This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json) Hash identifier: Dcu1W4G41qvLGQNWwQ+7Rgs/FD45tscdjCUnuoz0nGM= Subject key identifier: 8C:B3:E4:00:35:3D:E3:B0:AD:6B:13:5D:90:30:60:35:75:CA:45:C1 Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Certificate serial: 019AF31CB6FB875C1E38A05FEE3D94E0B174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft Manifest number: 0D1D Signing time: Sat 06 Dec 2025 10:02:16 +0000 Manifest this update: Sat 06 Dec 2025 10:02:16 +0000 Manifest next update: Sun 07 Dec 2025 10:02:16 +0000 Files and hashes: 1: XFE7vlLQBmzJZc1l5vHs4bwPMqc.roa (hash: qLSFKwb/lB7qwkyIoSUv9XJpnCetif9CbXA/zmT2Trc=) 2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: wifq6S2AUC3NnpPJpmO/l9gGKIGWYN5JdAsKhFkrhnQ=) 3: eg48StlWCUn7X3RwRMM9IyTvRbk.roa (hash: GtElILT2eBg2EORjHkOJ3T4qKsc3NbDsadrpgQ1LlKY=) 4: wg5YIR4Y9RixLNkQqF7w7wmBrEw.roa (hash: 1MuzEvANE56SuPGyGU0hUCAeP9aNoicfYJymGmBNFKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b6:fb:87:5c:1e:38:a0:5f:ee:3d:94:e0:b1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45 Validity Not Before: Dec 6 10:02:16 2025 GMT Not After : Dec 7 10:02:16 2025 GMT Subject: CN=8cb3e400353de3b0ad6b135d9030603575ca45c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ec:d8:e2:45:ca:b1:ba:7b:7d:34:c0:3d:38: 82:8d:8b:d7:27:14:bf:b3:70:81:ba:2e:19:45:ce: c7:cf:b6:f4:7d:a0:f6:53:9e:f3:fc:83:d4:57:af: 0b:51:c3:04:38:7e:8e:27:74:17:32:72:e2:7e:0a: e1:ff:74:77:ea:94:7c:7a:4a:d2:1a:6c:ec:22:0d: de:13:8d:a4:d3:54:1d:b2:19:50:eb:08:b2:81:77: 6b:5e:9a:b0:88:12:d0:18:ca:c1:a7:6d:9d:40:27: 03:de:68:45:f7:3f:d4:e2:63:da:f7:c4:64:9c:be: 23:aa:9c:55:4a:8f:43:2b:68:67:29:b4:57:d2:5e: fa:87:10:c2:c9:c1:ae:ee:08:a4:b5:dd:0d:0c:e4: 75:94:d1:83:dd:43:17:7a:44:00:19:6b:54:80:a7: 55:81:f6:1e:9b:c7:3a:6f:9b:0b:87:91:1e:de:07: 46:60:90:64:8a:34:01:1f:c1:b9:1e:21:52:fe:c8: cd:4c:91:c9:c7:36:93:5e:77:5c:ac:c6:5d:ae:2b: bd:d5:14:fe:7e:ad:8b:57:56:35:54:c6:f7:c5:6e: 6f:55:81:a3:25:a1:50:6c:7e:a2:c9:11:c8:3b:72: 82:ae:f1:e7:ff:5a:fe:96:c6:43:94:f1:7a:d8:b8: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B3:E4:00:35:3D:E3:B0:AD:6B:13:5D:90:30:60:35:75:CA:45:C1 X509v3 Authority Key Identifier: keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b2:6e:e6:86:b4:a3:bd:8c:fe:75:d4:67:e2:bc:90:4e:3f: 