This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft File: XJF3tPVOZX44dlbmc6-MDuCmCRc.mft (raw, json) Hash identifier: dUJuWVcN39VaYzYgNODjfgZeYVHylugNdhCv9xnxqGU= Subject key identifier: E9:2C:99:04:EA:DB:05:19:89:AB:75:A9:73:B5:37:EE:C0:0A:DC:B8 Authority key identifier: 5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17 Certificate issuer: /CN=5c9177b4f54e657e387656e673af8c0ee0a60917 Certificate serial: 019B3CEBFF436C9DE980AE4E75D6F55F4D32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft Manifest number: 032F Signing time: Sat 20 Dec 2025 18:00:57 +0000 Manifest this update: Sat 20 Dec 2025 18:00:57 +0000 Manifest next update: Sun 21 Dec 2025 18:00:57 +0000 Files and hashes: 1: XJF3tPVOZX44dlbmc6-MDuCmCRc.crl (hash: pRXWNxduLXg1qZZH3SbH6bF4ntPbKOikdhsLzqv1UQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ff:43:6c:9d:e9:80:ae:4e:75:d6:f5:5f:4d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c9177b4f54e657e387656e673af8c0ee0a60917 Validity Not Before: Dec 20 18:00:57 2025 GMT Not After : Dec 21 18:00:57 2025 GMT Subject: CN=e92c9904eadb051989ab75a973b537eec00adcb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:4d:90:14:f7:c0:d7:7d:7c:2e:3d:3c:53: 40:26:d1:b2:51:1b:11:4e:c0:0a:a7:8e:cf:89:7e: 48:f0:cc:bd:54:41:24:32:91:01:a6:89:18:b3:ef: db:ab:5b:c1:0e:e6:6e:48:82:f9:1b:38:04:ed:05: e8:b6:0a:f3:a3:5b:1b:8d:68:d1:21:12:66:8f:da: 90:2d:f6:49:42:75:48:34:eb:59:86:5b:b5:3c:7b: 3a:82:93:09:2f:d3:9d:0a:61:f9:3f:9f:32:53:4b: a1:1d:1c:40:b9:6c:fc:14:d1:4d:63:34:4c:0e:b3: 19:95:92:56:30:1e:87:4f:66:bf:ff:5c:1e:b5:c8: 0d:1f:82:3a:14:fd:bd:e3:d4:d2:65:bd:68:6b:ab: 63:2c:8b:d6:f4:d3:6e:91:24:d7:ef:37:56:09:f9: b5:4b:38:5a:27:5d:5a:39:a0:77:63:98:b9:5d:f8: 44:56:c3:27:a5:f0:50:1a:33:67:bc:60:c6:36:95: 91:16:8f:d0:4f:ff:f9:fa:03:a8:3a:ea:de:1e:5b: df:bb:2c:15:a2:82:0f:0f:5f:76:8c:10:ad:78:66: ef:5b:59:61:c8:3e:40:f0:eb:33:ee:3d:e1:23:ef: 9d:ad:23:00:c0:05:18:64:78:cd:28:69:92:f4:86: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2C:99:04:EA:DB:05:19:89:AB:75:A9:73:B5:37:EE:C0:0A:DC:B8 X509v3 Authority Key Identifier: keyid:5C:91:77:B4:F5:4E:65:7E:38:76:56:E6:73:AF:8C:0E:E0:A6:09:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJF3tPVOZX44dlbmc6-MDuCmCRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ca52f0-d3b3-42c5-8a7b-6dc369dff53f/1/XJF3tPVOZX44dlbmc6-MDuCmCRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6b:db:dc:23:b8:26:de:9e:29:55:71:b1:24:1f:78:77:d8: 