This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json) Hash identifier: GZE1a5kvQGmmiHO3g2yLAMV86elumjsR6t85q8YZLmk= Subject key identifier: D8:64:29:CC:9E:AE:FD:2A:67:54:8F:41:07:5E:28:7C:47:12:33:2A Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Certificate serial: 019B32D6E2D2CFC7E959660780E40E0F588F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft Manifest number: 117E Signing time: Thu 18 Dec 2025 19:01:42 +0000 Manifest this update: Thu 18 Dec 2025 19:01:42 +0000 Manifest next update: Fri 19 Dec 2025 19:01:42 +0000 Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=) 2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: fhzEELLxmkD3g5M5qMfPZZJf2LoefTjFpB3GPSKKWt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e2:d2:cf:c7:e9:59:66:07:80:e4:0e:0f:58:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Validity Not Before: Dec 18 19:01:42 2025 GMT Not After : Dec 19 19:01:42 2025 GMT Subject: CN=d86429cc9eaefd2a67548f41075e287c4712332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d1:5d:93:68:bd:a6:be:95:7d:f4:e5:55:59: 2a:81:54:58:cb:f4:c0:ff:50:85:ae:f2:eb:cf:e4: da:db:49:88:4b:70:06:a8:dd:7e:ed:e5:01:ed:12: c4:a5:6a:7f:a0:53:4a:e7:5b:9b:47:c3:81:f4:0e: e2:e4:e8:35:7a:57:6d:0a:86:29:06:47:d0:b6:3d: 06:dc:58:a2:73:6c:df:cc:fd:eb:c5:e0:a4:85:4d: 1e:0a:2b:47:81:ae:a1:15:bc:7b:ff:6c:24:02:47: e0:81:c2:53:24:9e:53:03:2e:d6:eb:64:9b:7b:6a: 18:95:56:90:0d:e9:9e:07:ce:07:6a:4e:c1:45:6f: 74:36:aa:0b:47:fe:87:bb:cb:92:81:04:7a:31:a5: 63:3b:4d:f0:9b:f6:9f:a3:d1:56:51:b3:4f:a2:e2: 30:d7:31:47:f5:f0:ee:df:4a:10:f9:3c:59:27:dc: 45:97:08:c3:62:30:5f:a4:b6:6e:a2:66:44:79:6c: 07:71:8f:31:65:59:f6:60:d3:85:39:ee:3d:90:b7: 91:91:83:58:b8:e9:24:09:e1:11:86:cc:a2:8c:c2: aa:76:c0:60:aa:ba:5a:d7:4f:25:69:44:59:90:10: 57:7b:a2:f3:70:7a:38:c7:bc:75:26:80:56:64:23: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:64:29:CC:9E:AE:FD:2A:67:54:8F:41:07:5E:28:7C:47:12:33:2A X509v3 Authority Key Identifier: keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e9:1b:64:28:ed:83:5e:b9:82:14:d3:fc:63:dd:a8:de:17: aa:a2:f3:50:2a:7d:05:e9:3f:76:94:03:d1:14:7e:df:7b:e1: 25:9f:d5:1d:f8:8c:db:95:bf:5e:99:96:0b:77:57:42:76:9e: b0:8a:1b:ab:e3:b2:27:38:63:ce:73:86:1f:d2:da:c1:df:29: 9d:c2:d3:86:75:c0:f4:6c:7a:ee:37:30:44:ec:89:93:ed:fd: 87:5a:60:d9:e4:7e:b7:f2:f0:4f:68:37:fc:1a:01:67:d8:8c: 63:02:0c:09:a0:44:40:c9:f0:5a:c5:49:dc:24:1a:db:7b:2b: 0f:a0:c0:27:84:c4:6b:53:54:3b:9c:93:1b:23:02:c0:ec:97: f4:03:c9:8d:70:47:72:73:e3:d1:6b:99:94:40:c9:bb:6a:dd: c1:15:69:5f:7f:5a:25:6c:d1:d8:1f:db:cb:6c:8e:85:8c:a1: 10:30:95:41:1b:5a:0e:7e:7a:20:4e:28:63:d7:a9:0e:06:8b: 8e:55:35:33:a8:ad:da:64:c1:57:23:c4:b9:4e:72:28:7b:81: f5:50:1e:f3:59:96:f0:29:3c:2b:0d:9e:18:7a:e9:bf:c0:e2: 6a:29:bd:d0:af:b8:a8:ef:d4:a7:39:a0:a7:a8:e5:13:d3:e6: 92:cb:eb:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uLSz8fpWWYHgOQOD1iPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz NGZkZDkwHhcNMjUxMjE4MTkwMTQyWhcNMjUxMjE5MTkwMTQyWjAzMTEwLwYDVQQD EyhkODY0MjljYzllYWVmZDJhNjc1NDhmNDEwNzVlMjg3YzQ3MTIzMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdFdk2i9pr6VffTlVVkqgVRYy/TA /1CFrvLrz+Ta20mIS3AGqN1+7eUB7RLEpWp/oFNK51ubR8OB9A7i5Og1eldtCoYp BkfQtj0G3Fiic2zfzP3rxeCkhU0eCitHga6hFbx7/2wkAkfggcJTJJ5TAy7W62Sb e2oYlVaQDemeB84Hak7BRW90NqoLR/6Hu8uSgQR6MaVjO03wm/afo9FWUbNPouIw 1zFH9fDu30oQ+TxZJ9xFlwjDYjBfpLZuomZEeWwHcY8xZVn2YNOFOe49kLeRkYNY uOkkCeERhsyijMKqdsBgqrpa108laURZkBBXe6LzcHo4x7x1JoBWZCP5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhkKcyerv0qZ1SPQQdeKHxHEjMqMB8GA1UdIwQY MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOkbZCjt g165ghTT/GPdqN4XqqLzUCp9Bek/dpQD0RR+33vhJZ/VHfiM25W/XpmWC3dXQnae sIobq+OyJzhjznOGH9Lawd8pncLThnXA9Gx67jcwROyJk+39h1pg2eR+t/LwT2g3 /BoBZ9iMYwIMCaBEQMnwWsVJ3CQa23srD6DAJ4TEa1NUO5yTGyMCwOyX9APJjXBH cnPj0WuZlEDJu2rdwRVpX39aJWzR2B/by2yOhYyhEDCVQRtaDn56IE4oY9epDgaL jlU1M6it2mTBVyPEuU5yKHuB9VAe81mW8Ck8Kw2eGHrpv8Diaim90K+4qO/Upzmg p6jlE9Pmksvr1g== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:59 2025 by rpki-client