This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json) Hash identifier: PiAc/5/82j5xy7fuJNCheqDNqkuQFuFR1bwoN4SosTY= Subject key identifier: 52:7B:9E:5E:C6:AC:F3:B3:23:C5:08:CF:D6:57:F2:4A:7C:58:E7:74 Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Certificate serial: 019B3DC7E4356B5DAF62AAD7BD7DBDFA2D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft Manifest number: 14C3 Signing time: Sat 20 Dec 2025 22:01:08 +0000 Manifest this update: Sat 20 Dec 2025 22:01:08 +0000 Manifest next update: Sun 21 Dec 2025 22:01:08 +0000 Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=) 2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: esdpjmdKiT5DRige3HvQyVXRmMADBfGNH55UIarplwA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e4:35:6b:5d:af:62:aa:d7:bd:7d:bd:fa:2d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Validity Not Before: Dec 20 22:01:08 2025 GMT Not After : Dec 21 22:01:08 2025 GMT Subject: CN=527b9e5ec6acf3b323c508cfd657f24a7c58e774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:eb:cd:bb:e6:f1:a6:35:65:ec:d1:34:9c:30: b5:c0:9d:2a:82:f7:50:8e:ad:d6:6b:ae:7a:b5:ce: 61:90:07:36:e8:25:3e:79:d4:f4:1b:20:d9:34:2f: 42:8a:f7:f8:69:ea:4f:53:83:c2:d5:e6:1c:10:99: 4d:2d:75:63:6c:0b:84:8f:37:f5:0f:14:32:20:9a: 26:85:48:84:8e:dc:57:27:e4:bb:32:f1:8e:c4:87: 94:10:7a:2b:08:73:3b:2f:a1:e8:14:84:4f:36:f5: 39:9a:b0:c7:25:d4:e1:7f:8e:cd:09:35:9e:b4:79: 34:38:bd:37:53:49:8a:06:82:d5:3c:8d:fe:5c:e3: b5:3b:2e:56:86:23:f8:fd:42:f5:34:d5:e6:b3:ae: 0c:3f:8e:d5:d0:fe:91:b2:f2:a2:36:26:ab:9d:47: 6b:18:a3:86:61:49:27:34:9c:16:2f:c0:51:d7:94: 98:10:bb:d6:0c:4d:3e:be:ce:ec:01:26:db:e9:27: db:23:68:49:74:45:95:15:69:29:4d:ba:c4:9d:92: 10:68:c6:16:11:20:ed:d5:b8:96:5d:bc:99:38:41: a0:d1:95:7c:25:ee:6c:3f:58:ce:a4:d6:d0:04:e3: 88:f8:1b:cc:9a:ab:12:b7:22:ac:8f:76:b6:bb:6d: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7B:9E:5E:C6:AC:F3:B3:23:C5:08:CF:D6:57:F2:4A:7C:58:E7:74 X509v3 Authority Key Identifier: keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:f3:45:5c:f4:8e:9d:72:6c:ff:7e:71:30:2b:cf:35:7c: f7:b2:40:77:89:c5:d8:eb:4f:d7:f8:89:e6:f5:23:c3:ac:a6: 43:0c:9e:57:8a:7b:6b:c4:c0:c2:35:2f:8a:c8:c6:10:b7:3b: 8f:77:ac:92:2c:bf:9e:37:78:10:85:67:c9:a6:f1:ad:e4:c9: 06:86:45:01:e5:8a:bf:5e:be:23:a5:47:ab:e2:32:e6:ea:ce: 02:a8:8f:a6:65:01:8c:fa:05:68:e7:17:34:69:f1:36:54:a9: 70:cf:ad:9a:b5:13:a3:6f:2e:87:d3:50:a7:79:f5:55:cc:85: de:86:aa:8d:2f:79:50:00:5b:d1:d0:2c:c4:05:f5:a7:6a:d6: b8:e3:43:d8:2e:9d:b6:52:ba:91:8b:d5:f8:22:7a:05:5e:2b: cb:ed:8d:82:8b:7c:c3:8e:69:7c:90:ca:1e:7a:57:eb:e6:40: 7a:88:c6:8c:6c:cd:61:1b:d7:8a:3e:ef:78:7b:6c:22:13:d3: d8:55:67:9c:ac:c7:b9:7a:bf:82:cd:f6:3f:96:34:7c:b7:a1: 3f:74:bf:eb:c6:04:aa:7a:61:ce:32:78:96:35:0f:0d:44:73: 90:99:6f:cf:21:11:28:c4:1b:79:a1:f3:15:58:97:02:34:12: e5:f9:de:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+Q1a12vYqrXvX29+i2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzA0NGI0Yjk2ZjIxZmE5YTg0NjQ1YmQ1ZTNhOWUxOTcy MzA4MmQwHhcNMjUxMjIwMjIwMTA4WhcNMjUxMjIxMjIwMTA4WjAzMTEwLwYDVQQD Eyg1MjdiOWU1ZWM2YWNmM2IzMjNjNTA4Y2ZkNjU3ZjI0YTdjNThlNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+vNu+bxpjVl7NE0nDC1wJ0qgvdQ jq3Wa656tc5hkAc26CU+edT0GyDZNC9Civf4aepPU4PC1eYcEJlNLXVjbAuEjzf1 DxQyIJomhUiEjtxXJ+S7MvGOxIeUEHorCHM7L6HoFIRPNvU5mrDHJdThf47NCTWe tHk0OL03U0mKBoLVPI3+XOO1Oy5WhiP4/UL1NNXms64MP47V0P6RsvKiNiarnUdr GKOGYUknNJwWL8BR15SYELvWDE0+vs7sASbb6SfbI2hJdEWVFWkpTbrEnZIQaMYW ESDt1biWXbyZOEGg0ZV8Je5sP1jOpNbQBOOI+BvMmqsStyKsj3a2u23cJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJ7nl7GrPOzI8UIz9ZX8kp8WOd0MB8GA1UdIwQY MBaAFF7ARLS5byH6moRkW9XjqeGXIwgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2It NjFlNGViZjY3MWFiLzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2ItNjFlNGViZjY3MWFi LzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJPzRVz0 jp1ybP9+cTArzzV897JAd4nF2OtP1/iJ5vUjw6ymQwyeV4p7a8TAwjUvisjGELc7 j3eskiy/njd4EIVnyabxreTJBoZFAeWKv16+I6VHq+Iy5urOAqiPpmUBjPoFaOcX NGnxNlSpcM+tmrUTo28uh9NQp3n1VcyF3oaqjS95UABb0dAsxAX1p2rWuOND2C6d tlK6kYvV+CJ6BV4ry+2Ngot8w45pfJDKHnpX6+ZAeojGjGzNYRvXij7veHtsIhPT 2FVnnKzHuXq/gs32P5Y0fLehP3S/68YEqnphzjJ4ljUPDURzkJlvzyERKMQbeaHz FViXAjQS5fneNw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:51 2025 by rpki-client