This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json) Hash identifier: yANVORCK/VSSEsCOf4U4MV1B8qOGf8GKBhQ3lfHGojQ= Subject key identifier: F5:D4:63:68:74:89:37:62:D5:A0:31:1F:20:28:58:0D:DA:8D:64:02 Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Certificate serial: 019B5FAF8F36306019A13ADADE3624B76363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft Manifest number: 0EB9 Signing time: Sat 27 Dec 2025 12:01:39 +0000 Manifest this update: Sat 27 Dec 2025 12:01:39 +0000 Manifest next update: Sun 28 Dec 2025 12:01:39 +0000 Files and hashes: 1: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (hash: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=) 2: 959nax4Sel7CbjLeAYmLWWQndxQ.roa (hash: liX4bBBihJXYjqG/dIaKEN/KHAc7Bsnfhrqb4D2Gsu0=) 3: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: 5xM89y2HdzTZ+AV4EFaj8wXawB6YMjL6UsDb7u5V0rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:8f:36:30:60:19:a1:3a:da:de:36:24:b7:63:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7 Validity Not Before: Dec 27 12:01:39 2025 GMT Not After : Dec 28 12:01:39 2025 GMT Subject: CN=f5d4636874893762d5a0311f2028580dda8d6402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:c9:ab:0c:9d:b4:40:53:f8:1d:1e:1d:60: b9:ca:c9:d5:05:fb:cd:be:bc:6d:cd:88:ea:00:1c: 05:1f:99:26:aa:57:01:85:d8:56:ce:39:e1:fc:3e: 37:7b:d1:c2:5e:7a:8d:6f:19:75:51:54:d4:3d:c7: 8a:a5:c1:f7:10:07:a8:17:1f:11:80:2f:15:fd:db: e3:fd:7a:35:88:8b:63:6c:9e:f4:38:39:99:21:7f: cf:4d:c9:8f:67:7c:c7:68:56:e6:93:37:3e:54:0a: 4b:b5:cb:de:7c:e6:8c:3b:86:8f:6c:48:79:2a:86: 9d:5b:aa:58:af:c1:4a:1c:b6:b8:f7:3a:ec:d5:ad: d9:35:2d:e3:76:d7:52:a8:99:91:cb:b3:07:3e:a3: e2:ea:5d:79:8e:57:09:dd:0e:21:66:1a:05:f9:94: 90:5c:25:62:84:a7:ce:3e:64:ee:87:05:4f:e8:03: e3:e1:09:b7:36:b8:e1:36:73:f4:e8:15:03:fb:9c: 40:6f:9f:bb:9d:35:67:94:95:40:f0:7e:e6:79:b0: 75:e3:d6:6f:96:69:58:d4:ed:9c:3a:ed:df:67:ec: 5d:4a:77:0a:80:ed:8d:12:fc:ec:45:b2:c2:8e:aa: fc:c9:3c:b1:e6:b4:85:e2:1f:a7:43:00:23:a0:e1: 7c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D4:63:68:74:89:37:62:D5:A0:31:1F:20:28:58:0D:DA:8D:64:02 X509v3 Authority Key Identifier: keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:83:50:04:95:d3:2a:c9:aa:12:f1:05:b2:6f:e4:36:5e:96: 94:82:bc:93:06:f7:7b:87:ce:66:6f:bb:a6:ac:1d:33:e6:f2: 50:86:2a:c6:69:e9:29:6f:e7:ba:13:d5:94:e3:3f:ab:95:9d: e8:5c:23:80:57:a7:77:f0:43:4c:15:91:f9:7b:f5:76:7e:c7: c9:b3:fb:eb:10:7c:9f:9b:f2:98:d4:aa:77:10:c1:ac:15:f1: 24:04:ae:e7:8c:a6:39:2c:58:2d:d4:ff:c4:d0:53:25:34:28: e7:26:33:80:1b:a7:26:04:0b:8a:ba:4b:2f:de:e2:f2:64:b8: b8:a5:ec:b2:73:f4:10:e1:f5:27:4d:0d:71:a4:78:70:7e:0b: 28:75:94:f1:f5:36:a7:be:94:70:ef:e4:22:24:72:67:ae:5b: d0:09:7c:f0:cd:b4:56:4a:1f:a6:f7:76:52:32:01:62:76:1b: 9d:c3:30:ee:ec:1a:76:5c:55:22:c2:b5:66:f2:a2:0c:14:40: 0e:57:7b:7d:65:ac:63:88:ab:d3:a0:1b:ea:86:d7:ce:94:55: a5:16:2d:73:e6:ea:5b:3e:77:09:7c:12:52:71:a6:38:4d:66: 16:1a:23:f8:16:ce:92:e6:b8:7d:fa:6d:1e:6b:7c:5d:a0:86: e4:b6:65:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr482MGAZoTra3jYkt2NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTJiOWE5MmM3ZWI5MTNjM2RhNTU4MDAyYzY3M2U4MjM4 ZGIxYzcwHhcNMjUxMjI3MTIwMTM5WhcNMjUxMjI4MTIwMTM5WjAzMTEwLwYDVQQD EyhmNWQ0NjM2ODc0ODkzNzYyZDVhMDMxMWYyMDI4NTgwZGRhOGQ2NDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtLJqwydtEBT+B0eHWC5ysnVBfvN vrxtzYjqABwFH5kmqlcBhdhWzjnh/D43e9HCXnqNbxl1UVTUPceKpcH3EAeoFx8R gC8V/dvj/Xo1iItjbJ70ODmZIX/PTcmPZ3zHaFbmkzc+VApLtcvefOaMO4aPbEh5 KoadW6pYr8FKHLa49zrs1a3ZNS3jdtdSqJmRy7MHPqPi6l15jlcJ3Q4hZhoF+ZSQ XCVihKfOPmTuhwVP6APj4Qm3NrjhNnP06BUD+5xAb5+7nTVnlJVA8H7mebB149Zv lmlY1O2cOu3fZ+xdSncKgO2NEvzsRbLCjqr8yTyx5rSF4h+nQwAjoOF8BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXUY2h0iTdi1aAxHyAoWA3ajWQCMB8GA1UdIwQY MBaAFFySuaksfrkTw9pVgALGc+gjjbHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQt ZDZiNTZhYmEzZWI3LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85Njk0NjMtN2Y2YS00NTAzLWFiYzQtZDZiNTZhYmEzZWI3 LzEvWEpLNXFTeC11UlBEMmxXQUFzWno2Q09Oc2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZINQBJXT KsmqEvEFsm/kNl6WlIK8kwb3e4fOZm+7pqwdM+byUIYqxmnpKW/nuhPVlOM/q5Wd 6FwjgFend/BDTBWR+Xv1dn7HybP76xB8n5vymNSqdxDBrBXxJASu54ymOSxYLdT/ xNBTJTQo5yYzgBunJgQLirpLL97i8mS4uKXssnP0EOH1J00NcaR4cH4LKHWU8fU2 p76UcO/kIiRyZ65b0Al88M20Vkofpvd2UjIBYnYbncMw7uwadlxVIsK1ZvKiDBRA Dld7fWWsY4ir06Ab6obXzpRVpRYtc+bqWz53CXwSUnGmOE1mFhoj+BbOkua4ffpt Hmt8XaCG5LZldw== -----END CERTIFICATE-----Generated at Sat Dec 27 21:01:07 2025 by rpki-client