This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft File: XNTi_CtB6FbbpbpiI1umQaDYG0g.mft (raw, json) Hash identifier: +2k03PbUryvtPVPLZCHgK16ieeip+D2YDxI6lmsblt4= Subject key identifier: 18:BA:FA:46:BA:8C:7B:DB:2E:EB:04:86:79:CC:F7:A8:3D:75:A2:75 Authority key identifier: 5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 Certificate issuer: /CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Certificate serial: 019B657A464ECBFBB5D1CABD37ACB6AF2AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft Manifest number: 1730 Signing time: Sun 28 Dec 2025 15:01:10 +0000 Manifest this update: Sun 28 Dec 2025 15:01:10 +0000 Manifest next update: Mon 29 Dec 2025 15:01:10 +0000 Files and hashes: 1: FxBrUL7_KSfQrfruqQVZqRk7Rmk.roa (hash: 59wCR4yUkK5BTHNqIvhVY4CfjGm6wMEpZNvkPe7ynN4=) 2: XNTi_CtB6FbbpbpiI1umQaDYG0g.crl (hash: K/FlVheHCwM4RQPODZAPAB6sYWy0i3yTOKWVwFSAN0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:46:4e:cb:fb:b5:d1:ca:bd:37:ac:b6:af:2a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4e2fc2b41e856dba5ba62235ba641a0d81b48 Validity Not Before: Dec 28 15:01:10 2025 GMT Not After : Dec 29 15:01:10 2025 GMT Subject: CN=18bafa46ba8c7bdb2eeb048679ccf7a83d75a275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:c8:80:9b:77:8f:25:07:71:49:8b:87:b0: c8:fa:be:93:da:19:48:a9:b4:3b:4e:9e:38:95:06: 9d:fe:ac:d7:2a:1a:4e:02:10:98:0c:46:bf:10:5d: 77:ed:fa:f5:25:fe:ac:5e:62:5f:ca:32:8d:1b:7b: 92:83:99:21:51:ec:cb:44:76:00:dd:50:04:6a:10: 8f:e3:01:7a:db:9b:3e:70:49:c4:27:8d:95:c9:b8: 78:40:e1:7d:e5:4e:e1:2f:35:5a:39:c7:53:2c:29: d0:e2:47:6c:39:f4:0e:15:60:46:ce:fb:81:2a:00: 29:5f:35:5a:95:38:9c:2f:75:f6:fc:e7:96:77:90: ab:17:a5:a4:73:15:56:55:fd:a2:6e:a5:d0:41:c9: 27:2b:62:38:a6:81:f9:b0:5c:1e:9e:19:11:ea:ba: 81:a3:dc:02:9e:c7:16:81:8c:50:0f:e7:03:af:99: 31:ed:0a:1a:75:c5:29:55:29:b1:8a:79:42:97:5a: 49:d6:66:da:6f:2b:c2:85:82:46:1f:ff:a0:94:e4: 88:5a:b0:d5:21:f9:5d:19:2b:d4:9f:dd:16:b6:43: d5:2d:59:14:fb:8b:23:cd:31:65:c1:d0:53:ae:56: 17:31:72:06:f0:c8:ba:45:fa:aa:ac:bf:e9:56:94: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BA:FA:46:BA:8C:7B:DB:2E:EB:04:86:79:CC:F7:A8:3D:75:A2:75 X509v3 Authority Key Identifier: keyid:5C:D4:E2:FC:2B:41:E8:56:DB:A5:BA:62:23:5B:A6:41:A0:D8:1B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNTi_CtB6FbbpbpiI1umQaDYG0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2369b8-8d82-4157-b65f-163cd8bbf431/1/XNTi_CtB6FbbpbpiI1umQaDYG0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:66:d3:a6:0c:1c:99:1d:e6:8c:5f:ed:c4:a0:ed:64:19:d7: e8:d4:f8:75:5d:f8:82:e7:af:2f:70:13:89:db:22:7d:ab:c7: 15:9c:57:3a:e0:39:18:54:2d:f8:96:91:42:7a:87:58:5b:29: 71:5b:56:08:4a:de:c2:07:0e:1a:71:fe:6a:49:6b:cf:06:dc: d9:09:83:85:4f:dd:73:4a:db:0a:78:b8:f5:a9:6d:54:93:31: 69:a2:b7:25:c6:fe:5b:14:23:22:09:54:9f:2e:35:30:34:b6: cd:3b:c1:64:d2:83:66:b6:e6:36:e9:e7:c0:27:52:e2:53:86: f7:5d:33:27:66:b7:54:9e:e6:f7:d2:dd:71:77:65:a1:7f:48: 73:98:35:ec:6c:a2:78:d1:ec:5d:00:87:60:f8:40:2e:ac:60: 7a:29:34:0f:68:29:8c:9a:9d:16:81:54:42:82:2f:b7:72:9c: d4:4a:e3:61:cc:f3:38:b9:53:d4:34:fd:70:9e:35:c5:7f:d8: 4a:0b:7e:b9:3d:37:9d:99:8f:2e:9b:5f:6f:64:2e:e3:92:0b: c5:07:af:b7:0f:1a:47:ea:cb:72:ee:8f:d5:21:85:05:96:58: e0:4a:93:00:ee:94:0b:d5:38:61:53:bf:cc:f6:20:17:f2:5b: 4f:25:22:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlekZOy/u10cq9N6y2ryrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDRlMmZjMmI0MWU4NTZkYmE1YmE2MjIzNWJhNjQxYTBk ODFiNDgwHhcNMjUxMjI4MTUwMTEwWhcNMjUxMjI5MTUwMTEwWjAzMTEwLwYDVQQD EygxOGJhZmE0NmJhOGM3YmRiMmVlYjA0ODY3OWNjZjdhODNkNzVhMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSPIgJt3jyUHcUmLh7DI+r6T2hlI qbQ7Tp44lQad/qzXKhpOAhCYDEa/EF137fr1Jf6sXmJfyjKNG3uSg5khUezLRHYA 3VAEahCP4wF625s+cEnEJ42Vybh4QOF95U7hLzVaOcdTLCnQ4kdsOfQOFWBGzvuB KgApXzValTicL3X2/OeWd5CrF6WkcxVWVf2ibqXQQcknK2I4poH5sFwenhkR6rqB o9wCnscWgYxQD+cDr5kx7QoadcUpVSmxinlCl1pJ1mbabyvChYJGH/+glOSIWrDV IfldGSvUn90WtkPVLVkU+4sjzTFlwdBTrlYXMXIG8Mi6RfqqrL/pVpQlmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi6+ka6jHvbLusEhnnM96g9daJ1MB8GA1UdIwQY MBaAFFzU4vwrQehW26W6YiNbpkGg2BtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYt MTYzY2Q4YmJmNDMxLzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yMzY5YjgtOGQ4Mi00MTU3LWI2NWYtMTYzY2Q4YmJmNDMx LzEvWE5UaV9DdEI2RmJicGJwaUkxdW1RYURZRzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGbTpgwc mR3mjF/txKDtZBnX6NT4dV34guevL3ATidsifavHFZxXOuA5GFQt+JaRQnqHWFsp cVtWCErewgcOGnH+aklrzwbc2QmDhU/dc0rbCni49altVJMxaaK3Jcb+WxQjIglU ny41MDS2zTvBZNKDZrbmNunnwCdS4lOG910zJ2a3VJ7m99LdcXdloX9Ic5g17Gyi eNHsXQCHYPhALqxgeik0D2gpjJqdFoFUQoIvt3Kc1ErjYczzOLlT1DT9cJ41xX/Y Sgt+uT03nZmPLptfb2Qu45ILxQevtw8aR+rLcu6P1SGFBZZY4EqTAO6UC9U4YVO/ zPYgF/JbTyUiSQ== -----END CERTIFICATE-----Generated at Mon Dec 29 00:53:29 2025 by rpki-client