This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft File: XvExXDySOejh9KoMWwdDw9pdd-M.mft (raw, json) Hash identifier: mbyTmB3cLRztNMPge40bzed/vnGKYfoK4FpArAUZX6k= Subject key identifier: 23:2B:65:99:64:A9:4A:E7:8F:87:05:2F:2C:9F:B7:5D:E4:5B:C4:5B Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3 Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3 Certificate serial: 019AF20901BEB97F71EC61020719FB0C50FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft Manifest number: 05E0 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: XvExXDySOejh9KoMWwdDw9pdd-M.crl (hash: 87O3kLtVgknNqbB4EgYYJhkmuPbfsOTRpukzWvvWMFc=) 2: gGyzNC_bO6Lle8RV5kXmkWpg5Y4.roa (hash: WigIW2pDhkOgLUWTO5MtPBxTx3psT/+PtJTxxfI1/hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:01:be:b9:7f:71:ec:61:02:07:19:fb:0c:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=232b659964a94ae78f87052f2c9fb75de45bc45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:c1:9d:ef:89:9b:95:4d:41:b1:a2:29:72: cf:a2:74:ce:12:b9:ed:9b:2a:8b:0b:40:c7:1b:9f: d3:99:52:88:07:a8:d2:c6:49:50:ae:53:f7:95:c1: 16:ac:95:f1:38:61:63:92:3c:f7:8c:e1:0d:da:15: 8e:14:e6:ef:8c:98:74:04:d4:03:fa:48:d8:8e:73: 15:7d:c2:6e:2a:d8:71:75:a1:15:93:10:a5:2c:36: 5c:30:f8:0c:c1:cb:08:2e:20:56:a7:95:7e:09:55: 57:f4:94:80:be:37:f1:48:39:e4:b8:22:f2:b8:e5: a7:0f:95:38:f5:2c:38:cb:27:d4:78:50:bd:77:9f: f4:a9:f3:9e:cd:1d:03:e8:61:a9:2f:bb:95:77:40: 72:83:28:1e:d0:a7:6d:7e:00:7b:4b:90:77:3d:e6: 52:1e:fd:06:6f:7b:a2:88:e2:08:b1:08:d5:d6:ec: 03:75:e8:b0:6f:53:18:be:e7:8f:a3:0c:17:3f:3a: c6:bd:39:92:13:a9:b4:99:cf:31:4c:c2:6a:47:7d: d6:48:36:96:8a:66:2d:ab:12:bc:fa:29:0a:f7:dc: 17:b2:7c:29:c4:03:a6:2f:f9:11:85:ae:2e:fd:83: c7:14:43:63:4e:12:7e:97:24:c7:68:a9:7a:c7:e1: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:65:99:64:A9:4A:E7:8F:87:05:2F:2C:9F:B7:5D:E4:5B:C4:5B X509v3 Authority Key Identifier: keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f3:d5:db:b9:19:0d:5c:eb:0e:5c:98:77:62:dc:b2:9d:22: 75:2e:f8:c2:9b:7e:51:75:8a:4f:74:a5:0c:0b:62:c6:b3:a9: 9f:5a:24:c1:23:1d:37:6e:da:ff:af:ce:b1:7d:80:22:cb:38: d0:a9:4a:f3:eb:83:d5:54:e4:16:91:f3:4a:4a:b4:6f:0f:c7: a9:49:4c:4f:b6:92:27:e7:ff:8d:b9:02:5c:c3:cd:80:bc:d6: fe:7b:4f:0b:22:45:c7:ba:d1:13:9a:9e:71:77:92:00:c3:51: 1b:3d:50:4a:3e:95:93:c0:ba:f6:c3:20:a0:30:24:0f:34:56: 33:63:9a:dd:be:6e:82:e9:94:53:8b:09:0a:b1:50:56:35:44: 5c:10:c8:f4:11:a2:2f:1e:82:ca:ab:82:0a:b1:4b:c2:5a:33: 42:96:b9:a6:2d:2e:87:02:75:80:78:55:2e:e8:ba:81:29:46: a1:03:b2:8f:3e:7b:8e:93:de:d3:11:17:15:c7:40:b7:1c:c2: bc:ed:00:97:f8:af:5c:ff:bb:ce:24:ab:55:55:a7:b1:05:2f: 87:6d:62:c1:99:05:02:5d:aa:be:aa:35:2b:5f:ad:91:4e:b0: 70:eb:55:45:b9:09:a6:02:24:dd:ce:5d:90:8b:cc:33:27:95: 90:26:a9:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQG+uX9x7GECBxn7DFD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZjEzMTVjM2M5MjM5ZThlMWY0YWEwYzViMDc0M2MzZGE1 ZDc3ZTMwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EygyMzJiNjU5OTY0YTk0YWU3OGY4NzA1MmYyYzlmYjc1ZGU0NWJjNDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIDBne+Jm5VNQbGiKXLPonTOErnt myqLC0DHG5/TmVKIB6jSxklQrlP3lcEWrJXxOGFjkjz3jOEN2hWOFObvjJh0BNQD +kjYjnMVfcJuKthxdaEVkxClLDZcMPgMwcsILiBWp5V+CVVX9JSAvjfxSDnkuCLy uOWnD5U49Sw4yyfUeFC9d5/0qfOezR0D6GGpL7uVd0Bygyge0KdtfgB7S5B3PeZS Hv0Gb3uiiOIIsQjV1uwDdeiwb1MYvuePowwXPzrGvTmSE6m0mc8xTMJqR33WSDaW imYtqxK8+ikK99wXsnwpxAOmL/kRha4u/YPHFENjThJ+lyTHaKl6x+ErRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMrZZlkqUrnj4cFLyyft13kW8RbMB8GA1UdIwQY MBaAFF7xMVw8kjno4fSqDFsHQ8PaXXfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82N2MzZWEtZWQ2YS00YzI5LWExYWMt OGE4YTdmZmRkOWZkLzEvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS82N2MzZWEtZWQ2YS00YzI5LWExYWMtOGE4YTdmZmRkOWZk LzEvWHZFeFhEeVNPZWpoOUtvTVd3ZER3OXBkZC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifPV27kZ DVzrDlyYd2Lcsp0idS74wpt+UXWKT3SlDAtixrOpn1okwSMdN27a/6/OsX2AIss4 0KlK8+uD1VTkFpHzSkq0bw/HqUlMT7aSJ+f/jbkCXMPNgLzW/ntPCyJFx7rRE5qe cXeSAMNRGz1QSj6Vk8C69sMgoDAkDzRWM2Oa3b5ugumUU4sJCrFQVjVEXBDI9BGi Lx6CyquCCrFLwlozQpa5pi0uhwJ1gHhVLui6gSlGoQOyjz57jpPe0xEXFcdAtxzC vO0Al/ivXP+7ziSrVVWnsQUvh21iwZkFAl2qvqo1K1+tkU6wcOtVRbkJpgIk3c5d kIvMMyeVkCapMg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:55 2025 by rpki-client