This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft File: XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json) Hash identifier: p5rYmXf5Mut8TFKu3IUYZvCuphU6MP59HeOjO5waZXQ= Subject key identifier: FE:BB:30:66:45:C6:CC:38:71:0C:35:4B:33:53:C5:E9:B1:DF:22:DC Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B Certificate issuer: /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b Certificate serial: 019AF20959CD84070506931AFD52BBD867A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft Manifest number: 016C Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: z8FLW2jNOQK1EhDvP4YZCl6C5mU+EZ8tKj7zLRQyih8=) 2: w-bn-aCE5W30xtl3JcELkxoTsW8.roa (hash: BpJzwRV75hoQ0T1DnwfQt7T4AohZsZH+92QsoGclyp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:59:cd:84:07:05:06:93:1a:fd:52:bb:d8:67:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=febb306645c6cc38710c354b3353c5e9b1df22dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:71:52:cf:69:87:48:30:77:f2:05:95:8c:45: a6:ba:e5:f4:3e:34:c3:58:1f:65:ad:22:b0:78:50: 33:a4:7c:6c:46:ad:ec:8c:7b:a8:34:88:ff:83:b4: e1:69:77:18:35:c8:8c:aa:47:27:b3:fc:8f:fd:82: db:7c:9b:2e:09:73:0e:eb:2a:fd:43:78:b1:17:c6: 18:f6:b3:7b:25:2e:f6:44:1c:f4:39:d1:89:92:4c: 24:3f:7c:bb:33:3c:22:15:cc:35:e8:60:1a:92:b9: 9b:06:33:46:f5:4e:df:35:ff:cf:20:42:30:1a:c4: bc:9f:44:ba:3e:da:8e:39:39:c1:5a:7e:81:0f:a2: a8:fc:71:0a:bf:f1:1c:83:df:a0:be:dc:ba:4c:e9: e1:77:36:89:1c:80:82:c1:2f:06:6f:6a:46:f9:ba: 24:9f:0d:db:52:5f:eb:2c:a4:9c:0e:70:8d:0e:0f: 7c:35:e5:06:b8:d4:ef:db:d4:a7:0b:40:2a:41:1e: 58:ed:ab:1a:40:3a:e0:9c:06:c8:43:75:11:48:0e: 36:7d:74:55:82:9c:4f:3d:15:c4:0b:89:3f:f3:ee: 30:12:ff:26:e2:7a:f7:87:cb:28:09:a5:77:18:5f: c8:7e:91:7f:ce:f2:61:e7:ce:6a:6a:1d:96:4d:cc: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:30:66:45:C6:CC:38:71:0C:35:4B:33:53:C5:E9:B1:DF:22:DC X509v3 Authority Key Identifier: keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:29:3f:a1:bb:60:9d:4b:69:ea:c9:6a:dc:7b:f5:d0:c4:b8: 83:8d:62:b8:53:e3:52:91:f7:ec:02:0b:ac:d8:c7:a0:16:05: 97:b9:67:5d:db:b5:12:b9:a4:60:68:fe:c0:68:5b:4a:c0:5e: 94:5d:21:6d:c7:88:56:c5:c5:bc:7b:ce:b1:92:df:a3:78:e3: fb:2f:4d:39:73:cc:54:28:01:f6:7d:2a:98:a0:93:a0:2c:15: 6f:0e:54:56:a3:da:eb:ff:a9:35:6d:af:d6:26:81:c2:78:20: 16:03:c6:ca:45:f0:d7:e9:90:0d:ff:9d:2c:11:14:61:38:3a: 0d:58:c1:5b:7d:ee:fa:c8:e9:7c:15:07:7a:82:4a:30:f0:f7: 7f:f9:93:67:6d:77:78:fc:eb:ec:fc:89:93:9b:5e:ac:5d:37: f2:64:2c:8d:01:ea:6b:41:0d:00:9b:da:24:21:00:e6:46:bb: f4:42:ef:be:1e:60:5e:5d:8e:aa:5a:8e:ca:e2:c1:4e:50:d8: 5d:36:95:71:78:6d:e9:55:95:78:5f:3e:1a:f6:d9:2e:11:89: 83:37:7e:26:f5:dd:fc:1f:43:d1:c5:82:d8:a8:c4:54:eb:ef: 7d:3a:fe:22:1b:6a:a0:d4:36:9f:cd:da:b7:a5:e7:1e:5f:a8: 74:65:df:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVnNhAcFBpMa/VK72GemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjYyYmU1ZDEyZGZkYmUyNDc5ZTNhMjA3MTNmNDU3ZTkz ZjA2OWIwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhmZWJiMzA2NjQ1YzZjYzM4NzEwYzM1NGIzMzUzYzVlOWIxZGYyMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3FSz2mHSDB38gWVjEWmuuX0PjTD WB9lrSKweFAzpHxsRq3sjHuoNIj/g7ThaXcYNciMqkcns/yP/YLbfJsuCXMO6yr9 Q3ixF8YY9rN7JS72RBz0OdGJkkwkP3y7MzwiFcw16GAakrmbBjNG9U7fNf/PIEIw GsS8n0S6PtqOOTnBWn6BD6Ko/HEKv/Ecg9+gvty6TOnhdzaJHICCwS8Gb2pG+bok nw3bUl/rLKScDnCNDg98NeUGuNTv29SnC0AqQR5Y7asaQDrgnAbIQ3URSA42fXRV gpxPPRXEC4k/8+4wEv8m4nr3h8soCaV3GF/IfpF/zvJh585qah2WTcyXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP67MGZFxsw4cQw1SzNTxemx3yLcMB8GA1UdIwQY MBaAFF4mK+XRLf2+JHnjogcT9FfpPwabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMt ZjViODFjY2YwOWNkLzEvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMtZjViODFjY2YwOWNk LzEvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCk/obtg nUtp6slq3Hv10MS4g41iuFPjUpH37AILrNjHoBYFl7lnXdu1ErmkYGj+wGhbSsBe lF0hbceIVsXFvHvOsZLfo3jj+y9NOXPMVCgB9n0qmKCToCwVbw5UVqPa6/+pNW2v 1iaBwnggFgPGykXw1+mQDf+dLBEUYTg6DVjBW33u+sjpfBUHeoJKMPD3f/mTZ213 ePzr7PyJk5terF038mQsjQHqa0ENAJvaJCEA5ka79ELvvh5gXl2OqlqOyuLBTlDY XTaVcXht6VWVeF8+GvbZLhGJgzd+JvXd/B9D0cWC2KjEVOvvfTr+IhtqoNQ2n83a t6XnHl+odGXfyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:44 2025 by rpki-client