This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json) Hash identifier: 1/ddsVn+1CA7EZ22fzyg1Fu8ieNE8TSWbl1wB21MfTE= Subject key identifier: 3B:80:B0:BA:A6:60:1A:B4:51:18:F1:3F:1E:0D:CF:95:B4:07:E2:CC Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Certificate serial: 019B424A6D1520FC124F2D3AF383F67A7E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft Manifest number: 0B47 Signing time: Sun 21 Dec 2025 19:02:12 +0000 Manifest this update: Sun 21 Dec 2025 19:02:12 +0000 Manifest next update: Mon 22 Dec 2025 19:02:12 +0000 Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: EaFnGTC+VQp0QQ4igMlgZWwMvMZzC8vRFYE/5lBQ41k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:6d:15:20:fc:12:4f:2d:3a:f3:83:f6:7a:7e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Validity Not Before: Dec 21 19:02:12 2025 GMT Not After : Dec 22 19:02:12 2025 GMT Subject: CN=3b80b0baa6601ab45118f13f1e0dcf95b407e2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:e6:92:c2:f9:c5:0f:80:54:71:44:c2:f6: 11:29:47:a8:0c:69:6a:dc:84:20:7c:8a:ec:74:87: df:76:60:4b:2f:7b:8f:41:cf:c7:ea:a7:d7:ff:c5: 53:d5:63:0f:a1:29:6b:96:cf:0d:1e:3f:8e:8e:8a: 48:ed:40:da:a6:a1:36:3d:b4:0d:82:03:9a:dd:cf: c6:d2:d6:aa:9a:ae:a5:d1:35:35:a5:21:13:29:01: 1c:2c:94:58:f5:7e:6b:67:dd:e6:74:47:3a:b0:e4: 8c:ac:a0:c1:f7:40:ad:f2:5e:03:87:dc:45:aa:9e: 93:b9:40:b5:05:9b:33:00:50:cf:3f:3d:c5:f7:a9: 03:41:46:de:64:08:15:55:2d:91:be:cc:c4:ab:c3: 38:b5:41:b6:f6:b4:43:96:42:3e:3d:7f:98:58:6f: 67:22:41:a4:e0:56:d7:7c:fc:21:d4:7f:e1:59:e3: 00:3f:31:04:a4:87:d6:54:fb:31:48:82:f5:9d:69: 8d:cc:60:f6:b9:be:21:83:ed:63:0a:ad:45:d7:30: 88:eb:c2:ca:9e:2b:c5:87:82:d1:22:fd:b2:7a:72: 09:4f:a9:db:10:ef:86:7f:94:55:80:17:d8:79:5d: 37:e3:80:93:52:73:13:26:96:1c:f5:a5:af:62:ac: 14:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:B0:BA:A6:60:1A:B4:51:18:F1:3F:1E:0D:CF:95:B4:07:E2:CC X509v3 Authority Key Identifier: keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:15:22:9c:96:a4:31:54:0d:38:04:fe:41:2b:a6:79:a5:c3: 17:22:8b:21:7e:fe:81:a7:6d:a0:e3:9a:c2:f5:fc:75:d3:ec: d0:e8:ae:2a:45:3d:bf:ab:89:05:b2:28:0c:42:8b:57:25:3e: bf:88:4e:17:6e:27:ea:ca:d3:6b:f9:da:97:e0:6c:09:fc:9c: d7:22:e9:ef:1f:fa:37:50:60:bc:51:b3:f1:f7:81:0c:24:e3: cc:31:eb:73:65:c1:9a:a6:0b:39:e9:f0:df:aa:ba:61:d7:4d: 2a:76:3a:a7:fe:2b:db:18:20:43:0f:07:01:58:5e:ac:f0:fb: 42:ff:4b:c4:f3:c6:d1:db:ff:93:86:4d:d8:c1:b4:cd:a2:e2: a8:95:d0:77:a5:44:3f:0b:42:3f:c9:c3:04:b1:96:05:75:31: 72:8f:03:dd:c0:df:ab:22:67:50:98:f3:6e:cb:a4:a7:1f:ed: 1e:d0:7c:ca:e3:c3:55:22:50:f7:41:f5:c4:2f:c0:d2:81:4a: 22:32:4e:8f:4b:08:b9:85:95:09:6c:5f:f5:7c:2b:d6:47:46: cd:77:a3:a9:77:d7:10:65:ea:89:8d:fa:d4:36:0b:ef:f2:51: 47:1f:02:ab:83:70:79:35:d3:27:ff:24:80:56:b4:9b:9a:9e: df:c7:d6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSm0VIPwSTy0684P2en5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh ZmQ2ODgwHhcNMjUxMjIxMTkwMjEyWhcNMjUxMjIyMTkwMjEyWjAzMTEwLwYDVQQD EygzYjgwYjBiYWE2NjAxYWI0NTExOGYxM2YxZTBkY2Y5NWI0MDdlMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwvmksL5xQ+AVHFEwvYRKUeoDGlq 3IQgfIrsdIffdmBLL3uPQc/H6qfX/8VT1WMPoSlrls8NHj+OjopI7UDapqE2PbQN ggOa3c/G0taqmq6l0TU1pSETKQEcLJRY9X5rZ93mdEc6sOSMrKDB90Ct8l4Dh9xF qp6TuUC1BZszAFDPPz3F96kDQUbeZAgVVS2RvszEq8M4tUG29rRDlkI+PX+YWG9n IkGk4FbXfPwh1H/hWeMAPzEEpIfWVPsxSIL1nWmNzGD2ub4hg+1jCq1F1zCI68LK nivFh4LRIv2yenIJT6nbEO+Gf5RVgBfYeV0344CTUnMTJpYc9aWvYqwUvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuAsLqmYBq0URjxPx4Nz5W0B+LMMB8GA1UdIwQY MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3 LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApBUinJak MVQNOAT+QSumeaXDFyKLIX7+gadtoOOawvX8ddPs0OiuKkU9v6uJBbIoDEKLVyU+ v4hOF24n6srTa/nal+BsCfyc1yLp7x/6N1BgvFGz8feBDCTjzDHrc2XBmqYLOenw 36q6YddNKnY6p/4r2xggQw8HAVherPD7Qv9LxPPG0dv/k4ZN2MG0zaLiqJXQd6VE PwtCP8nDBLGWBXUxco8D3cDfqyJnUJjzbsukpx/tHtB8yuPDVSJQ90H1xC/A0oFK IjJOj0sIuYWVCWxf9Xwr1kdGzXejqXfXEGXqiY361DYL7/JRRx8Cq4NweTXTJ/8k gFa0m5qe38fWlg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:50:14 2025 by rpki-client