This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft File: XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft (raw, json) Hash identifier: 0tAHHb/+bIqklcdbThV7Yl0a6rGx46edIUgtY+InECs= Subject key identifier: B5:42:FE:76:55:BF:40:BE:6C:37:8F:16:71:0C:F3:B0:DB:EE:11:0D Authority key identifier: 5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF Certificate issuer: /CN=5d656b2013e851516b942fa90706c72090dcddef Certificate serial: 019AF3C033D529DDC1E18EA7BBD70244B6F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:00:50 +0000 Manifest this update: Sat 06 Dec 2025 13:00:50 +0000 Manifest next update: Sun 07 Dec 2025 13:00:50 +0000 Files and hashes: 1: XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl (hash: d1gdGg8VnooFA8XI/aXZe5TE9dQ6i+1kyb2xe3k1VF4=) 2: eE4dt64YbIc12mVCfO2vYEZbsAA.roa (hash: P8IHkCQWXy483d0oeppd6qsQK9bS8c+YRPET1f6MD4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:33:d5:29:dd:c1:e1:8e:a7:bb:d7:02:44:b6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d656b2013e851516b942fa90706c72090dcddef Validity Not Before: Dec 6 13:00:50 2025 GMT Not After : Dec 7 13:00:50 2025 GMT Subject: CN=b542fe7655bf40be6c378f16710cf3b0dbee110d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:7f:14:dc:f2:c3:bc:08:c3:cf:9b:88:99: fc:46:38:65:23:7f:ef:85:9c:b0:dd:3f:fe:d8:a2: a4:54:f7:e3:cd:fe:cd:cf:ac:96:4c:73:c0:cb:93: d5:76:0e:eb:4b:1d:59:1f:68:ec:62:a8:6a:c0:35: 0a:fe:d8:65:71:bf:10:7d:50:59:c2:a3:78:43:51: 25:55:45:4b:c7:ce:16:10:b3:c6:76:d1:c5:68:e7: f5:9e:4d:67:f0:78:77:3c:c3:95:1d:9b:ad:05:4f: 87:3f:de:89:fb:e0:60:17:28:f0:9b:40:65:c9:ca: 81:1a:6b:c7:bb:77:ba:c3:3d:4d:43:1a:dc:63:14: 86:1c:38:92:b0:40:fb:ba:f3:c7:72:cf:1d:42:b6: a7:c4:b7:b8:ba:c0:70:fb:9f:17:78:fc:bd:85:78: 6c:62:82:b9:4e:94:dc:c3:c8:86:62:61:92:be:4b: c1:d0:d0:ef:70:20:62:b9:26:1f:4b:de:c9:8d:0b: d1:77:54:46:1e:32:b1:26:8b:b7:0e:47:3c:94:2b: ef:55:d2:8b:7a:8f:d5:04:d5:b6:43:d9:19:1d:bd: 0a:43:81:51:b5:41:80:00:e0:6a:b7:e8:98:08:9a: ea:88:14:ad:c3:24:72:3f:d8:fb:c4:b9:71:21:38: 3b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:42:FE:76:55:BF:40:BE:6C:37:8F:16:71:0C:F3:B0:DB:EE:11:0D X509v3 Authority Key Identifier: keyid:5D:65:6B:20:13:E8:51:51:6B:94:2F:A9:07:06:C7:20:90:DC:DD:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWVrIBPoUVFrlC-pBwbHIJDc3e8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1df764-2b83-4343-9102-47a9f96ca586/1/XWVrIBPoUVFrlC-pBwbHIJDc3e8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b3:68:a5:b7:9a:56:e3:c5:bf:c4:42:ff:43:60:f9:ae:8e: