This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json) Hash identifier: je3rDBGUKwYFU1ZeypleHM5MuwcyJbo7CATxwLDEgCI= Subject key identifier: CA:DE:BB:69:13:B3:1D:DF:58:A7:23:18:34:80:1B:0A:1B:52:37:84 Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Certificate serial: 019B3A912CB640897FB7B32D0CC473A2B54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft Manifest number: 12F3 Signing time: Sat 20 Dec 2025 07:02:31 +0000 Manifest this update: Sat 20 Dec 2025 07:02:31 +0000 Manifest next update: Sun 21 Dec 2025 07:02:31 +0000 Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: hnGBKHE1SQlCssgnwbVptoZrYlLe57JAuVQY8jRBf6A=) 2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:2c:b6:40:89:7f:b7:b3:2d:0c:c4:73:a2:b5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Validity Not Before: Dec 20 07:02:31 2025 GMT Not After : Dec 21 07:02:31 2025 GMT Subject: CN=cadebb6913b31ddf58a7231834801b0a1b523784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a6:ac:b5:a5:78:4b:26:98:b6:e3:b1:55:3c: ee:50:d1:a0:bc:7d:ed:db:9e:40:47:e4:23:cb:46: 30:54:a5:5a:b2:3d:b5:7a:b8:13:aa:5b:1a:40:40: 49:0b:7a:f0:e3:e7:03:e4:ba:a9:98:32:a5:36:0d: a9:cd:ef:8f:21:30:56:37:da:33:a5:01:f6:b9:91: ea:8f:46:97:67:b8:d1:ae:2e:07:27:61:74:88:36: 4e:e5:97:2e:8a:6e:0d:52:27:e1:78:f6:77:ff:fd: 9a:4e:5e:7b:2b:1f:01:84:52:fb:85:07:37:14:6c: 73:8a:ea:10:0e:5e:3c:72:26:af:73:b2:eb:bc:93: 6e:23:03:58:e4:bf:63:2d:21:ff:50:7c:5e:83:0b: 47:c8:5c:cd:18:78:8f:f5:96:18:a1:16:15:f2:05: 83:eb:2f:e2:68:d8:6e:9f:1e:fd:ac:37:3b:bf:d7: 9e:4c:c5:b6:a8:11:fc:9d:30:46:0c:bb:1d:42:be: b9:ca:c4:b9:09:eb:4e:c7:85:40:ee:b7:fc:e2:95: 06:d5:80:d5:a9:1c:36:0c:79:96:85:24:a3:9d:08: 36:9c:97:65:2e:a4:e8:09:0b:03:10:38:28:35:c2: ef:86:2a:fc:e1:a1:e5:0f:80:42:72:f7:6b:ef:85: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:BB:69:13:B3:1D:DF:58:A7:23:18:34:80:1B:0A:1B:52:37:84 X509v3 Authority Key Identifier: keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d7:cd:0d:1c:a4:54:f1:61:99:27:64:90:09:db:1c:f0:b8: 78:ef:d8:4e:12:4d:1e:7b:4c:d5:1b:99:47:46:43:b0:d8:18: be:44:08:20:c9:a0:de:3c:ea:6a:e3:23:1a:00:ad:eb:91:0a: e8:69:51:81:e4:78:bf:aa:d9:63:7e:a6:ef:60:f5:d3:8d:86: fa:53:c9:a6:74:e4:e1:00:67:ad:ec:8a:b3:03:b0:3a:4d:8b: 50:b8:1c:2d:2b:96:9f:87:a4:51:c9:0f:4c:ac:43:5c:42:82: 43:98:d9:18:12:d2:0b:56:8f:da:dc:07:00:1c:b0:95:66:3d: a0:58:eb:be:b2:4f:1c:16:dd:57:19:5d:7a:90:09:38:ba:24: 81:5e:03:4b:bd:fd:44:4c:2b:dd:85:e2:81:ce:e5:25:58:20: aa:71:76:dc:11:e7:14:5d:80:84:30:a0:ca:69:15:00:8b:a2: d1:48:c6:4a:9a:1b:50:2f:c5:23:86:5b:9d:4b:2c:69:63:d7: c8:11:a7:ca:6e:6e:b3:9e:35:22:fe:da:56:90:8f:cb:10:33: fd:9c:58:eb:02:c6:8d:bd:0f:17:cb:86:25:4c:40:5e:f0:b4: c2:d7:c5:61:a2:45:56:a0:2f:ad:c3:16:04:2f:32:ed:a5:d8: 14:1d:05:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kSy2QIl/t7MtDMRzorVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMTEwYTJiMGFlYjM3ZjBjOTMyYTk2YmRiYmY3ZWYzNmMy MTE5N2MwHhcNMjUxMjIwMDcwMjMxWhcNMjUxMjIxMDcwMjMxWjAzMTEwLwYDVQQD EyhjYWRlYmI2OTEzYjMxZGRmNThhNzIzMTgzNDgwMWIwYTFiNTIzNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaastaV4SyaYtuOxVTzuUNGgvH3t 255AR+Qjy0YwVKVasj21ergTqlsaQEBJC3rw4+cD5LqpmDKlNg2pze+PITBWN9oz pQH2uZHqj0aXZ7jRri4HJ2F0iDZO5Zcuim4NUifhePZ3//2aTl57Kx8BhFL7hQc3 FGxziuoQDl48ciavc7LrvJNuIwNY5L9jLSH/UHxegwtHyFzNGHiP9ZYYoRYV8gWD 6y/iaNhunx79rDc7v9eeTMW2qBH8nTBGDLsdQr65ysS5CetOx4VA7rf84pUG1YDV qRw2DHmWhSSjnQg2nJdlLqToCQsDEDgoNcLvhir84aHlD4BCcvdr74V4VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMreu2kTsx3fWKcjGDSAGwobUjeEMB8GA1UdIwQY MBaAFFwRCisK6zfwyTKpa9u/fvNsIRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzIt YTQ0MjI0ZmFjM2ZmLzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzItYTQ0MjI0ZmFjM2Zm LzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNfNDRyk VPFhmSdkkAnbHPC4eO/YThJNHntM1RuZR0ZDsNgYvkQIIMmg3jzqauMjGgCt65EK 6GlRgeR4v6rZY36m72D1042G+lPJpnTk4QBnreyKswOwOk2LULgcLSuWn4ekUckP TKxDXEKCQ5jZGBLSC1aP2twHABywlWY9oFjrvrJPHBbdVxldepAJOLokgV4DS739 REwr3YXigc7lJVggqnF23BHnFF2AhDCgymkVAIui0UjGSpobUC/FI4ZbnUssaWPX yBGnym5us541Iv7aVpCPyxAz/ZxY6wLGjb0PF8uGJUxAXvC0wtfFYaJFVqAvrcMW BC8y7aXYFB0FUw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:39:33 2025 by rpki-client