This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: 7MyczNES6iev8569JbBOtQbNWrkQjPrTWkULetCtTdU= Subject key identifier: B5:5E:B2:F7:E7:CD:C5:B0:56:74:35:3E:31:D3:F4:5B:01:F0:C8:53 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B281B5FD20BCE79597D562E0589358A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11E1 Signing time: Tue 16 Dec 2025 17:00:41 +0000 Manifest this update: Tue 16 Dec 2025 17:00:41 +0000 Manifest next update: Wed 17 Dec 2025 17:00:41 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: U7HkNGKYhlmkvO8LXXfMSnffpbQVZ6J/h2TX3HafCgg=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1b:5f:d2:0b:ce:79:59:7d:56:2e:05:89:35:8a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 16 17:00:41 2025 GMT Not After : Dec 17 17:00:41 2025 GMT Subject: CN=b55eb2f7e7cdc5b05674353e31d3f45b01f0c853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:12:af:92:47:a8:eb:c6:d8:ec:d7:f5:29: 1d:e8:65:ac:95:b9:2a:af:98:f3:2e:f9:84:37:66: 2a:56:96:0c:3e:2a:f9:14:91:cf:d4:92:98:76:82: 28:b5:b4:dc:a2:e2:3c:9a:cb:1c:ec:c2:28:df:68: 2d:9e:f1:eb:62:ea:03:01:0d:ec:41:12:62:da:19: b5:20:87:4d:c5:42:ba:70:11:b8:88:79:35:1a:2e: f2:87:ec:fd:1e:85:63:51:5f:60:e4:75:0f:59:56: c9:c8:7f:a0:f5:b8:3c:3d:6e:05:f7:42:83:f7:66: 79:51:3f:2f:66:36:c4:65:dc:b9:cb:03:11:be:da: 4a:3e:f5:87:aa:63:3b:1b:5f:eb:b8:90:5f:b0:5a: 1f:86:a8:3e:d9:cb:76:3b:98:db:7a:11:cb:6b:fc: b3:18:72:c7:17:7c:14:3b:e7:b7:1d:7a:bd:dd:1b: 45:97:fe:25:29:d7:e6:5f:84:dd:fe:b8:cf:cf:95: 77:af:76:e0:3f:73:1c:c7:da:5b:bd:d6:29:00:e2: aa:a2:2e:fe:23:c6:6a:a3:3a:eb:d4:17:96:1f:63: 66:9d:14:e7:6a:55:38:62:40:9d:07:3f:69:b0:e5: 97:5a:af:3b:5b:39:ec:c3:82:49:06:ce:1f:9a:af: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5E:B2:F7:E7:CD:C5:B0:56:74:35:3E:31:D3:F4:5B:01:F0:C8:53 X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:62:73:a2:50:a1:ca:50:5f:45:31:6e:ee:0d:6a:85:e8:2a: ba:60:f4:0f:23:0b:41:05:00:15:36:6f:13:0d:65:0c:f3:07: ff:6b:10:58:e6:36:af:af:7e:c5:1c:a3:c8:b8:f9:34:26:7d: da:07:92:9f:86:87:7a:01:b5:d7:1a:9d:8b:0c:10:1d:93:fb: 47:e7:6f:ee:d6:3b:a4:8c:ed:1c:76:3b:fd:d1:7f:95:a7:34: 02:3a:f5:3c:f3:32:1b:67:91:20:c2:bc:d1:99:74:dc:75:79: fb:73:6f:e4:96:96:91:f6:a1:49:de:7d:25:4b:46:b4:8c:aa: e6:46:90:55:2a:05:a3:2d:18:8e:7d:c8:a9:76:46:62:5a:cb: 90:e8:42:5a:1e:4a:51:01:bf:71:7e:f2:da:f4:4b:9e:bc:73: 4b:38:00:a5:08:20:8f:cc:47:2c:2d:83:3e:81:ce:23:7b:bf: f8:04:df:2c:45:f8:1f:42:1c:01:6a:f5:ea:82:b8:cb:17:a3: 2e:de:fc:4b:3a:4f:a6:aa:f8:40:a8:66:3e:29:e8:26:bd:6b: f2:6d:27:10:b5:ca:ee:e6:78:91:50:fa:56:97:8b:44:39:36: ac:d0:86:a0:17:b1:6f:82:55:02:50:2e:9c:86:08:c8:4a:46: a0:f6:58:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsoG1/SC855WX1WLgWJNYpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjE2MTcwMDQxWhcNMjUxMjE3MTcwMDQxWjAzMTEwLwYDVQQD EyhiNTVlYjJmN2U3Y2RjNWIwNTY3NDM1M2UzMWQzZjQ1YjAxZjBjODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jkSr5JHqOvG2OzX9Skd6GWslbkq r5jzLvmEN2YqVpYMPir5FJHP1JKYdoIotbTcouI8mssc7MIo32gtnvHrYuoDAQ3s QRJi2hm1IIdNxUK6cBG4iHk1Gi7yh+z9HoVjUV9g5HUPWVbJyH+g9bg8PW4F90KD 92Z5UT8vZjbEZdy5ywMRvtpKPvWHqmM7G1/ruJBfsFofhqg+2ct2O5jbehHLa/yz GHLHF3wUO+e3HXq93RtFl/4lKdfmX4Td/rjPz5V3r3bgP3Mcx9pbvdYpAOKqoi7+ I8Zqozrr1BeWH2NmnRTnalU4YkCdBz9psOWXWq87Wznsw4JJBs4fmq9GzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVesvfnzcWwVnQ1PjHT9FsB8MhTMB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGJzolCh ylBfRTFu7g1qhegqumD0DyMLQQUAFTZvEw1lDPMH/2sQWOY2r69+xRyjyLj5NCZ9 2geSn4aHegG11xqdiwwQHZP7R+dv7tY7pIztHHY7/dF/lac0Ajr1PPMyG2eRIMK8 0Zl03HV5+3Nv5JaWkfahSd59JUtGtIyq5kaQVSoFoy0Yjn3IqXZGYlrLkOhCWh5K UQG/cX7y2vRLnrxzSzgApQggj8xHLC2DPoHOI3u/+ATfLEX4H0IcAWr16oK4yxej Lt78SzpPpqr4QKhmPinoJr1r8m0nELXK7uZ4kVD6VpeLRDk2rNCGoBexb4JVAlAu nIYIyEpGoPZYCA== -----END CERTIFICATE-----Generated at Tue Dec 16 20:59:59 2025 by rpki-client