPZQ+yyW+as55btZcpHuSExX+Fr9KQ=) 3: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: cOZbFfrlH5GzDMsPeBM4awVbM4c0jtYhdKMhVaEjG9s=) 4: XsQzypEDi3dbORi7Sjru6BV7874.roa (hash: kUYaLmJEoY+QPfzf/QKKUFqO5UN/o9EcoVpI3bOIxPI=) 5: ihdmZnPFfRQouiDEX9hoP7FnJXY.roa (hash: vMOPJDVg/5XoKEVMMHXuz77Sx41YI4RzrWjRsAiZbwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:a5:71:45:ef:cb:22:2f:b9:4e:64:a0:ce:97:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824 Validity Not Before: Dec 20 11:01:08 2025 GMT Not After : Dec 21 11:01:08 2025 GMT Subject: CN=ab23fdab5a9851d988863e85f365f0b435a835ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:9a:c4:18:5f:32:6d:bc:76:a3:fc:fd:03: f9:9f:92:56:37:b1:f7:56:c0:08:93:6b:05:1a:b8: e5:74:aa:9a:62:b3:cb:69:1f:3e:90:d2:73:7b:11: cb:48:ae:ec:2c:41:5d:18:60:1b:ce:83:66:10:c2: f9:bc:de:e5:04:22:9d:18:da:f4:df:c7:0d:1c:65: 49:76:55:5e:13:5c:ff:9a:01:ab:de:cc:30:10:4b: e8:bf:ec:95:2b:ff:70:32:d8:1e:0f:13:2e:35:c2: d2:33:ee:1f:da:89:f6:28:d8:d7:9f:80:17:a7:d0: 3f:77:68:33:f9:83:d2:4b:24:35:8e:a8:f7:f3:6e: e5:24:6e:f5:27:11:cd:94:63:05:57:f8:e5:b1:c7: 23:9d:c8:53:dc:75:c0:0d:b0:a4:05:29:e8:51:ea: e7:6b:6e:14:de:e1:d6:3c:96:14:00:61:dd:4b:75: b7:5a:af:b1:79:e2:93:d5:24:e3:ff:68:79:a1:50: 60:fd:e1:92:00:8c:b6:c7:6c:3c:a5:03:36:9f:d8: 5e:5c:ed:6c:44:a4:dd:c9:35:8e:cb:5b:20:92:3c: c8:64:aa:c2:a5:40:7b:b9:13:8e:d8:94:43:e1:c4: 19:bd:86:f8:24:2b:e4:b7:aa:75:ea:ed:e9:fc:cb: ad:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:23:FD:AB:5A:98:51:D9:88:86:3E:85:F3:65:F0:B4:35:A8:35:CE X509v3 Authority Key Identifier: keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:79:3b:22:a9:c5:3d:86:2e:07:85:fa:86:dc:17:d2:52:e7: ba:e0:e6:96:75:65:cb:32:d7:5d:af:cf:ce:86:04:25:c4:18: 8b:87:25:36:3b:3c:35:f2:09:fd:59:cb:a0:f7:65:d1:08:2a: a1:3d:13:85:9e:f4:65:df:d7:91:9c:5a:3c:1f:d9:a1:da:e3: 0e:35:8c:75:b3:fb:bd:e2:a3:59:29:25:42:db:8d:35:54:e0: 7f:81:e9:6b:fb:05:91:c9:21:4b:8d:15:8e:4a:fc:5a:7f:dc: 8e:15:36:9f:09:06:9a:e9:8a:bc:2f:dd:af:9b:cd:8d:04:29: 6e:7b:6c:d2:4d:08:a7:72:07:6c:53:b6:c2:57:e9:f8:f7:b8: 64:e9:e7:0a:13:06:2c:11:cd:97:a1:ed:91:55:eb:60:45:4b: 2d:bd:f8:55:a0:e6:d2:74:68:59:70:62:53:df:57:a3:f8:57: 19:e1:ba:aa:84:d9:7f:14:92:59:5e:60:d9:f6:fb:a2:c9:34: d0:10:b8:b6:b2:55:58:b7:84:3b:a3:57:88:3e:8b:e2:45:d3: b7:fd:7b:4f:4a:f3:3d:e5:2b:46:c5:be:7f:01:65:8d:ee:8e: c1:d1:ce:a8:e8:15:15:47:5f:f0:b5:d3:86:7e:55:79:85:26: ba:f8:c8:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a6VxRe/LIi+5TmSgzpffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjgwOTUwNjUzYTdlYzU4YzUzMzg1ZDAwYjM4MWVmYmI0 NjU4MjQwHhcNMjUxMjIwMTEwMTA4WhcNMjUxMjIxMTEwMTA4WjAzMTEwLwYDVQQD EyhhYjIzZmRhYjVhOTg1MWQ5ODg4NjNlODVmMzY1ZjBiNDM1YTgzNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsquaxBhfMm28dqP8/QP5n5JWN7H3 VsAIk2sFGrjldKqaYrPLaR8+kNJzexHLSK7sLEFdGGAbzoNmEML5vN7lBCKdGNr0 38cNHGVJdlVeE1z/mgGr3swwEEvov+yVK/9wMtgeDxMuNcLSM+4f2on2KNjXn4AX p9A/d2gz+YPSSyQ1jqj3827lJG71JxHNlGMFV/jlsccjnchT3HXADbCkBSnoUern a24U3uHWPJYUAGHdS3W3Wq+xeeKT1STj/2h5oVBg/eGSAIy2x2w8pQM2n9heXO1s RKTdyTWOy1sgkjzIZKrCpUB7uROO2JRD4cQZvYb4JCvkt6p16u3p/MutTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsj/atamFHZiIY+hfNl8LQ1qDXOMB8GA1UdIwQY MBaAFF4oCVBlOn7FjFM4XQCzge+7RlgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEt ZTFiNTM1NTZjMWMzLzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MmM1ODctYzVjYi00MGU0LThjZTEtZTFiNTM1NTZjMWMz LzEvWGlnSlVHVTZmc1dNVXpoZEFMT0I3N3RHV0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGXk7IqnF PYYuB4X6htwX0lLnuuDmlnVlyzLXXa/PzoYEJcQYi4clNjs8NfIJ/VnLoPdl0Qgq oT0ThZ70Zd/XkZxaPB/ZodrjDjWMdbP7veKjWSklQtuNNVTgf4Hpa/sFkckhS40V jkr8Wn/cjhU2nwkGmumKvC/dr5vNjQQpbnts0k0Ip3IHbFO2wlfp+Pe4ZOnnChMG LBHNl6HtkVXrYEVLLb34VaDm0nRoWXBiU99Xo/hXGeG6qoTZfxSSWV5g2fb7osk0 0BC4trJVWLeEO6NXiD6L4kXTt/17T0rzPeUrRsW+fwFlje6OwdHOqOgVFUdf8LXT hn5VeYUmuvjI2w== -----END CERTIFICATE-----Generated at Sat Dec 20 12:56:01 2025 by rpki-client