This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json) Hash identifier: JGuQ9hX9zqOtBOzgmM0QuXNY9eYrqak1Sod/1rdyA+g= Subject key identifier: FC:94:D2:50:5A:FB:DA:14:0A:7C:DE:39:DA:1B:75:58:DF:01:78:CA Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Certificate serial: 019AF3528C77CF03B748D6B419FEC8584D1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft Manifest number: 0D8D Signing time: Sat 06 Dec 2025 11:01:04 +0000 Manifest this update: Sat 06 Dec 2025 11:01:04 +0000 Manifest next update: Sun 07 Dec 2025 11:01:04 +0000 Files and hashes: 1: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (hash: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=) 2: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: ZMNK30UQHUkKBATpKlBNyiHG5UQEhmSN2g1vFrF7JUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:8c:77:cf:03:b7:48:d6:b4:19:fe:c8:58:4d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d Validity Not Before: Dec 6 11:01:04 2025 GMT Not After : Dec 7 11:01:04 2025 GMT Subject: CN=fc94d2505afbda140a7cde39da1b7558df0178ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:c5:f6:67:d1:eb:08:c7:0f:80:33:30:e4: 43:e8:7e:92:ed:ae:e1:b9:ef:73:06:0c:81:82:6b: 6a:f0:ae:e6:a4:72:5e:f6:5d:ba:cc:61:c4:db:81: 39:52:f8:ff:0e:15:66:b4:93:ae:bb:eb:83:f5:a4: d3:34:7b:99:81:66:b1:6e:27:c6:33:04:19:c7:ee: e2:55:e1:19:02:69:5b:c3:97:56:4e:f0:fa:ec:3f: a5:6b:3e:76:76:bb:e1:60:85:e8:a1:e8:ad:2c:ef: 22:68:56:30:1e:77:58:7c:77:67:82:c8:73:4a:06: aa:ba:00:e8:a8:f5:e9:17:69:9e:54:18:b2:44:b8: 40:b4:0b:c3:9e:fd:b3:36:ff:a4:5a:55:e6:9b:25: df:13:60:31:6f:8b:b5:e5:b7:cb:b7:af:8a:57:21: 56:08:fb:c6:48:58:42:89:5b:ad:bd:63:1a:b6:f2: d1:b7:ff:83:8a:77:84:37:02:55:a1:41:12:f9:c9: ad:d3:dc:30:cd:8c:d4:31:71:2f:93:a7:db:6b:b4: 52:e5:e4:8f:85:d4:14:4f:1e:fe:19:df:0b:43:fa: c4:06:bc:79:4f:99:a5:12:59:b2:ff:de:31:b2:4e: 61:9e:e6:f5:86:ce:12:b8:99:f6:2d:9e:a8:d0:04: e2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:D2:50:5A:FB:DA:14:0A:7C:DE:39:DA:1B:75:58:DF:01:78:CA X509v3 Authority Key Identifier: keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:0c:91:63:c0:2d:bb:ca:c1:79:64:dc:94:e6:19:a5:ac: 10:57:62:4d:93:50:ea:57:d9:7d:92:1d:55:5d:27:4d:f9:a8: a4:06:be:79:01:66:75:86:4b:26:db:65:87:06:2a:b0:32:2e: 34:44:18:fc:5b:7f:ea:fd:08:11:d4:76:a4:58:81:b4:b8:9c: 10:26:98:d6:ce:d5:d9:ea:dc:3d:95:a3:0d:9e:a1:93:37:e6: 12:ea:b0:4b:01:32:ce:04:17:ac:62:e6:a6:94:67:d8:98:f7: 4c:f6:9a:59:36:a7:17:13:e7:56:09:47:af:2f:4c:14:75:f1: 29:99:b3:f0:34:ce:65:b8:31:86:bc:7b:e2:72:f0:8f:ad:ad: 0d:b0:8c:a4:13:88:1a:0a:3f:34:e3:87:1a:46:00:89:8b:2d: a4:a4:02:d2:d8:68:cf:96:53:fb:85:a5:a9:29:d9:20:57:8a: 75:ee:5f:11:e6:3b:7f:69:e0:f4:73:bf:41:0a:48:8b:3b:7f: ef:ce:56:d7:b3:7b:0a:24:67:df:b8:e3:3d:4c:f6:ac:fd:4c: cb:6d:f4:6d:e2:bc:4d:d3:40:3b:43:cf:7e:4f:33:60:78:3a: 84:90:e9:a3:de:1f:6a:89:77:fd:37:08:2a:e2:bd:95:72:31: b1:3d:43:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUox3zwO3SNa0Gf7IWE0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjgxM2UwOWM5OTU1ZTBiZGE3MDQxZjgzNzNhOGZjNWRh ZTZiOWQwHhcNMjUxMjA2MTEwMTA0WhcNMjUxMjA3MTEwMTA0WjAzMTEwLwYDVQQD EyhmYzk0ZDI1MDVhZmJkYTE0MGE3Y2RlMzlkYTFiNzU1OGRmMDE3OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl/F9mfR6wjHD4AzMORD6H6S7a7h ue9zBgyBgmtq8K7mpHJe9l26zGHE24E5Uvj/DhVmtJOuu+uD9aTTNHuZgWaxbifG MwQZx+7iVeEZAmlbw5dWTvD67D+laz52drvhYIXooeitLO8iaFYwHndYfHdngshz SgaqugDoqPXpF2meVBiyRLhAtAvDnv2zNv+kWlXmmyXfE2Axb4u15bfLt6+KVyFW CPvGSFhCiVutvWMatvLRt/+DineENwJVoUES+cmt09wwzYzUMXEvk6fba7RS5eSP hdQUTx7+Gd8LQ/rEBrx5T5mlElmy/94xsk5hnub1hs4SuJn2LZ6o0ATiSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyU0lBa+9oUCnzeOdobdVjfAXjKMB8GA1UdIwQY MBaAFFy4E+CcmVXgvacEH4NzqPxdrmudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEt NmM2MmI5MzY2NzA1LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNzIwNWItZmM1Ny00NjRjLWExYzEtNmM2MmI5MzY2NzA1 LzEvWExnVDRKeVpWZUM5cHdRZmczT29fRjJ1YTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStIMkWPA LbvKwXlk3JTmGaWsEFdiTZNQ6lfZfZIdVV0nTfmopAa+eQFmdYZLJttlhwYqsDIu NEQY/Ft/6v0IEdR2pFiBtLicECaY1s7V2ercPZWjDZ6hkzfmEuqwSwEyzgQXrGLm ppRn2Jj3TPaaWTanFxPnVglHry9MFHXxKZmz8DTOZbgxhrx74nLwj62tDbCMpBOI Ggo/NOOHGkYAiYstpKQC0thoz5ZT+4WlqSnZIFeKde5fEeY7f2ng9HO/QQpIizt/ 785W17N7CiRn37jjPUz2rP1My230beK8TdNAO0PPfk8zYHg6hJDpo94faol3/TcI KuK9lXIxsT1DaA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:12 2025 by rpki-client