This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json) Hash identifier: JOZPqhBq5Gtb/K6zH2JrO2Fhoa8H+DCCDuB2zsr5xWA= Subject key identifier: 8E:1A:4B:56:78:A6:CF:66:53:0F:D6:F2:D1:C6:99:74:4D:B5:4C:81 Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Certificate serial: 019B7290879ABEFA07952D89027721413F84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft Manifest number: 1733 Signing time: Wed 31 Dec 2025 04:00:33 +0000 Manifest this update: Wed 31 Dec 2025 04:00:33 +0000 Manifest next update: Thu 01 Jan 2026 04:00:33 +0000 Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: ZOU8j8N/9nom+23vu0mpKnWUbA7liWD0PHrkDr12H8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:87:9a:be:fa:07:95:2d:89:02:77:21:41:3f:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Validity Not Before: Dec 31 04:00:33 2025 GMT Not After : Jan 1 04:00:33 2026 GMT Subject: CN=8e1a4b5678a6cf66530fd6f2d1c699744db54c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ef:d2:7f:c4:0e:31:63:e1:dc:cd:dc:ae:f8: 93:88:4d:d0:0e:2f:e3:bc:31:89:e4:56:bf:b0:db: 0b:a2:81:4a:08:12:9a:34:bb:d7:79:16:8a:29:06: f8:c0:c5:f6:ee:b0:e4:47:82:86:e4:bd:c8:c3:d3: 44:97:00:d7:55:7a:25:97:fa:ca:88:47:14:0c:53: 43:dd:68:81:06:13:de:42:74:13:fe:2d:14:72:2b: 84:a7:ef:53:69:20:54:be:57:be:d1:5e:91:23:da: 70:2a:33:d6:af:4c:28:80:92:11:33:0b:03:e5:b9: 6e:b0:08:93:44:55:ef:21:57:16:11:a5:99:da:2d: 03:e7:be:6a:f6:1f:07:26:00:44:34:9d:18:fe:9e: b8:81:b6:e2:35:fc:35:a0:27:13:fa:bf:f6:5c:36: de:0a:88:22:bb:b0:ed:5f:17:14:b7:f9:65:a5:d7: 85:3d:0c:27:76:59:3c:cb:19:f4:74:8b:24:d1:36: 63:f3:40:47:4f:e1:0e:9b:69:bb:dd:84:64:ae:91: 30:2f:60:0a:5d:eb:53:7b:a6:f7:88:da:e9:bb:be: 4a:ab:98:bb:b1:b6:0d:f1:4e:ae:aa:0d:3f:d3:41: c0:63:f3:6f:6c:98:62:93:d0:19:0d:15:43:bd:a6: 09:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:4B:56:78:A6:CF:66:53:0F:D6:F2:D1:C6:99:74:4D:B5:4C:81 X509v3 Authority Key Identifier: keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:da:25:08:29:04:bf:bb:dc:14:9e:01:b6:01:66:2c:0e: ab:e6:a7:33:f6:5d:57:98:a5:07:fc:ad:d9:de:6e:69:bf:02: 79:82:1b:b1:4d:0d:cb:0e:54:dc:30:34:c5:44:23:9e:a0:ac: d5:23:ae:ce:cc:aa:a4:99:10:c1:8e:47:4c:62:4b:9c:98:d2: 27:3c:09:cf:7e:e7:eb:a6:81:ea:46:b9:69:a3:8e:a9:16:18: 77:30:db:c5:8f:d2:75:6a:35:d8:d1:e0:72:67:95:a5:d4:8b: 38:a9:4e:3f:a5:9b:50:90:c2:d3:18:4f:80:cd:17:f8:79:0e: 2d:25:f5:24:09:21:a5:c8:35:c7:6c:14:54:36:b5:1a:e1:6a: 86:3c:5f:f6:a6:f6:34:11:6e:04:9d:d8:41:c0:50:3b:fe:e8: f2:ce:88:e2:a6:f7:cb:2f:52:58:f4:e4:e6:a5:1b:2c:d9:1f: 54:f0:38:b5:ad:b6:c4:71:f5:d5:79:93:27:18:53:ac:39:59: 9a:e5:30:8e:f1:74:f5:d9:22:72:a2:65:68:ec:f6:87:88:47: 32:1c:87:7c:4a:e7:c8:5a:86:22:f8:cf:78:3e:c4:f3:0a:8a: 4d:26:b4:2d:f9:d4:f7:c1:22:24:e8:db:ab:3c:c2:4d:16:4b: 3b:8c:1d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykIeavvoHlS2JAnchQT+EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDI0NmJmZmUwNGUyZDZmMWUxOTM5ZmU2Mzg2YTI0ZGZj ZGY3YWUwHhcNMjUxMjMxMDQwMDMzWhcNMjYwMTAxMDQwMDMzWjAzMTEwLwYDVQQD Eyg4ZTFhNGI1Njc4YTZjZjY2NTMwZmQ2ZjJkMWM2OTk3NDRkYjU0YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+/Sf8QOMWPh3M3crviTiE3QDi/j vDGJ5Fa/sNsLooFKCBKaNLvXeRaKKQb4wMX27rDkR4KG5L3Iw9NElwDXVXoll/rK iEcUDFND3WiBBhPeQnQT/i0UciuEp+9TaSBUvle+0V6RI9pwKjPWr0wogJIRMwsD 5blusAiTRFXvIVcWEaWZ2i0D575q9h8HJgBENJ0Y/p64gbbiNfw1oCcT+r/2XDbe Cogiu7DtXxcUt/llpdeFPQwndlk8yxn0dIsk0TZj80BHT+EOm2m73YRkrpEwL2AK XetTe6b3iNrpu75Kq5i7sbYN8U6uqg0/00HAY/NvbJhik9AZDRVDvaYJtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4aS1Z4ps9mUw/W8tHGmXRNtUyBMB8GA1UdIwQY MBaAFF4CRr/+BOLW8eGTn+Y4aiTfzfeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQt NGM5MWNiOWVjOThiLzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQtNGM5MWNiOWVjOThi LzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4DaJQgp BL+73BSeAbYBZiwOq+anM/ZdV5ilB/yt2d5uab8CeYIbsU0Nyw5U3DA0xUQjnqCs 1SOuzsyqpJkQwY5HTGJLnJjSJzwJz37n66aB6ka5aaOOqRYYdzDbxY/SdWo12NHg cmeVpdSLOKlOP6WbUJDC0xhPgM0X+HkOLSX1JAkhpcg1x2wUVDa1GuFqhjxf9qb2 NBFuBJ3YQcBQO/7o8s6I4qb3yy9SWPTk5qUbLNkfVPA4ta22xHH11XmTJxhTrDlZ muUwjvF09dkicqJlaOz2h4hHMhyHfErnyFqGIvjPeD7E8wqKTSa0LfnU98EiJOjb qzzCTRZLO4wdug== -----END CERTIFICATE-----Generated at Wed Dec 31 09:27:21 2025 by rpki-client