This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft File: XatFagUdSpN4i-9PrA0HvcDJ8M8.mft (raw, json) Hash identifier: MWJ68MwL4fJSQpHirP5/pDNYkmjkcyFO4LKqcvGuFmo= Subject key identifier: AC:8B:FA:BE:ED:8E:1A:3E:BA:55:58:EC:AC:8E:B9:5C:07:D8:8B:A0 Authority key identifier: 5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF Certificate issuer: /CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Certificate serial: 019B5418EA0C842D58CAE5DC3D34594C9F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft Manifest number: 179D Signing time: Thu 25 Dec 2025 06:01:17 +0000 Manifest this update: Thu 25 Dec 2025 06:01:17 +0000 Manifest next update: Fri 26 Dec 2025 06:01:17 +0000 Files and hashes: 1: XatFagUdSpN4i-9PrA0HvcDJ8M8.crl (hash: 5ZaYbNk6t8gwTYSdqylNk9f5XKTI5WkiCCDGVfLzKl8=) 2: YkgHQRkVRrWyQ2p2wgLse2qkaoY.roa (hash: p9EN6Inc80zOT2cHk5ltmrKNAtRT7MPUi50PrYUILc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:ea:0c:84:2d:58:ca:e5:dc:3d:34:59:4c:9f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dab456a051d4a93788bef4fac0d07bdc0c9f0cf Validity Not Before: Dec 25 06:01:17 2025 GMT Not After : Dec 26 06:01:17 2025 GMT Subject: CN=ac8bfabeed8e1a3eba5558ecac8eb95c07d88ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:40:94:5d:95:27:c4:2f:21:ae:10:ba:53: ae:0e:9c:3a:f0:c2:28:4a:21:1f:10:cd:a5:80:5e: 3a:f9:a5:a9:9f:82:82:9e:ba:a0:e8:a2:9d:0d:e6: 2c:8f:74:11:ac:e8:1e:9c:c9:29:61:ac:91:01:55: 42:be:cc:52:5b:86:6b:79:13:9b:5b:a8:38:06:d4: 44:ae:b1:ce:d6:ff:ff:12:5e:bc:28:04:10:eb:b9: 30:65:8d:fe:36:0f:7c:38:0c:d2:09:09:53:45:f1: 9b:7c:eb:a2:ad:8a:5b:ad:30:36:71:5a:e8:74:2f: 1f:4f:30:8b:7f:bd:c5:3e:cf:48:6a:ee:73:ff:62: e0:25:47:9c:49:0a:e4:6c:a1:96:5f:8a:7f:3b:bf: 46:d4:a1:55:d4:0c:5d:b4:cd:b9:ad:52:71:38:ec: 00:5e:cc:91:65:b3:65:17:9f:b4:28:77:fc:7b:c2: 4f:aa:7b:46:f0:67:71:e6:f0:9c:2c:ed:1c:63:e1: e9:48:bb:30:4d:81:f3:ea:0b:18:0b:93:6e:6f:b7: ff:c8:72:bc:97:78:bb:13:95:22:1c:8e:77:f9:e5: 21:32:f1:dc:ad:94:9f:db:dd:54:7e:84:06:51:1c: fc:df:ab:ff:9c:cd:22:10:e9:94:e5:8c:b0:eb:6a: 76:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:FA:BE:ED:8E:1A:3E:BA:55:58:EC:AC:8E:B9:5C:07:D8:8B:A0 X509v3 Authority Key Identifier: keyid:5D:AB:45:6A:05:1D:4A:93:78:8B:EF:4F:AC:0D:07:BD:C0:C9:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XatFagUdSpN4i-9PrA0HvcDJ8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8d3895-65c2-4b8e-a547-8ad74cc6a6b9/1/XatFagUdSpN4i-9PrA0HvcDJ8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:03:1a:c2:8a:59:69:15:ad:55:a0:9f:a0:07:5a:ec:f8: