This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft (raw, json) Hash identifier: pLweBHk+y/g2F2BTSGy6SbWs1/RdsDIIm+zMpIeiLAs= Subject key identifier: C8:9B:85:A1:5D:B2:71:9B:B6:25:DD:9E:69:00:5B:C0:2C:96:76:3C Authority key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D Certificate issuer: /CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Certificate serial: 019B360E1CA0CAA1FB2EB3E97D006259FC1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft Manifest number: 14BF Signing time: Fri 19 Dec 2025 10:00:52 +0000 Manifest this update: Fri 19 Dec 2025 10:00:52 +0000 Manifest next update: Sat 20 Dec 2025 10:00:52 +0000 Files and hashes: 1: K_AT4bSuNVVRHY1_UQf9p3oUmaU.roa (hash: UUfyHhYh06/+OIKNXsCgKD2Y5o+FiTgolZxplZXidG4=) 2: XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl (hash: QTIF6rQ2uO+lVkE9ww1QZaPSqQOG37QTLNuQyMSjMcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:1c:a0:ca:a1:fb:2e:b3:e9:7d:00:62:59:fc:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d Validity Not Before: Dec 19 10:00:52 2025 GMT Not After : Dec 20 10:00:52 2025 GMT Subject: CN=c89b85a15db2719bb625dd9e69005bc02c96763c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:28:94:56:2c:d8:7a:e3:55:72:b4:a6:b0: d5:ca:e2:6b:36:be:1a:2f:06:9d:41:bc:9b:cc:8e: 12:00:01:04:16:76:47:71:fb:32:8e:4d:84:13:74: 5c:93:d9:3b:79:95:90:e2:e8:d8:6a:f8:90:85:d7: 95:ce:78:b9:46:06:53:c2:2a:66:36:a3:0c:e0:7e: b4:ca:42:dd:f2:9e:8b:36:5c:70:ee:b4:51:ad:f2: 50:47:ac:24:4b:b2:0d:01:f2:da:07:13:50:a7:3f: 30:c7:55:3d:6c:d1:d6:42:a8:dc:d6:a9:fc:33:06: 8f:95:b9:ac:24:ad:8a:c2:5b:3f:61:09:aa:99:5a: 4d:ec:1e:f1:4b:41:56:37:39:28:8d:95:e9:56:a5: ca:96:62:24:87:b0:8a:f6:5c:08:ec:67:84:13:8d: 6a:a1:e9:69:7e:33:9c:c2:32:60:da:fb:ea:67:6d: fa:ab:d5:25:27:af:5e:0e:d0:41:bd:81:59:3a:03: 8f:9f:6d:5a:a1:87:d6:38:1a:b1:10:52:3c:d9:56: ab:b6:17:db:f5:a1:57:6b:01:cf:e2:3e:a0:2d:bd: 47:49:65:27:df:d0:36:b1:fd:62:65:14:6c:70:66: 06:fc:14:88:d3:5e:d2:07:52:aa:a8:22:b5:7f:84: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9B:85:A1:5D:B2:71:9B:B6:25:DD:9E:69:00:5B:C0:2C:96:76:3C X509v3 Authority Key Identifier: keyid:5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9e:13:0f:a7:03:6a:31:73:9f:91:98:f1:f7:da:fd:ca:c9: 1c:fd:13:2a:af:03:9b:78:fc:6f:6a:27:e6:db:84:99:66:99: 59:62:80:da:69:7e:d0:9e:24:02:bd:31:f1:56:18:fe:77:f6: 02:41:a0:56:a7:03:25:1c:85:64:43:6d:5a:d2:a7:5f:8b:5e: bc:e5:1f:30:d2:8f:f8:1a:ed:bf:54:a8:27:a8:56:f1:dc:2e: a4:e5:a9:19:53:5c:80:54:ce:c4:8a:9c:b0:9d:90:7e:95:bc: 59:ac:7a:88:13:46:8d:65:28:26:b4:6e:7d:79:fa:44:fb:1e: c8:6b:eb:39:d3:c2:a4:54:13:6a:a3:9c:84:d4:a5:60:b8:e6: 3f:d0:df:d7:b8:1c:84:83:e7:de:aa:c5:97:e4:46:d8:d5:f2: b3:1e:38:fb:19:ea:f0:e3:dd:19:b9:cf:38:3c:19:46:1f:2c: fe:bf:e2:57:6a:22:db:09:7a:9c:ff:14:da:65:62:f7:ec:72: bb:1d:e9:50:37:b8:1d:4b:a8:81:c7:5b:84:60:16:a6:e3:13: ad:50:14:77:93:8d:4b:77:4a:31:45:e2:c7:37:39:df:43:b2: f0:2c:5f:88:cf:69:d1:a3:e6:ca:1c:25:f5:b9:5e:12:8d:2e: 61:e2:35:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DhygyqH7LrPpfQBiWfwdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzA0NGI0Yjk2ZjIxZmE5YTg0NjQ1YmQ1ZTNhOWUxOTcy MzA4MmQwHhcNMjUxMjE5MTAwMDUyWhcNMjUxMjIwMTAwMDUyWjAzMTEwLwYDVQQD EyhjODliODVhMTVkYjI3MTliYjYyNWRkOWU2OTAwNWJjMDJjOTY3NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq8olFYs2HrjVXK0prDVyuJrNr4a LwadQbybzI4SAAEEFnZHcfsyjk2EE3Rck9k7eZWQ4ujYaviQhdeVzni5RgZTwipm NqMM4H60ykLd8p6LNlxw7rRRrfJQR6wkS7INAfLaBxNQpz8wx1U9bNHWQqjc1qn8 MwaPlbmsJK2Kwls/YQmqmVpN7B7xS0FWNzkojZXpVqXKlmIkh7CK9lwI7GeEE41q oelpfjOcwjJg2vvqZ236q9UlJ69eDtBBvYFZOgOPn21aoYfWOBqxEFI82Varthfb 9aFXawHP4j6gLb1HSWUn39A2sf1iZRRscGYG/BSI017SB1KqqCK1f4S2qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMibhaFdsnGbtiXdnmkAW8AslnY8MB8GA1UdIwQY MBaAFF7ARLS5byH6moRkW9XjqeGXIwgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2It NjFlNGViZjY3MWFiLzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83N2I4NmYtN2E5NC00ODQ3LTkwM2ItNjFlNGViZjY3MWFi LzEvWHNCRXRMbHZJZnFhaEdSYjFlT3A0WmNqQ0MwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZ4TD6cD ajFzn5GY8ffa/crJHP0TKq8Dm3j8b2on5tuEmWaZWWKA2ml+0J4kAr0x8VYY/nf2 AkGgVqcDJRyFZENtWtKnX4tevOUfMNKP+Brtv1SoJ6hW8dwupOWpGVNcgFTOxIqc sJ2QfpW8Wax6iBNGjWUoJrRufXn6RPseyGvrOdPCpFQTaqOchNSlYLjmP9Df17gc hIPn3qrFl+RG2NXysx44+xnq8OPdGbnPODwZRh8s/r/iV2oi2wl6nP8U2mVi9+xy ux3pUDe4HUuogcdbhGAWpuMTrVAUd5ONS3dKMUXixzc530Oy8CxfiM9p0aPmyhwl 9bleEo0uYeI1Ag== -----END CERTIFICATE-----Generated at Fri Dec 19 14:34:35 2025 by rpki-client