This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json) Hash identifier: BPP+lBrXOoC73gUByrs0jTehv8FtGGXPbo0CvfUuvPk= Subject key identifier: 8F:86:16:45:DE:80:E2:C0:D4:EB:40:49:8D:9B:2E:39:21:19:03:24 Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0 Certificate serial: 019B405AA795F19F48ED0649B9A9AF9396F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft Manifest number: 0A1E Signing time: Sun 21 Dec 2025 10:00:41 +0000 Manifest this update: Sun 21 Dec 2025 10:00:41 +0000 Manifest next update: Mon 22 Dec 2025 10:00:41 +0000 Files and hashes: 1: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: kLIXTngghxok2nlVnKD5/5tTCtmzqAK2MuE+hbu2udo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:a7:95:f1:9f:48:ed:06:49:b9:a9:af:93:96:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0 Validity Not Before: Dec 21 10:00:41 2025 GMT Not After : Dec 22 10:00:41 2025 GMT Subject: CN=8f861645de80e2c0d4eb40498d9b2e3921190324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:57:6d:68:df:a3:63:54:42:de:10:59:21: c9:df:4a:64:15:fd:52:65:78:42:7f:44:7c:17:dd: a7:dd:e8:a8:84:4b:64:85:15:c6:70:99:87:00:8d: fd:02:99:ff:b3:ea:28:ca:ab:14:51:a7:70:34:ad: 40:9c:29:37:db:d8:ad:ff:f9:9d:54:bc:c9:63:ea: 30:68:fd:22:e7:0c:df:61:97:e1:d8:7d:bb:30:98: 1b:60:f5:2b:dc:00:48:ce:92:f4:da:2d:d0:3f:61: 47:c6:56:0e:90:7c:ea:21:e2:f9:64:20:90:fe:9e: 99:52:12:c3:da:ca:97:4b:1c:1d:83:99:2c:ec:ab: 86:61:9e:f9:e2:1e:0c:0a:64:4b:6c:a3:3d:7d:1e: fe:a7:84:b2:bf:7e:51:c9:8b:ae:a1:c6:a9:81:6b: 02:77:9d:e4:1e:09:07:6b:9b:5e:f1:93:f7:c5:e6: 92:e2:f6:62:a1:24:a9:44:07:a4:1b:73:e1:d5:3f: 6f:53:cd:2d:bd:4f:11:1f:8a:51:15:28:bf:4a:f3: 4c:27:01:db:e9:63:4d:6d:9c:d2:f6:c1:f6:46:57: 68:5f:32:71:ee:17:59:9a:a0:de:9d:fd:f8:9d:b4: e9:aa:dc:25:07:16:ab:bc:8e:14:80:98:cf:a8:ad: 03:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:16:45:DE:80:E2:C0:D4:EB:40:49:8D:9B:2E:39:21:19:03:24 X509v3 Authority Key Identifier: keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6d:e7:4c:60:db:ee:e6:6f:2f:00:3b:56:4e:f0:6f:bf:2e: 2e:0b:0e:73:7e:e4:df:c6:bb:db:bd:ce:51:73:a2:59:15:74: 98:1c:2d:e3:68:3e:3a:91:b4:ff:61:6c:04:c5:6d:ad:1d:9d: da:f2:7f:01:32:c6:64:ba:34:22:b3:6d:95:6a:96:99:d6:0f: a0:6f:46:a6:43:08:d4:b3:e0:50:74:65:60:e7:e2:ab:38:14: b8:79:cf:3a:8f:74:f8:ed:4e:c0:df:84:95:c0:4c:a5:72:31: 5f:d7:dd:63:72:3e:9a:a6:cf:c4:d3:2b:32:77:fe:0a:2f:3f: 38:75:0b:69:83:d9:a1:21:eb:71:3f:bc:be:a9:d6:0e:cf:92: 43:da:70:08:cc:12:ed:a6:1f:c6:02:be:8e:0e:8f:80:1e:b8: 78:09:99:8b:01:52:d5:c9:3b:d6:71:ac:c7:34:3c:cf:5e:6b: 7d:3f:4a:1c:fe:36:1c:aa:fd:8b:8b:a4:a7:70:59:f4:80:09: 89:df:ad:64:02:44:5b:2c:c2:2e:67:3c:42:17:f3:09:d9:8f: ad:02:8c:a7:89:64:60:76:60:df:da:d3:3c:b3:1d:f6:d6:fb: 5f:60:79:dd:ac:9d:9f:03:52:4c:9e:bb:78:2d:55:81:11:8c: 32:6f:76:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWqeV8Z9I7QZJuamvk5byMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMDAyYzQ0NzliYjRjOTZlMjIzNDM5OWNlNzFmNTYwMzQ1 Mjk5ZDAwHhcNMjUxMjIxMTAwMDQxWhcNMjUxMjIyMTAwMDQxWjAzMTEwLwYDVQQD Eyg4Zjg2MTY0NWRlODBlMmMwZDRlYjQwNDk4ZDliMmUzOTIxMTkwMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ulXbWjfo2NUQt4QWSHJ30pkFf1S ZXhCf0R8F92n3eiohEtkhRXGcJmHAI39Apn/s+ooyqsUUadwNK1AnCk329it//md VLzJY+owaP0i5wzfYZfh2H27MJgbYPUr3ABIzpL02i3QP2FHxlYOkHzqIeL5ZCCQ /p6ZUhLD2sqXSxwdg5ks7KuGYZ754h4MCmRLbKM9fR7+p4Syv35RyYuuocapgWsC d53kHgkHa5te8ZP3xeaS4vZioSSpRAekG3Ph1T9vU80tvU8RH4pRFSi/SvNMJwHb 6WNNbZzS9sH2RldoXzJx7hdZmqDenf34nbTpqtwlBxarvI4UgJjPqK0DwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+GFkXegOLA1OtASY2bLjkhGQMkMB8GA1UdIwQY MBaAFFwALER5u0yW4iNDmc5x9WA0UpnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYt NzFjNTcwZGNiMGE0LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNTAzZDYtYjZlNC00M2UyLTkxZTYtNzFjNTcwZGNiMGE0 LzEvWEFBc1JIbTdUSmJpSTBPWnpuSDFZRFJTbWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhG3nTGDb 7uZvLwA7Vk7wb78uLgsOc37k38a7273OUXOiWRV0mBwt42g+OpG0/2FsBMVtrR2d 2vJ/ATLGZLo0IrNtlWqWmdYPoG9GpkMI1LPgUHRlYOfiqzgUuHnPOo90+O1OwN+E lcBMpXIxX9fdY3I+mqbPxNMrMnf+Ci8/OHULaYPZoSHrcT+8vqnWDs+SQ9pwCMwS 7aYfxgK+jg6PgB64eAmZiwFS1ck71nGsxzQ8z15rfT9KHP42HKr9i4ukp3BZ9IAJ id+tZAJEWyzCLmc8QhfzCdmPrQKMp4lkYHZg39rTPLMd9tb7X2B53aydnwNSTJ67 eC1VgRGMMm92kw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:21 2025 by rpki-client