This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json) Hash identifier: wmWlig+EV3BZB1NEdwhCuvasS+9xGRdXbzQIaxD1U/0= Subject key identifier: 03:D6:CC:B3:E2:52:DF:99:37:09:D8:AB:8E:F7:45:DC:10:28:CC:6A Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08 Certificate serial: 019B318CA1AFFC78A5C0E68DF599875D968B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft Manifest number: 0BAD Signing time: Thu 18 Dec 2025 13:00:58 +0000 Manifest this update: Thu 18 Dec 2025 13:00:58 +0000 Manifest next update: Fri 19 Dec 2025 13:00:58 +0000 Files and hashes: 1: K6hASVkmc4dnymD1SafKRAelnpw.roa (hash: jxjidqodK9jTHgfjiFHkYSaOCpzH8SBkKdOL3hMaD2w=) 2: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: xdwzF389yyzUOI8z9wTONTSESHj00M0rYTGJi4HhRSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:a1:af:fc:78:a5:c0:e6:8d:f5:99:87:5d:96:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08 Validity Not Before: Dec 18 13:00:58 2025 GMT Not After : Dec 19 13:00:58 2025 GMT Subject: CN=03d6ccb3e252df993709d8ab8ef745dc1028cc6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:6b:df:fd:67:a2:67:87:2e:e1:9e:b9:31: d7:9a:0d:67:65:07:c5:db:37:a9:43:e5:bd:5e:e0: 3a:c3:20:7e:93:07:8d:3b:8f:94:ba:09:71:b6:80: bf:fc:d8:74:ca:87:5e:f0:08:08:42:5f:92:b2:da: 97:00:4a:38:50:f5:2f:c3:35:e1:40:7b:ed:b8:7e: 3c:03:fc:b0:92:21:8a:89:9d:a6:49:1b:67:bb:1c: cf:47:6a:d6:70:f0:1e:e6:07:24:7c:17:54:b2:9f: 3f:92:5d:12:75:c3:78:3f:c7:af:3e:03:cc:78:67: 80:f0:ed:da:fd:2b:69:da:5c:64:bc:a2:fc:76:96: b6:e0:3d:15:99:4b:0c:9b:69:6e:a9:65:42:0e:24: d9:2b:4e:16:24:66:8f:f5:7e:18:81:dd:b5:6c:43: 31:51:a3:52:28:0e:90:f0:23:84:73:d3:9c:78:69: 57:98:71:2f:b8:f3:7e:c0:bd:aa:a7:b1:68:ba:71: 5d:4c:ed:bc:26:e4:cb:af:74:e7:08:a5:08:80:cd: bc:4a:86:81:b9:d0:ef:2a:ed:5e:ec:0d:ca:5b:3d: a9:71:4a:71:d0:33:3d:f3:12:ea:7f:e7:be:d5:83: 04:5c:0b:18:d8:81:ec:67:fa:ac:d8:78:0d:65:ba: cb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D6:CC:B3:E2:52:DF:99:37:09:D8:AB:8E:F7:45:DC:10:28:CC:6A X509v3 Authority Key Identifier: keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:59:7c:b9:83:d5:8e:2a:72:ba:00:98:72:18:10:01:4b:c3: 36:e5:e8:1c:2a:3f:c5:6a:9f:63:b3:aa:f9:b1:76:90:83:7f: f6:51:47:75:0a:51:eb:ef:ae:10:7e:b5:8a:25:1c:03:8b:38: 12:16:b4:ed:66:76:e5:bc:1c:b7:5f:8f:f2:4e:2f:fd:15:d7: ff:1d:81:74:0f:5a:b7:7e:f9:6b:d3:67:60:79:18:dd:5a:a1: 05:03:c4:bc:f3:1f:07:09:71:04:81:60:9c:37:d8:d9:ad:9d: 53:ea:65:53:5c:5d:2d:b6:44:29:c3:78:2b:6e:2a:89:b4:b3: 2f:73:f6:5c:d3:46:fb:b4:55:db:ec:a5:25:9a:9d:a6:9d:37: fd:00:79:ff:f4:9c:85:c5:89:4f:4e:7b:74:96:3f:cd:ee:97: e4:4d:66:e6:ea:1a:c0:8e:83:1d:fb:eb:20:73:eb:f2:3d:55: 96:ea:f9:59:55:b1:e5:ef:f3:f4:68:26:06:9b:5b:32:65:10: 6b:fc:dc:66:f3:c7:2a:af:04:d9:5f:b7:85:61:6f:d9:cd:da: 0a:d3:42:54:69:a0:4e:7f:1c:5c:2d:4e:fd:4f:94:4c:7f:0d: 59:b4:19:90:fc:b7:a4:11:a2:a0:49:9c:90:d6:07:3b:d1:83: 86:db:a2:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjKGv/HilwOaN9ZmHXZaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGU1ODE1MzdlN2FhNjY3ODNjMzQwMzgyMmExMTgxYTMx NjhkMDgwHhcNMjUxMjE4MTMwMDU4WhcNMjUxMjE5MTMwMDU4WjAzMTEwLwYDVQQD EygwM2Q2Y2NiM2UyNTJkZjk5MzcwOWQ4YWI4ZWY3NDVkYzEwMjhjYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Nr3/1nomeHLuGeuTHXmg1nZQfF 2zepQ+W9XuA6wyB+kweNO4+UuglxtoC//Nh0yode8AgIQl+SstqXAEo4UPUvwzXh QHvtuH48A/ywkiGKiZ2mSRtnuxzPR2rWcPAe5gckfBdUsp8/kl0SdcN4P8evPgPM eGeA8O3a/Stp2lxkvKL8dpa24D0VmUsMm2luqWVCDiTZK04WJGaP9X4Ygd21bEMx UaNSKA6Q8COEc9OceGlXmHEvuPN+wL2qp7FounFdTO28JuTLr3TnCKUIgM28SoaB udDvKu1e7A3KWz2pcUpx0DM98xLqf+e+1YMEXAsY2IHsZ/qs2HgNZbrLwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPWzLPiUt+ZNwnYq473RdwQKMxqMB8GA1UdIwQY MBaAFF6OWBU356pmeDw0A4IqEYGjFo0IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDkt NzQxOGFjMTEwYzgzLzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjQyNGUtMjYyYy00MDc3LTg4NDktNzQxOGFjMTEwYzgz LzEvWG81WUZUZm5xbVo0UERRRGdpb1JnYU1XalFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFl8uYPV jipyugCYchgQAUvDNuXoHCo/xWqfY7Oq+bF2kIN/9lFHdQpR6++uEH61iiUcA4s4 Eha07WZ25bwct1+P8k4v/RXX/x2BdA9at375a9NnYHkY3VqhBQPEvPMfBwlxBIFg nDfY2a2dU+plU1xdLbZEKcN4K24qibSzL3P2XNNG+7RV2+ylJZqdpp03/QB5//Sc hcWJT057dJY/ze6X5E1m5uoawI6DHfvrIHPr8j1Vlur5WVWx5e/z9GgmBptbMmUQ a/zcZvPHKq8E2V+3hWFv2c3aCtNCVGmgTn8cXC1O/U+UTH8NWbQZkPy3pBGioEmc kNYHO9GDhtuiZA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:09:41 2025 by rpki-client