This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft File: XBxjojad99_s88hQhZM0HNNpsjc.mft (raw, json) Hash identifier: mg0cmdCh05k4TwxvzEoORmI7ROM7Cyrp0ou5HRSLoP0= Subject key identifier: 49:BE:23:31:CA:CD:6F:71:55:BC:FF:47:2D:F8:1F:1C:8C:36:9B:22 Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Certificate serial: 019B1049F3CB0E3F1123278F46AF0426736A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft Manifest number: 06D0 Signing time: Fri 12 Dec 2025 02:00:40 +0000 Manifest this update: Fri 12 Dec 2025 02:00:40 +0000 Manifest next update: Sat 13 Dec 2025 02:00:40 +0000 Files and hashes: 1: XBxjojad99_s88hQhZM0HNNpsjc.crl (hash: Rrf9onBMSD57iCX3AF8tomBEHoTZCgFfFGYavbSZrcg=) 2: dkL-icE6gq78C7DesQUCkZbkiGU.roa (hash: cFio+9rofPRYCPknrSyqNWrmK0BvI1RqaWk0ZI2vMRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:f3:cb:0e:3f:11:23:27:8f:46:af:04:26:73:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237 Validity Not Before: Dec 12 02:00:40 2025 GMT Not After : Dec 13 02:00:40 2025 GMT Subject: CN=49be2331cacd6f7155bcff472df81f1c8c369b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c8:27:e0:29:46:23:de:fc:f3:25:8f:a2:93: ee:7e:dd:ed:d2:a4:73:2d:96:a9:3f:05:71:52:56: 16:01:0e:e6:b6:90:a1:f5:ac:86:04:52:73:cc:b6: fb:18:16:6c:ff:a1:e8:4a:a5:75:f1:6c:3c:0e:2a: ba:7a:a1:ce:54:9f:0f:82:e3:cc:f7:ef:e6:ab:18: 89:97:b1:7d:f5:28:45:28:bd:c1:47:70:3c:a4:f9: b0:60:d2:cb:7c:2d:4c:62:38:e8:19:ec:c5:59:d0: d0:a7:ab:82:d7:cd:28:c9:66:c7:01:f9:b0:52:40: 07:7a:f6:d1:8c:34:fd:a9:47:cb:b1:03:41:47:0f: 6f:a8:ec:7a:30:e3:90:49:c9:78:96:e2:7a:e1:ce: 46:32:e9:5d:cb:4a:f3:a2:a9:fa:e2:e4:0a:82:94: 22:f4:44:6f:39:eb:5c:c7:6c:ed:83:c0:c2:2a:74: 47:b4:71:3e:e1:9e:a6:13:66:d4:b2:3e:78:f1:dd: 4a:df:4f:09:7f:c1:b7:d8:85:2b:65:a1:08:48:95: 29:07:37:31:10:d7:b4:0e:9c:18:4f:f8:7b:3a:12: 08:eb:c9:ca:9e:a7:a0:c8:b1:ea:02:cd:da:1b:4d: 3c:1f:b3:f7:47:4a:3f:91:e5:e3:38:f6:f7:49:c8: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BE:23:31:CA:CD:6F:71:55:BC:FF:47:2D:F8:1F:1C:8C:36:9B:22 X509v3 Authority Key Identifier: keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0f:4b:d7:af:2b:e6:cc:ad:2f:aa:16:1a:3e:6c:14:3e:39: 69:34:1a:3e:b2:b1:f1:e5:4c:f1:51:72:5a:74:53:74:f9:19: 8e:36:eb:b5:47:82:00:16:83:01:66:56:af:ed:ab:83:de:36: cb:46:4f:a8:46:0c:82:6d:b7:fb:83:66:5a:79:8f:9a:32:8b: a2:6c:5c:8e:57:4e:c5:67:3f:10:d0:80:d3:2f:df:2c:67:61: 47:a8:57:50:8b:43:2c:0a:42:ef:33:36:ab:63:c0:be:35:7b: c5:31:bb:a0:75:45:f9:15:5d:8e:bf:ab:a8:21:f7:0a:2f:7e: 69:a2:82:07:84:bb:00:e9:a4:f3:6e:00:e8:b5:06:21:72:07: 1a:e4:13:42:ca:57:e5:85:d8:a0:5b:1c:83:45:3d:b8:37:6f: 71:3d:5d:ed:85:99:f8:bd:de:56:5e:62:e8:d7:c3:69:6e:e0: cf:43:a6:7e:85:13:c7:02:1b:c4:45:df:21:b7:01:bb:4b:51: 50:9b:95:60:92:e0:8d:0e:5b:95:ee:f0:27:72:ca:7e:9c:87: 82:cf:f4:3b:41:62:d6:16:47:34:9f:ac:b2:16:ff:42:54:1b: ea:f6:08:39:dc:89:3d:c1:ff:c8:7b:e3:82:da:6f:5c:0d:92: fb:8e:2a:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSfPLDj8RIyePRq8EJnNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjMWM2M2EyMzY5ZGY3ZGZlY2YzYzg1MDg1OTMzNDFjZDM2 OWIyMzcwHhcNMjUxMjEyMDIwMDQwWhcNMjUxMjEzMDIwMDQwWjAzMTEwLwYDVQQD Eyg0OWJlMjMzMWNhY2Q2ZjcxNTViY2ZmNDcyZGY4MWYxYzhjMzY5YjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysgn4ClGI9788yWPopPuft3t0qRz LZapPwVxUlYWAQ7mtpCh9ayGBFJzzLb7GBZs/6HoSqV18Ww8Diq6eqHOVJ8PguPM 9+/mqxiJl7F99ShFKL3BR3A8pPmwYNLLfC1MYjjoGezFWdDQp6uC180oyWbHAfmw UkAHevbRjDT9qUfLsQNBRw9vqOx6MOOQScl4luJ64c5GMuldy0rzoqn64uQKgpQi 9ERvOetcx2ztg8DCKnRHtHE+4Z6mE2bUsj548d1K308Jf8G32IUrZaEISJUpBzcx ENe0DpwYT/h7OhII68nKnqegyLHqAs3aG008H7P3R0o/keXjOPb3Scj7nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm+IzHKzW9xVbz/Ry34HxyMNpsiMB8GA1UdIwQY MBaAFFwcY6I2nfff7PPIUIWTNBzTabI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUt NjdhMThkNjJlYzJkLzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81N2M3M2EtMWFkNi00ZDVhLWIyMjUtNjdhMThkNjJlYzJk LzEvWEJ4am9qYWQ5OV9zODhoUWhaTTBITk5wc2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJg9L168r 5sytL6oWGj5sFD45aTQaPrKx8eVM8VFyWnRTdPkZjjbrtUeCABaDAWZWr+2rg942 y0ZPqEYMgm23+4NmWnmPmjKLomxcjldOxWc/ENCA0y/fLGdhR6hXUItDLApC7zM2 q2PAvjV7xTG7oHVF+RVdjr+rqCH3Ci9+aaKCB4S7AOmk824A6LUGIXIHGuQTQspX 5YXYoFscg0U9uDdvcT1d7YWZ+L3eVl5i6NfDaW7gz0OmfoUTxwIbxEXfIbcBu0tR UJuVYJLgjQ5ble7wJ3LKfpyHgs/0O0Fi1hZHNJ+sshb/QlQb6vYIOdyJPcH/yHvj gtpvXA2S+44qXw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:27 2025 by rpki-client