This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft File: XVTR8F5RVk-oGdtyu47dOYeza74.mft (raw, json) Hash identifier: to+kD496ARLNm4UkQfyK6vTnOhLfjJXHrfZTnbzje0E= Subject key identifier: 80:5E:68:19:90:A6:9E:B2:11:AB:40:A5:D6:D2:79:D5:1E:E8:91:8B Authority key identifier: 5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE Certificate issuer: /CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe Certificate serial: 019B5298C02D98E1668492A251C109DEB8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft Manifest number: 1713 Signing time: Wed 24 Dec 2025 23:01:40 +0000 Manifest this update: Wed 24 Dec 2025 23:01:40 +0000 Manifest next update: Thu 25 Dec 2025 23:01:40 +0000 Files and hashes: 1: XVTR8F5RVk-oGdtyu47dOYeza74.crl (hash: iltQU/zNimfNHaKlzWSqDJjH7yvMdtfnLM7kYihGSSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:c0:2d:98:e1:66:84:92:a2:51:c1:09:de:b8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d54d1f05e51564fa819db72bb8edd3987b36bbe Validity Not Before: Dec 24 23:01:40 2025 GMT Not After : Dec 25 23:01:40 2025 GMT Subject: CN=805e681990a69eb211ab40a5d6d279d51ee8918b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1a:c0:ef:e7:48:37:0c:8d:d5:09:35:9f:a4: 4c:05:76:82:7b:cd:b3:92:e9:35:94:a7:49:b0:cb: 83:bc:c8:61:5c:5b:d5:bd:d3:36:90:ef:86:b0:2e: e3:58:f8:c0:66:08:6c:80:8e:7d:a6:ac:d0:3e:72: 8a:fe:bf:11:31:ec:4e:13:c9:e7:a3:2c:4e:30:7d: c7:78:b1:62:76:2e:17:90:ca:50:54:50:3c:c9:42: 6e:ac:5e:9e:ee:0e:19:eb:a8:76:7a:1e:55:3b:35: 7b:a5:b5:1a:fd:0c:4e:73:2d:d6:57:af:a3:1a:e5: 4a:e7:9a:76:49:a2:3a:23:84:26:e3:63:91:31:1d: cc:ee:a2:f6:6e:6c:9c:ab:50:9e:96:0e:97:61:90: 83:be:f4:eb:4f:6d:9a:b7:14:c9:56:86:9c:1b:9b: 71:b5:93:e6:a0:46:43:6f:28:b5:57:4e:f1:85:4c: 25:0f:1c:cf:56:9a:c8:bc:9f:4e:29:4e:91:97:03: 35:c2:a4:1b:84:07:57:14:62:b0:5b:a3:b5:b5:c3: 08:3a:75:91:be:be:2e:0d:5d:ea:c7:a5:92:28:6f: e6:98:a9:6b:19:c0:68:be:98:71:36:82:6b:36:63: 12:03:fb:83:c9:13:ee:4f:dd:e5:ef:6b:24:81:14: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5E:68:19:90:A6:9E:B2:11:AB:40:A5:D6:D2:79:D5:1E:E8:91:8B X509v3 Authority Key Identifier: keyid:5D:54:D1:F0:5E:51:56:4F:A8:19:DB:72:BB:8E:DD:39:87:B3:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVTR8F5RVk-oGdtyu47dOYeza74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2545a-6ae9-427f-83ae-ce3f8515a69b/1/XVTR8F5RVk-oGdtyu47dOYeza74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e7:c5:22:02:bd:6d:7e:d6:d8:15:f6:3f:c4:42:5d:56:25: 