This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft File: xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft (raw, json) Hash identifier: ndIcUG5FNy/GxG9tTmy/SOQi+7qi+r8/KLs6Y2ML2Oo= Subject key identifier: EB:F6:EC:91:64:EE:F2:FB:46:10:64:22:56:32:E7:D6:59:41:C3:08 Authority key identifier: C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35 Certificate issuer: /CN=c6c6653e87bb2ef9adbb061960e20500a554f035 Certificate serial: 019B5C3FF85C9DA31BAAB85E4D3658865702 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft Manifest number: 0763 Signing time: Fri 26 Dec 2025 20:00:54 +0000 Manifest this update: Fri 26 Dec 2025 20:00:54 +0000 Manifest next update: Sat 27 Dec 2025 20:00:54 +0000 Files and hashes: 1: CL-hnZLAW32dB0McMUvKXumHbjc.roa (hash: /6abOSVtqiSm907QP0eqatEoUJFnqFDpeoJMvvSk4WA=) 2: xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl (hash: 7olmTi7+AsbUpcthDCvetbhrcXS/LwH57LMyb5Ugakg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:3f:f8:5c:9d:a3:1b:aa:b8:5e:4d:36:58:86:57:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c6653e87bb2ef9adbb061960e20500a554f035 Validity Not Before: Dec 26 20:00:54 2025 GMT Not After : Dec 27 20:00:54 2025 GMT Subject: CN=ebf6ec9164eef2fb461064225632e7d65941c308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:8e:3d:31:6c:66:a1:54:7f:e4:49:84:57: e0:28:21:ee:61:e9:36:0b:ae:9d:33:7c:5f:c6:76: dd:17:b5:eb:76:4c:31:e5:0c:44:95:ed:d1:be:04: 26:f3:bd:be:b8:ac:89:d5:b6:b9:27:0a:90:24:71: 9b:ee:5c:cf:64:25:ca:89:4c:6a:8d:48:47:2e:0a: 7b:4e:f6:60:99:b9:59:5d:2c:9b:e2:7e:7d:9e:95: 52:25:53:c5:bc:64:45:85:0d:e1:29:12:4c:c2:b1: 00:1f:ee:8e:50:51:0e:d2:67:e8:b4:1b:63:8b:d3: ca:ee:8b:27:45:d5:4a:75:78:cf:0d:3d:8f:40:00: 8c:76:be:da:45:c3:94:8f:79:20:67:fc:b7:ee:34: 97:9e:b3:78:4e:bc:b6:a8:be:c7:32:ee:42:ec:1b: 82:51:9d:3e:33:2a:a1:0d:cb:5c:80:10:90:ec:be: ab:5b:4a:00:d9:d3:1c:03:b8:42:61:f3:77:22:df: a1:3b:ab:79:bf:07:f1:61:86:79:20:11:5a:39:8c: 86:8d:dc:ef:a8:a8:e8:8e:cf:fd:9e:51:53:77:1a: 47:f3:06:fd:f2:55:83:d5:d3:a8:e5:a1:a9:e3:b6: e3:09:6b:b1:3a:f2:7f:e9:dc:98:b9:b1:9a:3b:93: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:EC:91:64:EE:F2:FB:46:10:64:22:56:32:E7:D6:59:41:C3:08 X509v3 Authority Key Identifier: keyid:C6:C6:65:3E:87:BB:2E:F9:AD:BB:06:19:60:E2:05:00:A5:54:F0:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsZlPoe7LvmtuwYZYOIFAKVU8DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/961a72-70fd-450f-9fe9-3bba3628324b/1/xsZlPoe7LvmtuwYZYOIFAKVU8DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:7d:64:c7:08:fa:74:46:0e:1d:07:5f:ac:10:3c:fb:46:5b: 