This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json) Hash identifier: /xDnqiC2pq6atItDSE9PSi/dj/X+Gw3pEG+GIciXHA0= Subject key identifier: B5:5F:9A:45:0A:1E:21:6D:FB:8C:CA:BA:1F:2A:3B:07:31:DD:FD:94 Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac Certificate serial: 019AF208A82E0E8DC269D2FB31495BE0E1C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft Manifest number: 05A4 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: pN91KJI/GQD0eRzKt8XhTI2YFGoA/agXpSdXaq8OL0I=) 2: c_JE84x-V2cV3KZFySyzgUu68wY.roa (hash: mJ5axd73qhrQA8e697fkmyMkcOmN3YmgqnGx7qbzQIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a8:2e:0e:8d:c2:69:d2:fb:31:49:5b:e0:e1:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=b55f9a450a1e216dfb8ccaba1f2a3b0731ddfd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:fe:ad:4e:78:9c:11:c1:a8:38:bd:15:c8: 07:1e:92:f5:5d:c6:e1:85:4a:c9:9a:eb:86:2e:58: 6a:f0:59:fc:14:4f:02:ee:ac:e4:ec:a0:70:19:29: 95:d5:30:a8:51:f2:48:33:4e:b3:d7:b0:81:72:63: 07:e9:a6:ae:26:23:0a:2d:e1:90:77:4b:3e:c9:d0: c4:5a:cb:92:72:2f:a2:78:9f:f9:ae:42:9f:12:72: 99:72:d2:36:38:f0:e0:59:ad:02:ca:6d:ea:16:aa: 68:1c:02:25:0d:23:13:5e:b5:33:c5:ff:37:4b:d8: f4:12:a8:88:12:d3:59:e5:ca:3b:12:1e:57:0a:ff: 56:91:b7:c9:4d:61:37:e0:06:c4:95:e6:76:b2:0d: f2:4b:44:d0:27:45:72:1c:93:20:fd:79:eb:4e:71: 88:78:fa:db:ff:6b:18:62:c2:43:d3:17:af:41:3c: 6b:ba:17:52:a3:03:c3:ab:a9:24:1c:fb:6f:71:c1: 3c:fc:9a:28:ad:5e:75:74:57:1b:08:9e:9d:20:61: 1f:40:56:7b:1b:16:a6:7b:70:1d:10:b0:0d:de:6c: 46:46:c4:0e:f2:93:b2:bd:9d:19:21:32:9b:43:22: 2b:87:28:e2:1a:8d:97:6e:88:fa:b2:74:fb:00:5e: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5F:9A:45:0A:1E:21:6D:FB:8C:CA:BA:1F:2A:3B:07:31:DD:FD:94 X509v3 Authority Key Identifier: keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:33:56:b6:eb:e8:2d:86:5f:19:0c:94:2d:31:76:7e:50:55: 4b:3c:6f:67:54:f1:a4:87:45:ee:4f:b8:e9:93:11:4b:cd:f6: ab:f5:94:27:1e:3b:d7:2b:b3:d6:27:04:64:5c:91:fc:5f:02: 37:fb:96:ce:2a:18:4f:ce:c8:24:56:49:77:d9:5e:4b:6c:a3: ae:af:32:86:28:be:71:a5:98:f4:37:fb:d6:73:ce:f2:62:de: 53:4a:85:75:66:ab:05:17:1e:c9:38:66:76:af:9e:02:ba:d2: 3a:c1:0e:06:38:79:d8:df:25:c2:2f:43:79:34:c2:c0:35:5f: 48:48:88:af:31:2c:b2:08:f1:d8:e5:2d:01:ee:67:ed:7e:f0: e8:cd:d7:cb:71:2b:bd:12:c5:2d:b4:be:3e:0b:1b:ff:49:00: 3c:4a:ed:81:e6:48:d1:de:7f:a6:09:ca:3d:2f:29:14:3a:4d: a2:e5:64:cb:18:90:6d:e1:82:45:61:c4:44:7c:d1:71:45:48: 4d:ff:1f:90:35:60:9c:af:65:a3:04:27:61:5e:91:33:e6:5e: 81:2d:79:bb:fc:51:ff:2a:70:57:70:8a:92:93:8c:17:01:98: a1:28:9f:d9:97:db:80:e6:76:a8:62:5b:11:ee:34:ae:5e:6a: ef:93:3d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKguDo3CadL7MUlb4OHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNDA0NTRhMWIxNzY3OTVmMDIxNTc1MzQ3Nzk0YmQ5ZjA0 NDI3YWMwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EyhiNTVmOWE0NTBhMWUyMTZkZmI4Y2NhYmExZjJhM2IwNzMxZGRmZDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCj+rU54nBHBqDi9FcgHHpL1Xcbh hUrJmuuGLlhq8Fn8FE8C7qzk7KBwGSmV1TCoUfJIM06z17CBcmMH6aauJiMKLeGQ d0s+ydDEWsuSci+ieJ/5rkKfEnKZctI2OPDgWa0Cym3qFqpoHAIlDSMTXrUzxf83 S9j0EqiIEtNZ5co7Eh5XCv9WkbfJTWE34AbEleZ2sg3yS0TQJ0VyHJMg/XnrTnGI ePrb/2sYYsJD0xevQTxruhdSowPDq6kkHPtvccE8/JoorV51dFcbCJ6dIGEfQFZ7 Gxame3AdELAN3mxGRsQO8pOyvZ0ZITKbQyIrhyjiGo2Xboj6snT7AF6OBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVfmkUKHiFt+4zKuh8qOwcx3f2UMB8GA1UdIwQY MBaAFFxARUobF2eV8CFXU0d5S9nwRCesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEVCRlNoc1haNVh3SVZkVFIzbEwyZkJFSjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zYzM2N2EtMWY5Yi00YzkyLTg5Nzgt Y2EwNDQ4ZTdmM2EzLzEvWEVCRlNoc1haNVh3SVZkVFIzbEwyZkJFSjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8zYzM2N2EtMWY5Yi00YzkyLTg5NzgtY2EwNDQ4ZTdmM2Ez LzEvWEVCRlNoc1haNVh3SVZkVFIzbEwyZkJFSjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzNWtuvo LYZfGQyULTF2flBVSzxvZ1TxpIdF7k+46ZMRS832q/WUJx471yuz1icEZFyR/F8C N/uWzioYT87IJFZJd9leS2yjrq8yhii+caWY9Df71nPO8mLeU0qFdWarBRceyThm dq+eArrSOsEOBjh52N8lwi9DeTTCwDVfSEiIrzEssgjx2OUtAe5n7X7w6M3Xy3Er vRLFLbS+Pgsb/0kAPErtgeZI0d5/pgnKPS8pFDpNouVkyxiQbeGCRWHERHzRcUVI Tf8fkDVgnK9lowQnYV6RM+ZegS15u/xR/ypwV3CKkpOMFwGYoSif2ZfbgOZ2qGJb Ee40rl5q75M9Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:01 2025 by rpki-client