This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft File: XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft (raw, json) Hash identifier: YMM3dcCb1DXfOR/mp8NCvyKFsbNU3Kwt0RiqD/VV+/Y= Subject key identifier: 07:14:05:2D:5D:C0:EA:82:16:BB:19:1E:10:28:8F:69:8D:28:05:51 Authority key identifier: 5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 Certificate issuer: /CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Certificate serial: 019B3C0FF86345A33872F1BC6B6234BCA2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft Manifest number: 0817 Signing time: Sat 20 Dec 2025 14:00:38 +0000 Manifest this update: Sat 20 Dec 2025 14:00:38 +0000 Manifest next update: Sun 21 Dec 2025 14:00:38 +0000 Files and hashes: 1: XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl (hash: eWpli9MF59ADU+AebPYjCJYr5jqiQAm0qGXPVS57brg=) 2: _kNyIo0elab0AX-AZl6-Wfa7Vf4.roa (hash: wDY0OVb6O20WgRVNC3x/4ucGS15YyhNH0PrMxdCX/4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:f8:63:45:a3:38:72:f1:bc:6b:62:34:bc:a2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cde8e8139f2c8f62f8482d01b0adb86b2a1d195 Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Dec 21 14:00:38 2025 GMT Subject: CN=0714052d5dc0ea8216bb191e10288f698d280551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:5a:00:7f:f8:55:45:fb:49:92:02:b6:0f: b3:1a:1f:8b:38:50:2e:21:53:a8:98:5d:7c:0f:dc: 86:71:8e:b2:74:c0:89:21:83:10:f3:21:26:e4:23: 86:4c:6e:58:8a:bf:6c:2b:5a:97:e9:c0:dd:57:f6: 82:ef:bc:d9:8c:73:c4:3b:30:ca:e9:91:6a:ba:08: 58:0c:c7:0b:33:b2:94:92:b5:8b:fc:04:34:6d:e9: 3e:be:98:8b:7d:9a:f7:70:7e:f7:08:07:01:49:41: 89:ca:9b:39:29:0e:66:dc:b9:9a:80:bf:bf:8c:bd: 2b:dc:8d:4e:3e:67:05:cc:2b:a6:b3:cf:2f:60:13: 88:4f:84:ca:0f:6e:4d:be:68:9a:3b:87:ef:b5:42: 9a:e3:ae:a0:3f:93:3c:46:8f:e1:38:5e:ea:03:d6: 01:34:bb:57:8c:94:f5:3d:00:d5:b7:ce:72:09:3f: 91:6e:7a:34:ec:e1:3c:ac:a7:b5:26:14:6f:6c:45: b9:eb:22:71:66:56:9c:06:5e:78:2b:df:ae:a1:68: 6a:5a:b2:5a:ce:66:17:44:aa:f4:b7:d3:ab:e8:ac: 59:26:95:11:4b:ec:f9:a9:b8:03:bc:21:40:1c:d2: d7:ea:c7:40:da:cc:d2:31:0a:70:cf:f2:0a:98:47: 74:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:14:05:2D:5D:C0:EA:82:16:BB:19:1E:10:28:8F:69:8D:28:05:51 X509v3 Authority Key Identifier: keyid:5C:DE:8E:81:39:F2:C8:F6:2F:84:82:D0:1B:0A:DB:86:B2:A1:D1:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XN6OgTnyyPYvhILQGwrbhrKh0ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/5618a8-0b64-41e7-9b73-038918eb720f/1/XN6OgTnyyPYvhILQGwrbhrKh0ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:03:fa:f5:28:77:45:cd:83:c8:7c:d8:cf:f6:ee:3f:24:7d: 