This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft File: XbWMRb7iUfx1daY-W0kN7GEU5so.mft (raw, json) Hash identifier: BU/1Id+QvtFr9JgJA1R1mi0DjGqJAy2ViR5SGRs9HFY= Subject key identifier: E2:1D:48:F3:3B:1A:DC:27:A4:88:51:A2:2F:63:1D:52:9F:E8:40:80 Authority key identifier: 5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA Certificate issuer: /CN=5db58c45bee251fc7575a63e5b490dec6114e6ca Certificate serial: 019B3456B155E71E62D2158B148269AB9DE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft Manifest number: 152F Signing time: Fri 19 Dec 2025 02:00:55 +0000 Manifest this update: Fri 19 Dec 2025 02:00:55 +0000 Manifest next update: Sat 20 Dec 2025 02:00:55 +0000 Files and hashes: 1: XbWMRb7iUfx1daY-W0kN7GEU5so.crl (hash: fjMMg5qJimjMVpgX66/OtJrHhmDU6waFUvzWsVGq9ug=) 2: rIHO9BGM8FbqBMmG5rRph997QKc.roa (hash: 8yht5PsqRnylMZKjON2/XT2bc+vyA/zY0feaEVSh3nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:b1:55:e7:1e:62:d2:15:8b:14:82:69:ab:9d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5db58c45bee251fc7575a63e5b490dec6114e6ca Validity Not Before: Dec 19 02:00:55 2025 GMT Not After : Dec 20 02:00:55 2025 GMT Subject: CN=e21d48f33b1adc27a48851a22f631d529fe84080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:4a:52:c7:c4:36:24:4e:07:61:f2:af:2c: ca:87:74:ac:1d:ef:36:71:ef:04:20:0f:c2:67:ea: 57:2f:5a:bb:c8:d3:9e:ce:d2:10:2b:4d:2e:46:7d: 5b:2c:ae:42:28:4b:09:60:a4:01:7c:92:ea:6b:5b: 73:d1:3d:b2:b1:cf:9d:8b:8e:cc:71:6c:28:16:d6: b1:1c:66:0f:38:22:65:59:f9:d5:1a:80:4b:dc:a9: 53:99:49:90:0a:6f:42:a1:00:c1:20:06:22:c0:73: 96:76:6b:c7:6d:07:a6:23:7c:da:55:82:4f:f9:96: f7:6f:c8:1b:48:5b:ca:9c:d5:81:ed:4b:de:df:c8: 26:b2:e5:b5:35:d1:5c:9f:a7:dd:43:47:de:68:a9: b4:97:19:b0:89:25:88:92:4a:cd:c6:95:fa:cc:f1: f6:3a:fd:dc:fa:45:3d:22:6e:6f:62:0d:07:aa:32: 9f:8e:50:08:c9:d2:e8:c1:79:2c:7a:ec:fb:dd:39: 79:f4:da:6d:40:ff:11:9e:78:88:9f:69:78:eb:d3: c6:f7:94:e2:f7:06:96:a0:8a:6c:b9:86:78:5e:fd: dd:0c:2f:c0:60:fe:92:60:d8:3a:dc:b9:fd:91:52: 24:b2:6c:90:1f:0a:7a:c4:0b:c4:3d:f5:d6:8e:01: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:48:F3:3B:1A:DC:27:A4:88:51:A2:2F:63:1D:52:9F:E8:40:80 X509v3 Authority Key Identifier: keyid:5D:B5:8C:45:BE:E2:51:FC:75:75:A6:3E:5B:49:0D:EC:61:14:E6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XbWMRb7iUfx1daY-W0kN7GEU5so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/adf93d-98da-41cc-8a6d-9c2ad475a231/1/XbWMRb7iUfx1daY-W0kN7GEU5so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7b:f2:aa:8b:d0:19:2c:3c:51:ff:c1:ed:36:05:1a:80:91: 