This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: Ls2vy8C60chD9xliLppeDDvCyManTmIEE9nONwX24WQ= Subject key identifier: F9:EE:18:76:FC:91:B9:C8:0E:B4:BE:6B:31:32:0F:71:0A:22:5A:4D Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B262D0A11320AF777653CB69BA27FF5DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11E0 Signing time: Tue 16 Dec 2025 08:00:44 +0000 Manifest this update: Tue 16 Dec 2025 08:00:44 +0000 Manifest next update: Wed 17 Dec 2025 08:00:44 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: GqANGdjJ1zT3EcDBKp4B5kCEkFoAZM1wS84/1mT3IZ8=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:0a:11:32:0a:f7:77:65:3c:b6:9b:a2:7f:f5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 16 08:00:44 2025 GMT Not After : Dec 17 08:00:44 2025 GMT Subject: CN=f9ee1876fc91b9c80eb4be6b31320f710a225a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:eb:54:fc:93:be:20:d8:7f:e9:71:9b:a9:e2: ee:64:2e:fe:c5:1f:98:ab:20:90:08:86:63:7c:1d: c0:64:84:56:ad:aa:63:3f:f0:b4:de:b5:e9:8b:8e: 74:58:2a:e8:0a:0f:c5:6a:13:b4:46:8a:7e:fa:05: 16:8b:d2:84:5e:b6:f2:6d:39:8d:4c:08:26:c0:75: 8c:ea:21:e4:3f:13:52:98:76:93:3d:c2:0e:3f:88: ae:60:60:60:ba:78:93:d5:71:ac:8f:88:a7:ce:c4: df:0b:53:3e:fe:eb:c1:08:d2:3e:73:74:10:a5:f6: a1:fc:ca:b8:6e:ad:81:10:d9:70:57:33:ae:86:8f: 89:25:e7:f4:e1:79:a1:3c:36:f0:ad:e0:46:21:aa: 13:f2:7b:c2:e5:96:dc:2a:9b:63:08:87:44:e7:4e: 31:c3:9b:ca:17:83:7f:25:57:70:21:f7:90:0f:6c: 8f:f0:1c:82:77:5f:f1:87:0e:a6:84:37:e5:3c:8e: 61:c1:cc:91:ee:4f:11:59:77:8f:19:f6:4b:a6:88: 10:0d:00:45:30:92:91:20:2b:d3:62:ee:fc:6d:1f: 13:7e:4d:ac:ad:e3:01:b4:79:97:48:f4:6c:b5:08: ae:9c:a2:ac:25:40:d5:00:31:8e:05:5f:ab:4d:0c: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EE:18:76:FC:91:B9:C8:0E:B4:BE:6B:31:32:0F:71:0A:22:5A:4D X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:2e:ea:39:f2:b7:71:25:c5:d8:a7:00:20:f8:bf:1a:d9: b4:e5:78:bf:a8:cb:d8:b8:68:ff:1e:81:51:1c:65:de:cb:e5: 77:86:53:78:de:a2:50:1b:df:46:10:20:48:9c:c4:9c:71:64: 2d:11:2b:64:9e:d4:71:13:21:d8:8e:e7:c4:05:9f:a1:21:92: 8f:c4:2d:28:e1:3c:58:08:c0:31:8f:b2:ad:42:c2:78:1b:d3: 3c:b5:e3:7a:69:eb:52:4a:4a:e9:ff:ee:16:95:37:6e:65:b7: 80:87:cf:d2:18:9c:57:23:e3:e1:07:ba:93:68:9e:21:21:17: c2:63:af:f4:1a:9e:4c:a1:6d:59:a9:47:43:61:6d:48:88:bb: b9:d8:a6:6c:d9:e6:2e:87:ea:aa:8b:a3:65:9d:6a:c9:7b:83: ff:05:51:b5:dc:94:e4:1e:c6:39:6d:aa:a6:16:5b:f0:7a:a1: 2c:a7:d0:3a:ff:86:3c:bb:1a:e7:be:2f:e0:3c:36:7c:47:db: f4:84:f5:13:c3:e5:8f:26:e2:54:7c:4d:f6:86:0d:bf:03:70: 45:60:d8:a1:a5:10:5f:9e:60:bf:83:b3:37:80:b6:5c:ff:b5: 07:56:12:e8:d9:29:9b:75:3e:b7:24:0d:f8:d6:0e:62:91:de: 2e:af:ec:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLQoRMgr3d2U8tpuif/XaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjE2MDgwMDQ0WhcNMjUxMjE3MDgwMDQ0WjAzMTEwLwYDVQQD EyhmOWVlMTg3NmZjOTFiOWM4MGViNGJlNmIzMTMyMGY3MTBhMjI1YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmutU/JO+INh/6XGbqeLuZC7+xR+Y qyCQCIZjfB3AZIRWrapjP/C03rXpi450WCroCg/FahO0Rop++gUWi9KEXrbybTmN TAgmwHWM6iHkPxNSmHaTPcIOP4iuYGBguniT1XGsj4inzsTfC1M+/uvBCNI+c3QQ pfah/Mq4bq2BENlwVzOuho+JJef04XmhPDbwreBGIaoT8nvC5ZbcKptjCIdE504x w5vKF4N/JVdwIfeQD2yP8ByCd1/xhw6mhDflPI5hwcyR7k8RWXePGfZLpogQDQBF MJKRICvTYu78bR8Tfk2sreMBtHmXSPRstQiunKKsJUDVADGOBV+rTQwLWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnuGHb8kbnIDrS+azEyD3EKIlpNMB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBMu6jny t3ElxdinACD4vxrZtOV4v6jL2Lho/x6BURxl3svld4ZTeN6iUBvfRhAgSJzEnHFk LRErZJ7UcRMh2I7nxAWfoSGSj8QtKOE8WAjAMY+yrULCeBvTPLXjemnrUkpK6f/u FpU3bmW3gIfP0hicVyPj4Qe6k2ieISEXwmOv9BqeTKFtWalHQ2FtSIi7udimbNnm LofqqoujZZ1qyXuD/wVRtdyU5B7GOW2qphZb8HqhLKfQOv+GPLsa574v4Dw2fEfb 9IT1E8PljybiVHxN9oYNvwNwRWDYoaUQX55gv4OzN4C2XP+1B1YS6Nkpm3U+tyQN +NYOYpHeLq/sxg== -----END CERTIFICATE-----Generated at Tue Dec 16 18:01:20 2025 by rpki-client