This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json) Hash identifier: 6K1Wy0jelGgI49hJSRbafrK1a6jeozrGdAvohef2NqY= Subject key identifier: 61:1A:56:81:67:6D:39:98:F9:5E:24:55:F0:F3:FC:D0:BA:0C:3C:22 Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Certificate serial: 019AF16429A407D0FBE4536F488DCB7195FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=) 2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: dRJE/nxadAeC7RbpVdBBBqeCPCWC4d8dg4r09e721J0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:a4:07:d0:fb:e4:53:6f:48:8d:cb:71:95:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=611a5681676d3998f95e2455f0f3fcd0ba0c3c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:73:2a:eb:d4:cd:11:56:95:be:ab:6b:07: d2:17:8d:27:d5:6d:7d:33:a8:aa:01:9a:5e:ed:f8: c3:10:b2:29:fa:d8:5c:8c:68:1d:0c:61:7b:19:52: b3:52:eb:68:13:05:e7:5a:8a:c8:c6:fa:dc:1a:db: 75:63:cb:6e:99:ea:39:d5:78:bf:01:7b:e3:eb:60: 1a:2c:e6:5e:4f:26:9c:51:46:57:f3:c2:29:dd:a5: 84:28:c8:80:73:2f:c0:c7:20:e6:4a:4d:c5:4b:dd: 8c:22:2c:8f:14:0b:e8:9a:a2:f9:4f:8e:35:37:49: 6b:36:92:63:dd:0b:68:03:0d:0b:52:a2:d7:6c:f6: 67:44:08:78:38:96:4b:38:23:b0:9a:5a:3b:77:2e: 22:cc:85:76:25:bb:fb:24:08:d7:39:6b:8a:ba:fc: 41:12:5b:ea:cc:e2:52:ef:0a:1e:1c:4e:7a:b6:c0: 2f:c7:a5:ec:83:37:44:ee:73:f8:38:a1:b1:5d:dc: 37:62:eb:73:cc:2f:6c:b9:90:32:cf:a6:66:0b:db: 47:13:3e:39:65:88:2a:05:f0:00:3c:71:2b:c0:9c: ba:b3:15:7c:bb:e0:bc:a9:ee:e2:6a:82:91:67:fd: 24:39:8b:4c:17:31:95:e5:ca:10:e8:95:29:3d:9d: 88:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1A:56:81:67:6D:39:98:F9:5E:24:55:F0:F3:FC:D0:BA:0C:3C:22 X509v3 Authority Key Identifier: keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:18:79:f8:27:ec:cd:ca:01:77:92:68:3b:47:b5:d7:6d:e5: f0:f5:81:48:91:f3:d5:79:b3:f8:25:ea:20:48:0b:0b:28:2b: 80:81:a4:40:cf:05:8e:1d:a1:4d:20:ca:2d:b6:47:96:32:08: 71:cb:34:4a:d2:13:13:22:6c:1c:79:41:7e:c3:98:d2:63:a9: 19:d9:5a:8e:5d:1b:0e:43:b5:87:c2:64:b5:96:07:37:c3:6b: 0b:2e:d6:1a:68:42:10:5f:ad:41:56:ba:dc:e2:91:22:ef:c8: 7a:44:f7:8a:c2:0f:42:91:be:ca:10:43:3b:2f:f1:9e:fa:aa: 00:96:39:e4:d6:9e:db:93:22:21:56:9d:3f:30:f5:7e:87:05: 62:19:55:7f:70:d9:58:f1:6f:70:e6:6b:8e:83:74:05:95:05: 93:af:cc:db:13:73:59:94:68:9f:ba:39:4e:3c:75:bd:24:54: 31:00:70:dc:9c:49:b3:c8:9f:f0:a8:7d:63:b0:a0:34:98:1a: 92:70:d3:24:bb:ca:2b:ab:ec:05:70:72:80:ba:16:fc:00:89: 96:a5:4b:fe:99:6e:75:8c:ef:6b:bf:bc:18:59:23:51:5f:96: 44:77:a6:c6:ce:d9:67:2c:7b:61:fb:60:13:85:1a:53:c1:63: 70:c3:e9:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCmkB9D75FNvSI3LcZX+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk ODVjMDcwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg2MTFhNTY4MTY3NmQzOTk4Zjk1ZTI0NTVmMGYzZmNkMGJhMGMzYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDhzKuvUzRFWlb6rawfSF40n1W19 M6iqAZpe7fjDELIp+thcjGgdDGF7GVKzUutoEwXnWorIxvrcGtt1Y8tumeo51Xi/ AXvj62AaLOZeTyacUUZX88Ip3aWEKMiAcy/AxyDmSk3FS92MIiyPFAvomqL5T441 N0lrNpJj3QtoAw0LUqLXbPZnRAh4OJZLOCOwmlo7dy4izIV2Jbv7JAjXOWuKuvxB ElvqzOJS7woeHE56tsAvx6XsgzdE7nP4OKGxXdw3YutzzC9suZAyz6ZmC9tHEz45 ZYgqBfAAPHErwJy6sxV8u+C8qe7iaoKRZ/0kOYtMFzGV5coQ6JUpPZ2I7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEaVoFnbTmY+V4kVfDz/NC6DDwiMB8GA1UdIwQY MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct MjhkOTRmY2IxMDg4LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4 LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhh5+Cfs zcoBd5JoO0e1123l8PWBSJHz1Xmz+CXqIEgLCygrgIGkQM8Fjh2hTSDKLbZHljII ccs0StITEyJsHHlBfsOY0mOpGdlajl0bDkO1h8JktZYHN8NrCy7WGmhCEF+tQVa6 3OKRIu/IekT3isIPQpG+yhBDOy/xnvqqAJY55Nae25MiIVadPzD1focFYhlVf3DZ WPFvcOZrjoN0BZUFk6/M2xNzWZRon7o5Tjx1vSRUMQBw3JxJs8if8Kh9Y7CgNJga knDTJLvKK6vsBXBygLoW/ACJlqVL/pludYzva7+8GFkjUV+WRHemxs7ZZyx7Yftg E4UaU8FjcMPpoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:09 2025 by rpki-client