09:53:bb:36:21:8c:05:41:12:45:20:f9:66:c6:6a:2e:76:fb: c6:8b:09:2a:2f:44:30:8b:5a:04:d1:87:a1:40:3d:be:47:f3: 60:26:2b:83:6c:7c:db:5b:a1:c0:02:a1:6e:88:3c:f9:79:94: 05:6b:01:0e:3b:ad:53:a3:3d:80:17:e3:3b:c2:0c:ab:e4:33: 15:f4:07:8e:03:25:53:ef:69:04:13:50:6b:6b:c9:7e:a0:34: aa:01:ff:ef:6c:0b:6b:b5:08:9c:82:25:15:bd:18:84:55:f8: 68:95:e2:1f:43:58:e0:02:cd:a7:ee:94:3e:57:88:4b:04:b4: 53:f6:cc:0a:f3:41:2f:d1:ac:d3:8b:b9:c8:5e:96:05:32:7d: 40:5b:66:fd:37:fb:4b:90:d6:73:70:ae:b0:ee:bb:65:eb:51: 8b:45:4c:7f:8b:a0:61:aa:e0:51:e6:c2:96:3f:10:61:e0:b4: e0:60:03:3d:ef:b7:b2:d3:f9:22:da:51:7f:15:2c:18:69:b6: 31:65:b7:d5:1b:09:c0:0e:bf:4e:68:93:51:76:2f:21:1d:e5: 1d:7a:57:61:65:32:b9:1e:79:0b:3e:89:1d:71:13:55:f1:10: 70:02:ba:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VrFV5x5i0hWLFIJpq53iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYjU4YzQ1YmVlMjUxZmM3NTc1YTYzZTViNDkwZGVjNjEx NGU2Y2EwHhcNMjUxMjE5MDIwMDU1WhcNMjUxMjIwMDIwMDU1WjAzMTEwLwYDVQQD EyhlMjFkNDhmMzNiMWFkYzI3YTQ4ODUxYTIyZjYzMWQ1MjlmZTg0MDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqlKUsfENiROB2HyryzKh3SsHe82 ce8EIA/CZ+pXL1q7yNOeztIQK00uRn1bLK5CKEsJYKQBfJLqa1tz0T2ysc+di47M cWwoFtaxHGYPOCJlWfnVGoBL3KlTmUmQCm9CoQDBIAYiwHOWdmvHbQemI3zaVYJP +Zb3b8gbSFvKnNWB7Uve38gmsuW1NdFcn6fdQ0feaKm0lxmwiSWIkkrNxpX6zPH2 Ov3c+kU9Im5vYg0HqjKfjlAIydLowXkseuz73Tl59NptQP8RnniIn2l469PG95Ti 9waWoIpsuYZ4Xv3dDC/AYP6SYNg63Ln9kVIksmyQHwp6xAvEPfXWjgFlWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIdSPM7GtwnpIhRoi9jHVKf6ECAMB8GA1UdIwQY MBaAFF21jEW+4lH8dXWmPltJDexhFObKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZGY5M2QtOThkYS00MWNjLThhNmQt OWMyYWQ0NzVhMjMxLzEvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZGY5M2QtOThkYS00MWNjLThhNmQtOWMyYWQ0NzVhMjMx LzEvWGJXTVJiN2lVZngxZGFZLVcwa043R0VVNXNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXvyqovQ GSw8Uf/B7TYFGoCRCVO7NiGMBUESRSD5ZsZqLnb7xosJKi9EMItaBNGHoUA9vkfz YCYrg2x821uhwAKhbog8+XmUBWsBDjutU6M9gBfjO8IMq+QzFfQHjgMlU+9pBBNQ a2vJfqA0qgH/72wLa7UInIIlFb0YhFX4aJXiH0NY4ALNp+6UPleISwS0U/bMCvNB L9Gs04u5yF6WBTJ9QFtm/Tf7S5DWc3CusO67ZetRi0VMf4ugYargUebClj8QYeC0 4GADPe+3stP5ItpRfxUsGGm2MWW31RsJwA6/TmiTUXYvIR3lHXpXYWUyuR55Cz6J HXETVfEQcAK6Xw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:58 2025 by rpki-client