98:ce:48:5b:54:b2:07:5f:32:1c:dd:6e:81:64:e8:18:47:79: e1:ff:81:ba:0d:f4:26:ba:3e:17:bc:50:f3:2c:d7:9f:e9:3d: c8:59:db:3c:ba:ea:b6:4c:9b:b2:aa:71:00:df:f2:31:c6:6f: 5a:9c:d0:78:9c:d3:76:ee:fd:53:d5:71:96:bd:74:c1:dd:59: a5:a3:6e:b7:55:e6:c1:53:c7:84:26:27:51:6e:43:94:a5:0d: 6c:3b:3e:ce:09:04:10:22:00:c5:ed:55:50:73:b0:97:7a:1f: 3d:6f:39:37:84:63:56:b8:c5:74:b5:cf:3e:f0:08:77:78:8e: 2e:c8:b4:92:eb:60:2c:80:f3:96:77:c9:2a:5f:71:e9:3f:ae: 2a:12:d6:9b:f0:09:a8:7f:59:fe:43:05:4d:3d:2a:7b:6f:0d: ed:94:b8:3a:2c:e0:09:43:89:7a:60:88:a5:93:4c:a6:86:63: 19:c9:c1:9a:58:2e:53:38:55:ad:64:11:71:84:a7:58:44:60: 24:77:15:3b:8b:ba:02:e6:81:e8:25:65:9f:d2:bc:7e:c8:06: eb:62:64:14:0e:20:3a:3b:17:7e:ea:eb:5a:5d:ab:f4:99:2d: 52:d5:23:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D/hjRaM4cvG8a2I0vKKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZGU4ZTgxMzlmMmM4ZjYyZjg0ODJkMDFiMGFkYjg2YjJh MWQxOTUwHhcNMjUxMjIwMTQwMDM4WhcNMjUxMjIxMTQwMDM4WjAzMTEwLwYDVQQD EygwNzE0MDUyZDVkYzBlYTgyMTZiYjE5MWUxMDI4OGY2OThkMjgwNTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKJaAH/4VUX7SZICtg+zGh+LOFAu IVOomF18D9yGcY6ydMCJIYMQ8yEm5COGTG5Yir9sK1qX6cDdV/aC77zZjHPEOzDK 6ZFqughYDMcLM7KUkrWL/AQ0bek+vpiLfZr3cH73CAcBSUGJyps5KQ5m3LmagL+/ jL0r3I1OPmcFzCums88vYBOIT4TKD25NvmiaO4fvtUKa466gP5M8Ro/hOF7qA9YB NLtXjJT1PQDVt85yCT+Rbno07OE8rKe1JhRvbEW56yJxZlacBl54K9+uoWhqWrJa zmYXRKr0t9Or6KxZJpURS+z5qbgDvCFAHNLX6sdA2szSMQpwz/IKmEd07wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcUBS1dwOqCFrsZHhAoj2mNKAVRMB8GA1UdIwQY MBaAFFzejoE58sj2L4SC0BsK24ayodGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMt MDM4OTE4ZWI3MjBmLzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy81NjE4YTgtMGI2NC00MWU3LTliNzMtMDM4OTE4ZWI3MjBm LzEvWE42T2dUbnl5UFl2aElMUUd3cmJocktoMFpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgP69Sh3 Rc2DyHzYz/buPyR9mM5IW1SyB18yHN1ugWToGEd54f+Bug30Jro+F7xQ8yzXn+k9 yFnbPLrqtkybsqpxAN/yMcZvWpzQeJzTdu79U9Vxlr10wd1ZpaNut1XmwVPHhCYn UW5DlKUNbDs+zgkEECIAxe1VUHOwl3ofPW85N4RjVrjFdLXPPvAId3iOLsi0kutg LIDzlnfJKl9x6T+uKhLWm/AJqH9Z/kMFTT0qe28N7ZS4OizgCUOJemCIpZNMpoZj GcnBmlguUzhVrWQRcYSnWERgJHcVO4u6AuaB6CVln9K8fsgG62JkFA4gOjsXfurr Wl2r9JktUtUjfA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:07 2025 by rpki-client