This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft File: XPiK3BnqrRPWhbgew5k1vUssaa0.mft (raw, json) Hash identifier: 4grvZ6YJecXicgFYrUM/T/KRld/r+2CI+O5Iro/kCeM= Subject key identifier: FC:9C:92:DE:9F:50:13:22:26:09:A5:03:A3:89:16:44:61:8D:4C:64 Authority key identifier: 5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD Certificate issuer: /CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Certificate serial: 019AF2ADD08296E59AF506F204A150A5DF8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft Manifest number: 1667 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: 2m-5sAN7fZLZtnlN4KyM3kDb8rA.roa (hash: GBh4Fs12dTfnHuJfy5lqzt0sICQWCnX0b8Yq+RaFO/k=) 2: XPiK3BnqrRPWhbgew5k1vUssaa0.crl (hash: Aa5f1dSPQ8i1nEe+A4ieGvMYdQGlstnEC5DkL252riU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d0:82:96:e5:9a:f5:06:f2:04:a1:50:a5:df:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf88adc19eaad13d685b81ec39935bd4b2c69ad Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=fc9c92de9f5013222609a503a3891644618d4c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e9:ac:e0:7f:09:70:27:5b:25:4a:8a:8e:16: 1a:ad:ec:ee:8c:21:12:1d:ba:64:32:26:79:40:50: f2:37:5b:d6:09:b0:29:52:a0:a1:a9:39:7a:d7:79: 4e:30:b3:bb:6a:42:0c:0c:37:60:a9:e6:77:0f:4c: f7:3a:43:0a:91:75:90:49:c4:b1:1c:22:2c:e0:e5: 90:cb:4f:76:42:9a:82:60:a4:ea:ff:7b:ab:12:3b: 40:fc:9e:09:b5:aa:21:ef:51:d5:c9:d3:b9:3e:95: 22:c9:c0:4a:49:66:4d:24:04:85:b4:00:68:55:0c: 10:f5:f4:5c:ec:db:9f:eb:b9:29:0c:21:f5:d7:6e: 80:1e:3b:1c:92:93:db:86:7d:42:4f:5e:53:5a:3b: 92:64:55:47:6a:41:fc:f6:f8:77:ef:f6:7d:e4:0c: 66:f9:a0:d9:91:14:f7:57:0a:b6:50:4b:4a:fc:88: fc:86:ee:95:97:c6:a8:cb:e4:be:f7:ee:a1:58:32: bd:d8:a6:d8:b7:e5:6d:8b:93:21:02:c7:a7:ae:16: 45:59:14:26:db:73:83:e3:d2:eb:b8:0d:e6:1c:34: ad:77:a5:40:e7:66:8b:14:42:06:6e:2c:97:03:4b: 4f:ce:7c:89:b8:66:4d:b5:c1:1b:66:bf:f6:3e:fe: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9C:92:DE:9F:50:13:22:26:09:A5:03:A3:89:16:44:61:8D:4C:64 X509v3 Authority Key Identifier: keyid:5C:F8:8A:DC:19:EA:AD:13:D6:85:B8:1E:C3:99:35:BD:4B:2C:69:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPiK3BnqrRPWhbgew5k1vUssaa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7c166c-24b2-4a07-9115-17ce67bdad7b/1/XPiK3BnqrRPWhbgew5k1vUssaa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4a:2f:ad:94:93:43:41:cc:f7:fe:90:8f:0b:6a:2d:c3:c5: 6a:79:e9:77:02:46:24:cd:0f:ad:c0:74:a4:4c:99:cd:24:8d: dc:d6:17:a8:9d:16:f8:fd:18:5f:4e:25:4b:b3:b8:85:3f:6c: 2d:18:00:06:a6:a8:b0:f8:5c:cb:94:98:ec:fb:27:4d:09:27: 56:93:dd:c6:33:7c:28:32:74:2c:fd:97:2b:68:fd:63:db:72: 80:51:c7:51:ef:20:c4:88:d5:0d:bf:2f:9c:a7:b5:84:f2:62: 6a:59:44:ff:37:7a:b0:7f:d5:81:e5:17:db:51:a1:ca:2d:1a: 00:ae:17:2b:19:58:20:37:7c:bc:69:86:83:84:6d:eb:ce:de: df:83:30:7b:d8:ca:a8:56:39:c3:e3:25:25:cd:a0:47:91:9a: d4:49:0c:a4:d2:de:4f:4f:36:30:c6:8e:95:ed:98:11:a3:0b: 68:2e:fa:bf:d0:c8:46:d3:17:22:5b:ac:fc:0c:50:15:9c:5d: 95:15:96:d4:e6:45:01:5f:43:a5:19:43:e5:f8:0c:3b:48:af: 96:4b:ff:f6:33:47:90:3e:22:99:a3:d3:a9:a8:fa:75:08:5c: 08:dc:d4:a7:18:37:ad:c3:f8:19:ab:69:64:87:02:3f:63:85: 3e:e0:52:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdCCluWa9QbyBKFQpd+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjg4YWRjMTllYWFkMTNkNjg1YjgxZWMzOTkzNWJkNGIy YzY5YWQwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD EyhmYzljOTJkZTlmNTAxMzIyMjYwOWE1MDNhMzg5MTY0NDYxOGQ0YzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ems4H8JcCdbJUqKjhYarezujCES HbpkMiZ5QFDyN1vWCbApUqChqTl613lOMLO7akIMDDdgqeZ3D0z3OkMKkXWQScSx HCIs4OWQy092QpqCYKTq/3urEjtA/J4Jtaoh71HVydO5PpUiycBKSWZNJASFtABo VQwQ9fRc7Nuf67kpDCH1126AHjsckpPbhn1CT15TWjuSZFVHakH89vh37/Z95Axm +aDZkRT3Vwq2UEtK/Ij8hu6Vl8aoy+S+9+6hWDK92KbYt+Vti5MhAsenrhZFWRQm 23OD49LruA3mHDStd6VA52aLFEIGbiyXA0tPznyJuGZNtcEbZr/2Pv4tWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyckt6fUBMiJgmlA6OJFkRhjUxkMB8GA1UdIwQY MBaAFFz4itwZ6q0T1oW4HsOZNb1LLGmtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUt MTdjZTY3YmRhZDdiLzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83YzE2NmMtMjRiMi00YTA3LTkxMTUtMTdjZTY3YmRhZDdi LzEvWFBpSzNCbnFyUlBXaGJnZXc1azF2VXNzYWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUovrZST Q0HM9/6QjwtqLcPFannpdwJGJM0PrcB0pEyZzSSN3NYXqJ0W+P0YX04lS7O4hT9s LRgABqaosPhcy5SY7PsnTQknVpPdxjN8KDJ0LP2XK2j9Y9tygFHHUe8gxIjVDb8v nKe1hPJiallE/zd6sH/VgeUX21Ghyi0aAK4XKxlYIDd8vGmGg4Rt687e34Mwe9jK qFY5w+MlJc2gR5Ga1EkMpNLeT082MMaOle2YEaMLaC76v9DIRtMXIlus/AxQFZxd lRWW1OZFAV9DpRlD5fgMO0ivlkv/9jNHkD4imaPTqaj6dQhcCNzUpxg3rcP4Gatp ZIcCP2OFPuBStg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:26 2025 by rpki-client