This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft File: XHbv8miEvwBiB9cis7AaRNK1YZk.mft (raw, json) Hash identifier: DgzwAuLn5jf/y4Ce+bOjCqxeMMDxRugZUOmhsEq7/eM= Subject key identifier: BA:92:45:AD:F8:D7:83:2F:25:17:84:02:FA:50:B2:E8:86:36:A4:F4 Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99 Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199 Certificate serial: 019B27411C039EBAA5BC35913A5BD6584E56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft Manifest number: 0FB4 Signing time: Tue 16 Dec 2025 13:02:17 +0000 Manifest this update: Tue 16 Dec 2025 13:02:17 +0000 Manifest next update: Wed 17 Dec 2025 13:02:17 +0000 Files and hashes: 1: XHbv8miEvwBiB9cis7AaRNK1YZk.crl (hash: c+C8Xfyp5H4iPGVPWCTlu11k0v3jOmyCc2rjkrqxTS8=) 2: aeqC4EE0KUZ0Hdgey5muRSCYEvc.roa (hash: aH7XcxnHv3qEq7LQXqlBVrjotePFAy5nc/77ZI52Ock=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:1c:03:9e:ba:a5:bc:35:91:3a:5b:d6:58:4e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199 Validity Not Before: Dec 16 13:02:17 2025 GMT Not After : Dec 17 13:02:17 2025 GMT Subject: CN=ba9245adf8d7832f25178402fa50b2e88636a4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:65:19:ff:98:42:c2:e3:ff:96:8f:08:d3: f4:f5:e0:42:23:78:f8:d8:c1:27:d3:47:6d:2d:a8: ee:26:dc:c2:cc:43:84:e1:09:d8:c1:e8:f2:8c:8b: da:76:d5:0e:c2:3a:70:0c:8a:44:42:90:5f:e2:15: ba:c5:99:7c:d6:ae:b5:de:0f:a4:12:3b:e7:a7:dc: c1:4a:dc:b0:4c:7d:92:9a:0f:fc:46:93:6c:69:c9: 04:37:72:24:ba:50:7e:e6:fa:d2:30:e1:8b:e3:d2: b6:6d:2b:fd:ed:44:04:8e:69:5f:eb:c6:4c:13:3c: 0f:e4:a2:93:d1:cc:04:76:eb:2f:37:3d:77:f7:5d: df:9f:ef:e7:3d:be:0e:cf:c7:13:9a:30:47:5e:1e: 23:6c:e4:bc:a6:e4:90:f8:e0:a9:73:0e:ac:b1:9f: 36:1a:67:5f:c9:61:59:48:b3:d0:da:25:55:98:da: dd:d9:5d:b7:3c:f9:e5:63:fa:45:ee:98:02:f6:fa: 40:14:7e:bc:c3:3c:4d:56:c7:d2:f6:12:88:05:7a: 19:e6:71:82:10:e5:32:37:dc:05:68:cf:8f:e8:0b: 84:b2:da:8d:3b:f7:4e:ab:e1:9e:70:f2:16:9e:98: e2:f9:e0:a8:12:c9:a9:99:f7:cc:06:8e:5f:cf:5f: 5f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:92:45:AD:F8:D7:83:2F:25:17:84:02:FA:50:B2:E8:86:36:A4:F4 X509v3 Authority Key Identifier: keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:bb:db:60:1b:61:42:bd:b4:a6:53:2f:1a:ef:cc:39:74:ff: 9c:76:e5:97:52:b3:49:66:c7:bb:b2:c9:80:49:e9:71:fc:6c: f8:a2:82:94:29:f3:59:31:90:a2:4e:56:38:ef:93:54:cf:2e: 32:7c:64:a9:6c:db:4e:20:8d:ea:e1:2a:6b:da:45:f5:2f:c2: a4:11:c9:d2:a3:05:cb:da:bb:79:68:58:cf:a0:2c:12:ae:bb: b8:a6:b0:06:7e:fc:ed:fd:37:f2:81:04:d2:4a:6f:e0:c2:b9: b4:8f:d3:75:ff:9c:d0:2e:71:2e:02:00:3d:9b:f4:e4:7f:78: 4c:2f:a9:d5:81:4b:e8:39:8a:fe:83:83:97:dd:6e:cd:73:fb: d6:f8:eb:d6:36:48:c5:80:1e:8a:f1:6e:cb:26:7f:15:d6:51: 3c:ee:ea:f6:3f:ff:42:12:89:7b:5f:56:da:e1:31:1f:f7:1b: 0d:04:cf:8d:e5:2a:7b:ea:b4:54:2d:34:b0:30:35:4f:1f:0b: bb:a3:6e:44:14:1d:fa:56:62:fc:92:8f:91:0d:ff:a4:e8:2a: c3:5e:43:d6:da:2e:23:61:b2:22:16:30:76:fd:de:6f:53:c5: 6c:35:26:31:86:01:18:23:57:cb:e5:e8:0a:b9:90:77:86:86: cf:84:2e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQRwDnrqlvDWROlvWWE5WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi NTYxOTkwHhcNMjUxMjE2MTMwMjE3WhcNMjUxMjE3MTMwMjE3WjAzMTEwLwYDVQQD EyhiYTkyNDVhZGY4ZDc4MzJmMjUxNzg0MDJmYTUwYjJlODg2MzZhNGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW1lGf+YQsLj/5aPCNP09eBCI3j4 2MEn00dtLajuJtzCzEOE4QnYwejyjIvadtUOwjpwDIpEQpBf4hW6xZl81q613g+k Ejvnp9zBStywTH2Smg/8RpNsackEN3IkulB+5vrSMOGL49K2bSv97UQEjmlf68ZM EzwP5KKT0cwEdusvNz13913fn+/nPb4Oz8cTmjBHXh4jbOS8puSQ+OCpcw6ssZ82 GmdfyWFZSLPQ2iVVmNrd2V23PPnlY/pF7pgC9vpAFH68wzxNVsfS9hKIBXoZ5nGC EOUyN9wFaM+P6AuEstqNO/dOq+GecPIWnpji+eCoEsmpmffMBo5fz19fjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLqSRa3414MvJReEAvpQsuiGNqT0MB8GA1UdIwQY MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt NjYwNDExYjlkMTY3LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3 LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALvbYBth Qr20plMvGu/MOXT/nHbll1KzSWbHu7LJgEnpcfxs+KKClCnzWTGQok5WOO+TVM8u MnxkqWzbTiCN6uEqa9pF9S/CpBHJ0qMFy9q7eWhYz6AsEq67uKawBn787f038oEE 0kpv4MK5tI/Tdf+c0C5xLgIAPZv05H94TC+p1YFL6DmK/oODl91uzXP71vjr1jZI xYAeivFuyyZ/FdZRPO7q9j//QhKJe19W2uExH/cbDQTPjeUqe+q0VC00sDA1Tx8L u6NuRBQd+lZi/JKPkQ3/pOgqw15D1touI2GyIhYwdv3eb1PFbDUmMYYBGCNXy+Xo CrmQd4aGz4Quow== -----END CERTIFICATE-----Generated at Tue Dec 16 23:18:14 2025 by rpki-client