This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json) Hash identifier: Ni3e76lsEP2DzceT6m4XjLcosX1ff8nDqcho5vD5jX0= Subject key identifier: 3A:42:C0:94:B3:20:50:BF:5A:B2:E3:D0:EF:11:88:FB:13:84:D9:63 Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Certificate serial: 019AF3C02BA5F62B2816D216099475894EAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 13:00:48 +0000 Manifest this update: Sat 06 Dec 2025 13:00:48 +0000 Manifest next update: Sun 07 Dec 2025 13:00:48 +0000 Files and hashes: 1: 4_Xm-FwaxW18eB6I_lWZLvV0NbU.roa (hash: j5XN84KyCXet7GlnPNGdyNtsnXeYr9PG2Qmp2UaeoZM=) 2: 64Qs-aRjWCiWKH3-XysS8T_b5WY.roa (hash: o0SiWtCQ3o/uPw+fTlYfC1oUrYEdllWi/JnViNv7Xn8=) 3: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: 4Uu+UNm3BV5bwASU9XAd4dAZStL1K0Cjl1cJZ6GB59w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:2b:a5:f6:2b:28:16:d2:16:09:94:75:89:4e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748 Validity Not Before: Dec 6 13:00:48 2025 GMT Not After : Dec 7 13:00:48 2025 GMT Subject: CN=3a42c094b32050bf5ab2e3d0ef1188fb1384d963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b0:94:5f:99:3a:16:ca:ca:11:0a:3c:0a:28: 12:52:18:1a:6f:f8:16:a6:4b:d0:41:8d:a5:28:be: b2:79:b7:ef:9c:f6:ff:48:06:c4:01:4d:0c:0c:da: e9:17:c6:53:33:82:fe:47:84:44:cc:77:47:5a:26: 91:8c:df:e4:28:a1:1c:89:fc:d9:2d:69:f6:e8:50: a9:85:06:93:07:d8:5a:51:ea:a8:33:b3:6e:75:17: c7:08:b7:02:0a:24:9c:b5:f1:cb:6d:c8:8e:34:99: 18:eb:ed:68:63:6e:ae:44:10:57:fc:a3:38:ff:1c: 14:6f:36:0f:cf:30:c8:8f:4c:ba:42:02:f5:1e:77: f1:ca:cc:e5:9b:0c:ba:70:26:dd:8f:21:b9:48:31: 92:4a:18:bd:1a:17:f1:25:c5:1f:a9:06:74:6b:15: f7:fa:48:4c:b1:7a:9d:b7:1b:c4:68:29:76:21:7a: 1a:db:04:71:08:bc:e6:f2:68:20:ed:73:f6:c3:57: 8c:22:18:3c:6f:64:7c:0c:fc:3d:43:f2:5d:42:b6: 90:59:5e:72:a6:01:07:9c:d2:76:8b:62:39:37:7e: 1c:90:af:dd:f6:d8:75:62:a1:4d:c9:12:5c:ec:71: 88:24:59:d6:bd:61:78:08:d0:c0:ad:4f:97:b1:17: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:C0:94:B3:20:50:BF:5A:B2:E3:D0:EF:11:88:FB:13:84:D9:63 X509v3 Authority Key Identifier: keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9f:33:df:40:15:08:d8:85:71:8b:90:10:a6:7b:a7:e9:23: 9d:fb:52:4d:4e:91:ea:8a:ea:0a:1f:0c:41:85:0b:cc:5b:2e: d5:88:38:a9:81:54:6d:68:58:9e:0a:3e:e6:08:1b:31:4f:d4: 0f:a4:c2:bc:d1:fb:cb:b3:07:48:df:90:04:f0:12:c3:a9:18: 1c:99:9c:75:3b:ea:c6:36:ff:c3:26:c0:bd:75:05:ee:d4:ad: 50:a2:1b:3d:7e:6f:0c:ba:0b:b1:9e:d6:b2:2d:6e:ba:42:b2: 24:fe:07:f2:83:b8:f4:4b:3f:64:ec:e2:6f:8c:b4:25:9d:fa: 6e:af:f4:72:1f:1d:5a:72:e4:30:78:81:9f:5a:e9:ce:b6:1b: a6:8f:a6:96:bc:e0:54:b9:c7:67:2d:f5:59:88:df:cf:07:4a: 36:da:0d:94:0e:4b:4b:59:6e:32:61:ed:d3:90:d6:02:04:f9: 5d:cb:dc:c0:47:08:79:99:92:17:2d:76:53:6f:80:f5:04:98: e9:80:ba:1d:ee:53:2e:07:af:c6:8b:b8:03:81:94:9c:7a:42: 51:85:81:2b:7a:91:12:83:1d:d4:ac:bb:d9:ea:63:8c:80:92: aa:9d:3d:8b:47:a9:82:ad:6b:32:9a:cc:fc:0a:f8:93:be:1a: 0d:b0:41:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCul9isoFtIWCZR1iU6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYTA1M2RmZTc3MTJlZTYzZGJmZjY0MGZhZTA3MzA4ZDY2 Y2U3NDgwHhcNMjUxMjA2MTMwMDQ4WhcNMjUxMjA3MTMwMDQ4WjAzMTEwLwYDVQQD EygzYTQyYzA5NGIzMjA1MGJmNWFiMmUzZDBlZjExODhmYjEzODRkOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbCUX5k6FsrKEQo8CigSUhgab/gW pkvQQY2lKL6yebfvnPb/SAbEAU0MDNrpF8ZTM4L+R4REzHdHWiaRjN/kKKEcifzZ LWn26FCphQaTB9haUeqoM7NudRfHCLcCCiSctfHLbciONJkY6+1oY26uRBBX/KM4 /xwUbzYPzzDIj0y6QgL1Hnfxyszlmwy6cCbdjyG5SDGSShi9GhfxJcUfqQZ0axX3 +khMsXqdtxvEaCl2IXoa2wRxCLzm8mgg7XP2w1eMIhg8b2R8DPw9Q/JdQraQWV5y pgEHnNJ2i2I5N34ckK/d9th1YqFNyRJc7HGIJFnWvWF4CNDArU+XsRd+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpCwJSzIFC/WrLj0O8RiPsThNljMB8GA1UdIwQY MBaAFFygU9/ncS7mPb/2QPrgcwjWbOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmIt ODBjM2VhNGZkMDAwLzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9lYmJkMmMtYmY1YS00NmRhLTg2ZmItODBjM2VhNGZkMDAw LzEvWEtCVDMtZHhMdVk5dl9aQS11QnpDTlpzNTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ8z30AV CNiFcYuQEKZ7p+kjnftSTU6R6orqCh8MQYULzFsu1Yg4qYFUbWhYngo+5ggbMU/U D6TCvNH7y7MHSN+QBPASw6kYHJmcdTvqxjb/wybAvXUF7tStUKIbPX5vDLoLsZ7W si1uukKyJP4H8oO49Es/ZOzib4y0JZ36bq/0ch8dWnLkMHiBn1rpzrYbpo+mlrzg VLnHZy31WYjfzwdKNtoNlA5LS1luMmHt05DWAgT5XcvcwEcIeZmSFy12U2+A9QSY 6YC6He5TLgevxou4A4GUnHpCUYWBK3qREoMd1Ky72epjjICSqp09i0epgq1rMprM /Ar4k74aDbBB8A== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:49 2025 by rpki-client