This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: nY1E9xYarfH/2i7w1BaTg4s3CCGGSqtIM3nDLScykSY= Subject key identifier: 0C:13:CA:C6:96:05:A6:DE:75:BF:6F:60:CC:63:8D:A3:93:B8:AE:36 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B378E6A30DD78DC11C987C137DC93354D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11E9 Signing time: Fri 19 Dec 2025 17:00:38 +0000 Manifest this update: Fri 19 Dec 2025 17:00:38 +0000 Manifest next update: Sat 20 Dec 2025 17:00:38 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: mE7ztN6h/2U74ve5B6f1YnawcjxMV5VBnMoFxFuTFEA=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:6a:30:dd:78:dc:11:c9:87:c1:37:dc:93:35:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 19 17:00:38 2025 GMT Not After : Dec 20 17:00:38 2025 GMT Subject: CN=0c13cac69605a6de75bf6f60cc638da393b8ae36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0f:e8:b6:85:fb:61:88:6a:b0:83:11:20:02: 86:f4:00:a0:fa:37:a5:b7:66:44:62:ef:1a:40:fb: ab:8e:ed:f0:6c:4e:3d:e1:a9:76:a7:aa:09:39:b5: bb:c0:a2:33:88:36:3b:a7:c0:fb:9e:f8:20:7b:d0: 86:08:04:72:ab:16:5f:74:0d:1e:a3:2e:6a:e1:14: d5:f4:13:fb:a3:1c:c1:c7:d8:7d:d4:75:1c:f2:29: 61:1c:2a:e3:d1:44:bb:2c:4d:e9:5c:9b:91:f1:a9: 72:34:c6:87:c7:61:76:ff:2f:9d:19:41:f2:ba:40: 41:fa:65:c3:f8:39:f0:94:8b:a4:14:a3:b8:19:b1: e9:8e:c9:96:4c:23:ca:80:d5:c9:7d:09:6f:6f:83: b2:98:ac:37:af:25:0b:38:10:07:5d:b4:25:58:d9: ca:6c:4a:cd:2a:a3:93:3c:2c:e3:11:de:1f:62:a2: 67:2d:09:ca:ba:4c:be:49:0d:7e:03:1b:2d:89:30: 50:3e:4b:fe:91:a9:0f:5e:e4:37:7a:cd:29:1d:9a: 45:14:0b:6f:30:fc:6b:7c:13:9d:88:7d:a7:8e:8c: 9a:64:82:74:cf:3e:67:e5:f5:59:68:3b:da:ab:c5: 13:2d:2b:f2:e2:51:98:4d:f2:b9:e3:b3:43:14:58: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:13:CA:C6:96:05:A6:DE:75:BF:6F:60:CC:63:8D:A3:93:B8:AE:36 X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ae:b2:df:78:ef:4d:4c:fe:73:67:8d:b9:89:de:60:ca:42: 53:b2:fb:6c:9b:26:ce:2a:34:e2:57:9f:51:2a:8b:f9:d8:df: 04:70:7f:a6:d4:b9:fe:87:19:30:c0:a2:16:37:c0:64:c7:de: f5:23:e0:13:a1:e2:eb:37:e1:c1:f9:ea:0d:ea:49:d8:43:3f: 73:1a:71:45:02:99:1b:f9:73:e6:f7:da:26:11:92:cb:01:fc: a6:bd:97:d9:30:c4:e9:ce:a2:39:02:8e:72:9f:92:26:a9:73: 58:b0:fa:cd:8c:30:b9:82:fd:cc:8e:db:3a:e2:c5:46:7c:a1: eb:65:c1:f0:c8:d7:bd:f0:08:85:ba:c1:b0:c6:2d:83:b0:14: d5:36:7c:dc:98:75:e3:55:7b:f3:d9:0b:a3:09:fd:12:0f:88: 38:ac:c7:4b:3f:8c:1d:90:65:f2:32:c1:a5:c4:b9:3f:47:b7: 4d:20:3d:33:d1:54:1d:47:fb:5a:09:65:ef:d9:da:05:07:fe: 1d:6c:e0:d2:80:1e:65:ba:97:02:a0:bf:44:50:09:0d:52:e8: 14:7c:68:11:04:e7:fa:d1:51:4d:57:6d:a7:66:af:38:0d:91: eb:bc:b2:f9:a2:d1:7f:c8:b1:ee:ce:68:1a:af:ff:c6:47:a5: c7:11:cb:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmow3XjcEcmHwTfckzVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjE5MTcwMDM4WhcNMjUxMjIwMTcwMDM4WjAzMTEwLwYDVQQD EygwYzEzY2FjNjk2MDVhNmRlNzViZjZmNjBjYzYzOGRhMzkzYjhhZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg/otoX7YYhqsIMRIAKG9ACg+jel t2ZEYu8aQPurju3wbE494al2p6oJObW7wKIziDY7p8D7nvgge9CGCARyqxZfdA0e oy5q4RTV9BP7oxzBx9h91HUc8ilhHCrj0US7LE3pXJuR8alyNMaHx2F2/y+dGUHy ukBB+mXD+DnwlIukFKO4GbHpjsmWTCPKgNXJfQlvb4OymKw3ryULOBAHXbQlWNnK bErNKqOTPCzjEd4fYqJnLQnKuky+SQ1+AxstiTBQPkv+kakPXuQ3es0pHZpFFAtv MPxrfBOdiH2njoyaZIJ0zz5n5fVZaDvaq8UTLSvy4lGYTfK547NDFFhO1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwTysaWBabedb9vYMxjjaOTuK42MB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR66y33jv TUz+c2eNuYneYMpCU7L7bJsmzio04lefUSqL+djfBHB/ptS5/ocZMMCiFjfAZMfe 9SPgE6Hi6zfhwfnqDepJ2EM/cxpxRQKZG/lz5vfaJhGSywH8pr2X2TDE6c6iOQKO cp+SJqlzWLD6zYwwuYL9zI7bOuLFRnyh62XB8MjXvfAIhbrBsMYtg7AU1TZ83Jh1 41V789kLown9Eg+IOKzHSz+MHZBl8jLBpcS5P0e3TSA9M9FUHUf7Wgll79naBQf+ HWzg0oAeZbqXAqC/RFAJDVLoFHxoEQTn+tFRTVdtp2avOA2R67yy+aLRf8ix7s5o Gq//xkelxxHLUA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:51:42 2025 by rpki-client