14:e2:0f:31:f1:f5:32:7e:d9:b7:5c:6c:d0:8c:e0:3e:71:8f: a7:c1:7e:b5:bf:58:74:3e:17:51:50:a8:f4:1c:71:ee:41:d2: f8:d1:60:65:59:5b:3a:90:9d:8b:52:72:04:cd:b4:b1:78:5e: 09:b0:7e:04:5d:a5:29:10:bf:9e:3d:38:60:33:2c:8e:9c:46: 79:ec:52:dc:c3:82:2e:dd:8c:f5:6b:9b:fd:a9:92:3b:50:42: 37:5e:ae:9a:5c:96:73:1d:31:fa:c0:cd:4d:b7:bc:f7:a9:72: 7b:b0:d1:47:5d:83:f4:ee:ae:ec:55:59:91:29:75:88:8e:34: 9f:72:80:84:7b:ac:6a:e9:68:48:8f:ac:96:17:15:92:dc:e4: 31:60:7d:a3:5f:54:7e:33:4f:cc:25:67:ba:45:25:ed:ff:3d: c7:a6:5d:1a:ca:69:30:1a:cc:17:d0:c3:45:da:75:07:23:ec: 81:60:b7:a1:a1:98:b2:9c:cb:80:c5:78:e7:8f:55:c9:b9:72: 2e:eb:b2:1c:ae:71:61:ac:26:3b:69:39:aa:86:10:87:d3:f7: 11:71:76:4d:5d:00:17:c6:8f:83:0b:fb:e0:be:60:2d:37:2e: a4:1b:e5:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmMAtmOFmhJKiUcEJ3riyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNTRkMWYwNWU1MTU2NGZhODE5ZGI3MmJiOGVkZDM5ODdi MzZiYmUwHhcNMjUxMjI0MjMwMTQwWhcNMjUxMjI1MjMwMTQwWjAzMTEwLwYDVQQD Eyg4MDVlNjgxOTkwYTY5ZWIyMTFhYjQwYTVkNmQyNzlkNTFlZTg5MThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshrA7+dINwyN1Qk1n6RMBXaCe82z kuk1lKdJsMuDvMhhXFvVvdM2kO+GsC7jWPjAZghsgI59pqzQPnKK/r8RMexOE8nn oyxOMH3HeLFidi4XkMpQVFA8yUJurF6e7g4Z66h2eh5VOzV7pbUa/QxOcy3WV6+j GuVK55p2SaI6I4Qm42ORMR3M7qL2bmycq1Celg6XYZCDvvTrT22atxTJVoacG5tx tZPmoEZDbyi1V07xhUwlDxzPVprIvJ9OKU6RlwM1wqQbhAdXFGKwW6O1tcMIOnWR vr4uDV3qx6WSKG/mmKlrGcBovphxNoJrNmMSA/uDyRPuT93l72skgRTATwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBeaBmQpp6yEatApdbSedUe6JGLMB8GA1UdIwQY MBaAFF1U0fBeUVZPqBnbcruO3TmHs2u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iMjU0NWEtNmFlOS00MjdmLTgzYWUt Y2UzZjg1MTVhNjliLzEvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9iMjU0NWEtNmFlOS00MjdmLTgzYWUtY2UzZjg1MTVhNjli LzEvWFZUUjhGNVJWay1vR2R0eXU0N2RPWWV6YTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOfFIgK9 bX7W2BX2P8RCXVYlFOIPMfH1Mn7Zt1xs0IzgPnGPp8F+tb9YdD4XUVCo9Bxx7kHS +NFgZVlbOpCdi1JyBM20sXheCbB+BF2lKRC/nj04YDMsjpxGeexS3MOCLt2M9Wub /amSO1BCN16umlyWcx0x+sDNTbe896lye7DRR12D9O6u7FVZkSl1iI40n3KAhHus auloSI+slhcVktzkMWB9o19UfjNPzCVnukUl7f89x6ZdGsppMBrMF9DDRdp1ByPs gWC3oaGYspzLgMV4549VyblyLuuyHK5xYawmO2k5qoYQh9P3EXF2TV0AF8aPgwv7 4L5gLTcupBvlEQ== -----END CERTIFICATE-----Generated at Thu Dec 25 01:03:00 2025 by rpki-client