This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json) Hash identifier: WpiLACvXetGwBsvyWRa2T63LNNaqcRxJg8I/Wxrnp1A= Subject key identifier: 80:FD:FD:41:3E:16:A0:0E:76:D7:B5:DB:16:8E:E7:6D:95:AD:BB:F6 Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Certificate serial: 019B3E6C8A772EE640EFD0DAF41FB78730D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 01:00:59 +0000 Manifest this update: Sun 21 Dec 2025 01:00:59 +0000 Manifest next update: Mon 22 Dec 2025 01:00:59 +0000 Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: D+Z4zI4a4j8nxS3LZfO2sgGqv8/sEGAKrm46J8OzJwo=) 2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=) 3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:8a:77:2e:e6:40:ef:d0:da:f4:1f:b7:87:30:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Validity Not Before: Dec 21 01:00:59 2025 GMT Not After : Dec 22 01:00:59 2025 GMT Subject: CN=80fdfd413e16a00e76d7b5db168ee76d95adbbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:77:27:f7:39:ef:41:e7:1e:ac:58:a8:ad: 0f:48:e1:15:04:d7:dd:16:3e:27:ee:ba:ad:a6:9e: f6:82:12:92:04:1e:cc:25:13:d6:5d:2b:be:00:48: 4d:51:ea:66:fb:ac:b2:34:98:c8:f2:47:01:3f:52: cb:d5:49:19:bc:cc:29:f0:c0:37:6a:bc:14:1b:83: 02:55:0b:f0:4c:dd:d9:06:bb:1f:f0:40:0f:60:09: 48:48:02:91:02:f0:f8:33:72:62:82:b2:5a:be:04: 55:a1:59:b9:eb:ce:0b:f1:20:44:6e:f4:7c:a1:7c: 74:5b:5f:52:33:65:49:c7:0d:97:ed:76:25:75:5d: dc:e6:78:53:64:1d:15:d2:14:9d:13:6c:7b:18:7a: 3e:a0:6e:61:d9:f8:2e:ec:1c:b2:b3:77:3e:78:a9: 84:70:ac:ae:43:8d:8a:cc:bb:d9:2d:bd:c8:c3:3a: 80:af:c5:fd:b7:3d:9c:1e:da:d5:eb:ae:7f:90:c4: aa:13:2a:79:08:8f:4e:55:30:dc:8e:3f:6f:17:16: c6:0f:94:05:3a:c8:e2:d8:e6:62:42:5f:ee:01:ca: de:63:93:c2:fc:96:18:c8:0f:85:72:41:0f:fa:1b: c8:31:37:7a:09:2c:1c:4f:2e:44:a9:0f:ed:0d:06: ae:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FD:FD:41:3E:16:A0:0E:76:D7:B5:DB:16:8E:E7:6D:95:AD:BB:F6 X509v3 Authority Key Identifier: keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ff:62:a0:c2:38:f0:1a:1e:1b:ad:32:cf:05:07:3f:9d:a5: 4d:26:c5:bf:1b:25:6b:d3:f1:d1:dd:36:f1:52:d1:e8:38:4f: 45:c8:38:85:8a:18:2a:5c:12:d5:45:63:c7:09:f0:b5:af:9e: f7:d2:73:16:63:bb:b9:cc:be:b4:da:e1:da:01:b0:70:b5:7d: 49:41:88:05:ab:b4:7f:07:15:6c:cf:fe:14:0b:48:08:64:17: 8c:6c:e7:df:29:16:73:87:0a:5e:ac:d1:c4:3d:10:3d:85:68: eb:a4:47:89:c3:d0:e7:0a:6d:89:e0:60:0b:7d:ad:c5:2f:32: 2e:58:2a:dd:aa:e7:2d:f8:1d:fe:14:b0:5a:d7:a9:f0:7f:2e: ee:3b:64:a3:a0:8c:8f:59:e6:62:8f:e6:d7:2d:55:9a:a3:75: a2:d1:f8:fc:82:18:eb:09:22:1b:d0:69:61:1c:9e:02:af:ea: 2b:4b:82:79:e8:85:7d:80:76:b8:62:26:b1:f6:d8:53:89:8c: d4:d7:94:e5:6d:f0:b3:15:e5:9e:79:cf:52:31:95:7e:ce:23: ce:47:9f:5b:a7:71:4f:a9:3b:b2:7c:06:ad:17:dc:9b:92:2d: 90:c2:ef:44:85:bd:8d:cd:8c:34:99:4d:7e:69:de:73:59:f7: 39:b8:4f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bIp3LuZA79Da9B+3hzDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3 ZmQ0ZmEwHhcNMjUxMjIxMDEwMDU5WhcNMjUxMjIyMDEwMDU5WjAzMTEwLwYDVQQD Eyg4MGZkZmQ0MTNlMTZhMDBlNzZkN2I1ZGIxNjhlZTc2ZDk1YWRiYmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUV3J/c570HnHqxYqK0PSOEVBNfd Fj4n7rqtpp72ghKSBB7MJRPWXSu+AEhNUepm+6yyNJjI8kcBP1LL1UkZvMwp8MA3 arwUG4MCVQvwTN3ZBrsf8EAPYAlISAKRAvD4M3JigrJavgRVoVm5684L8SBEbvR8 oXx0W19SM2VJxw2X7XYldV3c5nhTZB0V0hSdE2x7GHo+oG5h2fgu7Byys3c+eKmE cKyuQ42KzLvZLb3IwzqAr8X9tz2cHtrV665/kMSqEyp5CI9OVTDcjj9vFxbGD5QF Osji2OZiQl/uAcreY5PC/JYYyA+FckEP+hvIMTd6CSwcTy5EqQ/tDQau3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID9/UE+FqAOdte12xaO522Vrbv2MB8GA1UdIwQY MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5 LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVf9ioMI4 8BoeG60yzwUHP52lTSbFvxsla9Px0d028VLR6DhPRcg4hYoYKlwS1UVjxwnwta+e 99JzFmO7ucy+tNrh2gGwcLV9SUGIBau0fwcVbM/+FAtICGQXjGzn3ykWc4cKXqzR xD0QPYVo66RHicPQ5wptieBgC32txS8yLlgq3arnLfgd/hSwWtep8H8u7jtko6CM j1nmYo/m1y1VmqN1otH4/IIY6wkiG9BpYRyeAq/qK0uCeeiFfYB2uGImsfbYU4mM 1NeU5W3wsxXlnnnPUjGVfs4jzkefW6dxT6k7snwGrRfcm5ItkMLvRIW9jc2MNJlN fmnec1n3ObhPnw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:11 2025 by rpki-client