34:47:6b:8b:05:d8:1a:87:c0:81:48:ef:3c:54:92:8b:ff:6f: df:97:49:d8:36:6f:02:17:27:ed:13:2d:a0:a4:62:14:84:3f: 4e:08:51:bb:55:9f:a9:11:e7:57:f2:4e:47:6b:90:19:50:07: ad:44:8c:94:81:af:e1:4f:e6:f8:e4:ed:86:a3:e0:f0:0e:95: 62:93:96:8b:d0:e2:0f:34:a5:3e:e7:32:68:ac:a6:f5:01:6e: ec:14:23:6e:e2:27:c1:de:4d:26:33:f2:6d:e5:e3:45:f2:86: 0e:55:37:38:5d:3a:44:77:1a:1e:c9:ff:0d:67:f2:c8:2d:a8: 8a:f0:b7:dd:b4:09:74:2f:6e:3a:36:c9:f6:54:01:47:09:85: cb:48:0b:3c:42:ba:62:9e:5f:74:9c:37:75:9d:ed:09:ae:b3: 2e:3c:a2:fb:11:b0:38:90:9a:7b:39:ee:77:99:c9:87:ca:6c: ce:2a:97:f4:01:00:3d:f0:00:9c:13:ec:c4:1d:b6:e3:96:15: 59:43:15:ce:41:fc:74:60:62:67:03:44:c5:24:39:89:a4:e0: 57:47:2b:9d:85:e6:7a:d8:a8:b1:30:8f:e1:ba:67:7b:3b:87: e3:9e:8c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcP/hcnaMbqrheTTZYhlcCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YzY2NTNlODdiYjJlZjlhZGJiMDYxOTYwZTIwNTAwYTU1 NGYwMzUwHhcNMjUxMjI2MjAwMDU0WhcNMjUxMjI3MjAwMDU0WjAzMTEwLwYDVQQD EyhlYmY2ZWM5MTY0ZWVmMmZiNDYxMDY0MjI1NjMyZTdkNjU5NDFjMzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZSOPTFsZqFUf+RJhFfgKCHuYek2 C66dM3xfxnbdF7Xrdkwx5QxEle3RvgQm872+uKyJ1ba5JwqQJHGb7lzPZCXKiUxq jUhHLgp7TvZgmblZXSyb4n59npVSJVPFvGRFhQ3hKRJMwrEAH+6OUFEO0mfotBtj i9PK7osnRdVKdXjPDT2PQACMdr7aRcOUj3kgZ/y37jSXnrN4Try2qL7HMu5C7BuC UZ0+MyqhDctcgBCQ7L6rW0oA2dMcA7hCYfN3It+hO6t5vwfxYYZ5IBFaOYyGjdzv qKjojs/9nlFTdxpH8wb98lWD1dOo5aGp47bjCWuxOvJ/6dyYubGaO5Ni8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv27JFk7vL7RhBkIlYy59ZZQcMIMB8GA1UdIwQY MBaAFMbGZT6Huy75rbsGGWDiBQClVPA1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTkt M2JiYTM2MjgzMjRiLzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi85NjFhNzItNzBmZC00NTBmLTlmZTktM2JiYTM2MjgzMjRi LzEveHNabFBvZTdMdm10dXdZWllPSUZBS1ZVOERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAan1kxwj6 dEYOHQdfrBA8+0ZbNEdriwXYGofAgUjvPFSSi/9v35dJ2DZvAhcn7RMtoKRiFIQ/ TghRu1WfqRHnV/JOR2uQGVAHrUSMlIGv4U/m+OTthqPg8A6VYpOWi9DiDzSlPucy aKym9QFu7BQjbuInwd5NJjPybeXjRfKGDlU3OF06RHcaHsn/DWfyyC2oivC33bQJ dC9uOjbJ9lQBRwmFy0gLPEK6Yp5fdJw3dZ3tCa6zLjyi+xGwOJCaeznud5nJh8ps ziqX9AEAPfAAnBPsxB2245YVWUMVzkH8dGBiZwNExSQ5iaTgV0crnYXmetiosTCP 4bpnezuH456MLg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:27 2025 by rpki-client