This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json) Hash identifier: SjuKvpTsK23t14OzOK5988HAEi2sC8hZqn4cWzWjhcc= Subject key identifier: 76:C8:C4:2C:79:2B:51:9F:98:B6:EE:B1:B9:95:69:53:46:A2:7F:B5 Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Certificate serial: 019AF163FAC235D6D0DFDE1AA031AC65800E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft Manifest number: 06C0 Signing time: Sat 06 Dec 2025 02:00:52 +0000 Manifest this update: Sat 06 Dec 2025 02:00:52 +0000 Manifest next update: Sun 07 Dec 2025 02:00:52 +0000 Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: TGg5w0xfXZcOF2KmHY29Up5BsYp2g2u7sx/AWfLqkHM=) 2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fa:c2:35:d6:d0:df:de:1a:a0:31:ac:65:80:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Validity Not Before: Dec 6 02:00:52 2025 GMT Not After : Dec 7 02:00:52 2025 GMT Subject: CN=76c8c42c792b519f98b6eeb1b995695346a27fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:4e:05:dc:08:4f:89:21:3c:04:8d:de:ff: a1:88:36:ee:03:ae:d0:c1:97:16:c5:36:ff:b0:56: 8b:7d:a3:46:43:65:44:a8:22:ba:a5:60:4f:ee:0c: 3d:8a:2a:65:4f:4f:da:03:c4:6a:9d:1b:dc:19:89: 99:90:33:0d:cd:eb:8d:8f:81:88:5f:96:7a:50:a8: cd:f9:a1:c3:7c:8f:76:39:29:84:e6:ac:35:0c:78: 30:de:86:c5:bb:af:3e:cd:1e:2e:39:55:b7:b2:30: 3c:24:ae:f8:22:09:73:2d:40:1d:87:59:5c:fa:65: 1f:37:c4:2f:16:7c:02:38:fa:74:5d:0e:12:fe:8e: 27:6f:d2:95:09:bc:03:ee:3e:7b:a9:61:f8:ce:11: d5:10:4b:fc:f9:29:08:5e:86:bc:2e:dd:93:ff:b3: ca:dc:aa:78:bb:48:f0:f6:ee:44:d2:de:6b:e6:74: 36:00:5c:e6:f0:55:d6:9c:20:1d:65:f2:79:02:af: a9:ad:60:8b:7b:4e:ad:d9:b3:28:22:b6:4c:3d:a2: 73:95:1c:d8:2f:49:28:6c:a6:6a:c1:aa:b5:88:de: 55:bb:fe:98:ec:42:c2:93:dd:f8:a3:26:e3:0b:56: 21:26:ab:96:24:97:13:f8:3a:15:c0:1e:10:47:f5: 18:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:C4:2C:79:2B:51:9F:98:B6:EE:B1:B9:95:69:53:46:A2:7F:B5 X509v3 Authority Key Identifier: keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a4:f1:10:cc:67:5d:ed:68:c3:22:65:ca:e9:bf:b6:cf:01: 29:7b:86:45:f9:20:fd:36:82:71:3c:1b:22:91:2d:7c:3c:ff: 53:8e:f1:73:a8:a4:d4:cb:b8:f8:03:ac:d9:32:24:2f:27:43: 5c:f2:5a:87:e5:f5:be:18:54:a0:73:ff:ef:ca:48:e6:e4:c4: 83:44:81:f0:84:7d:53:c7:67:78:ed:fb:28:4f:70:20:1b:0a: f1:b5:a0:4f:e0:fd:b2:e2:5f:2a:f8:6d:4a:34:db:eb:44:d8: bf:54:a8:94:5a:48:68:12:92:fd:d3:cf:da:6a:aa:c9:a5:95: f4:cd:d0:10:f3:5b:fc:c1:27:a0:72:31:e2:e7:7b:38:4e:ee: f7:eb:4f:0d:b7:af:fa:14:ce:6b:46:b5:16:10:49:e1:c2:83: f3:58:c6:e1:f6:2b:8f:18:82:c3:4e:cf:60:00:73:b5:5d:c2: 58:77:1e:da:32:89:d1:44:fd:b5:93:7c:54:c6:59:a1:42:4c: c5:45:f1:44:33:96:3f:e5:a2:d4:e6:94:90:4c:8d:91:47:d0: d0:c8:ad:06:ed:c2:43:f3:af:91:b5:dd:55:48:28:6f:fe:ce: a1:d6:da:e0:95:a5:75:eb:cf:5e:de:46:cb:64:36:1d:ef:44: 28:ea:b6:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/rCNdbQ394aoDGsZYAOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2 OWIyMzcwHhcNMjUxMjA2MDIwMDUyWhcNMjUxMjA3MDIwMDUyWjAzMTEwLwYDVQQD Eyg3NmM4YzQyYzc5MmI1MTlmOThiNmVlYjFiOTk1Njk1MzQ2YTI3ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBVOBdwIT4khPASN3v+hiDbuA67Q wZcWxTb/sFaLfaNGQ2VEqCK6pWBP7gw9iiplT0/aA8RqnRvcGYmZkDMNzeuNj4GI X5Z6UKjN+aHDfI92OSmE5qw1DHgw3obFu68+zR4uOVW3sjA8JK74IglzLUAdh1lc +mUfN8QvFnwCOPp0XQ4S/o4nb9KVCbwD7j57qWH4zhHVEEv8+SkIXoa8Lt2T/7PK 3Kp4u0jw9u5E0t5r5nQ2AFzm8FXWnCAdZfJ5Aq+prWCLe06t2bMoIrZMPaJzlRzY L0kobKZqwaq1iN5Vu/6Y7ELCk934oybjC1YhJquWJJcT+DoVwB4QR/UYPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbIxCx5K1GfmLbusbmVaVNGon+1MB8GA1UdIwQY MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKTxEMxn Xe1owyJlyum/ts8BKXuGRfkg/TaCcTwbIpEtfDz/U47xc6ik1Mu4+AOs2TIkLydD XPJah+X1vhhUoHP/78pI5uTEg0SB8IR9U8dneO37KE9wIBsK8bWgT+D9suJfKvht SjTb60TYv1SolFpIaBKS/dPP2mqqyaWV9M3QEPNb/MEnoHIx4ud7OE7u9+tPDbev +hTOa0a1FhBJ4cKD81jG4fYrjxiCw07PYABztV3CWHce2jKJ0UT9tZN8VMZZoUJM xUXxRDOWP+Wi1OaUkEyNkUfQ0MitBu3CQ/OvkbXdVUgob/7Oodba4JWldevPXt5G y2Q2He9EKOq25Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:53:27 2025 by rpki-client