This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft File: Xvv25mASb_SQTgmcoK3t6fbOpXA.mft (raw, json) Hash identifier: Cr2Jr+PMkMHbk3Cr9VEdIm1ug1PXSOmHzGRWQRd9EgU= Subject key identifier: 84:59:EA:33:B0:E4:1A:B2:EB:E1:02:D8:06:80:CF:A4:6D:2C:26:E0 Authority key identifier: 5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70 Certificate issuer: /CN=5efbf6e660126ff4904e099ca0adede9f6cea570 Certificate serial: 019B56072D06EBADA4D763768F5B4636F1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft Manifest number: 1163 Signing time: Thu 25 Dec 2025 15:01:09 +0000 Manifest this update: Thu 25 Dec 2025 15:01:09 +0000 Manifest next update: Fri 26 Dec 2025 15:01:09 +0000 Files and hashes: 1: Xvv25mASb_SQTgmcoK3t6fbOpXA.crl (hash: iqjZja8C8brMgPJmJ3ak0P2EHTv70DKKuVguQMrjk+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:2d:06:eb:ad:a4:d7:63:76:8f:5b:46:36:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efbf6e660126ff4904e099ca0adede9f6cea570 Validity Not Before: Dec 25 15:01:09 2025 GMT Not After : Dec 26 15:01:09 2025 GMT Subject: CN=8459ea33b0e41ab2ebe102d80680cfa46d2c26e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:60:29:06:70:60:85:41:f1:b4:47:0d:2c: d6:a3:bc:02:c9:95:bb:83:58:56:31:93:88:27:b1: a3:7a:65:e7:80:3f:da:c4:13:f6:b7:27:45:03:41: 73:c8:10:6c:a1:fa:f1:07:39:1d:8f:08:4b:61:28: a8:df:bf:5d:a9:ab:29:2e:ab:30:62:b3:89:ae:b0: e3:98:c9:4d:70:41:5f:0f:65:7f:f9:7e:e9:10:02: 04:a0:cc:93:bf:6a:33:bc:0d:33:77:b1:74:4f:72: 58:b2:ce:29:98:8d:f0:06:5a:d4:87:33:58:00:8c: 04:03:49:2f:5a:a9:14:18:59:5b:a3:63:02:ab:38: b4:21:0d:f7:a0:6e:34:f7:2f:e2:b4:73:d2:b4:8f: 90:a2:fa:77:0b:8c:22:06:04:5f:02:4f:32:42:a4: 19:3d:53:c2:23:11:be:b7:44:f1:a8:21:ba:54:0d: 69:e3:1a:e4:d2:bb:51:99:30:64:2b:07:cb:6c:66: 3c:8b:93:37:c2:ee:dc:2e:b7:32:49:72:f0:e1:db: c9:c6:f8:c4:cb:4d:d4:3b:88:9e:a5:fc:c3:9b:bd: 54:7f:e9:fd:30:44:ce:c4:b4:8e:1a:13:27:bb:80: 83:cf:ce:da:fc:98:fe:b4:4e:2e:f0:86:10:24:11: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:59:EA:33:B0:E4:1A:B2:EB:E1:02:D8:06:80:CF:A4:6D:2C:26:E0 X509v3 Authority Key Identifier: keyid:5E:FB:F6:E6:60:12:6F:F4:90:4E:09:9C:A0:AD:ED:E9:F6:CE:A5:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xvv25mASb_SQTgmcoK3t6fbOpXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/52782a-3de3-4829-8199-44fdcec5d288/1/Xvv25mASb_SQTgmcoK3t6fbOpXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:72:4f:e0:2a:b6:2b:cb:ce:49:54:d5:50:11:3e:54:fd:da: 