This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft File: XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft (raw, json) Hash identifier: zKMEQmPmcXNipQQ6Nc3S2n3znj0sxVZmqdTZ9CHy+54= Subject key identifier: 44:DB:D1:19:AA:1C:9D:47:E1:BC:76:1F:70:CC:1D:66:DD:5F:51:47 Authority key identifier: 5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85 Certificate issuer: /CN=5db79275659dd961c742bf21d8dca184a4430d85 Certificate serial: 019B273FD98F84E8BDDFEC0575B7811B88DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft Manifest number: 0DF9 Signing time: Tue 16 Dec 2025 13:00:54 +0000 Manifest this update: Tue 16 Dec 2025 13:00:54 +0000 Manifest next update: Wed 17 Dec 2025 13:00:54 +0000 Files and hashes: 1: XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl (hash: oUPsCHeC2yEjnGUIvIiOIa+OjXzYt3fR+Q3f241Xc3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:d9:8f:84:e8:bd:df:ec:05:75:b7:81:1b:88:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5db79275659dd961c742bf21d8dca184a4430d85 Validity Not Before: Dec 16 13:00:54 2025 GMT Not After : Dec 17 13:00:54 2025 GMT Subject: CN=44dbd119aa1c9d47e1bc761f70cc1d66dd5f5147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:4e:81:e0:2e:85:b5:4b:3a:e0:38:9d:e7: 8e:12:45:fa:d0:7d:5f:6f:49:68:47:b1:75:95:d1: e1:6b:cd:0c:19:5d:73:9f:e7:2a:d0:f5:7e:6e:d4: 01:37:95:45:b7:fa:50:15:f4:35:1d:81:8c:65:61: 54:47:e0:c2:6f:4b:80:3b:64:83:de:f1:b2:92:6d: 64:0d:d3:7c:77:da:6e:2b:9c:47:86:42:c2:09:e6: 7e:17:68:d0:d4:ee:f1:a7:a7:5a:4f:e7:7c:08:05: 58:d9:59:94:ab:bd:76:97:cf:6b:da:fc:7f:c5:a2: f4:78:df:41:a5:94:45:f2:a9:73:61:90:24:3f:29: 8c:6d:00:9d:ad:dd:95:4b:03:b7:0d:15:ee:64:c5: 9b:bf:ca:91:92:d1:cb:ed:92:7d:36:9a:00:2f:25: 8f:c1:d1:50:bd:70:80:eb:30:84:80:74:19:03:75: da:3f:b1:c1:ba:fc:92:8b:1d:52:f7:82:ca:4f:44: b1:5e:92:f0:77:c4:f2:db:09:90:89:67:a3:c7:28: 4c:90:46:65:bf:7b:50:ae:f5:5b:9e:a1:e2:ff:48: da:4d:24:46:ad:95:b0:74:c7:be:19:23:8c:cc:c6: 74:b4:bd:ae:82:4a:49:fe:d7:e9:ae:c1:7e:5e:41: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DB:D1:19:AA:1C:9D:47:E1:BC:76:1F:70:CC:1D:66:DD:5F:51:47 X509v3 Authority Key Identifier: keyid:5D:B7:92:75:65:9D:D9:61:C7:42:BF:21:D8:DC:A1:84:A4:43:0D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbeSdWWd2WHHQr8h2NyhhKRDDYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/52740e-5cb0-4814-a21a-a0967a435a6a/1/XbeSdWWd2WHHQr8h2NyhhKRDDYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0f:cd:34:74:3a:03:27:7f:a9:5b:84:79:10:60:71:12:ef: