This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft File: XB3W7EouHzdshVxYMSGVoAXNuFA.mft (raw, json) Hash identifier: 2JcxBat3cPE1GjlGt5QlrsA/bEfmFCMp0+UuyX0Ck+Q= Subject key identifier: 75:2C:E8:43:C1:B1:4A:F0:4E:84:05:1B:D0:11:A6:10:62:62:C9:F6 Authority key identifier: 5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 Certificate issuer: /CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850 Certificate serial: 019B3E6C8B67E7285B6E955D185F6A6DC9FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft Manifest number: 0D93 Signing time: Sun 21 Dec 2025 01:00:59 +0000 Manifest this update: Sun 21 Dec 2025 01:00:59 +0000 Manifest next update: Mon 22 Dec 2025 01:00:59 +0000 Files and hashes: 1: XB3W7EouHzdshVxYMSGVoAXNuFA.crl (hash: MX9JQBrPfIoBUy3S7/EZprMumQCkIW9VRacJkZFJQ+Q=) 2: yHRB4Y2OAyzADCHywRZPrfJRG4I.roa (hash: NribQFyQGW5J2lu2xgI9G6pKO663m0SkQqZCGrWC3Yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:8b:67:e7:28:5b:6e:95:5d:18:5f:6a:6d:c9:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1dd6ec4a2e1f376c855c58312195a005cdb850 Validity Not Before: Dec 21 01:00:59 2025 GMT Not After : Dec 22 01:00:59 2025 GMT Subject: CN=752ce843c1b14af04e84051bd011a6106262c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:45:e0:13:6d:81:ee:70:86:cb:1c:35:59:05: 3f:e9:3d:f8:b3:21:a1:11:a8:e4:d1:fd:c0:b0:83: 9b:b9:93:49:a7:b1:6b:e1:3e:7f:55:a8:e6:81:9c: 60:3b:72:dc:09:2a:e4:6a:3b:2a:b4:5e:6b:22:8e: 11:aa:73:e3:d2:9b:3a:ca:7c:d3:06:05:62:3b:20: 95:ec:4b:f8:8f:89:a2:5f:cb:e4:18:6e:ae:c7:1c: 0f:57:b5:fa:d3:73:94:10:fe:38:b5:0b:db:10:8e: 53:52:51:d3:8c:97:db:8b:a9:63:78:2e:5a:8a:84: 4d:40:aa:1b:31:bc:37:0c:27:72:b2:8c:0a:56:fd: 3d:79:8b:2d:33:c7:0e:b3:0c:de:ef:de:91:bf:f1: 8f:4e:05:81:4b:30:de:ce:3f:75:d7:20:a7:b2:08: 70:4a:92:c6:02:80:1e:02:cf:67:0f:a5:a0:ec:63: 5c:d1:0d:ac:d7:84:00:e3:79:49:00:82:15:94:14: 58:45:64:b5:cb:c6:43:b5:fb:a8:4f:7d:4d:02:37: 0f:25:2a:38:b9:24:13:bd:f4:23:8a:e7:65:7b:7a: bc:0d:e3:be:04:b0:f2:3c:03:a8:0d:df:a7:44:e5: 54:82:c1:8a:ae:0a:65:24:e4:e2:43:04:a8:0c:b2: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2C:E8:43:C1:B1:4A:F0:4E:84:05:1B:D0:11:A6:10:62:62:C9:F6 X509v3 Authority Key Identifier: keyid:5C:1D:D6:EC:4A:2E:1F:37:6C:85:5C:58:31:21:95:A0:05:CD:B8:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XB3W7EouHzdshVxYMSGVoAXNuFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/5e4c22-cfde-4ded-a526-39671e0b6266/1/XB3W7EouHzdshVxYMSGVoAXNuFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d1:f1:b7:e8:ca:04:ac:a6:6b:a2:cf:87:ca:0e:fd:e5:68: d6:f1:3e:0b:b5:98:9a:3b:ef:a5:1e:62:f0:c6:4a:91:ed:4e: 39:d5:de:7d:b3:9b:67:b5:d6:3f:85:36:71:d2:05:04:b1:ab: 6e:26:df:1c:09:8a:91:41:43:2c:b3:7f:6e:fe:64:9b:93:08: aa:0c:91:79:ed:b0:1a:7a:59:8c:ed:86:1d:be:8c:cf:78:ce: 3f:a2:06:48:01:e2:65:2d:df:0a:d2:d5:cb:42:f2:c8:6f:f2: 34:d1:9d:b6:13:91:dd:e8:0b:37:33:da:7b:ad:18:d6:ae:ae: 64:41:82:98:df:84:61:a5:19:36:03:7a:10:74:8f:98:63:34: 8a:bf:47:b3:ab:aa:a0:30:f6:10:14:24:30:41:fa:31:29:de: fe:d3:37:fa:9d:d9:b8:df:93:fe:d6:43:6c:34:01:bb:b3:ea: 29:ae:3b:36:dc:95:93:49:97:df:19:00:ca:85:19:4d:53:15: 7b:49:59:58:46:4a:2f:1a:7a:62:e0:79:a8:7e:c4:e2:89:93: ed:14:d4:7d:2c:3f:e0:34:6a:f5:99:66:78:9a:de:1f:1d:27: 9b:c1:c1:91:83:46:10:33:b6:d8:25:6b:81:cc:83:43:f7:c9: 4f:fb:b5:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bItn5yhbbpVdGF9qbcn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWRkNmVjNGEyZTFmMzc2Yzg1NWM1ODMxMjE5NWEwMDVj ZGI4NTAwHhcNMjUxMjIxMDEwMDU5WhcNMjUxMjIyMDEwMDU5WjAzMTEwLwYDVQQD Eyg3NTJjZTg0M2MxYjE0YWYwNGU4NDA1MWJkMDExYTYxMDYyNjJjOWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEXgE22B7nCGyxw1WQU/6T34syGh Eajk0f3AsIObuZNJp7Fr4T5/VajmgZxgO3LcCSrkajsqtF5rIo4RqnPj0ps6ynzT BgViOyCV7Ev4j4miX8vkGG6uxxwPV7X603OUEP44tQvbEI5TUlHTjJfbi6ljeC5a ioRNQKobMbw3DCdysowKVv09eYstM8cOswze796Rv/GPTgWBSzDezj911yCnsghw SpLGAoAeAs9nD6Wg7GNc0Q2s14QA43lJAIIVlBRYRWS1y8ZDtfuoT31NAjcPJSo4 uSQTvfQjiudle3q8DeO+BLDyPAOoDd+nROVUgsGKrgplJOTiQwSoDLLjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUs6EPBsUrwToQFG9ARphBiYsn2MB8GA1UdIwQY MBaAFFwd1uxKLh83bIVcWDEhlaAFzbhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYt Mzk2NzFlMGI2MjY2LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81ZTRjMjItY2ZkZS00ZGVkLWE1MjYtMzk2NzFlMGI2MjY2 LzEvWEIzVzdFb3VIemRzaFZ4WU1TR1ZvQVhOdUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtHxt+jK BKyma6LPh8oO/eVo1vE+C7WYmjvvpR5i8MZKke1OOdXefbObZ7XWP4U2cdIFBLGr bibfHAmKkUFDLLN/bv5km5MIqgyRee2wGnpZjO2GHb6Mz3jOP6IGSAHiZS3fCtLV y0LyyG/yNNGdthOR3egLNzPae60Y1q6uZEGCmN+EYaUZNgN6EHSPmGM0ir9Hs6uq oDD2EBQkMEH6MSne/tM3+p3ZuN+T/tZDbDQBu7PqKa47NtyVk0mX3xkAyoUZTVMV e0lZWEZKLxp6YuB5qH7E4omT7RTUfSw/4DRq9ZlmeJreHx0nm8HBkYNGEDO22CVr gcyDQ/fJT/u1xw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:52:43 2025 by rpki-client