1f:b8:a4:6c:73:ff:3a:f4:4b:cf:4c:44:8e:61:1b:b8:08:cc: bc:19:3f:56:8a:cb:e7:84:52:d1:19:d9:2a:d4:8f:18:83:ee: 24:47:fb:03:9b:c0:18:4d:59:35:ee:40:0f:3f:be:30:66:cc: 18:f1:c8:59:32:af:19:b0:da:f6:98:20:17:91:74:2d:b6:d2: 1b:a2:f3:8d:3d:e2:aa:4b:4f:f1:9a:71:39:82:10:47:1b:52: bc:59:52:8f:07:dd:3f:ac:37:11:e7:83:20:f1:71:4f:d8:3d: 19:5e:b6:57:c7:70:6c:d3:3f:82:68:ed:0e:fe:42:fc:60:6a: da:44:c5:75:d2:b7:82:b3:95:03:b7:af:ef:f8:35:2e:14:56: 05:e5:30:10:e3:fa:03:43:f5:ac:a8:19:cb:a2:59:4a:eb:5c: ae:dd:95:85:00:43:b2:da:b9:2c:22:4a:4c:16:36:b6:ca:e0: 3a:86:63:f4:20:3b:ae:e5:b6:a4:96:5a:a3:fe:5b:2f:9a:a0: a4:11:bc:8b:82:cf:55:38:06:37:41:00:25:87:c3:50:c5:d5: d0:04:ac:c2:ba:ea:8c:22:ee:e9:6d:b4:af:6c:34:9d:27:99: 91:4b:8a:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/9DbJ3pgK5Oddb1X00yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOTE3N2I0ZjU0ZTY1N2UzODc2NTZlNjczYWY4YzBlZTBh NjA5MTcwHhcNMjUxMjIwMTgwMDU3WhcNMjUxMjIxMTgwMDU3WjAzMTEwLwYDVQQD EyhlOTJjOTkwNGVhZGIwNTE5ODlhYjc1YTk3M2I1MzdlZWMwMGFkY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/1NkBT3wNd9fC49PFNAJtGyURsR TsAKp47PiX5I8My9VEEkMpEBpokYs+/bq1vBDuZuSIL5GzgE7QXotgrzo1sbjWjR IRJmj9qQLfZJQnVINOtZhlu1PHs6gpMJL9OdCmH5P58yU0uhHRxAuWz8FNFNYzRM DrMZlZJWMB6HT2a//1wetcgNH4I6FP2949TSZb1oa6tjLIvW9NNukSTX7zdWCfm1 SzhaJ11aOaB3Y5i5XfhEVsMnpfBQGjNnvGDGNpWRFo/QT//5+gOoOureHlvfuywV ooIPD192jBCteGbvW1lhyD5A8Osz7j3hI++drSMAwAUYZHjNKGmS9IZm3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOksmQTq2wUZiat1qXO1N+7ACty4MB8GA1UdIwQY MBaAFFyRd7T1TmV+OHZW5nOvjA7gpgkXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2It NmRjMzY5ZGZmNTNmLzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jYTUyZjAtZDNiMy00MmM1LThhN2ItNmRjMzY5ZGZmNTNm LzEvWEpGM3RQVk9aWDQ0ZGxibWM2LU1EdUNtQ1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWvb3CO4 Jt6eKVVxsSQfeHfYH7ikbHP/OvRLz0xEjmEbuAjMvBk/VorL54RS0RnZKtSPGIPu JEf7A5vAGE1ZNe5ADz++MGbMGPHIWTKvGbDa9pggF5F0LbbSG6LzjT3iqktP8Zpx OYIQRxtSvFlSjwfdP6w3EeeDIPFxT9g9GV62V8dwbNM/gmjtDv5C/GBq2kTFddK3 grOVA7ev7/g1LhRWBeUwEOP6A0P1rKgZy6JZSutcrt2VhQBDstq5LCJKTBY2tsrg OoZj9CA7ruW2pJZao/5bL5qgpBG8i4LPVTgGN0EAJYfDUMXV0ASswrrqjCLu6W20 r2w0nSeZkUuKZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:27:07 2025 by rpki-client