This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft File: 55XJYXylpqO_8mP8GDeZL9GsR_I.mft (raw, json) Hash identifier: /Mcl3KOP8IWf/8fNOfuEtMatVpg5fO7UjhF2ZC8152o= Subject key identifier: 24:1F:76:20:E3:13:16:BB:26:47:07:BC:96:8F:77:BC:93:11:56:91 Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Certificate serial: 019B3D59EAE6C2B549FFF1D3D5890CD53C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft Manifest number: 1468 Signing time: Sat 20 Dec 2025 20:01:01 +0000 Manifest this update: Sat 20 Dec 2025 20:01:01 +0000 Manifest next update: Sun 21 Dec 2025 20:01:01 +0000 Files and hashes: 1: 55XJYXylpqO_8mP8GDeZL9GsR_I.crl (hash: M+FoMd49fOmrGHAng9kV7lCPI3bfgXP+q7ko6+5wEgU=) 2: fdmY21hE8c4ebVfH7Y8PeaGR1rs.roa (hash: podpEHI3zXhpsNN3dsQSymn1ceGiInhTkIusl9LVsm8=) 3: nx0Nx3RUcjg69TXrkEufTSbs61w.roa (hash: KMtfn4uZNi8ih3qU7QWNp/Rahsd8G3VcGheyTA9UvAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:ea:e6:c2:b5:49:ff:f1:d3:d5:89:0c:d5:3c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2 Validity Not Before: Dec 20 20:01:01 2025 GMT Not After : Dec 21 20:01:01 2025 GMT Subject: CN=241f7620e31316bb264707bc968f77bc93115691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:58:a9:56:31:a4:79:63:69:c5:22:66:e6:3b: 06:37:bb:05:c9:78:92:4f:ab:de:36:91:1f:aa:72: c2:de:56:77:b1:19:1e:21:e0:1b:d9:cf:b3:f2:32: 4c:05:96:88:08:27:0a:ab:81:d3:04:bb:5a:0f:da: 86:a4:64:83:09:02:d6:e0:b2:f9:47:e7:a3:75:65: ae:29:56:52:d8:af:8e:5d:93:21:90:9c:5f:e1:30: e3:a2:ed:f0:47:94:9c:20:9c:56:c8:b9:da:03:72: 55:1e:96:f9:ca:3f:32:a9:7d:87:9f:dd:fe:55:a5: 80:75:d3:fc:b5:84:a3:da:ac:ab:b8:e6:65:7b:3c: 97:3f:d6:64:9a:15:35:0e:b4:1c:10:81:7a:9b:f1: 09:01:60:e4:4d:a3:ea:c0:5d:a9:06:36:56:f4:30: 4e:16:fc:61:a6:a2:e2:5c:af:ae:ed:9c:6e:43:31: 1e:4c:02:ed:7c:f6:92:7a:46:de:20:27:41:04:c7: 8e:0e:8a:73:69:fb:63:e2:d9:3e:82:9b:48:eb:27: c8:0c:8b:12:ea:82:d6:dd:ab:5c:3f:1e:40:21:63: 6d:2a:11:76:5c:a3:62:7f:7e:1f:87:56:8b:6f:f1: 9a:f3:d7:f6:b4:ab:27:cf:0a:ed:68:af:84:3b:55: 4e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:76:20:E3:13:16:BB:26:47:07:BC:96:8F:77:BC:93:11:56:91 X509v3 Authority Key Identifier: keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:40:f5:4d:31:7a:a0:6b:44:f3:1f:e3:71:f8:05:72:4c:e9: 96:14:30:ca:38:23:d2:0f:98:82:b7:85:5e:b2:03:b8:8b:f6: e2:f4:c3:20:1c:ae:63:c6:b8:4b:9e:26:2c:d0:5b:02:61:55: 28:13:ef:b8:49:81:e6:95:73:92:41:64:3d:7a:29:da:6c:75: dc:ef:45:09:bb:54:03:25:cd:78:81:06:bb:43:97:0c:aa:f7: 62:75:4d:33:3b:7a:60:a8:0c:07:e1:13:46:df:9d:5e:d9:5d: ec:9f:83:2d:32:63:1c:57:b1:b0:c5:b2:e6:a8:60:1a:57:4a: 97:6a:d6:60:26:e6:11:26:05:3f:00:73:2e:8a:84:5b:95:f7: 88:74:a5:21:6c:31:48:21:74:ed:28:99:3e:4a:c1:47:e3:85: f8:bb:61:66:aa:51:fd:32:57:f9:e8:2f:93:c6:0e:3b:d4:a4: 09:b7:30:8b:f5:ad:b3:94:0e:e4:fb:52:00:38:6b:b9:71:6f: 96:0b:99:55:10:db:14:33:e8:f5:bf:91:94:96:a4:59:ac:ee: 81:68:24:e1:c0:58:39:34:61:35:c5:10:29:e8:5d:03:19:bd: b3:b9:03:50:93:8b:57:34:48:20:b1:8c:56:cc:20:74:de:78: 75:c8:a1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WermwrVJ//HT1YkM1TxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh YzQ3ZjIwHhcNMjUxMjIwMjAwMTAxWhcNMjUxMjIxMjAwMTAxWjAzMTEwLwYDVQQD EygyNDFmNzYyMGUzMTMxNmJiMjY0NzA3YmM5NjhmNzdiYzkzMTE1NjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlipVjGkeWNpxSJm5jsGN7sFyXiS T6veNpEfqnLC3lZ3sRkeIeAb2c+z8jJMBZaICCcKq4HTBLtaD9qGpGSDCQLW4LL5 R+ejdWWuKVZS2K+OXZMhkJxf4TDjou3wR5ScIJxWyLnaA3JVHpb5yj8yqX2Hn93+ VaWAddP8tYSj2qyruOZlezyXP9ZkmhU1DrQcEIF6m/EJAWDkTaPqwF2pBjZW9DBO FvxhpqLiXK+u7ZxuQzEeTALtfPaSekbeICdBBMeODopzaftj4tk+gptI6yfIDIsS 6oLW3atcPx5AIWNtKhF2XKNif34fh1aLb/Ga89f2tKsnzwrtaK+EO1VOJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQfdiDjExa7JkcHvJaPd7yTEVaRMB8GA1UdIwQY MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt ZDU0MGRmODg2YmFiLzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANED1TTF6 oGtE8x/jcfgFckzplhQwyjgj0g+YgreFXrIDuIv24vTDIByuY8a4S54mLNBbAmFV KBPvuEmB5pVzkkFkPXop2mx13O9FCbtUAyXNeIEGu0OXDKr3YnVNMzt6YKgMB+ET Rt+dXtld7J+DLTJjHFexsMWy5qhgGldKl2rWYCbmESYFPwBzLoqEW5X3iHSlIWwx SCF07SiZPkrBR+OF+LthZqpR/TJX+egvk8YOO9SkCbcwi/Wts5QO5PtSADhruXFv lguZVRDbFDPo9b+RlJakWazugWgk4cBYOTRhNcUQKehdAxm9s7kDUJOLVzRIILGM VswgdN54dcihqA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:11 2025 by rpki-client