This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json) Hash identifier: QzgMX2xaBNtbFSwmXaaZN2NsnLK6pLX7QPz8la0SuUQ= Subject key identifier: A2:C4:52:71:3D:4D:7B:65:AB:BA:40:D6:6B:41:B5:8B:83:75:A0:21 Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Certificate serial: 019B3D90E1F0D544E6C059CBB1E9D6FA18F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft Manifest number: 06BE Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=) 2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: cXIbSfdW40kF/T1cLsQ/RUIaH+UWBGOMARA6a25hyrc=) 3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e1:f0:d5:44:e6:c0:59:cb:b1:e9:d6:fa:18:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=a2c452713d4d7b65abba40d66b41b58b8375a021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:8a:2b:d0:d4:ec:81:98:5b:3b:97:97:d9: 15:1d:9a:ee:a2:9c:cf:a1:d8:48:4e:34:1b:65:a5: b1:e1:37:d3:a4:da:60:de:c7:ee:b7:47:c8:44:f2: 1f:32:f3:56:db:ad:80:f6:00:fe:60:12:6b:c0:48: 81:31:20:ee:23:ae:13:3a:69:a5:51:3e:bf:da:f2: f0:11:08:e3:00:c5:00:16:c0:6c:e2:e5:1c:1a:90: 44:c9:fb:86:ba:bb:37:6f:3c:db:1a:ad:e9:40:ee: 04:27:b5:61:79:24:75:20:94:f5:60:04:b5:47:e3: 88:30:15:94:d2:39:84:fe:54:d4:ab:c7:95:66:34: 93:3d:78:3d:09:82:ee:84:f8:a8:9f:00:a8:ac:0c: 44:e3:7b:dc:2f:b7:3e:46:9d:9a:71:9d:bd:da:dd: f7:74:45:7e:1c:30:b3:a5:21:00:c7:9f:50:36:02: 93:73:e0:64:c5:e0:a2:e9:19:35:4c:d1:34:a1:b1: cb:c7:6e:5e:c8:08:50:21:a2:80:7e:ac:d4:b6:7c: ab:3c:ed:4d:4b:48:29:b7:71:9a:56:fb:77:f6:fc: ca:6b:db:85:15:b5:14:3c:d2:53:00:15:85:3d:1c: ae:3e:78:db:17:fd:3d:67:f4:b8:85:89:27:cb:33: 70:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C4:52:71:3D:4D:7B:65:AB:BA:40:D6:6B:41:B5:8B:83:75:A0:21 X509v3 Authority Key Identifier: keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:55:f4:05:77:d2:0d:51:d5:05:aa:5c:8e:60:14:e0:b4:a1: f2:05:97:b1:23:35:44:a4:25:af:0c:92:4d:c4:62:7f:8b:4b: b2:98:b0:71:18:17:33:c7:b7:b2:8e:17:23:86:7f:7a:ec:f8: fa:80:5c:71:00:8a:45:27:e9:62:82:e6:ee:58:a5:2e:2a:50: a4:31:e4:7b:e0:e9:c9:51:83:4f:c0:b2:10:95:12:10:73:f2: fa:b2:20:c5:35:a4:e6:b8:6c:79:0d:42:ec:b6:e1:f6:1e:27: 6f:cc:8a:ba:9a:1f:da:eb:2a:a7:8b:4d:14:cd:98:a1:3f:06: 1c:6c:b5:bc:a4:35:1a:e2:5f:27:a2:78:a5:c1:a9:0d:5f:a7: 82:35:41:c1:79:a7:6f:0d:67:06:b6:1a:8c:e1:f9:c1:9a:cd: 17:00:10:9d:55:23:3e:e3:0b:07:21:d4:91:ab:f0:45:1e:27: ec:7f:b2:50:95:8e:a3:17:5a:df:be:7d:e9:4e:bf:9b:12:cc: 62:ab:f0:0f:c2:a0:26:4d:5d:b0:63:0a:8e:e1:12:ef:ed:03: e8:3b:08:b9:21:aa:bb:50:c2:c2:4a:8e:a8:1c:3f:93:bb:fc: 7f:83:b2:a3:d2:3f:b7:71:ae:a5:2a:0c:0d:74:05:67:40:59: 28:5e:54:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOHw1UTmwFnLsenW+hjyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0 ZjRlOWEwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD EyhhMmM0NTI3MTNkNGQ3YjY1YWJiYTQwZDY2YjQxYjU4YjgzNzVhMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TWKK9DU7IGYWzuXl9kVHZruopzP odhITjQbZaWx4TfTpNpg3sfut0fIRPIfMvNW262A9gD+YBJrwEiBMSDuI64TOmml UT6/2vLwEQjjAMUAFsBs4uUcGpBEyfuGurs3bzzbGq3pQO4EJ7VheSR1IJT1YAS1 R+OIMBWU0jmE/lTUq8eVZjSTPXg9CYLuhPionwCorAxE43vcL7c+Rp2acZ292t33 dEV+HDCzpSEAx59QNgKTc+BkxeCi6Rk1TNE0obHLx25eyAhQIaKAfqzUtnyrPO1N S0gpt3GaVvt39vzKa9uFFbUUPNJTABWFPRyuPnjbF/09Z/S4hYknyzNwAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLEUnE9TXtlq7pA1mtBtYuDdaAhMB8GA1UdIwQY MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlX0BXfS DVHVBapcjmAU4LSh8gWXsSM1RKQlrwySTcRif4tLspiwcRgXM8e3so4XI4Z/euz4 +oBccQCKRSfpYoLm7lilLipQpDHke+DpyVGDT8CyEJUSEHPy+rIgxTWk5rhseQ1C 7Lbh9h4nb8yKupof2usqp4tNFM2YoT8GHGy1vKQ1GuJfJ6J4pcGpDV+ngjVBwXmn bw1nBrYajOH5wZrNFwAQnVUjPuMLByHUkavwRR4n7H+yUJWOoxda37596U6/mxLM YqvwD8KgJk1dsGMKjuES7+0D6DsIuSGqu1DCwkqOqBw/k7v8f4Oyo9I/t3GupSoM DXQFZ0BZKF5UOw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:32:25 2025 by rpki-client