This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json) Hash identifier: xvfHkmNcqZDIUMtmBqW09EH2PrzLLMdDUc4wbsDOSXo= Subject key identifier: 73:92:9B:FF:E7:B4:1A:06:F0:4E:FC:E2:F0:68:68:69:3B:E5:3B:68 Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Certificate serial: 019B4F297926B8DEBCD683DE7A3FD6CB0A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 07:01:16 +0000 Manifest this update: Wed 24 Dec 2025 07:01:16 +0000 Manifest next update: Thu 25 Dec 2025 07:01:16 +0000 Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=) 2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: HgpC1W8MTgZkT35XkX89XH1OOgKPCjl2DuKi0VMb1eQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:79:26:b8:de:bc:d6:83:de:7a:3f:d6:cb:0a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Validity Not Before: Dec 24 07:01:16 2025 GMT Not After : Dec 25 07:01:16 2025 GMT Subject: CN=73929bffe7b41a06f04efce2f06868693be53b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:36:47:96:bd:ba:3b:fd:52:ca:cc:bd:6c: e4:90:3f:77:11:e2:05:30:e7:16:ff:4e:f8:ad:c0: 03:6b:2f:bb:94:ae:e8:9b:6c:11:b6:fc:50:90:b2: 98:89:2e:a0:b9:a7:b7:7b:33:5a:3b:04:d6:06:22: 2a:b6:72:19:50:59:f0:12:f2:38:8c:e0:9a:7b:c7: 8e:69:0c:27:da:1e:7b:fe:68:8c:be:02:34:2c:39: e9:8e:11:ee:29:44:17:2a:9b:23:7c:96:a8:7c:88: 92:87:23:a2:e6:09:83:9b:10:b7:6f:e2:2f:e5:34: 42:7a:38:e7:4e:cd:98:de:28:a7:09:06:cc:94:93: 15:b2:ac:7b:88:b6:ca:ca:56:a9:a8:91:00:70:b2: d7:4f:b1:cd:2b:dc:78:d5:aa:d3:2a:fb:38:a2:21: 53:64:1c:8c:cf:85:7d:12:25:ee:a3:3b:d8:13:39: 65:61:4a:bc:a3:cb:97:d4:41:ce:21:fe:b8:d7:39: d3:1f:fc:f5:ac:5f:91:27:67:a8:eb:9c:36:3d:5a: c3:3c:92:20:5d:e1:69:04:fb:0a:ca:4c:48:98:41: 30:a1:7f:33:d9:71:22:f9:05:70:06:72:42:11:aa: c2:69:06:8b:bb:b3:b9:15:28:05:b5:b9:11:e5:83: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:92:9B:FF:E7:B4:1A:06:F0:4E:FC:E2:F0:68:68:69:3B:E5:3B:68 X509v3 Authority Key Identifier: keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0c:29:db:7c:2c:9e:0d:e5:ff:18:3d:38:66:e8:4e:95:76: 5b:04:55:41:5c:b9:0e:47:00:53:fd:5f:69:cb:24:07:77:3a: 05:67:08:e3:d6:05:5b:f2:c6:7f:f9:8e:0b:9f:dd:a0:dc:30: 5e:01:ce:54:2e:28:9f:87:d7:b7:59:48:5f:0b:ed:76:7d:01: 94:e5:30:0c:f1:2e:93:5b:e2:71:ef:0c:12:25:04:f8:a7:eb: ee:97:15:48:8d:c3:71:11:c9:6e:27:3f:54:eb:cb:da:7d:12: b9:ce:77:ef:3e:48:d3:91:00:9e:28:1f:28:67:8a:34:74:a9: 7f:e5:cd:c8:3f:39:a7:c8:02:58:f5:96:50:21:96:5c:c4:12: 1a:e7:3e:85:57:e2:22:a6:55:f4:f6:79:5f:3e:3c:d1:73:c8: 15:b3:e9:8a:99:3d:16:86:ad:43:2c:a8:39:c6:c1:2d:cb:98: 17:b0:82:9d:5f:99:e7:0a:a7:e1:92:f3:28:70:07:72:ca:af: 8f:71:79:39:e0:19:bf:98:57:3b:cb:ce:46:c5:73:55:f9:fc: 3f:c3:f1:9f:2e:ba:0a:a1:56:58:b2:56:15:4c:a5:81:68:69: 05:05:ab:63:fb:df:6a:99:e9:02:c3:a0:f1:1b:cf:1e:7e:a8: 34:9a:b3:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKXkmuN681oPeej/WywpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2NlYjljOTMxY2IxNzk1ZTIyN2FlMmM4NjQ3NTUxM2Fl NDkxNWMwHhcNMjUxMjI0MDcwMTE2WhcNMjUxMjI1MDcwMTE2WjAzMTEwLwYDVQQD Eyg3MzkyOWJmZmU3YjQxYTA2ZjA0ZWZjZTJmMDY4Njg2OTNiZTUzYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvM2R5a9ujv9UsrMvWzkkD93EeIF MOcW/074rcADay+7lK7om2wRtvxQkLKYiS6guae3ezNaOwTWBiIqtnIZUFnwEvI4 jOCae8eOaQwn2h57/miMvgI0LDnpjhHuKUQXKpsjfJaofIiShyOi5gmDmxC3b+Iv 5TRCejjnTs2Y3iinCQbMlJMVsqx7iLbKylapqJEAcLLXT7HNK9x41arTKvs4oiFT ZByMz4V9EiXuozvYEzllYUq8o8uX1EHOIf641znTH/z1rF+RJ2eo65w2PVrDPJIg XeFpBPsKykxImEEwoX8z2XEi+QVwBnJCEarCaQaLu7O5FSgFtbkR5YNWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOSm//ntBoG8E784vBoaGk75TtoMB8GA1UdIwQY MBaAFF5865yTHLF5XiJ64shkdVE65JFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYt MjQyMmFiZjM0MmFjLzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYtMjQyMmFiZjM0MmFj LzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwwp23ws ng3l/xg9OGboTpV2WwRVQVy5DkcAU/1facskB3c6BWcI49YFW/LGf/mOC5/doNww XgHOVC4on4fXt1lIXwvtdn0BlOUwDPEuk1vice8MEiUE+Kfr7pcVSI3DcRHJbic/ VOvL2n0Suc537z5I05EAnigfKGeKNHSpf+XNyD85p8gCWPWWUCGWXMQSGuc+hVfi IqZV9PZ5Xz480XPIFbPpipk9FoatQyyoOcbBLcuYF7CCnV+Z5wqn4ZLzKHAHcsqv j3F5OeAZv5hXO8vORsVzVfn8P8Pxny66CqFWWLJWFUylgWhpBQWrY/vfapnpAsOg 8RvPHn6oNJqzNQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:09 2025 by rpki-client