This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json) Hash identifier: kzuWLM2oTunY4wBWQv8UABcv8ZOT/qadSWmgYYEv52Y= Subject key identifier: 15:C1:32:CD:57:7D:28:CF:A4:1F:4F:3E:57:15:2A:80:6C:A3:C5:57 Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Certificate serial: 019AF12ED899DACBF11228E862D757977236 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:50 +0000 Manifest this update: Sat 06 Dec 2025 01:02:50 +0000 Manifest next update: Sun 07 Dec 2025 01:02:50 +0000 Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=) 2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: cyPXYSmVzOmhlCD/dJxfEVTbL+k5e1mqT5pC6eEhNr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d8:99:da:cb:f1:12:28:e8:62:d7:57:97:72:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Validity Not Before: Dec 6 01:02:50 2025 GMT Not After : Dec 7 01:02:50 2025 GMT Subject: CN=15c132cd577d28cfa41f4f3e57152a806ca3c557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:56:22:f0:9b:50:14:d5:76:84:d7:5d:31: f4:66:18:f9:65:19:74:37:80:2c:87:6a:e3:c8:e9: 74:36:13:9c:20:ac:e2:35:7c:16:bd:1f:c6:8f:1c: 19:06:aa:c0:0c:11:e7:66:0d:0f:bb:a1:ed:cd:b9: 1e:9b:86:3e:3a:ac:1d:c4:05:34:04:1a:6e:a5:89: 57:82:01:4a:ff:ef:92:f2:1b:be:81:a5:db:55:fa: f8:74:34:3e:f0:1b:28:93:75:65:59:50:1f:10:86: 2c:5c:3e:ed:2a:ae:e3:b5:7e:74:dd:f6:ee:03:57: b2:e7:41:9e:9d:66:38:77:69:e3:8b:5c:c8:80:26: 60:67:2b:e1:66:1c:37:d2:ce:91:e5:02:b3:12:33: 49:27:77:82:87:28:b1:d5:6d:0d:45:40:f9:9d:4f: 54:e4:04:3f:0f:d5:10:e6:8b:2b:90:d4:79:45:80: 41:1f:90:b0:cc:3a:43:4c:2e:72:bf:3e:45:e2:06: 91:23:4f:3e:f5:a6:20:3c:d7:54:5e:93:62:0f:9f: 44:5a:5d:f3:17:e1:18:df:0a:ef:14:45:c3:46:e0: be:2c:8c:17:96:78:d5:fe:1d:be:b8:36:bb:4a:3b: 20:8b:1e:02:e2:8e:ec:df:48:be:58:a3:ff:12:f7: 2e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C1:32:CD:57:7D:28:CF:A4:1F:4F:3E:57:15:2A:80:6C:A3:C5:57 X509v3 Authority Key Identifier: keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:64:d6:9b:ec:bb:80:ae:62:00:b3:46:3d:79:f6:94:7b:b1: 87:09:21:a7:02:42:5d:0e:b6:c2:08:55:57:ea:9b:b2:34:a5: 04:17:ae:77:d7:ec:52:9e:e4:ea:30:f4:17:6d:67:9e:8f:12: 0b:6f:b0:39:83:ea:5b:8a:55:65:b8:a4:af:e0:47:a8:3c:50: bf:2b:33:3f:f2:2d:96:b7:58:d4:a5:19:c8:3f:d3:d5:cc:d5: 97:d7:d6:23:fd:6e:a8:0c:f3:ca:50:09:0d:a4:7a:4f:cd:a4: 37:bc:01:d3:1f:a5:9a:54:79:79:12:e7:e6:67:dc:81:3a:2f: 30:4d:40:8e:05:62:55:f5:89:32:d4:a7:f0:59:af:e1:24:c5: 3c:38:43:a9:f5:88:1f:8f:89:ac:bf:5a:14:4e:73:a7:69:25: a3:58:9f:57:03:a1:57:a5:ae:3e:ea:74:ae:51:82:a7:5c:95: 9a:ab:75:ab:55:3a:38:8b:f1:1a:82:07:d5:84:f9:64:28:a2: 5f:1c:bf:ad:e3:e1:b1:e5:27:c3:7e:ad:c9:08:c0:c4:70:ea: d9:56:f8:ab:a2:98:19:18:f8:4f:8a:1c:87:41:2c:69:cf:6a: 01:f3:61:9e:6d:c2:33:25:43:7f:2a:2c:af:21:ee:bf:c1:04: fe:16:ad:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtiZ2svxEijoYtdXl3I2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTZkY2NmYjJlMmM4OGNmMDlmNDg3YzQyMWZjOGFmN2Ji ZDM1NzQwHhcNMjUxMjA2MDEwMjUwWhcNMjUxMjA3MDEwMjUwWjAzMTEwLwYDVQQD EygxNWMxMzJjZDU3N2QyOGNmYTQxZjRmM2U1NzE1MmE4MDZjYTNjNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIdWIvCbUBTVdoTXXTH0Zhj5ZRl0 N4Ash2rjyOl0NhOcIKziNXwWvR/GjxwZBqrADBHnZg0Pu6Htzbkem4Y+OqwdxAU0 BBpupYlXggFK/++S8hu+gaXbVfr4dDQ+8Bsok3VlWVAfEIYsXD7tKq7jtX503fbu A1ey50GenWY4d2nji1zIgCZgZyvhZhw30s6R5QKzEjNJJ3eChyix1W0NRUD5nU9U 5AQ/D9UQ5osrkNR5RYBBH5CwzDpDTC5yvz5F4gaRI08+9aYgPNdUXpNiD59EWl3z F+EY3wrvFEXDRuC+LIwXlnjV/h2+uDa7Sjsgix4C4o7s30i+WKP/EvcuYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXBMs1XfSjPpB9PPlcVKoBso8VXMB8GA1UdIwQY MBaAFF0W3M+y4siM8J9IfEIfyK97vTV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEt ODVjNWQ1MzAyZDg4LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEtODVjNWQ1MzAyZDg4 LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2TWm+y7 gK5iALNGPXn2lHuxhwkhpwJCXQ62wghVV+qbsjSlBBeud9fsUp7k6jD0F21nno8S C2+wOYPqW4pVZbikr+BHqDxQvyszP/ItlrdY1KUZyD/T1czVl9fWI/1uqAzzylAJ DaR6T82kN7wB0x+lmlR5eRLn5mfcgTovME1AjgViVfWJMtSn8Fmv4STFPDhDqfWI H4+JrL9aFE5zp2klo1ifVwOhV6WuPup0rlGCp1yVmqt1q1U6OIvxGoIH1YT5ZCii Xxy/rePhseUnw36tyQjAxHDq2Vb4q6KYGRj4T4och0Esac9qAfNhnm3CMyVDfyos ryHuv8EE/hatXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:22 2025 by rpki-client