This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft File: XinALSYfkT6lv4PCvHwzQUpCvMo.mft (raw, json) Hash identifier: /NlYiF5D6Ki7N+R+4Y26MSIn8q6eXSlC+6dYyUPcMmc= Subject key identifier: E2:8C:B7:B1:17:F6:C6:79:23:F3:E2:9A:70:AC:4C:8C:7C:34:7C:50 Authority key identifier: 5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA Certificate issuer: /CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Certificate serial: 019B2C6687CD723B57B023CA611A5A91C08F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft Manifest number: 0E67 Signing time: Wed 17 Dec 2025 13:01:15 +0000 Manifest this update: Wed 17 Dec 2025 13:01:15 +0000 Manifest next update: Thu 18 Dec 2025 13:01:15 +0000 Files and hashes: 1: 38xzFnggY2WqYErPpIPdnil2M-I.roa (hash: 3L7P4weXGgXURnYb88EC9SZdycP07LPWwVA0kWFKQpE=) 2: XinALSYfkT6lv4PCvHwzQUpCvMo.crl (hash: 0B2pkjc7A2PFs3BQgarIQ6YRR5xGjIgTRe8YJh98MAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:87:cd:72:3b:57:b0:23:ca:61:1a:5a:91:c0:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e29c02d261f913ea5bf83c2bc7c33414a42bcca Validity Not Before: Dec 17 13:01:15 2025 GMT Not After : Dec 18 13:01:15 2025 GMT Subject: CN=e28cb7b117f6c67923f3e29a70ac4c8c7c347c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:33:7e:80:0d:8b:48:7d:9a:6a:30:9a:20:bb: ae:20:f0:ba:e2:c3:34:bf:5c:34:b4:33:2c:9c:e4: 26:72:6a:21:f6:50:5d:6f:82:c5:bb:d5:85:9d:fd: 1b:46:97:ce:57:8d:1d:47:a2:77:37:5d:1b:bc:15: cb:92:49:65:d0:d5:a5:0b:8c:b2:fc:27:9e:f7:59: fb:43:98:9f:99:82:05:49:89:85:05:27:59:64:46: 65:eb:85:3a:f1:cc:cb:41:e4:0b:05:06:55:90:5e: 4c:81:93:ef:9d:0e:9b:c3:c9:53:19:6d:58:f0:6e: a8:48:f8:65:c8:f0:6c:1d:97:94:e9:74:04:34:e4: 79:58:0e:66:0e:b8:2b:c8:b4:21:3e:94:ec:77:36: 1c:ec:a4:9b:40:ed:9c:d3:7a:89:c9:a1:ba:08:d0: 87:27:ed:a6:1c:b4:a7:cb:1a:4e:82:40:ec:54:91: a1:a2:64:3b:9d:96:7c:3a:4d:ca:81:e7:2d:a5:bf: 58:c0:01:03:69:0f:9a:7a:69:eb:94:f9:9c:79:a5: c1:22:ef:27:ef:93:c6:ce:bf:89:0b:af:81:fe:13: ac:c6:26:78:37:d8:02:8a:92:de:73:53:6e:f8:c8: 00:9c:38:c7:9e:d3:a1:ed:65:9a:d7:26:74:c3:53: 4e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8C:B7:B1:17:F6:C6:79:23:F3:E2:9A:70:AC:4C:8C:7C:34:7C:50 X509v3 Authority Key Identifier: keyid:5E:29:C0:2D:26:1F:91:3E:A5:BF:83:C2:BC:7C:33:41:4A:42:BC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XinALSYfkT6lv4PCvHwzQUpCvMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac1253-0459-46cf-b1b9-9ac1a7e4c406/1/XinALSYfkT6lv4PCvHwzQUpCvMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:77:ea:cd:00:d9:f6:12:16:cb:2a:a3:6e:0a:c2:86:9d:14: 