This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: qbaR0f26eqERaRW/1JeThC4oHiA9KKvglnvGLr8vda4=
Subject key identifier: A9:C6:3E:F0:CF:5D:49:CF:70:26:24:36:AC:0F:BB:A2:6B:25:94:88
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019B397D007D288AC104DBB8608D0CAFF9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 11EA
Signing time: Sat 20 Dec 2025 02:00:51 +0000
Manifest this update: Sat 20 Dec 2025 02:00:51 +0000
Manifest next update: Sun 21 Dec 2025 02:00:51 +0000
Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: aQcbPDte2zUFnfLOWugHjAidPv1N3n7HLnHahRU9KCg=)
3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:7d:00:7d:28:8a:c1:04:db:b8:60:8d:0c:af:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: Dec 20 02:00:51 2025 GMT
Not After : Dec 21 02:00:51 2025 GMT
Subject: CN=a9c63ef0cf5d49cf70262436ac0fbba26b259488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8c:ca:62:eb:ba:b1:ce:38:0c:c4:01:d9:d8:
94:8c:b1:ac:98:68:dd:91:c5:fb:f6:5d:2b:0f:c3:
47:ef:29:54:c2:52:43:11:d5:1d:7b:a9:ea:89:84:
77:2e:41:83:9c:77:1d:b5:9b:bb:ef:c3:46:15:ab:
15:e3:0d:34:8b:83:15:53:6b:70:c3:02:b3:6d:cc:
c4:d6:9b:6b:7a:3f:d7:4d:b7:07:02:9d:9a:d2:9c:
c4:54:a9:d3:e2:87:42:39:02:e0:3c:aa:52:93:a1:
5e:a0:e6:23:27:af:29:b7:f4:71:dc:4a:7f:f5:4f:
03:e5:5c:ed:35:42:a1:df:08:43:f2:05:55:c6:80:
72:b7:18:db:db:ae:24:16:ee:89:ea:02:c2:b3:15:
76:7e:37:fe:c3:ab:9d:07:23:aa:d9:f8:33:d9:08:
20:ff:92:ca:4c:5a:16:da:5e:39:da:36:c1:9d:67:
45:b2:51:11:57:f4:e2:a6:db:9c:94:a1:a2:3f:9f:
46:90:12:af:e6:56:0d:0c:cc:e0:eb:c1:42:1f:68:
5f:3d:b5:58:b7:d0:b9:16:5a:8f:17:98:c6:41:09:
de:bc:77:56:32:24:95:be:c4:85:aa:eb:cf:06:a3:
ba:6b:2c:a8:2f:b5:ee:67:a5:61:24:0a:35:6b:29:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C6:3E:F0:CF:5D:49:CF:70:26:24:36:AC:0F:BB:A2:6B:25:94:88
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:cd:4e:f6:7d:a2:15:1a:73:6c:6c:74:d7:f6:aa:62:2e:
02:ca:83:3d:60:ee:06:a9:01:ad:21:d8:7d:a4:94:60:2c:1c:
78:d8:46:7e:33:7c:02:2a:f4:e7:0c:5a:08:25:b5:e7:50:57:
76:d2:f4:e3:66:7f:52:8b:7e:69:70:29:a5:a1:c9:7a:c9:3b:
32:1b:bd:6f:94:48:69:2c:80:52:3a:1c:3a:b1:ee:32:fa:cf:
3d:b8:77:c6:c8:4e:7b:73:ec:87:4d:8a:89:ff:1a:f5:e7:11:
14:d3:49:36:2a:4f:b4:ad:1c:ca:12:67:12:b4:7c:49:f5:b1:
5e:2f:03:1a:c8:82:db:88:71:97:3f:0d:d9:36:0f:e6:22:03:
4c:9e:38:7b:c6:2c:92:de:7e:3e:f9:4e:b0:fe:1b:07:75:d9:
e2:76:7e:3d:5f:a4:28:70:0d:0a:0a:7e:44:6f:e2:1f:e0:07:
eb:22:a0:6f:36:cf:a7:24:8a:06:ee:cf:09:54:a4:7b:51:d7:
d4:11:cf:db:3e:cd:30:e4:2d:f9:68:77:eb:fc:73:15:40:f8:
aa:25:3e:47:b8:cc:38:27:65:90:c6:0e:e2:63:4f:6c:58:2e:
48:8a:fb:ad:6b:03:d7:23:e6:e6:1c:d5:e7:4d:29:26:56:ee:
5c:75:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:31:09 2025 by rpki-client