ea:e1:e0:c7:96:15:6b:8f:73:81:e4:56:cb:cd:76:35:5c:a7: 1a:bc:bf:2b:2f:f4:59:9b:1a:5d:be:bc:cc:29:a8:d3:62:ac: 82:35:96:0c:2a:25:35:b6:d5:7e:5e:9a:97:54:44:15:e5:9b: b4:d1:a8:94:74:17:f6:84:07:2e:d8:b5:b6:16:d8:32:e1:54: af:05:b2:fe:5b:e2:62:f0:36:82:05:18:91:ca:73:ec:fb:fa: e3:56:db:99:27:b2:1c:3e:8e:0e:04:cf:37:be:29:b9:6f:b8: ee:8a:6b:f6:95:16:df:9f:69:ec:fb:71:13:73:e9:fb:3e:5e: 5c:77:42:04:98:ed:49:81:fb:3c:d3:cc:35:ea:7d:e7:d1:0d: e2:d2:f1:3f:f7:d8:1d:0b:b5:ac:c6:9b:48:7f:1d:bb:b5:4c: ce:33:32:2d:1b:bc:03:3f:ec:14:0f:8f:49:6c:f5:de:1b:d6: e6:c7:fd:46:67:3e:78:f8:e8:60:cd:7b:99:dd:75:5a:e7:61: d5:bf:bc:25:ea:b6:53:16:36:7e:4f:1c:f9:b0:d1:c9:c1:26: 94:ee:f2:dd:0a:df:82:67:2b:8f:81:c0:ed:92:8a:c7:74:3b: 7b:6a:0d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP9mPhOi93+wFdbeBG4jaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYjc5Mjc1NjU5ZGQ5NjFjNzQyYmYyMWQ4ZGNhMTg0YTQ0 MzBkODUwHhcNMjUxMjE2MTMwMDU0WhcNMjUxMjE3MTMwMDU0WjAzMTEwLwYDVQQD Eyg0NGRiZDExOWFhMWM5ZDQ3ZTFiYzc2MWY3MGNjMWQ2NmRkNWY1MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBFOgeAuhbVLOuA4neeOEkX60H1f b0loR7F1ldHha80MGV1zn+cq0PV+btQBN5VFt/pQFfQ1HYGMZWFUR+DCb0uAO2SD 3vGykm1kDdN8d9puK5xHhkLCCeZ+F2jQ1O7xp6daT+d8CAVY2VmUq712l89r2vx/ xaL0eN9BpZRF8qlzYZAkPymMbQCdrd2VSwO3DRXuZMWbv8qRktHL7ZJ9NpoALyWP wdFQvXCA6zCEgHQZA3XaP7HBuvySix1S94LKT0SxXpLwd8Ty2wmQiWejxyhMkEZl v3tQrvVbnqHi/0jaTSRGrZWwdMe+GSOMzMZ0tL2ugkpJ/tfprsF+XkG6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETb0RmqHJ1H4bx2H3DMHWbdX1FHMB8GA1UdIwQY MBaAFF23knVlndlhx0K/IdjcoYSkQw2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEt YTA5NjdhNDM1YTZhLzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81Mjc0MGUtNWNiMC00ODE0LWEyMWEtYTA5NjdhNDM1YTZh LzEvWGJlU2RXV2QyV0hIUXI4aDJOeWhoS1JERFlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQ/NNHQ6 Ayd/qVuEeRBgcRLv6uHgx5YVa49zgeRWy812NVynGry/Ky/0WZsaXb68zCmo02Ks gjWWDColNbbVfl6al1REFeWbtNGolHQX9oQHLti1thbYMuFUrwWy/lviYvA2ggUY kcpz7Pv641bbmSeyHD6ODgTPN74puW+47opr9pUW359p7PtxE3Pp+z5eXHdCBJjt SYH7PNPMNep959EN4tLxP/fYHQu1rMabSH8du7VMzjMyLRu8Az/sFA+PSWz13hvW 5sf9Rmc+ePjoYM17md11Wudh1b+8Jeq2UxY2fk8c+bDRycEmlO7y3Qrfgmcrj4HA 7ZKKx3Q7e2oNag== -----END CERTIFICATE-----Generated at Tue Dec 16 23:17:49 2025 by rpki-client