76:5f:dd:ff:da:4c:47:64:a3:89:37:20:ce:75:26:f6:3e:f2: 77:46:36:c6:65:48:fb:3d:7e:71:b3:9c:9d:70:c3:02:37:77: b6:83:54:9e:b7:b8:8c:fa:f3:02:28:9d:9b:4d:db:63:ae:43: b3:8d:0b:39:32:b3:1f:cd:d0:e7:fb:bb:03:ac:db:ee:fc:50: 3d:69:f0:29:3c:e2:00:68:59:3b:32:ea:15:8a:8b:24:59:81: 5f:c3:db:f2:ac:7f:30:88:2c:1e:2d:9b:9c:fa:11:d5:9e:1b: 19:5a:84:88:60:e6:f0:7a:b5:33:1b:07:e0:57:85:c7:bf:e2: 55:0c:cb:9b:8a:2b:7b:38:cc:7c:95:07:f1:3c:d9:8e:21:1f: e0:60:f9:94:f6:5f:f2:26:7a:a0:4b:84:36:ba:95:a4:06:e6: e9:05:12:df:dd:45:2b:23:b4:8a:a1:31:ba:ed:c2:9a:cf:19: 7d:22:ef:f5:d5:a9:c0:19:41:d3:61:78:c0:97:a9:a3:7a:0e: 12:35:e8:e2:b8:e8:18:3f:24:cd:35:15:9c:84:1d:dc:5f:60: 91:f5:a6:16:7e:19:68:af:eb:05:81:24:04:92:97:65:46:8c: 20:bb:a6:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZofNcjtXsCPKYRpakcCPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjljMDJkMjYxZjkxM2VhNWJmODNjMmJjN2MzMzQxNGE0 MmJjY2EwHhcNMjUxMjE3MTMwMTE1WhcNMjUxMjE4MTMwMTE1WjAzMTEwLwYDVQQD EyhlMjhjYjdiMTE3ZjZjNjc5MjNmM2UyOWE3MGFjNGM4YzdjMzQ3YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTN+gA2LSH2aajCaILuuIPC64sM0 v1w0tDMsnOQmcmoh9lBdb4LFu9WFnf0bRpfOV40dR6J3N10bvBXLkkll0NWlC4yy /Cee91n7Q5ifmYIFSYmFBSdZZEZl64U68czLQeQLBQZVkF5MgZPvnQ6bw8lTGW1Y 8G6oSPhlyPBsHZeU6XQENOR5WA5mDrgryLQhPpTsdzYc7KSbQO2c03qJyaG6CNCH J+2mHLSnyxpOgkDsVJGhomQ7nZZ8Ok3Kgectpb9YwAEDaQ+aemnrlPmceaXBIu8n 75PGzr+JC6+B/hOsxiZ4N9gCipLec1Nu+MgAnDjHntOh7WWa1yZ0w1NO5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKMt7EX9sZ5I/PimnCsTIx8NHxQMB8GA1UdIwQY MBaAFF4pwC0mH5E+pb+Dwrx8M0FKQrzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjkt OWFjMWE3ZTRjNDA2LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9hYzEyNTMtMDQ1OS00NmNmLWIxYjktOWFjMWE3ZTRjNDA2 LzEvWGluQUxTWWZrVDZsdjRQQ3ZId3pRVXBDdk1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXfqzQDZ 9hIWyyqjbgrChp0Udl/d/9pMR2SjiTcgznUm9j7yd0Y2xmVI+z1+cbOcnXDDAjd3 toNUnre4jPrzAiidm03bY65Ds40LOTKzH83Q5/u7A6zb7vxQPWnwKTziAGhZOzLq FYqLJFmBX8Pb8qx/MIgsHi2bnPoR1Z4bGVqEiGDm8Hq1MxsH4FeFx7/iVQzLm4or ezjMfJUH8TzZjiEf4GD5lPZf8iZ6oEuENrqVpAbm6QUS391FKyO0iqExuu3Cms8Z fSLv9dWpwBlB02F4wJepo3oOEjXo4rjoGD8kzTUVnIQd3F9gkfWmFn4ZaK/rBYEk BJKXZUaMILum6g== -----END CERTIFICATE-----Generated at Wed Dec 17 20:46:48 2025 by rpki-client