b2:e1:eb:29:71:96:e8:a0:76:1d:a2:29:be:95:bc:fa:2f:28: 7b:38:57:11:b2:56:cc:6c:b0:18:dc:88:b6:24:87:60:1c:2a: f5:58:24:98:dc:90:ef:e8:48:8c:b2:91:7c:74:b7:2e:4b:0e: 61:00:db:33:01:f2:26:50:38:5e:92:94:5c:87:bd:f5:9a:63: 10:12:53:5a:bb:eb:1a:69:c5:bf:a5:b4:b6:43:16:76:7b:36: f9:9b:ae:10:c0:36:9e:c3:7e:41:3d:c7:7b:3f:83:e8:39:a0: b2:12:d1:15:d4:dd:28:61:50:63:a7:78:e7:c9:63:7d:c1:a1: 3c:39:34:8f:90:6d:29:be:c0:81:cc:0a:1c:90:fd:1d:40:91: ba:2e:b6:7f:ca:09:d8:c6:d8:7d:42:9b:59:b0:61:af:22:74: fb:ce:07:52:da:eb:44:f8:e3:ed:53:4e:a5:29:65:bb:d2:18: f6:28:ad:13:99:29:3a:a7:3e:91:18:8d:ce:df:07:41:f1:25: 5d:a4:fa:dc:40:4b:1e:31:5b:a9:a6:aa:bc:ce:ed:a8:e8:36: 8e:fd:14:3c:66:29:ae:3d:c4:84:08:a6:ec:15:d5:69:67:c3: 0d:38:19:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDPVKd3B4Y6nu9cCRLbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNjU2YjIwMTNlODUxNTE2Yjk0MmZhOTA3MDZjNzIwOTBk Y2RkZWYwHhcNMjUxMjA2MTMwMDUwWhcNMjUxMjA3MTMwMDUwWjAzMTEwLwYDVQQD EyhiNTQyZmU3NjU1YmY0MGJlNmMzNzhmMTY3MTBjZjNiMGRiZWUxMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dx/FNzyw7wIw8+biJn8RjhlI3/v hZyw3T/+2KKkVPfjzf7Nz6yWTHPAy5PVdg7rSx1ZH2jsYqhqwDUK/thlcb8QfVBZ wqN4Q1ElVUVLx84WELPGdtHFaOf1nk1n8Hh3PMOVHZutBU+HP96J++BgFyjwm0Bl ycqBGmvHu3e6wz1NQxrcYxSGHDiSsED7uvPHcs8dQranxLe4usBw+58XePy9hXhs YoK5TpTcw8iGYmGSvkvB0NDvcCBiuSYfS97JjQvRd1RGHjKxJou3Dkc8lCvvVdKL eo/VBNW2Q9kZHb0KQ4FRtUGAAOBqt+iYCJrqiBStwyRyP9j7xLlxITg7rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVC/nZVv0C+bDePFnEM87Db7hENMB8GA1UdIwQY MBaAFF1layAT6FFRa5QvqQcGxyCQ3N3vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDIt NDdhOWY5NmNhNTg2LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8xZGY3NjQtMmI4My00MzQzLTkxMDItNDdhOWY5NmNhNTg2 LzEvWFdWcklCUG9VVkZybEMtcEJ3YkhJSkRjM2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7Nopbea VuPFv8RC/0Ng+a6OsuHrKXGW6KB2HaIpvpW8+i8oezhXEbJWzGywGNyItiSHYBwq 9VgkmNyQ7+hIjLKRfHS3LksOYQDbMwHyJlA4XpKUXIe99ZpjEBJTWrvrGmnFv6W0 tkMWdns2+ZuuEMA2nsN+QT3Hez+D6DmgshLRFdTdKGFQY6d458ljfcGhPDk0j5Bt Kb7AgcwKHJD9HUCRui62f8oJ2MbYfUKbWbBhryJ0+84HUtrrRPjj7VNOpSllu9IY 9iitE5kpOqc+kRiNzt8HQfElXaT63EBLHjFbqaaqvM7tqOg2jv0UPGYprj3EhAim 7BXVaWfDDTgZGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:06 2025 by rpki-client