This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft File: XE_B5N78Rxyf23_a25iVVj2vmZw.mft (raw, json) Hash identifier: 9smoZAEaM3o+2epNqr35/89ruF7vK7NS4Lp9m4SKEOs= Subject key identifier: B9:1B:A4:70:C6:2C:23:6B:D8:98:B5:E8:F3:D7:CC:99:1B:30:9E:6F Authority key identifier: 5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C Certificate issuer: /CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c Certificate serial: 019AF12CB825245F34E9CC68FE1294529B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft Manifest number: 1380 Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: XE_B5N78Rxyf23_a25iVVj2vmZw.crl (hash: 9EY184degGNarNTElT5oBJqceVvvDNn4Vpnw2E/YHIk=) 2: lvOtY--5ta_q9u7-uCq8vanMR-o.roa (hash: IsaauvQSGX/KNFnK0CxHU+He7cfzl6r9rUGogp/cJBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b8:25:24:5f:34:e9:cc:68:fe:12:94:52:9b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4fc1e4defc471c9fdb7fdadb9895563daf999c Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=b91ba470c62c236bd898b5e8f3d7cc991b309e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0d:51:7d:44:69:6f:66:6c:c8:3b:ff:86:86: 41:6a:8b:a9:ee:0f:8c:ba:d7:1a:c9:1a:71:54:f5: ec:af:38:cf:fd:3e:5e:a7:43:5a:d4:e3:f3:5f:18: 12:75:bb:f8:d0:d4:4b:9b:9a:7d:37:7e:72:df:1c: 9b:19:ec:d8:4d:bb:06:a8:bc:3c:e5:a2:f5:01:73: 25:78:48:21:b9:aa:d1:f5:5e:85:11:4a:42:bd:4f: 55:fc:bd:ad:a1:f9:2e:7b:c6:11:fe:bb:82:00:e4: 59:fd:c5:1a:a4:e0:fe:3f:7e:85:1f:47:82:90:12: ae:ca:ff:da:67:ad:b6:b7:a6:d9:5d:f8:02:80:02: cd:72:5d:31:75:cd:52:2e:9a:bc:cc:9c:c9:3c:a5: 01:92:f6:e1:90:bb:65:a5:09:3d:18:28:6d:0f:15: e4:87:98:94:13:4b:83:95:9d:94:a4:88:a9:52:cc: 5d:a2:fe:a1:46:ee:5c:4f:9d:37:6e:05:25:02:52: 1d:1b:b2:dd:e4:a8:dd:3c:37:73:ba:ba:91:01:4e: df:8e:3a:4f:6d:a7:ea:2e:8a:09:c6:3c:d9:ec:f1: 0a:31:33:87:48:84:62:18:01:ee:d4:ba:d4:ca:fa: d6:0c:4d:b5:df:9f:b0:92:fd:5f:4a:21:6d:d9:09: 76:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1B:A4:70:C6:2C:23:6B:D8:98:B5:E8:F3:D7:CC:99:1B:30:9E:6F X509v3 Authority Key Identifier: keyid:5C:4F:C1:E4:DE:FC:47:1C:9F:DB:7F:DA:DB:98:95:56:3D:AF:99:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XE_B5N78Rxyf23_a25iVVj2vmZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/9cfa5f-5d2d-4be4-a80d-7d0ee2e990f5/1/XE_B5N78Rxyf23_a25iVVj2vmZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4a:09:02:da:7d:20:0b:42:e6:df:e5:63:f6:28:a1:e8:a1: 51:46:8a:07:bd:d5:27:d2:65:d6:28:0f:14:84:af:f4:28:64: 99:3a:b7:06:ac:18:a4:19:94:2c:39:4c:ea:98:c3:1b:1f:4f: c8:eb:cf:30:3c:ba:21:88:b9:1e:12:13:ca:35:43:2e:ff:e1: 2c:1c:2e:67:88:db:eb:16:af:e5:83:ad:f9:b7:86:27:03:72: 0a:12:5a:38:20:06:2b:2e:b4:22:4f:7b:16:79:3c:13:ab:f9: 8b:f3:ae:15:1d:80:ea:68:26:1e:00:3e:21:8e:a9:3d:5c:cd: bb:a3:4e:25:d8:1c:04:c6:c9:f5:3f:04:20:76:7f:79:38:e5: 3a:6e:9d:65:e3:3b:da:a2:a3:4d:a8:5c:83:9a:75:48:89:fc: 33:ef:f0:74:57:bd:4a:8c:b8:3a:8b:31:9b:ed:7b:75:25:d7: 2e:45:9c:cf:4f:03:28:54:a1:42:d7:93:f2:6b:44:01:48:3c: 5b:d4:4c:0e:70:49:38:18:ed:c9:10:44:96:0d:d3:03:0f:e7: 8d:d7:e0:fc:62:be:27:e4:8d:dc:67:93:39:6c:fb:c1:3d:4a: 7e:92:83:3a:31:fe:a2:7e:d3:43:52:a7:b2:00:6c:7c:16:fd: 1a:55:c2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLglJF806cxo/hKUUpuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGZjMWU0ZGVmYzQ3MWM5ZmRiN2ZkYWRiOTg5NTU2M2Rh Zjk5OWMwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EyhiOTFiYTQ3MGM2MmMyMzZiZDg5OGI1ZThmM2Q3Y2M5OTFiMzA5ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w1RfURpb2ZsyDv/hoZBaoup7g+M utcayRpxVPXsrzjP/T5ep0Na1OPzXxgSdbv40NRLm5p9N35y3xybGezYTbsGqLw8 5aL1AXMleEghuarR9V6FEUpCvU9V/L2tofkue8YR/ruCAORZ/cUapOD+P36FH0eC kBKuyv/aZ622t6bZXfgCgALNcl0xdc1SLpq8zJzJPKUBkvbhkLtlpQk9GChtDxXk h5iUE0uDlZ2UpIipUsxdov6hRu5cT503bgUlAlIdG7Ld5KjdPDdzurqRAU7fjjpP bafqLooJxjzZ7PEKMTOHSIRiGAHu1LrUyvrWDE2135+wkv1fSiFt2Ql2YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkbpHDGLCNr2Ji16PPXzJkbMJ5vMB8GA1UdIwQY MBaAFFxPweTe/Eccn9t/2tuYlVY9r5mcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQt N2QwZWUyZTk5MGY1LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85Y2ZhNWYtNWQyZC00YmU0LWE4MGQtN2QwZWUyZTk5MGY1 LzEvWEVfQjVONzhSeHlmMjNfYTI1aVZWajJ2bVp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtkoJAtp9 IAtC5t/lY/YooeihUUaKB73VJ9Jl1igPFISv9ChkmTq3BqwYpBmULDlM6pjDGx9P yOvPMDy6IYi5HhITyjVDLv/hLBwuZ4jb6xav5YOt+beGJwNyChJaOCAGKy60Ik97 Fnk8E6v5i/OuFR2A6mgmHgA+IY6pPVzNu6NOJdgcBMbJ9T8EIHZ/eTjlOm6dZeM7 2qKjTahcg5p1SIn8M+/wdFe9Soy4Oosxm+17dSXXLkWcz08DKFShQteT8mtEAUg8 W9RMDnBJOBjtyRBElg3TAw/njdfg/GK+J+SN3GeTOWz7wT1KfpKDOjH+on7TQ1Kn sgBsfBb9GlXCng== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:42 2025 by rpki-client