This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json) Hash identifier: fgXid5C2SZFQQTWGmV8cvkAjthAqn728MvcXfWXLtCg= Subject key identifier: 7B:9B:11:A2:D1:4B:D1:94:49:7D:33:C0:31:04:F1:1B:3A:B3:15:8D Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Certificate serial: 019B262DE784A671437A9A4946D9E77CA843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft Manifest number: 0D2E Signing time: Tue 16 Dec 2025 08:01:41 +0000 Manifest this update: Tue 16 Dec 2025 08:01:41 +0000 Manifest next update: Wed 17 Dec 2025 08:01:41 +0000 Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: KoNh3dAapBjjHgbAudXBUnOZi1jjL3yuoreVy0RWNj0=) 2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:e7:84:a6:71:43:7a:9a:49:46:d9:e7:7c:a8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Validity Not Before: Dec 16 08:01:41 2025 GMT Not After : Dec 17 08:01:41 2025 GMT Subject: CN=7b9b11a2d14bd194497d33c03104f11b3ab3158d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cc:d3:5c:c5:34:e3:46:72:a4:a3:e4:a5:9f: 0b:f6:6b:c0:22:cc:3a:90:70:cb:bd:37:8a:18:e5: e9:47:5e:1a:90:07:b3:b0:38:4c:c9:d2:d1:46:6a: 8d:be:62:d2:1e:47:ff:7b:d4:1d:10:14:06:23:8d: 17:fe:a2:8c:1e:11:c4:af:f6:b8:d6:6c:58:be:97: 17:ae:4e:3f:d2:62:9c:2a:e4:63:b4:9d:cd:ae:aa: 5f:bb:02:8c:81:40:d9:16:06:93:30:e6:99:6f:f6: be:29:a6:90:8c:b7:93:74:99:ce:99:87:31:55:14: a5:0b:7c:a2:1d:65:76:a7:c1:f7:79:64:43:06:80: 38:59:cb:c0:c6:7a:9d:25:4e:67:6b:fb:e4:61:5b: ed:7c:23:ec:a4:a2:42:18:e0:b6:96:9f:d9:55:f1: 2f:90:0a:93:ca:76:7d:39:fe:2c:8b:1c:eb:9f:9b: 2f:e4:d3:c5:3d:f9:02:00:bd:c0:19:a6:ee:98:fd: 99:89:d8:6a:ae:b8:78:ec:b4:98:30:56:60:b8:2e: a8:d9:ce:d1:eb:f8:d9:da:a2:5c:a8:fd:be:7a:a9: e9:fb:f7:6e:d1:b6:54:27:4d:91:e4:aa:17:0c:f7: a7:25:0e:55:e8:ce:27:05:bd:08:13:59:91:70:84: 1e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:9B:11:A2:D1:4B:D1:94:49:7D:33:C0:31:04:F1:1B:3A:B3:15:8D X509v3 Authority Key Identifier: keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:0c:40:4e:2e:a4:81:73:b9:6a:d7:ef:e8:b3:e1:e7:a4:82: b0:39:08:12:c0:be:22:b4:e8:f6:fa:ae:34:00:d2:4f:bc:b9: 44:91:70:08:d3:a3:9c:03:c2:3a:28:a0:17:59:99:f7:60:06: e0:77:bf:56:56:9f:59:ee:11:df:b8:4f:7d:c3:f1:00:22:f4: 76:53:8a:10:85:ef:6d:03:f7:66:fd:f3:6e:53:0f:73:40:d1: a7:01:7e:07:bc:b5:fd:d3:a2:df:e8:2e:1e:50:41:d7:f2:b2: f8:eb:f0:0f:34:3e:0b:ed:d4:4b:0d:31:43:15:a8:26:9a:fe: e3:4f:ab:5f:22:9d:b3:cb:94:a0:3d:a1:c9:18:25:c3:77:51: f0:b4:d5:b5:84:85:eb:97:9f:55:2c:6b:5a:4a:f6:3a:b2:b0: e4:4c:41:e9:9a:07:6b:63:a9:05:2b:53:67:70:c0:ee:26:22: 71:dc:b6:ad:9e:e9:c5:ee:f4:87:79:09:5c:e7:30:7c:28:21: 87:2d:25:95:fc:26:17:67:cb:d7:ed:4b:3a:5a:51:d6:fb:4c: 70:cb:a1:a0:bb:50:71:34:1b:fa:6e:6d:cd:11:27:33:e3:83: 2b:71:d8:5a:23:c7:6a:8b:0e:db:84:3d:32:70:b6:79:1b:be: d3:07:7a:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLeeEpnFDeppJRtnnfKhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh YWMyZDkwHhcNMjUxMjE2MDgwMTQxWhcNMjUxMjE3MDgwMTQxWjAzMTEwLwYDVQQD Eyg3YjliMTFhMmQxNGJkMTk0NDk3ZDMzYzAzMTA0ZjExYjNhYjMxNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMzTXMU040ZypKPkpZ8L9mvAIsw6 kHDLvTeKGOXpR14akAezsDhMydLRRmqNvmLSHkf/e9QdEBQGI40X/qKMHhHEr/a4 1mxYvpcXrk4/0mKcKuRjtJ3NrqpfuwKMgUDZFgaTMOaZb/a+KaaQjLeTdJnOmYcx VRSlC3yiHWV2p8H3eWRDBoA4WcvAxnqdJU5na/vkYVvtfCPspKJCGOC2lp/ZVfEv kAqTynZ9Of4sixzrn5sv5NPFPfkCAL3AGabumP2Zidhqrrh47LSYMFZguC6o2c7R 6/jZ2qJcqP2+eqnp+/du0bZUJ02R5KoXDPenJQ5V6M4nBb0IE1mRcIQeEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHubEaLRS9GUSX0zwDEE8Rs6sxWNMB8GA1UdIwQY MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwxATi6k gXO5atfv6LPh56SCsDkIEsC+IrTo9vquNADST7y5RJFwCNOjnAPCOiigF1mZ92AG 4He/VlafWe4R37hPfcPxACL0dlOKEIXvbQP3Zv3zblMPc0DRpwF+B7y1/dOi3+gu HlBB1/Ky+OvwDzQ+C+3USw0xQxWoJpr+40+rXyKds8uUoD2hyRglw3dR8LTVtYSF 65efVSxrWkr2OrKw5ExB6ZoHa2OpBStTZ3DA7iYicdy2rZ7pxe70h3kJXOcwfCgh hy0llfwmF2fL1+1LOlpR1vtMcMuhoLtQcTQb+m5tzREnM+ODK3HYWiPHaosO24Q9 MnC2eRu+0wd6JA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:49:19 2025 by rpki-client