This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json) Hash identifier: dVaGGrwF09R0pMe2eCPPtkrmZCCwupYnTb4X2ThjXsY= Subject key identifier: F5:DC:1C:30:29:A0:F1:5E:5B:2D:3D:D4:F7:0A:7E:FD:18:A4:B6:8E Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Certificate serial: 019AF276B7CA8E913783270D67AD2A6176F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft Manifest number: 1651 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: WTW2hFeS7O+MIZQ2YpkNxsnx/X6bqezZYTV2BvOtTBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b7:ca:8e:91:37:83:27:0d:67:ad:2a:61:76:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=f5dc1c3029a0f15e5b2d3dd4f70a7efd18a4b68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:8b:81:1d:6d:56:b7:b6:0c:6c:56:bf:c7: 9c:30:18:4f:c9:45:96:73:ec:54:1a:d5:c5:27:41: be:2d:ca:6f:06:ec:3e:dc:e8:da:96:ee:dc:f4:5b: c7:83:99:e8:50:4e:a7:08:d5:70:e3:23:f6:f4:c2: 57:b8:a0:c7:a4:6e:8b:64:a5:c7:2a:c6:6b:3f:40: bf:d2:1b:bc:aa:ee:5f:91:2f:af:73:d8:de:09:c3: 59:24:7e:df:02:7f:24:d8:9d:79:a8:12:7d:b6:85: 9d:8d:cc:8f:64:b7:44:46:33:48:a7:8a:ab:dc:1b: c2:bf:dc:96:b4:64:42:c6:c0:10:69:5e:ec:9d:c4: 58:53:ec:50:9c:ff:25:5a:53:e8:ba:74:11:85:4c: 19:52:c5:dd:b4:de:f1:69:9a:04:f0:4d:92:c4:48: bf:3b:42:d2:93:e7:ab:e0:cf:a7:ff:11:2c:2d:d1: 23:33:37:ca:34:ae:95:8b:5a:c1:fc:8d:40:53:5a: f6:93:83:41:98:74:c5:df:47:2e:01:8f:ad:71:29: b7:a7:b3:84:2a:a7:a7:65:49:9f:2b:28:c6:93:66: 3b:19:57:9c:0e:0c:0a:7c:bc:2d:aa:be:4a:20:f4: 15:a4:47:25:19:15:7a:83:c4:98:55:ff:2e:f9:f2: 10:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:DC:1C:30:29:A0:F1:5E:5B:2D:3D:D4:F7:0A:7E:FD:18:A4:B6:8E X509v3 Authority Key Identifier: keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3b:9d:e9:bb:66:be:c5:72:08:70:6b:82:1b:b4:46:65:fb: b8:bb:cc:b3:70:f9:b9:7d:d5:6c:f7:4d:6b:63:c3:43:f9:bb: 31:b9:6f:7c:f3:31:66:5d:fb:94:69:0b:77:eb:10:59:a7:9c: e2:82:b4:1d:2f:45:76:bb:dc:45:e0:2d:5c:e6:9c:ef:59:c8: 99:4e:d5:ce:a2:c0:19:08:6e:10:29:a6:00:b2:72:c9:e9:84: 72:79:5e:07:f1:bb:1a:08:ed:d5:c6:d9:fe:69:05:96:51:b6: 38:67:3e:28:84:df:d2:08:a7:ab:e5:46:c1:71:67:5e:49:84: 83:13:6c:e8:27:89:2d:a4:44:d8:4c:42:d3:a8:ee:5d:11:67: c7:42:2c:f8:c4:57:b1:c7:a2:b1:a4:41:0d:54:9e:d8:21:cf: 18:3f:be:da:94:51:6a:32:1e:66:07:6a:ba:54:fe:8a:c1:cf: 6d:a4:5e:61:0b:ca:ab:17:7b:af:56:91:16:0f:13:c6:ec:30: d7:f3:9b:41:34:67:3f:e4:00:38:83:d6:dd:15:35:8c:49:94: bb:42:49:3b:81:f1:eb:02:dd:43:6e:c8:a1:d4:1f:02:a3:33: 8e:02:cc:45:4a:29:32:2c:34:5c:6b:2d:a4:16:eb:ad:c6:be: fe:a3:18:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrfKjpE3gycNZ60qYXbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTZmMjVhNDU1MWNmOGIyYzJlZjM5NTk0Njg4ZGFmMGE5 YjI1NmIwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhmNWRjMWMzMDI5YTBmMTVlNWIyZDNkZDRmNzBhN2VmZDE4YTRiNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGLgR1tVre2DGxWv8ecMBhPyUWW c+xUGtXFJ0G+LcpvBuw+3Ojalu7c9FvHg5noUE6nCNVw4yP29MJXuKDHpG6LZKXH KsZrP0C/0hu8qu5fkS+vc9jeCcNZJH7fAn8k2J15qBJ9toWdjcyPZLdERjNIp4qr 3BvCv9yWtGRCxsAQaV7sncRYU+xQnP8lWlPounQRhUwZUsXdtN7xaZoE8E2SxEi/ O0LSk+er4M+n/xEsLdEjMzfKNK6Vi1rB/I1AU1r2k4NBmHTF30cuAY+tcSm3p7OE KqenZUmfKyjGk2Y7GVecDgwKfLwtqr5KIPQVpEclGRV6g8SYVf8u+fIQawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXcHDApoPFeWy091PcKfv0YpLaOMB8GA1UdIwQY MBaAFF3m8lpFUc+LLC7zlZRoja8KmyVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYt NjQ4ZGNjY2VlMDE1LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYtNjQ4ZGNjY2VlMDE1 LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjud6btm vsVyCHBrghu0RmX7uLvMs3D5uX3VbPdNa2PDQ/m7MblvfPMxZl37lGkLd+sQWaec 4oK0HS9FdrvcReAtXOac71nImU7VzqLAGQhuECmmALJyyemEcnleB/G7Ggjt1cbZ /mkFllG2OGc+KITf0ginq+VGwXFnXkmEgxNs6CeJLaRE2ExC06juXRFnx0Is+MRX sceisaRBDVSe2CHPGD++2pRRajIeZgdqulT+isHPbaReYQvKqxd7r1aRFg8Txuww 1/ObQTRnP+QAOIPW3RU1jEmUu0JJO4Hx6wLdQ27IodQfAqMzjgLMRUopMiw0XGst pBbrrca+/qMYrA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:28 2025 by rpki-client