This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json) Hash identifier: h5hOsD69AqLt5NAsmcy0prKCMn8YVN1YSC3Lp4ETXCg= Subject key identifier: 78:52:07:B1:BE:61:DB:DF:D3:EE:07:61:A7:31:C7:E3:20:C4:C0:0A Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Certificate serial: 019B2EF9E1AB45F4E495420E95B6BE95490E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft Manifest number: 06CF Signing time: Thu 18 Dec 2025 01:01:26 +0000 Manifest this update: Thu 18 Dec 2025 01:01:26 +0000 Manifest next update: Fri 19 Dec 2025 01:01:26 +0000 Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=) 2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: QPUrUYdUS5YhEo7OA/WFdtS2aSliu68J90JdSz043H4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:e1:ab:45:f4:e4:95:42:0e:95:b6:be:95:49:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Validity Not Before: Dec 18 01:01:26 2025 GMT Not After : Dec 19 01:01:26 2025 GMT Subject: CN=785207b1be61dbdfd3ee0761a731c7e320c4c00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:03:a1:a0:19:12:28:6d:7e:2e:35:1f:46: b8:b6:28:05:71:4f:8f:eb:6b:2b:41:33:3d:88:17: a8:20:b7:39:d8:ae:17:55:eb:98:a9:32:6a:be:91: 40:ff:5c:88:27:45:be:fa:02:b1:89:5e:56:ea:9e: f0:9d:64:b1:eb:1a:39:b8:0b:17:e5:ce:71:0d:d2: fe:26:be:ca:30:58:fa:45:1f:f3:3f:c8:12:46:18: f7:bd:02:3b:af:7a:74:89:54:9f:e6:2a:e7:1c:f2: 09:c2:df:64:8c:80:31:47:0e:3f:58:16:2e:bf:0e: 43:2c:a5:a6:0c:fa:f1:75:e9:34:85:ea:8d:d2:77: 2a:f5:d1:b7:7f:6a:d3:15:18:b9:ae:64:99:f9:f6: 12:2f:c4:09:51:e3:69:10:f8:d2:a2:ec:55:43:6e: 3e:a8:1b:f3:b1:c0:3b:76:94:ca:dc:3a:93:ae:18: 75:a5:b9:f8:d8:9d:6e:be:5c:bc:bd:37:05:7e:10: 48:66:4f:4b:c2:80:80:57:c0:82:a7:c7:d7:79:e6: e4:5a:d4:e5:a4:d5:57:ea:9a:3c:6b:00:54:34:3b: 72:49:b4:6f:f2:9d:5b:a0:a2:3a:88:83:be:ef:6f: 4e:34:6a:58:25:de:31:60:97:2a:e0:36:e3:07:85: 62:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:07:B1:BE:61:DB:DF:D3:EE:07:61:A7:31:C7:E3:20:C4:C0:0A X509v3 Authority Key Identifier: keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d7:03:87:e3:29:72:4c:b5:93:2c:c3:1f:12:5a:bb:91:f3: d6:e7:c8:fb:d7:20:69:bc:90:0b:2c:14:2c:9f:52:f0:f3:2f: c7:61:26:3e:59:46:ed:da:f1:68:7b:8f:16:63:ab:0b:f9:b4: 18:b6:b7:0d:c7:e6:f9:1c:d7:4b:cd:64:6c:ab:ef:8f:36:68: 23:87:07:6e:e3:dc:4f:6a:3a:e3:eb:2c:5a:bd:b6:47:75:36: 84:88:48:13:14:11:7f:5e:91:1a:e2:53:a0:09:44:84:0b:2c: 87:2c:98:de:e6:4c:66:7b:01:d1:5d:bb:f7:cd:3e:a4:40:68: 37:3d:b1:be:15:c1:51:f7:92:88:94:d4:cb:9b:e0:6a:d5:0d: 0f:a6:48:59:50:f8:02:f4:ad:ca:0e:3b:b6:d4:74:5a:b7:56: de:6d:20:84:0c:c0:68:c4:b0:43:44:c9:a5:14:65:e0:f5:05: 63:dd:bd:15:06:a8:5f:a4:00:ec:a5:ea:7e:a4:92:5c:e9:bf: f5:d8:3d:a6:7b:aa:cf:7c:aa:fb:5c:cc:cf:2a:33:3b:c8:ff: bf:98:70:0d:68:a8:85:84:63:41:f8:fa:44:58:c1:ba:e4:b3: 01:d1:cd:75:c7:9e:65:39:2d:21:91:65:d8:4b:8e:2e:a5:f3: aa:b7:ed:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+eGrRfTklUIOlba+lUkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi ZmJiN2EwHhcNMjUxMjE4MDEwMTI2WhcNMjUxMjE5MDEwMTI2WjAzMTEwLwYDVQQD Eyg3ODUyMDdiMWJlNjFkYmRmZDNlZTA3NjFhNzMxYzdlMzIwYzRjMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQDoaAZEihtfi41H0a4tigFcU+P 62srQTM9iBeoILc52K4XVeuYqTJqvpFA/1yIJ0W++gKxiV5W6p7wnWSx6xo5uAsX 5c5xDdL+Jr7KMFj6RR/zP8gSRhj3vQI7r3p0iVSf5irnHPIJwt9kjIAxRw4/WBYu vw5DLKWmDPrxdek0heqN0ncq9dG3f2rTFRi5rmSZ+fYSL8QJUeNpEPjSouxVQ24+ qBvzscA7dpTK3DqTrhh1pbn42J1uvly8vTcFfhBIZk9LwoCAV8CCp8fXeebkWtTl pNVX6po8awBUNDtySbRv8p1boKI6iIO+729ONGpYJd4xYJcq4DbjB4VisQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhSB7G+Ydvf0+4HYacxx+MgxMAKMB8GA1UdIwQY MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdcDh+Mp cky1kyzDHxJau5Hz1ufI+9cgabyQCywULJ9S8PMvx2EmPllG7drxaHuPFmOrC/m0 GLa3Dcfm+RzXS81kbKvvjzZoI4cHbuPcT2o64+ssWr22R3U2hIhIExQRf16RGuJT oAlEhAsshyyY3uZMZnsB0V27980+pEBoNz2xvhXBUfeSiJTUy5vgatUND6ZIWVD4 AvStyg47ttR0WrdW3m0ghAzAaMSwQ0TJpRRl4PUFY929FQaoX6QA7KXqfqSSXOm/ 9dg9pnuqz3yq+1zMzyozO8j/v5hwDWiohYRjQfj6RFjBuuSzAdHNdceeZTktIZFl 2EuOLqXzqrftPA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:24:56 2025 by rpki-client