This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json) Hash identifier: NoyORNvrGIXv32z+thE6mmp+qLp45cmPz51SKKoqqtI= Subject key identifier: B1:86:4A:52:D4:19:AC:0D:F4:09:EE:8E:B7:D7:97:55:B8:D7:1F:2B Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Certificate serial: 019AF31C6959619090CB8ED2337D359FBE54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft Manifest number: 12CE Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: GYHUTymyRTxxF3fbm5JLZzjkvufloWHrIZYvR+XJBmc=) 2: kzlWeerWBpLQJUvq-zvqgpRgYGk.roa (hash: nVND6/0jbck+9wjQsXvYtJIdnT8gV1/CUuZluisEp4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:69:59:61:90:90:cb:8e:d2:33:7d:35:9f:be:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=b1864a52d419ac0df409ee8eb7d79755b8d71f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:3a:d5:17:a1:f6:90:87:54:40:0d:a7:2e: 55:87:33:e1:7e:c3:a6:8c:b5:90:f5:be:09:00:07: d0:7c:6c:df:54:5d:f5:10:92:37:dc:ea:65:f3:20: ce:86:94:ce:de:b8:ee:af:07:ba:dd:64:6d:f2:ef: 30:97:b1:88:c8:01:4e:03:5f:3b:90:10:2a:d8:84: 20:ce:31:f5:85:eb:48:e5:b7:e0:ca:2d:90:b6:5a: a5:cb:dd:39:48:7e:54:fd:8d:57:2c:4b:f2:01:ae: 97:ae:64:f8:9c:4f:e2:89:d6:b8:6e:3d:4d:4d:08: 11:78:c1:a1:0f:b0:cc:59:bd:9d:96:64:4b:4b:52: 93:df:db:f9:57:d6:ff:57:69:44:4a:03:b3:19:f3: 8b:3b:75:f5:6b:b9:e9:07:38:0b:52:b4:ab:12:08: fa:c1:99:ee:41:04:b3:b3:e3:13:c1:41:66:84:a8: 3c:92:37:e4:a3:be:64:5a:34:f8:6b:3a:02:ac:eb: 28:ca:b1:36:18:57:44:35:82:8a:f6:6d:9e:20:d9: d0:37:ec:72:00:eb:69:c5:be:ac:80:2e:6e:32:96: 77:af:91:34:b0:12:91:ba:6f:c0:62:3b:08:1b:5c: 44:73:df:26:30:e5:05:0c:ba:7b:f9:41:9b:8d:cb: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:4A:52:D4:19:AC:0D:F4:09:EE:8E:B7:D7:97:55:B8:D7:1F:2B X509v3 Authority Key Identifier: keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5b:f8:56:cc:60:25:45:65:14:48:92:32:07:bd:7a:5b:a4: 32:4e:91:7a:8e:31:f1:ae:1c:ce:3e:bc:d7:0b:c6:8b:10:99: 51:e7:88:18:1b:ff:c3:1f:58:de:e8:96:5b:f0:98:fa:19:88: 7f:bb:b4:bc:f0:5d:42:7e:ae:be:fb:f6:9a:9d:74:ff:69:02: 15:e1:c6:f9:c1:68:fd:f3:d3:21:4a:46:ed:52:1d:80:bb:0c: 16:5c:11:08:72:21:e8:8f:92:61:3b:14:4c:e5:23:7e:0d:7a: 5a:b7:27:92:4d:12:34:a2:46:29:91:2f:3e:74:22:e6:93:84: 0d:84:87:cd:aa:a3:e3:09:da:bb:14:5b:d3:34:9e:f8:84:0d: 10:25:67:e0:b2:ed:fc:11:8d:c5:76:e9:a4:49:5c:73:72:0f: 3e:36:9a:b8:86:53:82:f9:c4:35:e7:d8:55:4a:18:ab:3f:0f: 08:27:98:3a:5c:21:b1:ba:42:2a:1a:e4:32:b5:5c:1a:63:ea: e9:e5:3f:ee:79:99:78:a9:1f:77:97:1f:ac:7a:6e:19:6d:95: 8a:50:97:bc:f0:df:2a:3f:65:9d:04:ac:67:3f:d8:d4:2f:38: 68:c2:0e:00:f6:70:57:3b:b8:d4:41:d6:b7:c6:cc:7d:39:90: 48:00:ad:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGlZYZCQy47SM301n75UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMTEwYTJiMGFlYjM3ZjBjOTMyYTk2YmRiYmY3ZWYzNmMy MTE5N2MwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD EyhiMTg2NGE1MmQ0MTlhYzBkZjQwOWVlOGViN2Q3OTc1NWI4ZDcxZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum861Reh9pCHVEANpy5VhzPhfsOm jLWQ9b4JAAfQfGzfVF31EJI33Opl8yDOhpTO3rjurwe63WRt8u8wl7GIyAFOA187 kBAq2IQgzjH1hetI5bfgyi2Qtlqly905SH5U/Y1XLEvyAa6XrmT4nE/iida4bj1N TQgReMGhD7DMWb2dlmRLS1KT39v5V9b/V2lESgOzGfOLO3X1a7npBzgLUrSrEgj6 wZnuQQSzs+MTwUFmhKg8kjfko75kWjT4azoCrOsoyrE2GFdENYKK9m2eINnQN+xy AOtpxb6sgC5uMpZ3r5E0sBKRum/AYjsIG1xEc98mMOUFDLp7+UGbjct0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGGSlLUGawN9AnujrfXl1W41x8rMB8GA1UdIwQY MBaAFFwRCisK6zfwyTKpa9u/fvNsIRl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzIt YTQ0MjI0ZmFjM2ZmLzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNGM0MzUtZTZjZC00ZGEwLTllMzItYTQ0MjI0ZmFjM2Zm LzEvWEJFS0t3cnJOX0RKTXFscjI3OS04MndoR1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVv4Vsxg JUVlFEiSMge9elukMk6Reo4x8a4czj681wvGixCZUeeIGBv/wx9Y3uiWW/CY+hmI f7u0vPBdQn6uvvv2mp10/2kCFeHG+cFo/fPTIUpG7VIdgLsMFlwRCHIh6I+SYTsU TOUjfg16Wrcnkk0SNKJGKZEvPnQi5pOEDYSHzaqj4wnauxRb0zSe+IQNECVn4LLt /BGNxXbppElcc3IPPjaauIZTgvnENefYVUoYqz8PCCeYOlwhsbpCKhrkMrVcGmPq 6eU/7nmZeKkfd5cfrHpuGW2VilCXvPDfKj9lnQSsZz/Y1C84aMIOAPZwVzu41EHW t8bMfTmQSACtiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:03 2025 by rpki-client