This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json) Hash identifier: 83TIB32hbt3qLg7H0jqRjJAdfCMdhA+WvGjtYJRprZ0= Subject key identifier: 11:FB:E6:97:76:B7:9D:64:16:5E:B3:C9:85:B7:13:8E:04:6D:3E:5C Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58 Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458 Certificate serial: 019B51BD93FF7814F5025088DC5D7EC6CF93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft Manifest number: 0AB0 Signing time: Wed 24 Dec 2025 19:02:17 +0000 Manifest this update: Wed 24 Dec 2025 19:02:17 +0000 Manifest next update: Thu 25 Dec 2025 19:02:17 +0000 Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: lAGoLim9KM3yAbLfzDYy5TkH/i46bFuqRv+GgGX1qjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:93:ff:78:14:f5:02:50:88:dc:5d:7e:c6:cf:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458 Validity Not Before: Dec 24 19:02:17 2025 GMT Not After : Dec 25 19:02:17 2025 GMT Subject: CN=11fbe69776b79d64165eb3c985b7138e046d3e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e0:2f:7b:0a:cf:b9:73:3c:72:97:c8:c5:fe: 4c:f0:e0:a2:8a:1e:ac:d7:65:60:fa:8f:e0:61:49: 85:2e:ba:87:76:83:9d:2f:7e:bd:99:8e:fa:cd:1c: 44:63:11:5d:f1:57:8b:ee:09:db:2c:d4:ea:d2:5b: 40:5c:4d:d9:84:a0:29:50:93:f4:4c:dd:65:a0:08: 53:17:88:74:6f:67:2f:01:c3:a3:95:e6:24:b3:06: e4:a9:60:63:90:d8:42:07:2f:ed:ea:08:93:93:75: c9:e7:a2:db:84:55:a0:3b:21:ff:e7:a3:8d:24:13: 30:0f:ca:06:15:87:80:ad:da:82:a8:40:5c:f7:e8: b0:74:2f:a9:05:6b:d6:ab:d6:15:3f:ee:1b:97:88: be:a8:38:cf:93:98:b4:b5:42:26:11:13:7a:56:06: 62:73:cd:63:1d:5b:59:6b:97:f5:e4:4a:6c:98:13: 10:b9:fa:54:a1:8d:64:82:c3:c1:ed:ce:b4:f5:b8: ef:40:78:21:4d:db:7f:5d:27:37:6b:13:43:1f:38: df:2a:a7:06:8f:8c:7e:d6:6d:ae:5d:60:f6:ce:78: 4b:86:22:7e:85:89:e8:0a:e3:32:f5:06:59:53:c9: 90:0b:38:6f:77:cf:b8:61:e6:33:11:55:3e:ab:c3: 68:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:E6:97:76:B7:9D:64:16:5E:B3:C9:85:B7:13:8E:04:6D:3E:5C X509v3 Authority Key Identifier: keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b5:8b:c2:16:af:f3:36:c3:97:4a:1c:f7:4e:37:a3:ed:a2: cf:27:6a:9e:eb:5a:71:83:f1:64:39:9d:dd:50:30:ec:6d:22: 2e:56:cf:e0:d8:5d:95:e3:63:78:a3:bc:55:e6:49:af:65:d9: 4c:c6:e8:87:57:c9:e7:46:87:f8:7f:b1:14:f4:54:07:85:f8: 7f:0d:c9:ad:6c:4b:c1:8f:a0:10:dd:56:82:6d:fa:77:bf:c6: 8b:da:5d:5d:ed:23:46:b4:3e:58:bb:c0:4e:9d:1d:fb:d7:40: f2:b7:db:0e:7a:78:e0:9f:aa:6e:8a:2d:af:19:e3:66:0f:69: f4:59:c9:a8:d7:aa:bd:d3:29:a8:7e:ae:76:a2:ce:2b:02:61: af:28:11:7c:d5:ba:56:0f:d0:1f:05:3c:18:84:ac:7f:d7:d3: 7c:1c:f7:4f:2f:84:9c:98:eb:7e:09:1c:2c:2f:9c:59:3e:77: ca:dd:d6:51:63:0a:5c:95:9f:b6:67:a1:7d:a6:f8:65:30:fd: 27:39:60:23:32:0f:86:5c:e1:db:87:9a:96:a3:ea:a9:04:23: 54:8b:a6:84:0a:7d:e7:2f:3a:c5:8d:ba:76:88:ae:c7:24:1b: 71:94:df:93:fa:0a:19:11:be:58:d1:dc:27:6a:7b:a9:4f:17: f1:63:bc:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvZP/eBT1AlCI3F1+xs+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNzU4ODVjZjk3OGQyZWY2NjEzNzYyMTQ1MzBiOWVkNjhj NWI0NTgwHhcNMjUxMjI0MTkwMjE3WhcNMjUxMjI1MTkwMjE3WjAzMTEwLwYDVQQD EygxMWZiZTY5Nzc2Yjc5ZDY0MTY1ZWIzYzk4NWI3MTM4ZTA0NmQzZTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OAvewrPuXM8cpfIxf5M8OCiih6s 12Vg+o/gYUmFLrqHdoOdL369mY76zRxEYxFd8VeL7gnbLNTq0ltAXE3ZhKApUJP0 TN1loAhTF4h0b2cvAcOjleYkswbkqWBjkNhCBy/t6giTk3XJ56LbhFWgOyH/56ON JBMwD8oGFYeArdqCqEBc9+iwdC+pBWvWq9YVP+4bl4i+qDjPk5i0tUImERN6VgZi c81jHVtZa5f15EpsmBMQufpUoY1kgsPB7c609bjvQHghTdt/XSc3axNDHzjfKqcG j4x+1m2uXWD2znhLhiJ+hYnoCuMy9QZZU8mQCzhvd8+4YeYzEVU+q8NoVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH75pd2t51kFl6zyYW3E44EbT5cMB8GA1UdIwQY MBaAFJF1iFz5eNLvZhN2IUUwue1oxbRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQt MWI5NTgxOWNmYzljLzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNDg1ZDktMjczNi00OWIxLTlhNDQtMWI5NTgxOWNmYzlj LzEva1hXSVhQbDQwdTltRTNZaFJUQzU3V2pGdEZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrWLwhav 8zbDl0oc9043o+2izydqnutacYPxZDmd3VAw7G0iLlbP4NhdleNjeKO8VeZJr2XZ TMboh1fJ50aH+H+xFPRUB4X4fw3JrWxLwY+gEN1Wgm36d7/Gi9pdXe0jRrQ+WLvA Tp0d+9dA8rfbDnp44J+qbootrxnjZg9p9FnJqNeqvdMpqH6udqLOKwJhrygRfNW6 Vg/QHwU8GISsf9fTfBz3Ty+EnJjrfgkcLC+cWT53yt3WUWMKXJWftmehfab4ZTD9 JzlgIzIPhlzh24ealqPqqQQjVIumhAp95y86xY26doiuxyQbcZTfk/oKGRG+WNHc J2p7qU8X8WO89Q== -----END CERTIFICATE-----Generated at Thu Dec 25 03:25:57 2025 by rpki-client