This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: qbaR0f26eqERaRW/1JeThC4oHiA9KKvglnvGLr8vda4= Subject key identifier: A9:C6:3E:F0:CF:5D:49:CF:70:26:24:36:AC:0F:BB:A2:6B:25:94:88 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B397D007D288AC104DBB8608D0CAFF9A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11EA Signing time: Sat 20 Dec 2025 02:00:51 +0000 Manifest this update: Sat 20 Dec 2025 02:00:51 +0000 Manifest next update: Sun 21 Dec 2025 02:00:51 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: aQcbPDte2zUFnfLOWugHjAidPv1N3n7HLnHahRU9KCg=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:00:7d:28:8a:c1:04:db:b8:60:8d:0c:af:f9:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 20 02:00:51 2025 GMT Not After : Dec 21 02:00:51 2025 GMT Subject: CN=a9c63ef0cf5d49cf70262436ac0fbba26b259488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8c:ca:62:eb:ba:b1:ce:38:0c:c4:01:d9:d8: 94:8c:b1:ac:98:68:dd:91:c5:fb:f6:5d:2b:0f:c3: 47:ef:29:54:c2:52:43:11:d5:1d:7b:a9:ea:89:84: 77:2e:41:83:9c:77:1d:b5:9b:bb:ef:c3:46:15:ab: 15:e3:0d:34:8b:83:15:53:6b:70:c3:02:b3:6d:cc: c4:d6:9b:6b:7a:3f:d7:4d:b7:07:02:9d:9a:d2:9c: c4:54:a9:d3:e2:87:42:39:02:e0:3c:aa:52:93:a1: 5e:a0:e6:23:27:af:29:b7:f4:71:dc:4a:7f:f5:4f: 03:e5:5c:ed:35:42:a1:df:08:43:f2:05:55:c6:80: 72:b7:18:db:db:ae:24:16:ee:89:ea:02:c2:b3:15: 76:7e:37:fe:c3:ab:9d:07:23:aa:d9:f8:33:d9:08: 20:ff:92:ca:4c:5a:16:da:5e:39:da:36:c1:9d:67: 45:b2:51:11:57:f4:e2:a6:db:9c:94:a1:a2:3f:9f: 46:90:12:af:e6:56:0d:0c:cc:e0:eb:c1:42:1f:68: 5f:3d:b5:58:b7:d0:b9:16:5a:8f:17:98:c6:41:09: de:bc:77:56:32:24:95:be:c4:85:aa:eb:cf:06:a3: ba:6b:2c:a8:2f:b5:ee:67:a5:61:24:0a:35:6b:29: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:3E:F0:CF:5D:49:CF:70:26:24:36:AC:0F:BB:A2:6B:25:94:88 X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:14:cd:4e:f6:7d:a2:15:1a:73:6c:6c:74:d7:f6:aa:62:2e: 02:ca:83:3d:60:ee:06:a9:01:ad:21:d8:7d:a4:94:60:2c:1c: 78:d8:46:7e:33:7c:02:2a:f4:e7:0c:5a:08:25:b5:e7:50:57: 76:d2:f4:e3:66:7f:52:8b:7e:69:70:29:a5:a1:c9:7a:c9:3b: 32:1b:bd:6f:94:48:69:2c:80:52:3a:1c:3a:b1:ee:32:fa:cf: 3d:b8:77:c6:c8:4e:7b:73:ec:87:4d:8a:89:ff:1a:f5:e7:11: 14:d3:49:36:2a:4f:b4:ad:1c:ca:12:67:12:b4:7c:49:f5:b1: 5e:2f:03:1a:c8:82:db:88:71:97:3f:0d:d9:36:0f:e6:22:03: 4c:9e:38:7b:c6:2c:92:de:7e:3e:f9:4e:b0:fe:1b:07:75:d9: e2:76:7e:3d:5f:a4:28:70:0d:0a:0a:7e:44:6f:e2:1f:e0:07: eb:22:a0:6f:36:cf:a7:24:8a:06:ee:cf:09:54:a4:7b:51:d7: d4:11:cf:db:3e:cd:30:e4:2d:f9:68:77:eb:fc:73:15:40:f8: aa:25:3e:47:b8:cc:38:27:65:90:c6:0e:e2:63:4f:6c:58:2e: 48:8a:fb:ad:6b:03:d7:23:e6:e6:1c:d5:e7:4d:29:26:56:ee: 5c:75:4c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQB9KIrBBNu4YI0Mr/mnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjIwMDIwMDUxWhcNMjUxMjIxMDIwMDUxWjAzMTEwLwYDVQQD EyhhOWM2M2VmMGNmNWQ0OWNmNzAyNjI0MzZhYzBmYmJhMjZiMjU5NDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4zKYuu6sc44DMQB2diUjLGsmGjd kcX79l0rD8NH7ylUwlJDEdUde6nqiYR3LkGDnHcdtZu778NGFasV4w00i4MVU2tw wwKzbczE1ptrej/XTbcHAp2a0pzEVKnT4odCOQLgPKpSk6FeoOYjJ68pt/Rx3Ep/ 9U8D5VztNUKh3whD8gVVxoBytxjb264kFu6J6gLCsxV2fjf+w6udByOq2fgz2Qgg /5LKTFoW2l452jbBnWdFslERV/TiptuclKGiP59GkBKv5lYNDMzg68FCH2hfPbVY t9C5FlqPF5jGQQnevHdWMiSVvsSFquvPBqO6ayyoL7XuZ6VhJAo1ayleqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnGPvDPXUnPcCYkNqwPu6JrJZSIMB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexTNTvZ9 ohUac2xsdNf2qmIuAsqDPWDuBqkBrSHYfaSUYCwceNhGfjN8Air05wxaCCW151BX dtL042Z/Uot+aXAppaHJesk7Mhu9b5RIaSyAUjocOrHuMvrPPbh3xshOe3Psh02K if8a9ecRFNNJNipPtK0cyhJnErR8SfWxXi8DGsiC24hxlz8N2TYP5iIDTJ44e8Ys kt5+PvlOsP4bB3XZ4nZ+PV+kKHANCgp+RG/iH+AH6yKgbzbPpySKBu7PCVSke1HX 1BHP2z7NMOQt+Wh36/xzFUD4qiU+R7jMOCdlkMYO4mNPbFguSIr7rWsD1yPm5hzV 500pJlbuXHVMfA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:31:09 2025 by rpki-client