32:f6:72:40:cb:44:28:89:6c:f2:b6:b2:da:85:fb:e8:b8:49: 53:6c:f0:f0:82:a0:01:ba:05:e7:07:cd:43:11:94:27:33:d7: c4:46:b1:08:b3:bd:e4:3b:6e:a9:5b:22:aa:f5:a4:8b:80:b1: a5:8a:d8:9d:3d:4f:91:be:2d:00:f7:ed:d7:64:97:26:ed:73: 60:da:c6:35:2c:27:2f:69:ff:65:f0:47:e9:ea:7d:63:ad:70: 65:d4:a3:88:86:67:8f:59:0a:48:b8:64:1d:64:23:95:d5:46: c9:04:a9:78:52:c0:29:b6:a6:c6:a4:19:6f:f6:1f:76:64:e5: 67:cc:b2:1f:82:b8:54:51:d0:76:cd:c2:f3:75:9e:5c:fb:86: e1:6d:b4:2a:f8:1c:09:d1:37:21:59:b0:b3:4f:64:bb:e1:d6: 03:4d:c4:5c:59:f9:08:62:51:35:35:97:b8:6d:7e:dc:b6:c7: ff:62:b1:0e:ab:0b:bf:72:14:06:95:5a:8c:b4:83:ad:fc:63: 9b:ff:20:09:2d:ef:74:5f:41:32:c2:d3:b8:0b:2e:61:71:bd: 04:1a:79:f7:57:98:c3:82:10:e6:5a:65:1b:d4:b3:da:5b:db: 04:e8:80:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBy0G662k12N2j1tGNvG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmJmNmU2NjAxMjZmZjQ5MDRlMDk5Y2EwYWRlZGU5ZjZj ZWE1NzAwHhcNMjUxMjI1MTUwMTA5WhcNMjUxMjI2MTUwMTA5WjAzMTEwLwYDVQQD Eyg4NDU5ZWEzM2IwZTQxYWIyZWJlMTAyZDgwNjgwY2ZhNDZkMmMyNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokxgKQZwYIVB8bRHDSzWo7wCyZW7 g1hWMZOIJ7GjemXngD/axBP2tydFA0FzyBBsofrxBzkdjwhLYSio379dqaspLqsw YrOJrrDjmMlNcEFfD2V/+X7pEAIEoMyTv2ozvA0zd7F0T3JYss4pmI3wBlrUhzNY AIwEA0kvWqkUGFlbo2MCqzi0IQ33oG409y/itHPStI+Qovp3C4wiBgRfAk8yQqQZ PVPCIxG+t0TxqCG6VA1p4xrk0rtRmTBkKwfLbGY8i5M3wu7cLrcySXLw4dvJxvjE y03UO4iepfzDm71Uf+n9METOxLSOGhMnu4CDz87a/Jj+tE4u8IYQJBEtdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRZ6jOw5Bqy6+EC2AaAz6RtLCbgMB8GA1UdIwQY MBaAFF779uZgEm/0kE4JnKCt7en2zqVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTkt NDRmZGNlYzVkMjg4LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81Mjc4MmEtM2RlMy00ODI5LTgxOTktNDRmZGNlYzVkMjg4 LzEvWHZ2MjVtQVNiX1NRVGdtY29LM3Q2ZmJPcFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnJP4Cq2 K8vOSVTVUBE+VP3aMvZyQMtEKIls8ray2oX76LhJU2zw8IKgAboF5wfNQxGUJzPX xEaxCLO95DtuqVsiqvWki4CxpYrYnT1Pkb4tAPft12SXJu1zYNrGNSwnL2n/ZfBH 6ep9Y61wZdSjiIZnj1kKSLhkHWQjldVGyQSpeFLAKbamxqQZb/YfdmTlZ8yyH4K4 VFHQds3C83WeXPuG4W20KvgcCdE3IVmws09ku+HWA03EXFn5CGJRNTWXuG1+3LbH /2KxDqsLv3IUBpVajLSDrfxjm/8gCS3vdF9BMsLTuAsuYXG9BBp591eYw4IQ5lpl G9Sz2lvbBOiADQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:54:17 2025 by rpki-client