This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json) Hash identifier: tVIn4Y9GcMdvVPQ6AlbM8Rx34As1alI9oKjaC0gPq1Q= Subject key identifier: 80:E0:18:18:EB:B0:A6:A8:9B:F9:4A:97:A0:2E:DB:48:55:DC:EF:8C Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Certificate serial: 019AF2ADD2A23E252746A20F91091D7E4435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: SohsxVb4_Kx1Rps6s6KZFGiAlBo.roa (hash: DpkDv9v2RNex84dWsyB/0UohYl+9Px9l3sMzjXNHWcY=) 2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: TSPKFocBbgkr0dMq6RKOoUXFIYpsmFzchtEwzLzhG74=) 3: er13LyaEEpybrKtiNYKCEMG-QS8.roa (hash: aEnyWiHyU9gmwh/2jnL5BvTsMw/v/0bYu8DgEkcY+S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d2:a2:3e:25:27:46:a2:0f:91:09:1d:7e:44:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=80e01818ebb0a6a89bf94a97a02edb4855dcef8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:f6:79:5d:f6:cc:dd:c9:4f:43:7f:9d:83: d6:36:a0:fd:dd:27:cc:c0:b2:1d:68:99:97:90:6f: a7:c7:20:1d:05:dc:32:7a:fb:d9:ff:ac:59:ae:82: 62:f5:ac:07:72:ae:7c:26:14:80:b9:71:29:bd:8d: 5c:02:c2:fb:0b:03:80:bc:0b:04:68:8f:1d:91:1d: fb:ca:8f:4c:2a:e8:42:9f:28:ba:bd:89:16:7a:b4: 24:e7:52:f0:da:95:c4:3e:ae:99:a6:dc:75:de:03: 12:99:89:cc:ec:58:fc:0c:6d:fc:89:d8:c9:dc:c2: c2:a5:53:76:dc:7b:96:9d:69:78:41:4b:3e:08:6b: 40:07:e0:d2:76:65:42:d3:3f:d7:d1:7d:7e:79:8f: 27:ea:f0:a5:7b:75:a6:d8:25:b6:dc:19:30:da:b4: fb:e8:26:77:72:77:2f:c2:ad:c6:a5:e1:a3:14:0c: ae:90:d2:e2:4f:5d:b6:75:71:ec:43:ee:6a:8f:01: 86:bf:2c:c8:f6:5a:b5:9a:a7:07:94:60:47:63:d7: 5e:aa:e9:09:16:e8:5e:9b:db:ea:07:eb:07:dd:5a: 15:ee:ae:e0:88:c8:94:b3:e9:12:14:75:76:36:aa: 82:72:68:32:29:e1:71:40:ae:a7:e1:e6:dd:02:b5: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E0:18:18:EB:B0:A6:A8:9B:F9:4A:97:A0:2E:DB:48:55:DC:EF:8C X509v3 Authority Key Identifier: keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5a:e4:d6:8b:b2:b1:63:f6:40:76:75:5e:98:ba:f1:84:cc: 9d:59:86:f1:7b:ca:c3:3f:09:3c:40:02:49:3f:b6:ca:ca:f4: f3:14:e4:40:84:d2:c9:09:61:05:46:da:8d:f8:c0:87:87:60: e3:91:10:f8:7e:45:15:86:1a:b4:87:4a:7f:37:83:e0:7a:20: 06:c0:4c:c8:38:6c:88:7a:99:bd:97:15:c3:11:28:2c:84:1f: 7a:d6:dc:3c:19:09:4e:33:c1:4e:b6:13:87:be:9c:90:90:f8: 9a:f7:06:41:2a:f5:66:38:e3:5e:bc:72:b8:ee:94:5f:c4:5e: ff:fd:6e:4a:e9:31:87:03:cc:e9:96:9f:c4:0b:25:3c:d2:e4: 84:38:6b:8d:f7:33:a1:bd:9d:9d:74:ef:4e:16:e5:bf:2a:00: e9:88:bf:3c:7b:9f:25:97:b5:bf:45:5c:92:4a:0a:a7:f7:61: 04:3d:cb:d5:43:1b:01:53:62:8d:37:7f:db:47:1f:5d:8f:12: d7:fa:71:fb:6b:6c:71:ac:4c:58:4f:22:84:48:45:f9:9f:32: c1:30:5f:1d:c3:39:b5:f5:61:b3:e8:25:f3:d2:59:39:6f:8c: ee:b4:f3:45:45:84:d5:93:d2:51:32:09:aa:05:24:19:c3:49: fb:13:d3:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdKiPiUnRqIPkQkdfkQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTI5YjA0NjBjZjllZTA1MDBlZTg4MGEyY2ZhMWE1MjRl NGRmMDAwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD Eyg4MGUwMTgxOGViYjBhNmE4OWJmOTRhOTdhMDJlZGI0ODU1ZGNlZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQn2eV32zN3JT0N/nYPWNqD93SfM wLIdaJmXkG+nxyAdBdwyevvZ/6xZroJi9awHcq58JhSAuXEpvY1cAsL7CwOAvAsE aI8dkR37yo9MKuhCnyi6vYkWerQk51Lw2pXEPq6Zptx13gMSmYnM7Fj8DG38idjJ 3MLCpVN23HuWnWl4QUs+CGtAB+DSdmVC0z/X0X1+eY8n6vCle3Wm2CW23Bkw2rT7 6CZ3cncvwq3GpeGjFAyukNLiT122dXHsQ+5qjwGGvyzI9lq1mqcHlGBHY9dequkJ Fuhem9vqB+sH3VoV7q7giMiUs+kSFHV2NqqCcmgyKeFxQK6n4ebdArWowwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDgGBjrsKaom/lKl6Au20hV3O+MMB8GA1UdIwQY MBaAFF0SmwRgz57gUA7ogKLPoaUk5N8AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEt YTg3N2RkNTFiYzQ5LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi84NTU3ZTAtMzY4ZC00ZDhlLTk3NDEtYTg3N2RkNTFiYzQ5 LzEvWFJLYkJHRFBudUJRRHVpQW9zLWhwU1RrM3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFrk1ouy sWP2QHZ1Xpi68YTMnVmG8XvKwz8JPEACST+2ysr08xTkQITSyQlhBUbajfjAh4dg 45EQ+H5FFYYatIdKfzeD4HogBsBMyDhsiHqZvZcVwxEoLIQfetbcPBkJTjPBTrYT h76ckJD4mvcGQSr1ZjjjXrxyuO6UX8Re//1uSukxhwPM6ZafxAslPNLkhDhrjfcz ob2dnXTvThblvyoA6Yi/PHufJZe1v0VckkoKp/dhBD3L1UMbAVNijTd/20cfXY8S 1/px+2tscaxMWE8ihEhF+Z8ywTBfHcM5tfVhs+gl89JZOW+M7rTzRUWE1ZPSUTIJ qgUkGcNJ+xPT1A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:47 2025 by rpki-client