This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json) Hash identifier: 3S1NQOdvLzmeyQk5vH9cx9Zjd7rvRFNOvfhEuKdoey4= Subject key identifier: 2B:D1:F1:A7:F7:1A:5D:E9:A1:0B:0A:A9:9E:FF:6D:D3:EE:0D:86:10 Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Certificate serial: 019B5305C9C3C1E9D95026E8D4F9CF7CB373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft Manifest number: 118E Signing time: Thu 25 Dec 2025 01:00:46 +0000 Manifest this update: Thu 25 Dec 2025 01:00:46 +0000 Manifest next update: Fri 26 Dec 2025 01:00:46 +0000 Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: dAXIjIq3MTVsMoP6sPJ4ixFeegryGvFcOU2V1QuS5X8=) 2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:c9:c3:c1:e9:d9:50:26:e8:d4:f9:cf:7c:b3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Validity Not Before: Dec 25 01:00:46 2025 GMT Not After : Dec 26 01:00:46 2025 GMT Subject: CN=2bd1f1a7f71a5de9a10b0aa99eff6dd3ee0d8610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:30:28:c9:0c:5d:7c:c2:65:73:a1:80:71: 34:b0:c4:a8:03:e2:37:3f:a3:a6:d5:af:cb:38:7b: c1:70:7a:b6:2a:de:69:57:2e:6f:3f:1d:ac:e4:03: 09:42:27:a2:2e:a0:1d:63:b9:da:fe:0b:bd:86:0b: 15:f2:70:31:9f:a4:15:d8:3f:28:01:8e:e1:51:6a: 18:eb:48:14:c0:a4:e3:69:0b:1f:18:5c:ea:79:06: 01:37:a6:f1:df:6b:41:f5:4c:22:27:df:39:19:70: 08:32:52:7e:43:67:05:97:76:b7:0d:3a:e6:e8:6a: d1:f0:5a:58:7b:0b:ca:ea:b8:ac:b8:a8:dd:e2:f0: b5:1a:35:7b:9e:b1:30:c5:ab:48:85:42:5b:8c:aa: da:4e:fd:03:ae:a4:0d:05:d8:6c:61:77:e4:c8:34: c3:2d:f9:93:67:fb:20:10:8a:b0:2b:fb:a3:51:32: fd:1e:60:63:f3:06:23:82:4d:e8:b6:21:58:4d:da: e0:83:04:74:f2:58:cc:9f:64:6d:1f:d1:89:32:9e: b3:32:36:2b:b5:2f:99:43:2b:13:4c:14:da:08:72: 7d:be:39:48:4b:65:dd:09:1b:71:43:01:4c:24:26: d3:13:b5:17:ca:cf:20:2e:b7:27:90:30:fc:d4:5f: b0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D1:F1:A7:F7:1A:5D:E9:A1:0B:0A:A9:9E:FF:6D:D3:EE:0D:86:10 X509v3 Authority Key Identifier: keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:31:7d:a4:fe:49:87:9a:03:1d:c4:90:1f:7a:2d:c9:97:d0: 35:bc:c4:f9:6e:b7:cf:90:dc:9f:5e:46:11:7a:66:15:a4:85: 4f:a1:33:ad:d1:df:3b:b1:2c:b5:3f:ed:59:b3:48:ef:d6:42: 93:11:20:17:15:c0:e5:9e:c0:e5:a3:84:f2:8a:24:5b:cc:38: be:bf:4c:a8:4a:90:4b:d1:57:e1:f1:d3:37:90:4f:60:5a:97: b0:a8:d4:3d:f6:ef:5f:d6:57:06:88:42:83:7c:b2:32:ed:6b: 13:f4:77:31:f1:87:28:7e:74:62:c3:5e:73:09:69:93:43:b9: b1:49:9a:e9:7e:c2:02:dd:c3:8d:53:e6:2a:85:0f:dc:3d:bf: a8:88:10:e5:ff:20:f7:22:7c:61:75:68:1f:ff:37:13:18:43: c7:18:bd:29:55:57:20:93:6d:16:4f:6f:bf:2e:de:51:a3:bd: b7:0a:6a:6a:e1:09:82:4c:62:62:6b:e1:01:b4:7c:1b:79:a5: 5b:23:53:79:ee:2c:76:d1:50:be:ef:09:fe:00:a0:12:68:8b: a9:70:ed:da:d1:b8:e7:d0:50:38:a8:ce:c4:03:67:fe:ef:22: 7c:f9:9b:cd:4d:a8:93:80:9b:12:da:e0:6d:32:cb:06:71:d1: 2b:f5:d5:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBcnDwenZUCbo1PnPfLNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3 MDdhMTQwHhcNMjUxMjI1MDEwMDQ2WhcNMjUxMjI2MDEwMDQ2WjAzMTEwLwYDVQQD EygyYmQxZjFhN2Y3MWE1ZGU5YTEwYjBhYTk5ZWZmNmRkM2VlMGQ4NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtQwKMkMXXzCZXOhgHE0sMSoA+I3 P6Om1a/LOHvBcHq2Kt5pVy5vPx2s5AMJQieiLqAdY7na/gu9hgsV8nAxn6QV2D8o AY7hUWoY60gUwKTjaQsfGFzqeQYBN6bx32tB9UwiJ985GXAIMlJ+Q2cFl3a3DTrm 6GrR8FpYewvK6risuKjd4vC1GjV7nrEwxatIhUJbjKraTv0DrqQNBdhsYXfkyDTD LfmTZ/sgEIqwK/ujUTL9HmBj8wYjgk3otiFYTdrggwR08ljMn2RtH9GJMp6zMjYr tS+ZQysTTBTaCHJ9vjlIS2XdCRtxQwFMJCbTE7UXys8gLrcnkDD81F+w3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvR8af3Gl3poQsKqZ7/bdPuDYYQMB8GA1UdIwQY MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5 LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDF9pP5J h5oDHcSQH3otyZfQNbzE+W63z5Dcn15GEXpmFaSFT6EzrdHfO7EstT/tWbNI79ZC kxEgFxXA5Z7A5aOE8ookW8w4vr9MqEqQS9FX4fHTN5BPYFqXsKjUPfbvX9ZXBohC g3yyMu1rE/R3MfGHKH50YsNecwlpk0O5sUma6X7CAt3DjVPmKoUP3D2/qIgQ5f8g 9yJ8YXVoH/83ExhDxxi9KVVXIJNtFk9vvy7eUaO9twpqauEJgkxiYmvhAbR8G3ml WyNTee4sdtFQvu8J/gCgEmiLqXDt2tG459BQOKjOxANn/u8ifPmbzU2ok4CbEtrg bTLLBnHRK/XVjw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:36:28 2025 by rpki-client