This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json) Hash identifier: rRDTni2miNVwpBJNqlJ/eNXijzD3Y0nRACH0xs61PLM= Subject key identifier: 52:AB:11:0C:18:C1:4E:41:14:FC:24:F6:2F:28:3F:32:19:68:E0:D9 Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Certificate serial: 019B307996704D87B277093165036D0FBA57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft Manifest number: 13B9 Signing time: Thu 18 Dec 2025 08:00:33 +0000 Manifest this update: Thu 18 Dec 2025 08:00:33 +0000 Manifest next update: Fri 19 Dec 2025 08:00:33 +0000 Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=) 2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=) 3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=) 4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: vnRS87CWPlA/N0p1BFqxbEk2cPNRMwmskK/gCYXZTw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 08:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:96:70:4d:87:b2:77:09:31:65:03:6d:0f:ba:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Validity Not Before: Dec 18 08:00:33 2025 GMT Not After : Dec 19 08:00:33 2025 GMT Subject: CN=52ab110c18c14e4114fc24f62f283f321968e0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b1:12:53:0e:ce:90:81:2a:87:73:b3:6c:bb: 40:bf:a8:3f:bb:f8:e4:2a:ec:22:30:fa:7f:cc:cd: 18:7e:cd:4e:44:fe:f6:55:e7:32:96:8e:d9:b7:18: 5c:b9:08:69:15:84:38:e8:63:48:30:09:dd:6c:13: 2c:4f:d5:ba:5f:66:0b:44:85:0b:b7:e8:ba:18:08: 6b:d3:a7:f1:97:3b:13:52:f6:eb:98:d8:24:b3:da: 5c:eb:4b:5a:29:fb:be:c6:d6:73:d3:28:72:69:98: 44:37:11:e7:14:4f:2e:a9:72:65:68:86:18:8d:c4: d4:e8:f1:5b:f9:05:2c:43:b6:3c:85:29:5c:e5:c9: 61:22:96:9e:d4:36:19:24:2a:42:76:a5:93:15:03: aa:5e:1a:e8:ca:ed:83:f1:4d:b1:19:31:ca:04:70: df:89:fb:ab:e8:df:67:99:01:ee:31:18:f0:b6:78: 7f:f3:1a:c7:8e:71:2c:e2:45:6c:60:bf:72:fb:b6: 38:58:94:03:9a:bc:7b:f1:a8:09:a8:d9:60:51:40: be:38:8a:6b:fe:9d:68:83:2a:c2:6c:9e:3b:f5:63: 76:f3:e4:b0:21:66:6a:b6:91:c6:67:d9:a2:b1:be: b7:6f:25:2b:58:ed:4c:e0:44:60:69:de:b7:e1:10: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:AB:11:0C:18:C1:4E:41:14:FC:24:F6:2F:28:3F:32:19:68:E0:D9 X509v3 Authority Key Identifier: keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6f:9e:f4:43:ba:56:ba:3c:da:cf:1c:c8:dd:de:96:88:22: f7:da:aa:93:cb:24:28:0e:61:de:09:7b:6f:71:05:82:c5:51: 99:a3:26:11:77:87:c1:ac:98:7f:be:31:10:cd:98:66:ce:c7: 8e:aa:14:82:91:6c:35:25:51:9d:01:b2:ad:cb:ad:ef:03:ad: 48:0f:ba:9e:1f:9b:bd:9d:14:9d:4b:d4:73:5a:21:c9:59:45: 09:ec:b8:4d:94:2c:d7:14:45:cf:da:fb:d6:dc:01:48:3c:ab: 82:5a:57:7d:2e:42:bd:4f:14:00:54:c2:bf:f4:e3:ba:1c:2f: 52:4c:32:37:95:0f:f9:68:a5:76:9c:c5:5d:27:f5:7c:4d:ff: ce:24:ae:47:7c:d6:98:40:0d:10:1e:4e:cb:5e:b1:e7:fc:fc: 34:f5:4f:73:21:12:43:39:1e:76:6c:4e:3e:b2:83:3d:30:6d: c1:f5:b1:5b:d8:23:b9:18:b2:70:48:83:08:86:84:bc:5f:e8: 32:f9:a9:84:2b:6b:c9:71:b3:74:42:21:a9:40:ec:90:89:a0: 27:6f:87:de:47:1f:2e:ff:00:71:3a:cf:af:39:0b:78:e5:31: 37:13:1f:7c:99:16:61:6e:01:52:11:b8:a4:77:f4:bc:e9:c1: e8:26:41:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweZZwTYeydwkxZQNtD7pXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi MDJhMzcwHhcNMjUxMjE4MDgwMDMzWhcNMjUxMjE5MDgwMDMzWjAzMTEwLwYDVQQD Eyg1MmFiMTEwYzE4YzE0ZTQxMTRmYzI0ZjYyZjI4M2YzMjE5NjhlMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LESUw7OkIEqh3OzbLtAv6g/u/jk KuwiMPp/zM0Yfs1ORP72Vecylo7ZtxhcuQhpFYQ46GNIMAndbBMsT9W6X2YLRIUL t+i6GAhr06fxlzsTUvbrmNgks9pc60taKfu+xtZz0yhyaZhENxHnFE8uqXJlaIYY jcTU6PFb+QUsQ7Y8hSlc5clhIpae1DYZJCpCdqWTFQOqXhroyu2D8U2xGTHKBHDf ifur6N9nmQHuMRjwtnh/8xrHjnEs4kVsYL9y+7Y4WJQDmrx78agJqNlgUUC+OIpr /p1ogyrCbJ479WN28+SwIWZqtpHGZ9misb63byUrWO1M4ERgad634RC4UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKrEQwYwU5BFPwk9i8oPzIZaODZMB8GA1UdIwQY MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4 LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQm+e9EO6 Vro82s8cyN3elogi99qqk8skKA5h3gl7b3EFgsVRmaMmEXeHwayYf74xEM2YZs7H jqoUgpFsNSVRnQGyrcut7wOtSA+6nh+bvZ0UnUvUc1ohyVlFCey4TZQs1xRFz9r7 1twBSDyrglpXfS5CvU8UAFTCv/TjuhwvUkwyN5UP+WildpzFXSf1fE3/ziSuR3zW mEANEB5Oy16x5/z8NPVPcyESQzkedmxOPrKDPTBtwfWxW9gjuRiycEiDCIaEvF/o MvmphCtryXGzdEIhqUDskImgJ2+H3kcfLv8AcTrPrzkLeOUxNxMffJkWYW4BUhG4 pHf0vOnB6CZBrw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:43:34 2025 by rpki-client