This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json) Hash identifier: 7srPAz14w4f/gSaYXKlQETQBPUJAG/yL0aEvBQ6p2RQ= Subject key identifier: 12:4E:72:55:E7:B1:27:42:8C:16:39:7D:8B:CD:06:A7:16:DB:7B:3C Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019B53AB4C49C30C7293E0CEE3A1C47708F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft Manifest number: 09B7 Signing time: Thu 25 Dec 2025 04:01:33 +0000 Manifest this update: Thu 25 Dec 2025 04:01:33 +0000 Manifest next update: Fri 26 Dec 2025 04:01:33 +0000 Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: xr7k1PDJNO4r+8tA0u3j4D00tHPVzK8N+qwXvV/4u6w=) 2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:4c:49:c3:0c:72:93:e0:ce:e3:a1:c4:77:08:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Dec 25 04:01:33 2025 GMT Not After : Dec 26 04:01:33 2025 GMT Subject: CN=124e7255e7b127428c16397d8bcd06a716db7b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:2c:12:9b:f4:a4:2e:db:35:2d:d0:0e:1d: c6:8c:45:20:bb:71:ce:a9:83:b7:42:48:54:ed:6f: 39:67:ed:ed:d9:e3:05:00:32:6f:d7:73:7f:ce:9e: e1:b2:d7:39:59:14:ca:06:21:62:c1:2c:99:03:83: 39:8e:c3:6f:1b:4f:2f:b2:ee:83:0c:0d:0d:90:a5: 49:72:fe:9f:d6:0a:1b:38:4e:fe:85:41:db:d8:c8: f5:ba:6e:38:52:5e:d1:81:31:99:f4:c9:68:74:22: bb:f2:d4:4b:37:1c:e0:7e:3b:c1:91:58:57:5f:05: f7:66:b4:41:6e:d7:8a:0c:4f:ee:7a:09:b5:78:42: d2:9a:b8:5c:18:37:54:dd:12:cb:11:56:25:3e:76: 2e:b9:f8:c5:45:90:6e:17:6e:a4:8b:c3:40:d4:ad: f1:4d:32:83:3f:3c:0e:0f:d7:de:f6:ef:55:b6:b5: d1:d9:56:12:0d:98:1a:50:e1:21:e7:dd:77:aa:5d: 91:35:8f:11:cc:b7:57:d1:39:4e:e2:e5:b7:74:17: 60:1f:e4:30:f3:28:cc:14:c0:43:ea:84:c5:52:62: 72:77:d5:2a:26:cb:80:66:b5:b6:09:d1:31:34:d1: e4:75:3b:9b:bb:7a:d2:03:02:70:81:9d:37:98:8b: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4E:72:55:E7:B1:27:42:8C:16:39:7D:8B:CD:06:A7:16:DB:7B:3C X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c3:18:9e:57:98:84:3f:48:0e:8c:b2:2e:be:b3:00:1f:0d: e1:41:4f:f4:d7:4d:a9:46:db:b4:03:db:45:ae:1c:59:1a:fb: fd:86:1b:07:15:0c:d9:22:30:77:cd:96:d4:7b:4b:3f:09:17: ba:cf:eb:96:c7:0f:64:e2:8b:b5:a7:f4:d7:b4:98:23:26:5d: e5:a5:27:d4:23:18:cd:99:f3:50:4a:dc:fd:bd:f9:80:ff:1d: 55:e6:0d:a9:e7:f5:90:fe:2a:5c:96:40:1f:d8:73:17:70:46: aa:32:92:10:c5:fa:9f:82:e4:c5:74:96:2d:10:9f:f1:05:1f: e6:81:e8:f6:27:d5:2b:2c:61:d5:6e:02:57:7c:2c:2e:90:c9: 93:db:ad:d0:ae:01:49:3d:b7:26:0e:9d:d2:f4:2c:b3:7a:d5: 24:cb:70:50:93:f3:70:ea:c7:a4:8f:dc:be:76:13:1e:ef:aa: 28:c6:ee:35:f0:43:93:35:5c:e8:39:98:06:80:b5:29:28:a4: 51:f4:cb:8f:26:c2:b5:85:e0:e4:39:86:4c:c4:7d:d6:56:cf: d4:48:17:67:db:47:e4:d1:df:cd:0b:08:06:d0:06:1d:9e:e9: dc:38:24:fd:e4:24:fa:a8:b4:6e:85:b6:69:fa:80:66:14:79: 74:26:0b:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq0xJwwxyk+DO46HEdwjxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjUxMjI1MDQwMTMzWhcNMjUxMjI2MDQwMTMzWjAzMTEwLwYDVQQD EygxMjRlNzI1NWU3YjEyNzQyOGMxNjM5N2Q4YmNkMDZhNzE2ZGI3YjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28sEpv0pC7bNS3QDh3GjEUgu3HO qYO3QkhU7W85Z+3t2eMFADJv13N/zp7hstc5WRTKBiFiwSyZA4M5jsNvG08vsu6D DA0NkKVJcv6f1gobOE7+hUHb2Mj1um44Ul7RgTGZ9MlodCK78tRLNxzgfjvBkVhX XwX3ZrRBbteKDE/uegm1eELSmrhcGDdU3RLLEVYlPnYuufjFRZBuF26ki8NA1K3x TTKDPzwOD9fe9u9VtrXR2VYSDZgaUOEh5913ql2RNY8RzLdX0TlO4uW3dBdgH+Qw 8yjMFMBD6oTFUmJyd9UqJsuAZrW2CdExNNHkdTubu3rSAwJwgZ03mIsy0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJOclXnsSdCjBY5fYvNBqcW23s8MB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScMYnleY hD9IDoyyLr6zAB8N4UFP9NdNqUbbtAPbRa4cWRr7/YYbBxUM2SIwd82W1HtLPwkX us/rlscPZOKLtaf017SYIyZd5aUn1CMYzZnzUErc/b35gP8dVeYNqef1kP4qXJZA H9hzF3BGqjKSEMX6n4LkxXSWLRCf8QUf5oHo9ifVKyxh1W4CV3wsLpDJk9ut0K4B ST23Jg6d0vQss3rVJMtwUJPzcOrHpI/cvnYTHu+qKMbuNfBDkzVc6DmYBoC1KSik UfTLjybCtYXg5DmGTMR91lbP1EgXZ9tH5NHfzQsIBtAGHZ7p3Dgk/eQk+qi0boW2 afqAZhR5dCYLpw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:06:02 2025 by rpki-client