This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json) Hash identifier: IbgGxoRhZeopAKaAlVBUbUL52py9TeDFCCVycRR1RKg= Subject key identifier: BD:67:25:F4:24:DE:D5:BE:16:B6:F2:A1:A1:70:41:6D:B4:56:BC:A2 Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1 Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1 Certificate serial: 019B733542BE6836986F5E8F03998A5F1D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft Manifest number: 0DE5 Signing time: Wed 31 Dec 2025 07:00:28 +0000 Manifest this update: Wed 31 Dec 2025 07:00:28 +0000 Manifest next update: Thu 01 Jan 2026 07:00:28 +0000 Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: h1PDvTK8kc58g2y0Xo4BRsr1Wd/GBWquZzGUP3Aw3jI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:42:be:68:36:98:6f:5e:8f:03:99:8a:5f:1d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1 Validity Not Before: Dec 31 07:00:28 2025 GMT Not After : Jan 1 07:00:28 2026 GMT Subject: CN=bd6725f424ded5be16b6f2a1a170416db456bca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:4f:f1:63:3a:e6:6a:d1:e3:9f:5b:c2:11: 77:99:16:b5:2c:89:69:bd:c3:6b:af:0c:d9:f6:8a: c4:89:20:8f:2b:56:9d:f4:6d:d9:78:16:ca:dc:99: 5e:dd:80:52:b0:2b:84:4b:a1:0c:64:89:90:eb:c4: 5a:96:e0:85:56:06:9a:fc:c5:95:bc:0a:40:8e:bc: 72:41:36:49:d7:33:52:c3:e6:3d:7c:47:3b:18:d6: 35:7a:7c:f8:e1:27:65:5f:a1:38:1e:5d:19:f6:b5: c6:9d:df:d8:60:78:4a:b4:ea:b2:85:a3:2f:83:98: 79:d0:f9:09:a1:fe:b6:cd:c9:b9:1c:34:e5:a3:2a: 81:31:da:69:a7:f8:c2:90:4e:f0:30:b3:00:bf:6c: 76:31:7b:11:da:79:89:aa:77:dc:31:19:c2:ec:7c: 16:e6:68:26:1c:c2:e6:3b:64:e4:f4:58:66:c6:15: ac:0b:72:80:5b:19:5c:bf:e2:30:1e:9f:ba:64:0c: 53:9c:67:f1:7c:58:23:81:12:e8:d8:4c:d4:a4:0e: 69:59:5b:ca:97:0e:c5:74:ef:83:95:49:5e:25:5a: ff:71:27:30:95:6a:a1:e9:51:1c:3b:cf:cc:cb:58: d9:9a:b1:82:8c:8c:1d:2d:00:cc:b4:0a:a7:f6:46: 1a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:25:F4:24:DE:D5:BE:16:B6:F2:A1:A1:70:41:6D:B4:56:BC:A2 X509v3 Authority Key Identifier: keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4a:21:4e:35:73:85:7b:41:8f:b9:7b:be:e7:9d:37:fc:cd: de:23:33:9d:68:02:53:08:d7:1e:8a:56:05:06:f4:34:8c:8c: 8f:86:6b:56:da:2e:a6:3b:68:c1:1d:c2:ca:7a:c9:50:fb:d0: ff:f4:b5:e5:e4:ba:59:a7:e4:22:df:18:21:6b:a6:9c:25:0a: df:13:ac:95:c2:ff:0e:b9:c2:35:1b:a6:76:b2:81:90:6e:4e: 0d:86:fa:1e:03:20:c1:70:b3:35:eb:1d:ed:65:81:fb:2c:70: ee:b0:a9:92:cb:df:fe:a5:c1:ec:3f:5e:0a:18:56:98:c4:fb: 0f:35:82:ea:88:63:19:d3:83:e5:76:13:52:eb:ce:c9:4d:eb: 1c:87:8d:97:91:27:ca:af:85:45:7e:06:0a:f1:71:35:f4:5c: 48:ab:46:c5:50:02:6c:f4:41:b5:d4:b8:38:66:47:c7:c7:fb: cf:3f:c5:83:dd:a9:a2:33:29:0c:af:97:37:5b:3d:cc:4e:ab: f3:da:2e:e2:0e:13:9a:0f:17:c8:43:e5:4e:51:b1:7d:eb:cb: 51:a3:25:95:ef:fb:52:65:ee:37:44:03:52:2a:ce:56:c2:a4: c0:aa:4e:7b:d2:a0:60:c9:02:bd:56:e3:88:52:48:54:ca:5a: b4:42:e2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNUK+aDaYb16PA5mKXx1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw M2E2YzEwHhcNMjUxMjMxMDcwMDI4WhcNMjYwMTAxMDcwMDI4WjAzMTEwLwYDVQQD EyhiZDY3MjVmNDI0ZGVkNWJlMTZiNmYyYTFhMTcwNDE2ZGI0NTZiY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzVP8WM65mrR459bwhF3mRa1LIlp vcNrrwzZ9orEiSCPK1ad9G3ZeBbK3Jle3YBSsCuES6EMZImQ68RaluCFVgaa/MWV vApAjrxyQTZJ1zNSw+Y9fEc7GNY1enz44SdlX6E4Hl0Z9rXGnd/YYHhKtOqyhaMv g5h50PkJof62zcm5HDTloyqBMdppp/jCkE7wMLMAv2x2MXsR2nmJqnfcMRnC7HwW 5mgmHMLmO2Tk9FhmxhWsC3KAWxlcv+IwHp+6ZAxTnGfxfFgjgRLo2EzUpA5pWVvK lw7FdO+DlUleJVr/cScwlWqh6VEcO8/My1jZmrGCjIwdLQDMtAqn9kYa6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1nJfQk3tW+FrbyoaFwQW20VryiMB8GA1UdIwQY MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkohTjVz hXtBj7l7vuedN/zN3iMznWgCUwjXHopWBQb0NIyMj4ZrVtoupjtowR3CynrJUPvQ //S15eS6WafkIt8YIWumnCUK3xOslcL/DrnCNRumdrKBkG5ODYb6HgMgwXCzNesd 7WWB+yxw7rCpksvf/qXB7D9eChhWmMT7DzWC6ohjGdOD5XYTUuvOyU3rHIeNl5En yq+FRX4GCvFxNfRcSKtGxVACbPRBtdS4OGZHx8f7zz/Fg92pojMpDK+XN1s9zE6r 89ou4g4Tmg8XyEPlTlGxfevLUaMlle/7UmXuN0QDUirOVsKkwKpOe9KgYMkCvVbj iFJIVMpatELieA== -----END CERTIFICATE-----Generated at Wed Dec 31 09:03:19 2025 by rpki-client