This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft File: XuTrnvjdNYniMt-P6HbyXOlwehQ.mft (raw, json) Hash identifier: lkVG9xKGa07B7PoF3/Fzhl3JgEKc34+WyDJWfIe34k8= Subject key identifier: E4:1E:2B:07:2A:98:38:1E:C7:36:AF:C0:1B:D4:FD:DC:AD:A6:FB:2E Authority key identifier: 5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 Certificate issuer: /CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Certificate serial: 019AF277083D01533888CA3E6CABD398C736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft Manifest number: 115C Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: XuTrnvjdNYniMt-P6HbyXOlwehQ.crl (hash: 6KJf+gEOcEXLtxqzvE+LXnIaHfXxjoQpmbWR2hF7xY0=) 2: x05WrfG2zADa49P9m0Z4GCWBqnw.roa (hash: nYf6KTW49tj0mn1iQA6LN+Q+EJ2CseYMPtRfxDW4vn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:08:3d:01:53:38:88:ca:3e:6c:ab:d3:98:c7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee4eb9ef8dd3589e232df8fe876f25ce9707a14 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=e41e2b072a98381ec736afc01bd4fddcada6fb2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:82:0c:59:1b:2c:eb:30:88:7d:5f:5e:39: 84:54:76:cf:50:28:5b:eb:6a:26:fd:04:b0:d6:98: 90:cf:30:d4:f3:93:dc:12:9f:e3:ea:ed:16:af:cf: b5:c6:3f:eb:71:c2:82:cf:3d:5c:05:81:20:e1:31: cd:2e:60:2d:f0:59:a4:11:d3:9c:74:91:dc:47:06: e3:d5:71:8e:fb:98:19:b7:6c:59:c3:e4:b3:3c:f8: d4:ba:c3:25:e4:97:45:9f:62:4b:1c:69:3e:ea:4b: 1d:ac:a3:0a:1b:70:35:cb:6d:39:cf:dd:df:b8:a1: d0:46:b0:08:90:e4:58:cf:92:d3:a9:6a:be:75:ef: 04:07:c1:de:b9:d5:2c:f6:85:96:43:92:28:cd:c3: b2:d9:40:63:1f:f8:c6:b2:0e:48:91:53:8d:16:a4: c4:58:25:d0:cd:0d:64:78:06:c7:ba:3d:d8:ee:07: 1f:32:e9:d2:ef:4e:e9:de:37:f2:dd:aa:13:ee:02: 83:a7:04:b4:db:f7:b5:c5:48:c1:46:e5:2f:95:d4: f6:06:5e:7b:8a:b4:e6:89:5d:9f:c1:dc:e2:7e:74: 4b:e4:a5:c7:90:cb:97:51:9a:e8:34:04:23:de:4f: 95:ff:27:0a:d6:6b:1e:b7:1d:e3:6d:26:21:14:47: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1E:2B:07:2A:98:38:1E:C7:36:AF:C0:1B:D4:FD:DC:AD:A6:FB:2E X509v3 Authority Key Identifier: keyid:5E:E4:EB:9E:F8:DD:35:89:E2:32:DF:8F:E8:76:F2:5C:E9:70:7A:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuTrnvjdNYniMt-P6HbyXOlwehQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b2f893-911d-40c0-8ac2-fd3ff35f34a9/1/XuTrnvjdNYniMt-P6HbyXOlwehQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:06:c9:50:6a:6f:61:f5:ae:4f:e9:ce:6b:9f:8d:7b:0a:eb: e4:4d:f9:1a:62:fd:1f:3a:75:c2:f0:49:20:6b:66:f4:f3:5a: f8:65:ca:3d:1f:86:de:9a:38:ab:9e:d7:54:4c:96:84:c8:b5: 37:8f:52:5f:70:53:6e:06:ed:bd:25:4c:22:45:b5:00:1f:e6: 39:20:06:1b:8c:ba:d6:d5:b1:70:27:23:8f:f8:3d:7b:c3:b9: c0:0a:29:98:b4:3d:ff:52:48:66:1d:a6:89:3f:bd:87:fc:83: b2:b4:51:b0:20:7f:ab:06:7b:ab:1d:bb:a7:95:dc:ac:d0:bd: ae:78:3f:7b:6c:54:c6:08:b9:ab:bb:36:51:e9:db:7c:8f:62: 16:ff:ed:35:65:cc:d7:cc:94:b3:4d:ee:b8:20:e5:e4:3f:cf: 37:2a:62:f0:77:57:b4:29:ff:ff:d8:6a:1e:40:5b:3f:fc:43: 04:6d:b9:26:72:a7:a6:2a:21:f3:4e:e5:10:42:d0:c7:29:ad: d1:90:d3:bb:73:62:85:9b:79:91:8a:f5:bf:a3:83:0c:10:93: 78:49:25:40:ed:e2:7b:21:b0:9f:53:7c:31:5d:35:a7:d8:67: 96:db:ff:25:9d:e4:b5:7d:ca:11:d4:87:fc:34:2b:f4:e2:0a: 88:1d:8d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwg9AVM4iMo+bKvTmMc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTRlYjllZjhkZDM1ODllMjMyZGY4ZmU4NzZmMjVjZTk3 MDdhMTQwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EyhlNDFlMmIwNzJhOTgzODFlYzczNmFmYzAxYmQ0ZmRkY2FkYTZmYjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhuCDFkbLOswiH1fXjmEVHbPUChb 62om/QSw1piQzzDU85PcEp/j6u0Wr8+1xj/rccKCzz1cBYEg4THNLmAt8FmkEdOc dJHcRwbj1XGO+5gZt2xZw+SzPPjUusMl5JdFn2JLHGk+6ksdrKMKG3A1y205z93f uKHQRrAIkORYz5LTqWq+de8EB8HeudUs9oWWQ5IozcOy2UBjH/jGsg5IkVONFqTE WCXQzQ1keAbHuj3Y7gcfMunS707p3jfy3aoT7gKDpwS02/e1xUjBRuUvldT2Bl57 irTmiV2fwdzifnRL5KXHkMuXUZroNAQj3k+V/ycK1msetx3jbSYhFEfl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQeKwcqmDgexzavwBvU/dytpvsuMB8GA1UdIwQY MBaAFF7k65743TWJ4jLfj+h28lzpcHoUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzIt ZmQzZmYzNWYzNGE5LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iMmY4OTMtOTExZC00MGMwLThhYzItZmQzZmYzNWYzNGE5 LzEvWHVUcm52amROWW5pTXQtUDZIYnlYT2x3ZWhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQbJUGpv YfWuT+nOa5+Newrr5E35GmL9Hzp1wvBJIGtm9PNa+GXKPR+G3po4q57XVEyWhMi1 N49SX3BTbgbtvSVMIkW1AB/mOSAGG4y61tWxcCcjj/g9e8O5wAopmLQ9/1JIZh2m iT+9h/yDsrRRsCB/qwZ7qx27p5XcrNC9rng/e2xUxgi5q7s2UenbfI9iFv/tNWXM 18yUs03uuCDl5D/PNypi8HdXtCn//9hqHkBbP/xDBG25JnKnpioh807lEELQxymt 0ZDTu3NihZt5kYr1v6ODDBCTeEklQO3ieyGwn1N8MV01p9hnltv/JZ3ktX3KEdSH /DQr9OIKiB2NOA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:58 2025 by rpki-client