9e:75:32:fb:d8:ab:32:08:98:6c:53:84:28:c1:6a:ae:72:68: 2f:42:4d:06:f3:9c:6b:4d:04:5c:ed:a4:ad:c1:1b:04:31:01: d0:e7:c4:54:28:83:11:d7:e7:d6:ec:72:92:c6:ed:df:ec:93: b8:6b:eb:7f:e5:65:b2:94:0d:66:84:2e:d2:da:44:90:ef:57: 65:d8:e2:49:ed:be:1e:05:08:39:b2:ef:f8:14:47:00:93:8a: d5:04:a6:bb:be:39:0d:df:c4:75:5f:13:ae:f8:e2:23:f4:43: 38:2b:e3:7e:6d:eb:1d:06:ed:6c:b5:a9:bd:a8:51:32:fe:b3: 34:7c:fa:ab:db:06:f5:d2:33:79:3e:8d:99:f0:50:b9:bc:67: 3b:d0:a6:cd:e6:62:de:67:64:e6:a2:29:92:5f:13:99:19:75: a7:f2:91:34:5e:e8:ba:db:e5:a3:58:ca:9e:65:53:1e:7d:6d: bd:7f:f7:2d:b7:f1:7b:be:f0:d1:e9:af:ff:56:32:d8:94:42: 1a:b3:ed:76:a2:d5:b1:ee:cd:1e:b2:12:11:d2:67:0f:24:52: e5:7f:08:d6:95:aa:97:2b:96:98:61:0d:c2:6f:cd:e6:42:db: c8:64:c3:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLb7h1weOKBf7j2U4LF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYjkwZmQ2MmJjYzBmZTkyOWRhZTUzMDM2ZmM1NWU1MTFj NTRiNDUwHhcNMjUxMjA2MTAwMjE2WhcNMjUxMjA3MTAwMjE2WjAzMTEwLwYDVQQD Eyg4Y2IzZTQwMDM1M2RlM2IwYWQ2YjEzNWQ5MDMwNjAzNTc1Y2E0NWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ezY4kXKsbp7fTTAPTiCjYvXJxS/ s3CBui4ZRc7Hz7b0faD2U57z/IPUV68LUcMEOH6OJ3QXMnLifgrh/3R36pR8ekrS GmzsIg3eE42k01QdshlQ6wiygXdrXpqwiBLQGMrBp22dQCcD3mhF9z/U4mPa98Rk nL4jqpxVSo9DK2hnKbRX0l76hxDCycGu7giktd0NDOR1lNGD3UMXekQAGWtUgKdV gfYem8c6b5sLh5Ee3gdGYJBkijQBH8G5HiFS/sjNTJHJxzaTXndcrMZdriu91RT+ fq2LV1Y1VMb3xW5vVYGjJaFQbH6iyRHIO3KCrvHn/1r+lsZDlPF62LjcKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyz5AA1PeOwrWsTXZAwYDV1ykXBMB8GA1UdIwQY MBaAFFy5D9YrzA/pKdrlMDb8VeURxUtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUt OTUxMzVkYWY1MTQ3LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZGFjNzMtZDdjNy00MGJiLWFiNTUtOTUxMzVkYWY1MTQ3 LzEvWExrUDFpdk1ELWtwMnVVd052eFY1UkhGUzBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbJu5oa0 o72M/nXUZ+K8kE4/nnUy+9irMgiYbFOEKMFqrnJoL0JNBvOca00EXO2krcEbBDEB 0OfEVCiDEdfn1uxyksbt3+yTuGvrf+VlspQNZoQu0tpEkO9XZdjiSe2+HgUIObLv +BRHAJOK1QSmu745Dd/EdV8TrvjiI/RDOCvjfm3rHQbtbLWpvahRMv6zNHz6q9sG 9dIzeT6NmfBQubxnO9CmzeZi3mdk5qIpkl8TmRl1p/KRNF7outvlo1jKnmVTHn1t vX/3Lbfxe77w0emv/1Yy2JRCGrPtdqLVse7NHrISEdJnDyRS5X8I1pWqlyuWmGEN wm/N5kLbyGTDsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:28 2025 by rpki-client