This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft File: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft (raw, json) Hash identifier: erXcj0uQcCsPI4gtKSGpReXiW1iOlsEunmRyNf4IWeE= Subject key identifier: 21:74:F0:5F:BA:09:3F:B0:1F:F0:10:4F:EF:67:8C:09:AE:3E:FC:10 Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Certificate serial: 019B650BD7C42B84B2F4FE94D346A5907284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft Manifest number: 1198 Signing time: Sun 28 Dec 2025 13:00:33 +0000 Manifest this update: Sun 28 Dec 2025 13:00:33 +0000 Manifest next update: Mon 29 Dec 2025 13:00:33 +0000 Files and hashes: 1: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (hash: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=) 2: xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl (hash: QjfrwVkEdb+RNF4VaRj4mgM/NTRVdEpE4oYDnegWxOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0b:d7:c4:2b:84:b2:f4:fe:94:d3:46:a5:90:72:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9 Validity Not Before: Dec 28 13:00:33 2025 GMT Not After : Dec 29 13:00:33 2025 GMT Subject: CN=2174f05fba093fb01ff0104fef678c09ae3efc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:65:72:41:30:6c:b7:f4:85:2d:d4:0c:c9: d1:77:61:ce:af:f5:34:9f:af:1b:db:f9:22:45:26: 06:ad:52:bf:4c:e6:3c:d4:26:24:60:c4:bc:45:0b: b2:20:10:25:7f:27:70:27:a9:6c:f4:b5:7b:71:24: d4:4d:5e:e6:2c:fa:70:03:73:60:ea:6f:af:25:a1: 5e:d2:15:da:eb:95:6e:12:26:e0:84:af:e8:f8:fc: 25:4b:91:23:18:8f:11:0c:34:60:18:cb:f3:26:0e: 24:8f:3d:d4:35:58:dc:5e:09:50:ee:02:eb:db:14: c5:03:e3:ab:79:5d:29:51:7a:96:39:4d:8f:e7:28: 7b:40:b9:89:ed:77:81:27:ef:7f:b6:c3:20:37:78: a6:f8:9b:5b:c0:53:aa:d9:78:b9:01:43:95:b9:a1: 4e:80:ee:1b:7b:2f:0b:14:01:da:2b:7a:74:28:dd: 04:a5:45:7c:1a:23:d4:c2:a7:1d:d2:31:22:35:f0: 8c:05:94:ca:89:55:53:e0:46:10:1c:f4:16:5b:3e: 44:0f:b2:d1:84:4f:ee:dc:27:c0:87:ef:d3:4f:13: b8:84:b7:db:4f:11:a4:71:a4:d6:b8:5b:f1:08:ff: 5c:24:eb:f7:9c:c1:12:b3:01:d5:8d:6b:e6:32:f2: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:74:F0:5F:BA:09:3F:B0:1F:F0:10:4F:EF:67:8C:09:AE:3E:FC:10 X509v3 Authority Key Identifier: keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:75:c0:79:d0:2c:5a:79:c7:f6:79:17:1e:57:72:53:3a:89: ef:15:ce:49:43:e2:9e:5b:48:49:7d:99:bf:48:a4:5c:62:fd: 86:74:6c:10:97:62:8e:2c:3f:a4:e5:2c:99:28:f6:3d:13:1f: a3:72:ce:2a:cf:95:69:dc:e3:4e:5f:70:07:82:69:2d:e2:3f: 65:e6:7c:2f:62:ea:f8:10:89:d9:45:3d:4f:df:cb:08:5d:17: 56:64:46:44:47:92:80:29:7f:66:1d:dc:94:a9:20:e6:33:26: 06:de:00:b3:e5:91:ae:c0:fb:88:0f:5d:4a:1f:75:4f:e7:fc: 72:c7:f2:69:dc:04:25:ab:fc:74:04:3b:87:ed:ba:99:fe:0c: 50:cf:67:b3:bf:09:73:04:3e:b3:c2:ca:41:3c:5e:24:61:f2: 96:fe:91:ef:15:14:30:71:cd:af:d7:c7:b3:ef:59:1b:10:56: 92:9c:b9:78:7a:ec:66:59:27:6a:11:99:fe:4f:09:aa:af:04: c1:2f:f7:93:7c:41:45:45:b2:cc:9f:9b:c6:92:ee:a0:31:e1: 4b:1d:8d:22:b2:d1:0b:7b:7b:70:0e:39:69:01:4e:a7:a3:4a: 2e:93:da:9f:30:03:0d:6c:89:c3:19:88:79:ff:3b:ec:3d:c4: 5d:ec:84:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlC9fEK4Sy9P6U00alkHKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz NGZkZDkwHhcNMjUxMjI4MTMwMDMzWhcNMjUxMjI5MTMwMDMzWjAzMTEwLwYDVQQD EygyMTc0ZjA1ZmJhMDkzZmIwMWZmMDEwNGZlZjY3OGMwOWFlM2VmYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZVlckEwbLf0hS3UDMnRd2HOr/U0 n68b2/kiRSYGrVK/TOY81CYkYMS8RQuyIBAlfydwJ6ls9LV7cSTUTV7mLPpwA3Ng 6m+vJaFe0hXa65VuEibghK/o+PwlS5EjGI8RDDRgGMvzJg4kjz3UNVjcXglQ7gLr 2xTFA+OreV0pUXqWOU2P5yh7QLmJ7XeBJ+9/tsMgN3im+JtbwFOq2Xi5AUOVuaFO gO4bey8LFAHaK3p0KN0EpUV8GiPUwqcd0jEiNfCMBZTKiVVT4EYQHPQWWz5ED7LR hE/u3CfAh+/TTxO4hLfbTxGkcaTWuFvxCP9cJOv3nMESswHVjWvmMvI5sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF08F+6CT+wH/AQT+9njAmuPvwQMB8GA1UdIwQY MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt OTI0MTYwMDcxNThlLzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXXAedAs WnnH9nkXHldyUzqJ7xXOSUPinltISX2Zv0ikXGL9hnRsEJdijiw/pOUsmSj2PRMf o3LOKs+VadzjTl9wB4JpLeI/ZeZ8L2Lq+BCJ2UU9T9/LCF0XVmRGREeSgCl/Zh3c lKkg5jMmBt4As+WRrsD7iA9dSh91T+f8csfyadwEJav8dAQ7h+26mf4MUM9ns78J cwQ+s8LKQTxeJGHylv6R7xUUMHHNr9fHs+9ZGxBWkpy5eHrsZlknahGZ/k8Jqq8E wS/3k3xBRUWyzJ+bxpLuoDHhSx2NIrLRC3t7cA45aQFOp6NKLpPanzADDWyJwxmI ef877D3EXeyE2Q== -----END CERTIFICATE-----Generated at Sun Dec 28 18:53:56 2025 by rpki-client