This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft File: XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft (raw, json) Hash identifier: G9+Tz8r7TVxAZSF+qR/yqPf8W018UtOn/Lm78IkEbjQ= Subject key identifier: DF:BA:F0:D0:07:5C:92:69:48:F2:FB:67:F4:28:CB:4F:B1:68:E5:A8 Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Certificate serial: 019AF23FD5BB13220D52447018F79CB1DA41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft Manifest number: 0591 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: FFFlJ1ntZuYfKnoxbFz369bHbCY.roa (hash: OzHlJ3L/Uq51e4UIV4xO7NIltGOZNXtcjik1Syg/eD0=) 2: XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl (hash: UyOJpuH9a/Wrk5AjANOE8iJ9XdOQbcreY4FQ9tNGdD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d5:bb:13:22:0d:52:44:70:18:f7:9c:b1:da:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=dfbaf0d0075c926948f2fb67f428cb4fb168e5a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:1b:0b:39:74:62:f5:85:9e:38:71:36:50: d7:60:2f:7c:73:f0:b1:06:e0:c6:63:44:b7:11:6a: fd:c3:86:15:b6:c0:06:f1:bf:b9:ca:53:25:65:9d: 37:42:8f:94:57:9e:18:b4:e8:46:1b:95:51:79:55: d4:7b:63:13:e9:ec:37:7f:b9:b9:2e:94:9a:55:07: c8:cb:71:22:2e:22:4e:15:92:6b:4a:7b:07:4d:ca: 55:bd:1f:5b:51:97:3b:f9:d6:ba:22:75:f0:dd:8a: d3:bb:53:91:6a:0f:5b:6c:3d:cd:6d:fb:41:37:e0: 86:3f:fc:11:e3:17:ff:fd:d3:f9:85:01:fd:79:0f: 5a:cb:59:83:f1:54:b9:b2:a2:46:ad:34:a9:35:bd: ff:1c:1c:c5:be:5b:eb:e4:47:35:15:c9:f4:7a:fc: 2d:16:ca:3a:eb:d8:05:1c:e1:fa:da:2f:ec:44:07: c6:fa:4d:fb:bd:ca:0c:69:d3:36:9e:9e:e3:cd:23: c7:a6:b5:58:88:ef:1a:fd:57:74:f5:1e:25:f5:78: 7d:54:da:09:e7:64:eb:4c:eb:e0:7b:2a:b8:ab:f3: 4c:0e:47:59:53:8d:8f:4d:4f:b7:77:d0:5e:5a:54: 97:b1:43:36:bf:5c:08:7d:9d:80:bc:59:4a:85:4b: 54:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BA:F0:D0:07:5C:92:69:48:F2:FB:67:F4:28:CB:4F:B1:68:E5:A8 X509v3 Authority Key Identifier: keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:48:58:0b:41:74:50:d6:52:1c:ad:19:0a:a6:85:16:71:90: bf:7b:27:d0:b9:4e:7a:c0:d3:f9:35:dd:82:aa:70:05:d7:ef: f5:32:fe:07:59:c3:ce:be:4a:ac:77:d6:30:7f:eb:db:5b:a8: 62:f9:50:70:10:1e:24:a3:88:d8:63:f0:8c:4c:0c:0a:93:67: eb:e8:14:df:8c:50:c5:33:24:85:04:70:81:8e:e6:72:b4:08: 9b:77:45:8b:ce:b6:ce:70:40:88:68:42:8c:82:4a:f3:7f:94: 7e:d6:cf:8a:01:fa:d8:30:89:46:c6:f0:75:f1:b2:8a:fa:99: b2:31:a7:ed:2f:19:c6:f5:b2:f4:25:44:14:d3:88:7f:de:0e: 67:57:a8:48:0d:ca:65:41:79:93:99:f2:93:ce:6e:8e:0e:0f: 91:d2:f8:21:67:05:6b:95:b1:c0:dc:1a:03:83:bf:b4:d4:a8: d1:60:65:9d:c6:03:20:4e:04:02:08:f3:ad:c8:01:59:4a:f2: 4f:fc:95:3f:eb:b0:fc:6d:53:98:37:6a:b9:0e:d4:61:4c:14: 32:48:5f:c5:75:f2:64:22:bc:ed:cb:7d:69:5b:a5:d6:3c:0a: 2e:84:e6:7a:ed:45:8e:ae:b7:d1:9c:5f:3a:ff:0b:9d:6d:08: 05:70:4a:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9W7EyINUkRwGPecsdpBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3 YjRmZDYwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhkZmJhZjBkMDA3NWM5MjY5NDhmMmZiNjdmNDI4Y2I0ZmIxNjhlNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoIbCzl0YvWFnjhxNlDXYC98c/Cx BuDGY0S3EWr9w4YVtsAG8b+5ylMlZZ03Qo+UV54YtOhGG5VReVXUe2MT6ew3f7m5 LpSaVQfIy3EiLiJOFZJrSnsHTcpVvR9bUZc7+da6InXw3YrTu1ORag9bbD3NbftB N+CGP/wR4xf//dP5hQH9eQ9ay1mD8VS5sqJGrTSpNb3/HBzFvlvr5Ec1Fcn0evwt Fso669gFHOH62i/sRAfG+k37vcoMadM2np7jzSPHprVYiO8a/Vd09R4l9Xh9VNoJ 52TrTOvgeyq4q/NMDkdZU42PTU+3d9BeWlSXsUM2v1wIfZ2AvFlKhUtUKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+68NAHXJJpSPL7Z/Qoy0+xaOWoMB8GA1UdIwQY MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt MTUzOThiYTViMGU3LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3 LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkhYC0F0 UNZSHK0ZCqaFFnGQv3sn0LlOesDT+TXdgqpwBdfv9TL+B1nDzr5KrHfWMH/r21uo YvlQcBAeJKOI2GPwjEwMCpNn6+gU34xQxTMkhQRwgY7mcrQIm3dFi862znBAiGhC jIJK83+UftbPigH62DCJRsbwdfGyivqZsjGn7S8ZxvWy9CVEFNOIf94OZ1eoSA3K ZUF5k5nyk85ujg4PkdL4IWcFa5WxwNwaA4O/tNSo0WBlncYDIE4EAgjzrcgBWUry T/yVP+uw/G1TmDdquQ7UYUwUMkhfxXXyZCK87ct9aVul1jwKLoTmeu1Fjq630Zxf Ov8LnW0IBXBKyA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:57 2025 by rpki-client