This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json) Hash identifier: v8B+GL2zpG7nVNCyPKYzXqqMy4rUAspswec78J+a5gE= Subject key identifier: 8F:13:9C:E2:8B:BD:51:02:78:8F:6F:77:62:F7:D4:FA:C3:6D:51:3D Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Certificate serial: 019B7BA5F447836AEAEECAF521C4BA6F1113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft Manifest number: 11A4 Signing time: Thu 01 Jan 2026 22:20:31 +0000 Manifest this update: Thu 01 Jan 2026 22:20:31 +0000 Manifest next update: Fri 02 Jan 2026 22:20:31 +0000 Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: bB5NY0TyVSDXNAg7aeKCW4KQz8+w4/DYkvixK4HnQdY=) 2: eCfVBrUlWVO_wd2C6zG6HlsWFfw.roa (hash: LnqLUkXGJD0OiqsbSYEC0AppS9eAVHhK/gEl/tMcU6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 22:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:f4:47:83:6a:ea:ee:ca:f5:21:c4:ba:6f:11:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Validity Not Before: Jan 1 22:20:31 2026 GMT Not After : Jan 2 22:20:31 2026 GMT Subject: CN=8f139ce28bbd5102788f6f7762f7d4fac36d513d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:56:b1:13:f5:a0:92:2e:42:5d:bc:f4:8e: 3a:64:41:54:c7:97:c6:58:9b:fe:3c:21:d9:1d:54: 24:0f:e6:38:85:96:01:95:cf:44:ea:44:e8:68:eb: fa:2d:8b:c0:8c:3a:52:80:33:9b:5b:e8:d8:d3:e7: 80:28:ff:b0:36:0f:b7:3a:f5:8c:4a:a1:8d:55:e7: 34:a9:85:bd:ce:0c:51:38:b2:d0:28:2a:d0:2e:38: 6b:3e:c0:fb:c9:bd:b6:c6:5f:2f:0f:10:8a:13:5a: 92:93:2e:2a:fb:c9:bb:c3:ba:3b:da:3b:4f:24:46: 85:c1:8a:a0:d4:0b:d4:75:0e:ec:50:c9:a8:08:67: 62:ff:5b:3d:76:f8:6b:5e:87:8d:32:43:55:79:e3: 7d:51:f4:ec:32:64:e5:7b:aa:62:a4:9b:10:a4:91: c1:04:65:60:d1:44:3e:d3:2a:5c:c9:da:5a:53:99: d7:7b:17:8d:f5:ec:17:c9:97:75:42:2a:d1:12:ac: 47:b9:df:49:30:d4:0c:61:45:4e:91:3c:5f:7a:24: 61:4a:6e:6a:de:9c:24:1a:c5:ec:54:d0:27:32:0a: e2:d5:06:37:fa:e3:fb:79:43:ad:1c:03:6a:c3:0e: 54:4f:1e:1f:7e:18:67:33:66:f2:35:3d:ab:36:6a: 98:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:9C:E2:8B:BD:51:02:78:8F:6F:77:62:F7:D4:FA:C3:6D:51:3D X509v3 Authority Key Identifier: keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:bb:a7:18:ef:28:4c:4c:96:f6:48:1c:4d:af:07:2c:4d:0b: 83:9e:ef:53:35:d7:6f:c6:5d:44:fc:cc:e3:ac:b9:75:57:2a: fe:69:2f:72:08:0b:21:68:cc:91:78:f1:33:81:c8:7a:09:b2: 5e:ec:36:9c:12:b6:d6:77:74:54:57:e9:3b:b7:ba:97:76:78: 3a:1e:6f:59:26:f1:b1:21:f1:b7:d5:12:72:70:2f:3e:ba:cc: 29:42:59:c0:a8:42:56:35:08:72:c6:8e:79:ec:29:05:99:7c: 9b:4a:c7:d1:9c:61:d7:13:2a:7d:a7:19:f9:5d:3c:a2:3d:af: c5:d1:4c:38:49:12:d2:c2:6e:11:0a:65:f5:5a:46:25:3e:78: 8d:32:d1:82:da:e3:f9:b6:48:e9:b9:5c:b8:0e:45:4d:33:f2: 8e:d1:21:8c:20:7d:c0:c1:f4:06:37:88:82:6f:27:87:76:5f: bb:5a:74:fb:74:a6:81:c3:95:32:01:78:fb:7e:b5:9c:da:60: ab:73:8e:fb:7e:22:e7:dc:06:8d:a4:f3:af:45:8d:87:8e:2c: 0a:75:f8:66:36:b3:dc:fc:55:df:46:0f:81:4d:7e:4a:94:3c: e9:2d:d9:54:8d:fa:9b:1a:7f:8f:4a:a5:37:44:16:25:f3:87: db:10:c2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt7pfRHg2rq7sr1IcS6bxETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3 MDdhMTQwHhcNMjYwMTAxMjIyMDMxWhcNMjYwMTAyMjIyMDMxWjAzMTEwLwYDVQQD Eyg4ZjEzOWNlMjhiYmQ1MTAyNzg4ZjZmNzc2MmY3ZDRmYWMzNmQ1MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu11WsRP1oJIuQl289I46ZEFUx5fG WJv+PCHZHVQkD+Y4hZYBlc9E6kToaOv6LYvAjDpSgDObW+jY0+eAKP+wNg+3OvWM SqGNVec0qYW9zgxROLLQKCrQLjhrPsD7yb22xl8vDxCKE1qSky4q+8m7w7o72jtP JEaFwYqg1AvUdQ7sUMmoCGdi/1s9dvhrXoeNMkNVeeN9UfTsMmTle6pipJsQpJHB BGVg0UQ+0ypcydpaU5nXexeN9ewXyZd1QirREqxHud9JMNQMYUVOkTxfeiRhSm5q 3pwkGsXsVNAnMgri1QY3+uP7eUOtHANqww5UTx4ffhhnM2byNT2rNmqYmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8TnOKLvVECeI9vd2L31PrDbVE9MB8GA1UdIwQY MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5 LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLunGO8o TEyW9kgcTa8HLE0Lg57vUzXXb8ZdRPzM46y5dVcq/mkvcggLIWjMkXjxM4HIegmy Xuw2nBK21nd0VFfpO7e6l3Z4Oh5vWSbxsSHxt9UScnAvPrrMKUJZwKhCVjUIcsaO eewpBZl8m0rH0Zxh1xMqfacZ+V08oj2vxdFMOEkS0sJuEQpl9VpGJT54jTLRgtrj +bZI6blcuA5FTTPyjtEhjCB9wMH0BjeIgm8nh3Zfu1p0+3SmgcOVMgF4+361nNpg q3OO+34i59wGjaTzr0WNh44sCnX4Zjaz3PxV30YPgU1+SpQ86S3ZVI36mxp/j0ql N0QWJfOH2xDCcA== -----END CERTIFICATE-----Generated at Fri Jan 2 08:19:28 2026 by rpki-client