This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json) Hash identifier: 4HlFwdZwqMa/8HpBV8JbTr8j81N22WQACOu94pd4/p4= Subject key identifier: B0:4D:31:76:AC:EA:16:EB:C9:CC:42:79:9A:74:6F:A5:0D:CD:3B:BB Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca Certificate serial: 019B687B43FA3E4F6D4F0BACE6C233355924 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft Manifest number: 154A Signing time: Mon 29 Dec 2025 05:01:07 +0000 Manifest this update: Mon 29 Dec 2025 05:01:07 +0000 Manifest next update: Tue 30 Dec 2025 05:01:07 +0000 Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: 7hWIQk0OotJLVmwAs/78bJb7q6zGkHc+vapzYbVJfbk=) 2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7b:43:fa:3e:4f:6d:4f:0b:ac:e6:c2:33:35:59:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca Validity Not Before: Dec 29 05:01:07 2025 GMT Not After : Dec 30 05:01:07 2025 GMT Subject: CN=b04d3176acea16ebc9cc42799a746fa50dcd3bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:36:a8:01:43:49:c1:59:14:61:c4:1b:7c: cd:5f:a2:6e:59:a8:40:9e:9e:ed:05:be:26:a4:27: ee:65:f1:a5:0b:96:60:7e:5f:3d:a4:12:5e:54:c1: 9b:82:c2:f6:18:e9:7f:02:86:a5:dc:8d:79:e7:99: a0:22:63:f1:89:6e:b4:43:56:3e:70:9d:45:b3:f3: 07:49:68:03:ce:1b:b1:52:d7:17:76:f1:e4:90:2b: 8e:2e:75:d2:6f:fa:0c:ef:7a:6d:5c:f7:4a:95:7f: e1:2b:2a:14:da:a3:b6:12:4a:0a:4c:ec:86:b2:b6: b5:a2:80:34:16:6b:6a:c0:56:22:74:c5:14:42:0e: 1b:24:e1:5b:3d:79:08:dd:ef:aa:dd:ae:98:0f:9c: 2d:74:08:12:c2:b8:d3:ca:e2:ee:17:8e:59:e8:26: 88:58:4c:85:f0:36:79:3f:33:3a:1e:47:60:21:1c: c1:c5:7f:c3:a4:be:ca:fc:b0:e1:ad:c3:18:e0:c8: 11:b8:38:2f:4a:25:77:ff:dd:82:4c:28:1a:e0:f1: f7:54:a8:2f:c3:60:68:28:43:24:2c:f6:2d:7d:ee: f3:a5:a5:15:d5:f2:8e:cc:39:1a:98:8d:83:81:31: 5c:92:65:6b:e3:8d:a5:bc:55:ef:02:d6:74:ae:34: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4D:31:76:AC:EA:16:EB:C9:CC:42:79:9A:74:6F:A5:0D:CD:3B:BB X509v3 Authority Key Identifier: keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:33:1e:f4:bc:3f:09:00:5b:d1:d7:4f:1f:54:dd:7c:f5:78: cb:d8:b5:68:f7:62:92:1a:6d:c2:de:ba:eb:eb:22:f8:55:12: 49:92:be:51:50:88:5b:25:35:05:e0:3a:94:9b:27:b1:2e:c1: 14:d2:3d:dc:da:dc:41:d5:77:86:4f:b9:26:dd:3b:76:1d:d3: d9:2a:ea:f6:04:3d:29:c4:23:96:ae:08:85:b0:ae:41:36:1a: 65:0c:5b:b1:b0:3a:6b:98:43:26:43:7d:0a:7e:b1:ae:a3:25: ee:4c:c4:bb:9c:1f:23:8e:77:a9:db:28:e7:a8:e0:8c:fd:7e: cb:a2:22:ab:5e:c3:fa:6f:ac:e5:11:a3:af:07:95:e9:65:9a: 44:d5:62:3f:fb:92:34:90:83:e3:28:80:ca:b8:dd:6f:34:4d: b5:e1:58:35:9b:62:e2:19:b0:e2:03:4e:7c:ae:92:16:92:29: da:dd:63:9c:fc:1a:4f:72:f7:65:3c:4e:eb:92:6a:1d:60:37: 5e:af:82:6a:17:0c:eb:5f:e9:56:52:20:58:c6:34:4a:ec:a9: 0c:d6:86:51:a7:0b:ac:29:d8:ca:ee:e9:ff:9f:cf:b5:13:5a: 6f:91:04:37:4d:2f:45:cf:cd:77:46:ea:db:b4:ab:80:2f:90: 51:75:9d:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoe0P6Pk9tTwus5sIzNVkkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYjU4YzQ1YmVlMjUxZmM3NTc1YTYzZTViNDkwZGVjNjEx NGU2Y2EwHhcNMjUxMjI5MDUwMTA3WhcNMjUxMjMwMDUwMTA3WjAzMTEwLwYDVQQD EyhiMDRkMzE3NmFjZWExNmViYzljYzQyNzk5YTc0NmZhNTBkY2QzYmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOc2qAFDScFZFGHEG3zNX6JuWahA np7tBb4mpCfuZfGlC5Zgfl89pBJeVMGbgsL2GOl/Aoal3I1555mgImPxiW60Q1Y+ cJ1Fs/MHSWgDzhuxUtcXdvHkkCuOLnXSb/oM73ptXPdKlX/hKyoU2qO2EkoKTOyG sra1ooA0FmtqwFYidMUUQg4bJOFbPXkI3e+q3a6YD5wtdAgSwrjTyuLuF45Z6CaI WEyF8DZ5PzM6HkdgIRzBxX/DpL7K/LDhrcMY4MgRuDgvSiV3/92CTCga4PH3VKgv w2BoKEMkLPYtfe7zpaUV1fKOzDkamI2DgTFckmVr442lvFXvAtZ0rjSsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBNMXas6hbrycxCeZp0b6UNzTu7MB8GA1UdIwQY MBaAFF21jEW+4lH8dXWmPltJDexhFObKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZGY5M2QtOThkYS00MWNjLThhNmQt OWMyYWQ0NzVhMjMxLzEvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZGY5M2QtOThkYS00MWNjLThhNmQtOWMyYWQ0NzVhMjMx LzEvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzMe9Lw/ CQBb0ddPH1TdfPV4y9i1aPdikhptwt666+si+FUSSZK+UVCIWyU1BeA6lJsnsS7B FNI93NrcQdV3hk+5Jt07dh3T2Srq9gQ9KcQjlq4IhbCuQTYaZQxbsbA6a5hDJkN9 Cn6xrqMl7kzEu5wfI453qdso56jgjP1+y6Iiq17D+m+s5RGjrweV6WWaRNViP/uS NJCD4yiAyrjdbzRNteFYNZti4hmw4gNOfK6SFpIp2t1jnPwaT3L3ZTxO65JqHWA3 Xq+CahcM61/pVlIgWMY0SuypDNaGUacLrCnYyu7p/5/PtRNab5EEN00vRc/Nd0bq 27SrgC+QUXWdPQ== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:09 2025 by rpki-client