This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json) Hash identifier: BiNU8j9fdLkVwlm3VfkYIzfeMiXJaoVWuVy/J2055fE= Subject key identifier: 6C:FB:0F:0B:27:14:97:95:09:70:27:7B:94:AA:26:87:4E:4E:52:AB Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Certificate serial: 019B503C25D5D1EF9A1E8C26F0959BDEB19D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 12:01:17 +0000 Manifest this update: Wed 24 Dec 2025 12:01:17 +0000 Manifest next update: Thu 25 Dec 2025 12:01:17 +0000 Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: s3MY2v0jYAAo8M3OsimYf7hOfIKCbwtYktM0dN49wso=) 2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:25:d5:d1:ef:9a:1e:8c:26:f0:95:9b:de:b1:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Validity Not Before: Dec 24 12:01:17 2025 GMT Not After : Dec 25 12:01:17 2025 GMT Subject: CN=6cfb0f0b271497950970277b94aa26874e4e52ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:18:54:32:3f:89:3d:ed:80:a7:be:39:59: 00:76:f7:20:3d:9f:10:f7:8a:dd:ae:eb:7c:3d:9c: eb:8c:3d:e2:a9:10:e5:f2:71:37:b4:36:91:2a:2d: 08:d1:c1:e1:32:46:18:e8:50:57:8c:fe:7b:50:32: a6:c1:e0:c4:58:54:28:17:6e:55:ba:2b:46:37:0d: 6d:d7:00:44:cd:cb:c5:89:3f:be:d6:d8:8f:39:c4: b3:55:f6:fd:98:da:62:e0:2b:46:1b:a0:a3:66:9f: 10:5e:38:b5:79:27:d0:56:37:37:83:3e:de:77:bb: 70:67:0f:81:ea:a9:89:5e:ff:f8:cb:07:df:ae:d9: 24:3e:89:00:a3:63:82:a3:51:1e:f1:bb:ab:41:38: f9:57:85:a0:28:06:69:df:f9:85:f1:80:3c:84:8e: a1:bc:e3:09:7e:18:e9:98:e2:54:7a:a5:ef:09:7b: 35:26:f1:8c:85:f3:52:3e:5e:96:41:f0:9b:9c:9e: fe:72:6a:b0:dd:10:88:88:ba:45:16:3d:64:23:2d: 78:48:54:86:17:a3:5a:1b:91:33:b3:1f:96:0e:21: 04:ec:23:38:e3:87:6e:df:70:89:11:17:86:5b:68: 2c:68:57:97:cb:24:a5:7d:e2:19:33:f7:82:72:69: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FB:0F:0B:27:14:97:95:09:70:27:7B:94:AA:26:87:4E:4E:52:AB X509v3 Authority Key Identifier: keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:e3:0b:e4:c2:2d:28:9f:59:54:0c:81:fa:97:2f:24:5a:26: 77:61:cf:2e:1f:d6:81:56:36:31:71:51:d7:ba:01:eb:06:72: 16:09:a5:f8:03:0a:e9:9b:14:39:f1:a1:89:21:15:dc:7c:d5: 24:9d:e8:94:fe:ea:19:98:96:c5:9e:dc:12:26:f6:27:66:8e: b6:5b:65:3d:67:70:74:31:5c:62:28:4d:8a:df:fb:fd:e4:a5: 8e:01:d7:0c:a9:56:44:c2:d3:c4:21:45:b7:0d:ea:71:d0:6d: 1e:ce:f9:73:48:5a:ff:7c:16:ff:81:2e:4c:b0:0c:60:52:12: 01:e0:b3:eb:5b:0c:1f:2c:9c:65:46:be:5a:76:76:93:dc:94: 81:58:42:0b:bb:70:a2:03:96:1c:67:33:5f:f7:79:9c:8a:c3: 42:56:89:5e:91:19:0b:78:fb:08:39:09:87:41:65:21:c8:77: bf:4c:46:88:2a:57:62:95:eb:8e:d5:ad:26:0b:94:f2:04:fa: ec:1c:a9:c9:5c:e3:c2:dc:64:a2:cc:07:0b:38:a9:f5:b9:0e: 8c:01:77:2f:0a:5e:2c:3e:d7:ec:12:6b:3c:4b:6d:3d:28:a6: 86:e8:54:6b:4f:c6:2b:a8:d9:76:e0:95:f4:9b:49:d1:7b:bf: 30:54:89:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPCXV0e+aHowm8JWb3rGdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl MGYzZjcwHhcNMjUxMjI0MTIwMTE3WhcNMjUxMjI1MTIwMTE3WjAzMTEwLwYDVQQD Eyg2Y2ZiMGYwYjI3MTQ5Nzk1MDk3MDI3N2I5NGFhMjY4NzRlNGU1MmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFsYVDI/iT3tgKe+OVkAdvcgPZ8Q 94rdrut8PZzrjD3iqRDl8nE3tDaRKi0I0cHhMkYY6FBXjP57UDKmweDEWFQoF25V uitGNw1t1wBEzcvFiT++1tiPOcSzVfb9mNpi4CtGG6CjZp8QXji1eSfQVjc3gz7e d7twZw+B6qmJXv/4ywffrtkkPokAo2OCo1Ee8burQTj5V4WgKAZp3/mF8YA8hI6h vOMJfhjpmOJUeqXvCXs1JvGMhfNSPl6WQfCbnJ7+cmqw3RCIiLpFFj1kIy14SFSG F6NaG5Ezsx+WDiEE7CM444du33CJEReGW2gsaFeXyySlfeIZM/eCcmkPBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz7DwsnFJeVCXAne5SqJodOTlKrMB8GA1UdIwQY MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt NmNkYmMyMTIyNzQ5LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5 LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOML5MIt KJ9ZVAyB+pcvJFomd2HPLh/WgVY2MXFR17oB6wZyFgml+AMK6ZsUOfGhiSEV3HzV JJ3olP7qGZiWxZ7cEib2J2aOtltlPWdwdDFcYihNit/7/eSljgHXDKlWRMLTxCFF tw3qcdBtHs75c0ha/3wW/4EuTLAMYFISAeCz61sMHyycZUa+WnZ2k9yUgVhCC7tw ogOWHGczX/d5nIrDQlaJXpEZC3j7CDkJh0FlIch3v0xGiCpXYpXrjtWtJguU8gT6 7BypyVzjwtxkoswHCzip9bkOjAF3LwpeLD7X7BJrPEttPSimhuhUa0/GK6jZduCV 9JtJ0Xu/MFSJDg== -----END CERTIFICATE-----Generated at Wed Dec 24 20:31:58 2025 by rpki-client