This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json) Hash identifier: 8XSrxdfskXwIJ8q3005xn8582L8yu67q0Y7O9ib9Q/U= Subject key identifier: A9:80:FF:8F:90:68:A6:D4:C4:16:CE:B1:93:AF:1A:37:EB:57:D8:E8 Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf Certificate serial: 019B38D88BEFA6C7A969B6306F1A42F57A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 23:01:14 +0000 Manifest this update: Fri 19 Dec 2025 23:01:14 +0000 Manifest next update: Sat 20 Dec 2025 23:01:14 +0000 Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 5oPAZGuG7dVLU/n/9Wb97RB4So9hTM4TLzVHv5w74Ck=) 2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:8b:ef:a6:c7:a9:69:b6:30:6f:1a:42:f5:7a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf Validity Not Before: Dec 19 23:01:14 2025 GMT Not After : Dec 20 23:01:14 2025 GMT Subject: CN=a980ff8f9068a6d4c416ceb193af1a37eb57d8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c8:2c:c4:31:cb:11:9d:e1:19:1c:19:cc:01: 72:6e:7f:4a:1f:b5:ef:a5:fd:05:e7:f0:d5:1d:81: 51:fb:12:6f:cc:4f:51:97:a2:30:8a:fa:ba:08:dd: 3d:04:62:1d:21:e5:ae:99:8b:3f:2c:ef:92:bb:ee: 16:dc:b0:31:bd:ba:cd:f3:1f:4f:7c:c7:96:0f:16: e8:68:f6:cd:fc:eb:90:a7:dd:7e:3a:e8:99:61:d8: ec:92:12:c9:64:b2:b4:a4:dd:0c:6b:06:2d:6c:b3: c4:47:c4:0c:35:66:0a:8f:51:2c:10:3b:7b:97:54: 65:ec:4e:e6:1c:b7:39:1d:b0:1b:b3:ba:ea:9d:7d: 7c:47:4e:df:ff:2d:e8:6b:cf:c3:2f:76:f6:98:ad: 27:b0:29:68:a9:c5:2d:ab:dc:86:c3:48:4a:bc:0d: 64:82:ea:05:7b:38:bf:c4:8f:74:19:76:45:0e:6c: a7:d9:17:8a:f6:fc:cb:ca:a9:b7:b1:15:b8:4b:69: b3:9f:24:d2:1f:16:0d:78:6a:2b:72:23:c8:a6:d9: c0:d2:50:08:3f:3b:a8:a7:e6:8b:af:df:d0:cb:98: 51:e1:b7:ec:8b:91:82:e5:1a:4d:f7:f7:2a:5d:2d: d5:2c:43:bb:3c:54:be:d5:af:c1:1a:2b:a8:54:ff: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:FF:8F:90:68:A6:D4:C4:16:CE:B1:93:AF:1A:37:EB:57:D8:E8 X509v3 Authority Key Identifier: keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:63:5c:6a:51:69:d3:7a:7a:ec:c8:9f:70:4e:d2:fc:d2:1c: 23:e3:fc:00:18:1b:b5:2d:40:d0:7c:82:fc:9d:aa:27:d0:a9: 53:6f:55:3c:79:b8:25:db:59:0d:f3:c3:98:0c:13:4b:d4:d6: 59:d3:9e:61:16:54:95:c0:b5:93:7c:39:49:3f:62:fe:a8:ff: aa:21:90:87:db:f0:10:8b:9c:e9:f0:57:93:0a:21:bb:87:c7: 9b:80:fe:cc:62:93:57:4b:06:43:f6:16:60:1b:c7:e9:20:c4: 1d:d9:3c:79:8f:af:75:83:39:6d:0e:be:8c:d8:ce:fe:cf:bf: 0b:9a:39:92:33:b8:8e:83:b4:8a:ff:4c:5c:b1:2b:9a:53:89: 14:b9:58:ac:b6:7f:a3:12:99:ec:52:be:61:bb:c8:e1:50:3c: 94:dd:06:81:58:35:05:99:1a:6c:bb:0b:ff:43:3e:5c:10:3d: ef:66:95:04:75:42:5e:16:f4:d4:66:5f:c7:f8:0f:0c:90:1a: d9:8d:05:df:13:c0:8e:f8:18:aa:f3:1d:29:ff:9d:ca:e7:50: cb:28:ab:b2:3a:1f:4c:a5:80:4d:12:9b:7f:52:76:e1:ae:56: a5:4c:46:13:df:f4:1a:32:5e:f1:f3:c1:4c:4b:76:0e:06:5c: 67:fb:0d:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42IvvpsepabYwbxpC9XpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw ODRmZGYwHhcNMjUxMjE5MjMwMTE0WhcNMjUxMjIwMjMwMTE0WjAzMTEwLwYDVQQD EyhhOTgwZmY4ZjkwNjhhNmQ0YzQxNmNlYjE5M2FmMWEzN2ViNTdkOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28gsxDHLEZ3hGRwZzAFybn9KH7Xv pf0F5/DVHYFR+xJvzE9Rl6Iwivq6CN09BGIdIeWumYs/LO+Su+4W3LAxvbrN8x9P fMeWDxboaPbN/OuQp91+OuiZYdjskhLJZLK0pN0MawYtbLPER8QMNWYKj1EsEDt7 l1Rl7E7mHLc5HbAbs7rqnX18R07f/y3oa8/DL3b2mK0nsCloqcUtq9yGw0hKvA1k guoFezi/xI90GXZFDmyn2ReK9vzLyqm3sRW4S2mznyTSHxYNeGorciPIptnA0lAI Pzuop+aLr9/Qy5hR4bfsi5GC5RpN9/cqXS3VLEO7PFS+1a/BGiuoVP+DmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmA/4+QaKbUxBbOsZOvGjfrV9joMB8GA1UdIwQY MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2NcalFp 03p67MifcE7S/NIcI+P8ABgbtS1A0HyC/J2qJ9CpU29VPHm4JdtZDfPDmAwTS9TW WdOeYRZUlcC1k3w5ST9i/qj/qiGQh9vwEIuc6fBXkwohu4fHm4D+zGKTV0sGQ/YW YBvH6SDEHdk8eY+vdYM5bQ6+jNjO/s+/C5o5kjO4joO0iv9MXLErmlOJFLlYrLZ/ oxKZ7FK+YbvI4VA8lN0GgVg1BZkabLsL/0M+XBA972aVBHVCXhb01GZfx/gPDJAa 2Y0F3xPAjvgYqvMdKf+dyudQyyirsjofTKWATRKbf1J24a5WpUxGE9/0GjJe8fPB TEt2DgZcZ/sNZw== -----END CERTIFICATE-----Generated at Sat Dec 20 02:38:17 2025 by rpki-client