c0:b4:d1:8d:b1:59:26:b6:04:7c:74:63:1d:6c:12:e8:53:76: af:b9:ff:d6:c4:f1:ef:be:b6:56:36:96:97:7d:8e:22:03:b9: 51:ba:d5:53:92:a9:23:e7:dd:50:c5:20:71:97:f0:29:5d:1b: 53:9c:df:8e:68:77:79:56:f9:e4:a5:c8:81:3a:c7:fc:f1:8a: ad:bf:27:bf:51:02:47:28:c2:ed:d3:31:33:54:33:c0:b6:29: ae:b8:03:57:94:02:92:06:9e:44:d2:d2:82:27:6f:6c:ea:ee: 11:6c:de:d4:4f:6c:98:e6:66:60:3b:ad:b1:cd:f2:14:12:cd: 11:9d:1e:5d:96:4c:79:37:7e:0d:40:fc:91:5e:f8:f2:f7:a4: 8a:05:49:ce:22:31:1a:5f:0a:d1:2d:db:b6:98:fc:39:f5:43: 84:49:2d:b5:58:4d:38:90:90:94:67:d2:b2:1c:26:36:da:f6: be:8f:c9:dc:30:9b:1a:13:18:e6:53:b2:1c:64:04:b5:0a:7c: 27:04:2c:d8:a0:b1:fc:55:b1:3e:9b:7d:64:9d:02:ee:44:f0: 61:4e:e1:08:95:3a:fd:15:d0:45:51:92:b0:c7:45:cf:0d:ec: a3:1f:41:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGOoMhC1YyuXcPTRZTJ8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYWI0NTZhMDUxZDRhOTM3ODhiZWY0ZmFjMGQwN2JkYzBj OWYwY2YwHhcNMjUxMjI1MDYwMTE3WhcNMjUxMjI2MDYwMTE3WjAzMTEwLwYDVQQD EyhhYzhiZmFiZWVkOGUxYTNlYmE1NTU4ZWNhYzhlYjk1YzA3ZDg4YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiNAlF2VJ8QvIa4QulOuDpw68MIo SiEfEM2lgF46+aWpn4KCnrqg6KKdDeYsj3QRrOgenMkpYayRAVVCvsxSW4ZreROb W6g4BtRErrHO1v//El68KAQQ67kwZY3+Ng98OAzSCQlTRfGbfOuirYpbrTA2cVro dC8fTzCLf73FPs9Iau5z/2LgJUecSQrkbKGWX4p/O79G1KFV1AxdtM25rVJxOOwA XsyRZbNlF5+0KHf8e8JPqntG8Gdx5vCcLO0cY+HpSLswTYHz6gsYC5Nub7f/yHK8 l3i7E5UiHI53+eUhMvHcrZSf291UfoQGURz836v/nM0iEOmU5Yyw62p2NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyL+r7tjho+ulVY7KyOuVwH2IugMB8GA1UdIwQY MBaAFF2rRWoFHUqTeIvvT6wNB73AyfDPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDct OGFkNzRjYzZhNmI5LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84ZDM4OTUtNjVjMi00YjhlLWE1NDctOGFkNzRjYzZhNmI5 LzEvWGF0RmFnVWRTcE40aS05UHJBMEh2Y0RKOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFycDGsKK WWkVrVWgn6AHWuz4wLTRjbFZJrYEfHRjHWwS6FN2r7n/1sTx7762VjaWl32OIgO5 UbrVU5KpI+fdUMUgcZfwKV0bU5zfjmh3eVb55KXIgTrH/PGKrb8nv1ECRyjC7dMx M1QzwLYprrgDV5QCkgaeRNLSgidvbOruEWze1E9smOZmYDutsc3yFBLNEZ0eXZZM eTd+DUD8kV748vekigVJziIxGl8K0S3btpj8OfVDhEkttVhNOJCQlGfSshwmNtr2 vo/J3DCbGhMY5lOyHGQEtQp8JwQs2KCx/FWxPpt9ZJ0C7kTwYU7hCJU6/RXQRVGS sMdFzw3sox9Blw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:00 2025 by rpki-client