This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json) Hash identifier: 0NmI2Gp+n0U/V4B77pmoUO+m7BdloUU4lk1+wjUx9j0= Subject key identifier: 63:F5:54:95:99:F2:6F:C4:3D:B5:14:7C:84:BE:33:57:48:8E:E0:60 Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Certificate serial: 019B612F6417AD5ED7F0B1D75D701402FBDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft Manifest number: 0251 Signing time: Sat 27 Dec 2025 19:00:54 +0000 Manifest this update: Sat 27 Dec 2025 19:00:54 +0000 Manifest next update: Sun 28 Dec 2025 19:00:54 +0000 Files and hashes: 1: YZ1rgmmdGJTdnaDAgDl2-yE974E.roa (hash: Lb3bg3bm9QZky/VWwidZy1sN1eo2ThSodX/AgWbvOtQ=) 2: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=) 3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: 3DYSpheP0JI11Cett+ETLMKgtvNvw8JY9lhKjlOwa4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:2f:64:17:ad:5e:d7:f0:b1:d7:5d:70:14:02:fb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Validity Not Before: Dec 27 19:00:54 2025 GMT Not After : Dec 28 19:00:54 2025 GMT Subject: CN=63f5549599f26fc43db5147c84be3357488ee060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:e8:26:b0:a7:56:b3:c8:95:3d:2b:5f:ed: 68:bf:04:03:e8:5b:99:29:2b:02:43:2c:8c:dd:91: 24:45:46:63:18:ac:23:f8:56:8a:42:a5:93:ab:01: ec:d6:f6:be:b3:08:ab:98:b6:32:ee:12:eb:40:9b: ee:36:20:9b:bf:b0:dc:0e:22:be:c2:92:36:eb:3f: 06:50:6f:9e:c6:da:51:14:44:6f:44:aa:34:04:82: 88:3e:ef:51:11:12:a6:7d:af:38:d0:dd:31:54:a9: 43:be:cd:88:e4:66:b7:8e:f0:bd:ef:b1:58:5a:05: b1:a9:1e:c3:2e:6c:f6:62:b3:1d:6a:9a:33:4c:0d: 8d:9d:34:29:31:81:fd:bf:f7:c0:8e:b6:31:0f:0b: d6:d6:fa:80:82:33:07:8c:8c:d5:49:3f:e8:ed:d7: 4c:94:56:6a:07:1b:a2:e1:d5:1f:28:22:d6:84:36: f9:d0:3b:4d:70:9c:e6:74:f9:5f:35:ca:ca:f0:a1: 1a:92:ee:6a:8a:db:a2:3c:7f:8d:eb:37:ba:d0:d8: 5d:aa:13:ae:be:28:f4:17:64:d0:85:f8:26:5d:1e: 7c:60:66:4f:9c:b9:65:c2:74:9b:4e:c9:2a:ef:52: 7f:b6:61:80:63:1a:7b:77:35:cc:fc:8a:8b:58:23: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F5:54:95:99:F2:6F:C4:3D:B5:14:7C:84:BE:33:57:48:8E:E0:60 X509v3 Authority Key Identifier: keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:d5:2e:8f:c1:2d:08:d9:12:e4:18:d3:89:52:ed:90:8e:eb: 55:c1:77:0d:4f:ac:ff:46:fa:a0:d2:6e:1b:ae:d5:93:70:c5: be:b4:f8:a9:2c:6f:29:81:dd:da:8e:7b:e1:6d:5f:e4:34:d0: 29:5c:d6:4b:66:c0:ab:e7:9d:c1:3d:a7:be:fd:0d:73:fc:58: f8:d6:81:9a:a6:0a:00:b4:6b:af:db:3d:bb:0d:ce:d8:b0:7a: 0f:6c:18:da:e0:06:99:e6:10:3e:92:28:d9:87:59:41:ae:1b: 0b:c0:b6:38:c2:c4:0b:84:be:fe:9e:96:95:c0:65:ab:59:ea: 0a:9d:96:2e:e2:db:fb:73:93:22:68:ff:30:07:41:dd:19:bf: ad:a3:5b:b6:20:4a:06:8e:ab:49:80:fa:b0:ef:52:cd:44:38: b8:98:cb:a4:6e:54:41:56:a4:aa:e5:04:e3:19:13:bf:c1:09: 53:5b:1b:f1:7e:28:72:10:6b:7f:1f:8c:ea:5b:ab:da:36:8c: a6:cb:35:5b:2e:58:02:ef:3e:e0:aa:73:b7:52:e3:4e:e4:89: fd:0b:07:e2:ed:46:58:65:3f:e9:29:18:86:c8:fd:d0:02:ce: 48:c1:76:45:f8:69:cf:a2:12:ef:3e:25:48:97:30:4a:af:ce: c8:4c:16:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthL2QXrV7X8LHXXXAUAvvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm MWUwNGMwHhcNMjUxMjI3MTkwMDU0WhcNMjUxMjI4MTkwMDU0WjAzMTEwLwYDVQQD Eyg2M2Y1NTQ5NTk5ZjI2ZmM0M2RiNTE0N2M4NGJlMzM1NzQ4OGVlMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V3oJrCnVrPIlT0rX+1ovwQD6FuZ KSsCQyyM3ZEkRUZjGKwj+FaKQqWTqwHs1va+swirmLYy7hLrQJvuNiCbv7DcDiK+ wpI26z8GUG+extpRFERvRKo0BIKIPu9RERKmfa840N0xVKlDvs2I5Ga3jvC977FY WgWxqR7DLmz2YrMdapozTA2NnTQpMYH9v/fAjrYxDwvW1vqAgjMHjIzVST/o7ddM lFZqBxui4dUfKCLWhDb50DtNcJzmdPlfNcrK8KEaku5qituiPH+N6ze60NhdqhOu vij0F2TQhfgmXR58YGZPnLllwnSbTskq71J/tmGAYxp7dzXM/IqLWCN5NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP1VJWZ8m/EPbUUfIS+M1dIjuBgMB8GA1UdIwQY MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4 LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9Uuj8Et CNkS5BjTiVLtkI7rVcF3DU+s/0b6oNJuG67Vk3DFvrT4qSxvKYHd2o574W1f5DTQ KVzWS2bAq+edwT2nvv0Nc/xY+NaBmqYKALRrr9s9uw3O2LB6D2wY2uAGmeYQPpIo 2YdZQa4bC8C2OMLEC4S+/p6WlcBlq1nqCp2WLuLb+3OTImj/MAdB3Rm/raNbtiBK Bo6rSYD6sO9SzUQ4uJjLpG5UQVakquUE4xkTv8EJU1sb8X4ochBrfx+M6lur2jaM pss1Wy5YAu8+4Kpzt1LjTuSJ/QsH4u1GWGU/6SkYhsj90ALOSMF2Rfhpz6IS7z4l SJcwSq/OyEwWIQ== -----END CERTIFICATE-----Generated at Sat Dec 27 21:02:13 2025 by rpki-client