This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json) Hash identifier: omd4SCT22Zw/eMD8Cmz049FF7wQeWj0cKXNDoSX9afk= Subject key identifier: D0:99:BE:DB:2E:E4:D0:3F:E2:3D:04:4C:CB:39:2E:FB:56:C8:BE:DB Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Certificate serial: 019B2C66308DEE93D5A7DC9E3DEB57929657 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft Manifest number: 0D7F Signing time: Wed 17 Dec 2025 13:00:53 +0000 Manifest this update: Wed 17 Dec 2025 13:00:53 +0000 Manifest next update: Thu 18 Dec 2025 13:00:53 +0000 Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=) 2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: DX05pWhTy+JQ/qDKgOT6cj1/LLoqw47NUhc5v5/DZ3w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:30:8d:ee:93:d5:a7:dc:9e:3d:eb:57:92:96:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Validity Not Before: Dec 17 13:00:53 2025 GMT Not After : Dec 18 13:00:53 2025 GMT Subject: CN=d099bedb2ee4d03fe23d044ccb392efb56c8bedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:c6:f7:08:28:94:61:d6:cc:18:5a:69:d6: bb:d4:71:e1:8f:bb:10:0c:7e:b4:f5:7d:ae:66:04: d4:e2:a4:5a:0f:fd:e2:6a:dc:c0:17:70:08:b5:56: 30:0a:f4:bf:50:aa:2b:91:5d:7e:53:24:a6:70:0b: 7a:a7:ee:6a:ef:34:80:f5:30:0a:80:db:96:0c:4a: f6:84:bb:30:3f:4f:de:34:5b:31:48:0e:98:43:0d: 5b:3f:66:43:79:eb:d2:70:d0:a9:23:ec:51:77:ad: ad:ea:fd:bf:ee:0d:06:95:c3:36:38:49:ec:7d:7a: 6b:bb:8d:42:5a:12:a1:5e:c2:b2:dd:c9:92:ba:bc: fb:c8:e9:85:65:ca:28:65:00:31:c9:95:d4:11:e0: 9b:db:5b:98:58:10:15:ac:7d:14:8c:0c:5b:72:b9: 2f:c8:fb:c3:5f:de:8e:d6:a0:7f:93:df:19:3c:51: 52:7f:2e:55:0d:85:f0:3e:67:4d:59:0e:b0:d6:30: d9:c5:ba:1b:28:9a:62:e3:db:e8:20:76:32:46:00: a1:07:d1:0f:26:dc:4f:f3:03:62:d8:b0:8a:d7:1b: 0f:5b:42:24:d4:52:11:9f:da:4c:a2:c4:8a:f8:87: 65:9d:a1:a9:63:23:05:94:4f:03:86:2c:e7:d8:e9: 3e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:BE:DB:2E:E4:D0:3F:E2:3D:04:4C:CB:39:2E:FB:56:C8:BE:DB X509v3 Authority Key Identifier: keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c3:bc:0b:68:39:73:a4:0f:84:c1:b0:5a:41:70:c7:cb:8b: ca:42:16:48:15:9a:d6:cd:65:31:12:0c:6d:f8:24:9a:9d:3b: 1d:2f:7c:a7:5a:f0:1b:2c:93:fc:e8:af:72:2d:4b:72:ae:ca: dc:c4:3c:7b:81:1a:9d:9c:75:89:0d:13:ca:09:2b:d3:86:b1: 19:52:c4:17:b2:ef:0a:a9:68:59:35:fd:10:67:2c:e3:fb:0c: 56:6b:d8:71:20:c9:53:75:18:db:3e:85:06:73:fd:1f:f4:f5: dc:38:f3:e9:ff:70:9f:4a:62:e2:50:b0:50:b3:87:8c:2b:39: f1:26:cc:79:47:93:9e:5e:30:2a:7e:8d:9c:b8:fb:6f:92:76: f7:fe:00:f8:89:9d:90:55:f9:3a:c3:10:7d:8e:2b:de:a8:0c: 82:53:a4:85:60:8a:26:ff:a2:d5:31:22:07:da:67:96:34:07: 88:55:65:94:7e:a2:17:7e:05:bb:c1:5b:50:bf:c7:25:e0:75: 8b:67:a0:54:ca:77:b9:f9:f6:00:7a:34:7b:83:34:26:83:b8: 49:f9:40:d5:5b:62:c3:ae:10:98:47:fa:36:6b:e4:da:e9:cf: e6:9c:e5:a9:4d:22:fe:c1:52:f2:f9:7a:81:c5:a7:b7:5a:5f: 43:3d:06:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZjCN7pPVp9yePetXkpZXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4 NDY3YzcwHhcNMjUxMjE3MTMwMDUzWhcNMjUxMjE4MTMwMDUzWjAzMTEwLwYDVQQD EyhkMDk5YmVkYjJlZTRkMDNmZTIzZDA0NGNjYjM5MmVmYjU2YzhiZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTbG9wgolGHWzBhaada71HHhj7sQ DH609X2uZgTU4qRaD/3iatzAF3AItVYwCvS/UKorkV1+UySmcAt6p+5q7zSA9TAK gNuWDEr2hLswP0/eNFsxSA6YQw1bP2ZDeevScNCpI+xRd62t6v2/7g0GlcM2OEns fXpru41CWhKhXsKy3cmSurz7yOmFZcooZQAxyZXUEeCb21uYWBAVrH0UjAxbcrkv yPvDX96O1qB/k98ZPFFSfy5VDYXwPmdNWQ6w1jDZxbobKJpi49voIHYyRgChB9EP JtxP8wNi2LCK1xsPW0Ik1FIRn9pMosSK+IdlnaGpYyMFlE8Dhizn2Ok+FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCZvtsu5NA/4j0ETMs5LvtWyL7bMB8GA1UdIwQY MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMO8C2g5 c6QPhMGwWkFwx8uLykIWSBWa1s1lMRIMbfgkmp07HS98p1rwGyyT/Oivci1Lcq7K 3MQ8e4EanZx1iQ0Tygkr04axGVLEF7LvCqloWTX9EGcs4/sMVmvYcSDJU3UY2z6F BnP9H/T13Djz6f9wn0pi4lCwULOHjCs58SbMeUeTnl4wKn6NnLj7b5J29/4A+Imd kFX5OsMQfY4r3qgMglOkhWCKJv+i1TEiB9pnljQHiFVllH6iF34Fu8FbUL/HJeB1 i2egVMp3ufn2AHo0e4M0JoO4SflA1Vtiw64QmEf6Nmvk2unP5pzlqU0i/sFS8vl6 gcWnt1pfQz0GgA== -----END CERTIFICATE-----Generated at Wed Dec 17 22:23:37 2025 by rpki-client