This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json) Hash identifier: RPQ/W8h4U3CvYfhRb44CWyIkGzLYrP8AkuJMyDkyctA= Subject key identifier: 94:47:B0:26:A8:CB:8F:ED:78:A3:76:01:C2:6C:03:7E:E5:0E:90:DF Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Certificate serial: 019B397CDEC5C93337B6DDFD32A16221C2E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft Manifest number: 0D38 Signing time: Sat 20 Dec 2025 02:00:43 +0000 Manifest this update: Sat 20 Dec 2025 02:00:43 +0000 Manifest next update: Sun 21 Dec 2025 02:00:43 +0000 Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: 6OMzaoDvuKiYB7CvMH7dW/EOGFSCwZcAgqiw1apnyLA=) 2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:de:c5:c9:33:37:b6:dd:fd:32:a1:62:21:c2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Validity Not Before: Dec 20 02:00:43 2025 GMT Not After : Dec 21 02:00:43 2025 GMT Subject: CN=9447b026a8cb8fed78a37601c26c037ee50e90df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:98:da:49:18:ea:5f:e8:1f:34:8e:1c:b1: e2:d6:7f:f2:e1:aa:aa:6d:51:cb:74:3d:06:5c:3c: 02:16:dc:ce:26:45:1d:52:5d:dc:98:a1:a4:06:88: 0c:b5:fd:a3:6b:6a:24:20:ac:38:f2:d6:62:80:85: 1f:94:cd:ca:4e:c2:70:1f:e8:1f:fd:cf:f3:07:b6: de:ed:ce:35:23:e2:7e:a4:3a:87:12:ce:e9:1f:2b: 6d:4a:6b:03:9d:fc:ed:31:38:46:5d:6b:6d:0b:d7: 19:23:4e:31:ec:9b:d3:03:30:40:39:81:66:a7:64: c5:74:12:bc:af:4a:d1:2c:d4:dc:8d:be:f9:a8:3b: 35:1b:52:8c:62:f8:6b:d2:47:a0:b4:ad:13:4a:72: b3:93:e0:13:57:6a:20:10:4f:ac:c9:9d:e7:a0:d7: aa:c6:20:dd:3b:15:13:34:19:7a:9e:15:02:b0:3f: ad:6b:fb:08:ee:f2:58:ae:2a:20:19:b7:c3:1e:8d: 51:c2:8b:98:10:bb:0c:c7:c9:47:37:a9:68:7f:ec: 75:68:51:7a:a5:1d:bc:25:bc:54:a7:b8:a0:d6:a6: 82:67:28:c0:7e:c2:e5:83:8e:4d:d1:29:97:cf:1e: 5c:37:f8:a7:35:20:34:87:18:91:26:f3:2b:75:80: 6c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:B0:26:A8:CB:8F:ED:78:A3:76:01:C2:6C:03:7E:E5:0E:90:DF X509v3 Authority Key Identifier: keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b7:5e:4e:2e:29:09:a3:aa:e7:1f:a2:7e:49:a2:46:d4:ce: 5e:6f:5a:db:b8:45:ed:48:3e:c4:f8:d1:d6:53:81:25:08:1d: 78:60:01:95:2c:4f:ab:95:d1:a0:19:bd:db:44:02:2a:08:77: 54:47:79:ff:8b:dd:22:38:63:47:07:c2:23:98:2a:10:04:ae: ff:57:2d:24:88:89:88:b6:b8:88:84:c7:69:04:db:82:dc:5f: 23:1f:0f:04:e0:06:6b:e3:6d:7b:18:4e:bc:03:dc:f4:0b:71: 0c:6f:fc:12:09:f0:93:23:ab:cb:62:5b:a0:a4:32:5f:fa:87: 38:00:80:6c:91:86:7b:5f:72:ff:b2:a7:99:23:3e:4f:57:d5: 48:03:27:a1:11:5a:b2:ce:44:36:6d:b5:c9:d2:e1:d7:21:cf: c9:05:aa:f2:6a:6e:8d:30:b0:a4:47:b4:34:03:74:2a:73:04: 39:87:c3:dc:fd:0c:d9:33:27:83:22:31:48:8b:ad:97:51:29: b0:81:cd:03:35:2e:01:31:6b:5f:94:20:68:7d:fc:9f:3e:9c: 5d:8f:8f:3c:6d:16:75:8c:8c:4f:79:99:cc:6e:a2:19:6a:62: 37:52:6f:4b:6d:f0:4c:ed:c0:52:b4:62:10:51:a7:30:7b:37: a7:86:2a:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fN7FyTM3tt39MqFiIcLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh YWMyZDkwHhcNMjUxMjIwMDIwMDQzWhcNMjUxMjIxMDIwMDQzWjAzMTEwLwYDVQQD Eyg5NDQ3YjAyNmE4Y2I4ZmVkNzhhMzc2MDFjMjZjMDM3ZWU1MGU5MGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL+Y2kkY6l/oHzSOHLHi1n/y4aqq bVHLdD0GXDwCFtzOJkUdUl3cmKGkBogMtf2ja2okIKw48tZigIUflM3KTsJwH+gf /c/zB7be7c41I+J+pDqHEs7pHyttSmsDnfztMThGXWttC9cZI04x7JvTAzBAOYFm p2TFdBK8r0rRLNTcjb75qDs1G1KMYvhr0kegtK0TSnKzk+ATV2ogEE+syZ3noNeq xiDdOxUTNBl6nhUCsD+ta/sI7vJYriogGbfDHo1RwouYELsMx8lHN6lof+x1aFF6 pR28JbxUp7ig1qaCZyjAfsLlg45N0SmXzx5cN/inNSA0hxiRJvMrdYBsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJRHsCaoy4/teKN2AcJsA37lDpDfMB8GA1UdIwQY MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7deTi4p CaOq5x+ifkmiRtTOXm9a27hF7Ug+xPjR1lOBJQgdeGABlSxPq5XRoBm920QCKgh3 VEd5/4vdIjhjRwfCI5gqEASu/1ctJIiJiLa4iITHaQTbgtxfIx8PBOAGa+NtexhO vAPc9AtxDG/8EgnwkyOry2JboKQyX/qHOACAbJGGe19y/7KnmSM+T1fVSAMnoRFa ss5ENm21ydLh1yHPyQWq8mpujTCwpEe0NAN0KnMEOYfD3P0M2TMngyIxSIutl1Ep sIHNAzUuATFrX5QgaH38nz6cXY+PPG0WdYyMT3mZzG6iGWpiN1JvS23wTO3AUrRi EFGnMHs3p4Yqnw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:22:11 2025 by rpki-client