This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: oxhA594++APOJ/pTIha3tVdYnPxBkXwvIqdcxpJVs5s= Subject key identifier: 6B:D4:65:CB:F2:2D:9D:30:87:8D:EC:FD:66:B9:68:0A:4B:D1:04:27 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019AF208CEFA86A3A508F6A68D85AA2157A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11C5 Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 1ygQ0Ny+d9YJQYzml1LRKZeHmdVN5Eobsfe7Zit6VVw=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ce:fa:86:a3:a5:08:f6:a6:8d:85:aa:21:57:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=6bd465cbf22d9d30878decfd66b9680a4bd10427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:00:87:e6:1c:04:bd:9f:e2:12:1e:f0:9c:1d: 91:ce:b0:04:2e:63:18:bf:65:36:e3:57:5f:e6:3b: 6e:6d:bd:7f:fa:db:22:4d:49:3f:a7:66:38:c4:92: 49:2a:0e:0f:cd:25:2e:5c:d5:be:e7:ae:f8:75:c6: cb:a4:6e:3c:4a:78:ca:4b:e9:f5:2d:b3:92:6a:a4: ea:bc:77:14:0d:5e:4f:5b:de:fb:0a:45:2a:45:ed: d5:e2:1b:4c:f4:04:d2:04:77:12:c8:16:14:14:cd: b3:cd:18:20:c3:5c:14:2c:b1:15:cb:83:a2:c8:65: 1f:af:a5:6b:12:a9:fa:50:4d:4e:da:25:3c:ad:32: f4:98:93:e4:02:c7:29:2d:cb:6a:96:fb:cc:39:a3: 49:be:1b:65:e5:34:81:55:e5:fa:eb:aa:b9:2e:63: 21:7d:f6:bc:d8:f7:9f:f7:58:4e:c9:29:0f:8e:54: 02:52:3e:4b:ea:19:f2:ef:23:60:1f:48:70:b2:45: 84:c0:99:55:94:7a:97:77:bc:79:9d:c8:56:8f:c1: 2d:3d:4f:9b:df:ea:0f:c4:95:a9:9c:c2:1c:f5:20: f1:d6:d2:50:2d:7c:30:4a:12:5c:59:67:67:2e:63: 77:59:65:fe:80:f8:bd:15:6d:f8:bd:82:97:33:b6: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D4:65:CB:F2:2D:9D:30:87:8D:EC:FD:66:B9:68:0A:4B:D1:04:27 X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fa:2c:6f:64:77:1e:3d:6b:64:eb:ec:5f:0a:85:72:38:3a: d0:8f:d3:a6:7c:c5:d1:32:66:29:ff:be:67:7c:ed:5c:b0:7a: d6:d5:11:0e:65:82:77:f7:49:2a:56:78:59:e5:ba:9f:08:2e: 43:53:4f:3a:6a:6f:14:d3:9d:a9:93:da:e2:81:c2:16:ef:b1: cc:c6:fc:09:80:86:99:6f:6d:18:9a:2c:5c:34:1c:7e:97:33: 07:c4:49:ad:04:78:85:f5:47:44:8f:2e:e9:a5:7f:81:ba:cc: 00:a2:6d:fa:bb:61:71:c9:1a:64:bf:e0:5b:5e:83:e2:5a:22: 85:8c:d9:9d:38:9d:5e:87:0f:63:19:91:8a:d1:1c:d3:6e:2e: c3:13:a6:12:86:20:6d:95:39:81:8e:de:be:a1:19:21:42:cf: 60:35:e7:b6:8a:25:78:87:f7:76:4e:2b:e6:63:87:27:1f:77: b3:31:57:97:bb:30:a0:e7:6a:a1:e3:b9:7d:b9:2d:d6:fb:14: 9a:7c:89:38:89:19:49:18:0f:05:d1:d8:c6:e5:d2:d9:9e:d3: fa:d0:06:e5:62:29:43:d2:5e:27:09:b7:b1:87:04:fe:de:f2: ae:e8:e1:5b:a0:60:c5:5f:ec:4a:ce:db:2b:20:77:7d:20:d7: f1:92:34:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCM76hqOlCPamjYWqIVelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD Eyg2YmQ0NjVjYmYyMmQ5ZDMwODc4ZGVjZmQ2NmI5NjgwYTRiZDEwNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ACH5hwEvZ/iEh7wnB2RzrAELmMY v2U241df5jtubb1/+tsiTUk/p2Y4xJJJKg4PzSUuXNW+5674dcbLpG48SnjKS+n1 LbOSaqTqvHcUDV5PW977CkUqRe3V4htM9ATSBHcSyBYUFM2zzRggw1wULLEVy4Oi yGUfr6VrEqn6UE1O2iU8rTL0mJPkAscpLctqlvvMOaNJvhtl5TSBVeX666q5LmMh ffa82Pef91hOySkPjlQCUj5L6hny7yNgH0hwskWEwJlVlHqXd7x5nchWj8EtPU+b 3+oPxJWpnMIc9SDx1tJQLXwwShJcWWdnLmN3WWX+gPi9FW34vYKXM7b/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvUZcvyLZ0wh43s/Wa5aApL0QQnMB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPosb2R3 Hj1rZOvsXwqFcjg60I/TpnzF0TJmKf++Z3ztXLB61tURDmWCd/dJKlZ4WeW6nwgu Q1NPOmpvFNOdqZPa4oHCFu+xzMb8CYCGmW9tGJosXDQcfpczB8RJrQR4hfVHRI8u 6aV/gbrMAKJt+rthcckaZL/gW16D4loihYzZnTidXocPYxmRitEc024uwxOmEoYg bZU5gY7evqEZIULPYDXntooleIf3dk4r5mOHJx93szFXl7swoOdqoeO5fbkt1vsU mnyJOIkZSRgPBdHYxuXS2Z7T+tAG5WIpQ9JeJwm3sYcE/t7yrujhW6BgxV/sSs7b KyB3fSDX8ZI0sg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:26 2025 by rpki-client