This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json) Hash identifier: my2PPArQOBROo8BCpprnxsMpI42MssyqsFDYVaiiYig= Subject key identifier: 1A:1C:44:9C:4F:D1:6C:9B:E2:AC:3E:44:D7:9D:C5:6B:1F:1F:19:69 Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Certificate serial: 019B4B4CD6EA81621199EE594D9F022700EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft Manifest number: 0D8F Signing time: Tue 23 Dec 2025 13:01:25 +0000 Manifest this update: Tue 23 Dec 2025 13:01:25 +0000 Manifest next update: Wed 24 Dec 2025 13:01:25 +0000 Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=) 2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: W73xnakFa+igpi8arbrNi2P9Dme4N6nOp2zWdqGIHkk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 13:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:4c:d6:ea:81:62:11:99:ee:59:4d:9f:02:27:00:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Validity Not Before: Dec 23 13:01:25 2025 GMT Not After : Dec 24 13:01:25 2025 GMT Subject: CN=1a1c449c4fd16c9be2ac3e44d79dc56b1f1f1969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:d8:ae:29:f8:7e:40:7e:13:3f:2b:0b:f4: 1b:0b:fe:93:8d:a9:24:ce:d0:bb:50:19:83:e9:b4: 04:c7:0a:c7:9e:8d:a3:07:73:e0:a4:d2:e8:d7:01: 7e:b1:f1:4e:81:e9:77:4c:e4:a3:3d:fa:9c:a4:2f: 4e:d4:f0:19:28:34:93:61:fe:c3:ff:23:45:5a:e3: 84:c6:0a:0d:ff:68:b0:f3:49:3e:07:b3:82:63:b4: 5e:18:a8:e6:71:18:ee:45:17:aa:98:99:21:1f:77: 43:2c:c9:74:4e:04:2a:67:71:a2:f3:5b:44:13:84: 6f:da:8e:99:0f:f2:04:5c:6e:27:bb:c1:fc:8e:3d: 19:5c:4e:0b:cc:ab:ab:c4:9c:2a:5d:21:c4:c4:85: ac:41:e9:41:10:11:73:f8:3b:ab:8a:c2:af:6b:b2: 9d:26:48:b5:6a:c2:75:e5:9c:f1:80:e6:fa:b2:0c: 73:a5:61:e4:ba:7c:c9:f8:c3:04:99:82:ce:47:c1: c7:72:06:cc:9c:a5:3b:96:44:4d:96:58:78:41:1b: 18:aa:d6:da:e2:23:45:57:aa:af:5b:f8:31:ed:9e: 2b:1b:55:bd:b4:71:bb:e0:83:04:7d:c1:07:12:5c: cd:e7:e2:aa:65:d1:2f:ff:83:31:1a:2a:3e:6f:df: bb:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1C:44:9C:4F:D1:6C:9B:E2:AC:3E:44:D7:9D:C5:6B:1F:1F:19:69 X509v3 Authority Key Identifier: keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:3b:0a:26:9c:b8:43:6d:4b:46:70:3c:8b:d7:af:c3:d2:e4: 1a:1f:72:24:8c:d8:c1:16:60:83:95:11:68:e5:01:81:fb:6c: b0:00:7e:4b:aa:81:f2:24:3a:54:b2:6d:8b:78:5d:22:34:10: b5:0a:34:2e:42:02:91:61:8f:9e:12:92:01:bd:72:fc:4e:a7: 0f:0d:88:8b:f5:55:3d:50:8f:74:3c:e3:0b:f8:86:9d:fc:95: a1:00:ce:5d:5d:e4:c4:95:17:aa:95:2c:37:fc:c1:8e:61:ed: 86:1b:70:ff:e2:46:97:42:0c:84:31:7b:02:0f:83:bc:e0:fe: ea:f2:92:17:cc:96:f7:04:56:0e:c6:f9:8f:23:03:2a:b8:75: b9:19:fc:4d:23:1d:96:a8:54:85:9d:b7:1b:64:da:57:51:a0: d3:37:57:53:c3:94:4d:34:a7:af:c4:5f:19:4c:46:f8:7b:8e: 5d:5d:47:43:8a:f2:bb:67:1b:b0:89:e2:32:e5:48:ce:5e:70: d3:49:08:81:f3:5d:b0:5e:f5:19:36:94:97:1b:ae:56:f5:e0: d4:5a:ab:c0:79:af:dd:e6:e1:74:b5:22:5b:d6:1b:0a:45:fb: de:b9:b5:18:4a:dc:9c:df:e4:5c:97:ad:01:0f:b9:39:84:3c: 7b:d3:d0:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLTNbqgWIRme5ZTZ8CJwDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4 NDY3YzcwHhcNMjUxMjIzMTMwMTI1WhcNMjUxMjI0MTMwMTI1WjAzMTEwLwYDVQQD EygxYTFjNDQ5YzRmZDE2YzliZTJhYzNlNDRkNzlkYzU2YjFmMWYxOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvzYrin4fkB+Ez8rC/QbC/6Tjakk ztC7UBmD6bQExwrHno2jB3PgpNLo1wF+sfFOgel3TOSjPfqcpC9O1PAZKDSTYf7D /yNFWuOExgoN/2iw80k+B7OCY7ReGKjmcRjuRReqmJkhH3dDLMl0TgQqZ3Gi81tE E4Rv2o6ZD/IEXG4nu8H8jj0ZXE4LzKurxJwqXSHExIWsQelBEBFz+DurisKva7Kd Jki1asJ15ZzxgOb6sgxzpWHkunzJ+MMEmYLOR8HHcgbMnKU7lkRNllh4QRsYqtba 4iNFV6qvW/gx7Z4rG1W9tHG74IMEfcEHElzN5+KqZdEv/4MxGio+b9+71wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBocRJxP0Wyb4qw+RNedxWsfHxlpMB8GA1UdIwQY MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzsKJpy4 Q21LRnA8i9evw9LkGh9yJIzYwRZgg5URaOUBgftssAB+S6qB8iQ6VLJti3hdIjQQ tQo0LkICkWGPnhKSAb1y/E6nDw2Ii/VVPVCPdDzjC/iGnfyVoQDOXV3kxJUXqpUs N/zBjmHthhtw/+JGl0IMhDF7Ag+DvOD+6vKSF8yW9wRWDsb5jyMDKrh1uRn8TSMd lqhUhZ23G2TaV1Gg0zdXU8OUTTSnr8RfGUxG+HuOXV1HQ4ryu2cbsIniMuVIzl5w 00kIgfNdsF71GTaUlxuuVvXg1FqrwHmv3ebhdLUiW9YbCkX73rm1GErcnN/kXJet AQ+5OYQ8e9PQdQ== -----END CERTIFICATE-----Generated at Tue Dec 23 22:24:40 2025 by rpki-client