This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json) Hash identifier: C0skfjpLRYaw9Weum3RxgSx76Qo80AK3ZyASmpVH/M4= Subject key identifier: FA:3A:8E:3D:AF:7A:31:83:73:4F:4B:61:59:AF:19:7D:DB:E9:24:0F Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Certificate serial: 019B10EF49187C6FA773F4BCEB89B856B496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft Manifest number: 0D23 Signing time: Fri 12 Dec 2025 05:01:15 +0000 Manifest this update: Fri 12 Dec 2025 05:01:15 +0000 Manifest next update: Sat 13 Dec 2025 05:01:15 +0000 Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: arrx8OyCXDapP7xBrWlMQi4TnQ5vk9uh7BrP1LdKXKI=) 2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:49:18:7c:6f:a7:73:f4:bc:eb:89:b8:56:b4:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Validity Not Before: Dec 12 05:01:15 2025 GMT Not After : Dec 13 05:01:15 2025 GMT Subject: CN=fa3a8e3daf7a3183734f4b6159af197ddbe9240f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ce:dd:bf:02:e6:3d:21:75:b8:7b:72:b1:7f: 77:87:37:c2:5b:d3:16:88:0f:0c:f8:d2:a3:55:e7: 61:dc:2e:8f:7f:7d:56:73:f8:ed:e9:6b:00:0d:99: 04:3a:4f:29:b3:f3:53:f5:49:b4:b4:d5:4a:e6:3e: 8e:af:45:f4:69:fa:13:1a:7e:67:5d:41:0e:55:c5: 82:e2:a0:70:35:20:69:7f:c4:86:38:8d:89:6b:f0: bd:6b:7f:a9:83:f3:f5:f3:d0:d3:4f:b7:5e:4e:3e: 3c:5d:45:57:21:30:da:16:2a:8d:15:00:c5:55:d7: 83:57:c4:4e:a3:7e:bd:47:70:4f:95:e0:fd:83:9d: 84:6c:9e:0d:fb:dc:e6:f3:e2:b5:ef:61:a4:aa:47: a7:cd:16:5f:eb:09:95:e0:d4:17:5b:47:86:d0:be: c7:ac:6e:d7:29:d8:33:62:ff:c2:a0:4f:b2:89:4c: 19:de:9c:c7:6d:d7:fd:0c:3f:8e:6c:21:ca:fe:9c: ba:96:df:81:3e:e6:38:91:3c:2f:2b:20:3b:bb:37: 22:1e:a3:68:8d:2d:8d:d3:31:c1:80:c2:8c:bb:a1: 94:1c:3f:d0:77:58:b4:9e:3d:c8:80:81:9a:ad:cc: ff:ee:29:13:fc:8e:52:d3:1d:55:33:fb:bd:f8:d9: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3A:8E:3D:AF:7A:31:83:73:4F:4B:61:59:AF:19:7D:DB:E9:24:0F X509v3 Authority Key Identifier: keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cc:28:21:4e:e5:84:09:8f:a4:5d:5f:ce:1f:8d:58:5c:1a: a2:ca:83:9b:c2:f5:9c:29:75:cb:e4:21:50:23:1e:be:a4:76: ab:28:62:e1:e4:3f:5e:18:99:bb:21:7f:e8:83:a4:94:1a:d8: 44:72:35:db:2b:fa:b9:79:37:7b:bb:ac:af:ea:37:db:5c:c7: 99:86:85:52:1e:b8:9b:a0:80:28:2e:66:e5:e1:ec:7e:e8:bf: 9d:4f:c3:9d:ab:f8:16:0d:48:63:52:10:8f:b6:12:32:1e:3d: 36:57:86:19:aa:14:b4:66:11:05:02:e3:01:f2:a9:a8:4f:4f: 8c:83:3e:7e:48:0a:c5:1a:0e:d6:9b:9a:45:51:cd:fb:94:3f: 38:27:76:41:15:9b:74:2d:ae:33:bf:00:c1:d0:35:c9:7c:b1: ab:b0:48:3b:b9:c1:39:73:d0:c8:de:92:d5:d4:b0:df:43:5f: 6d:22:65:92:18:46:b2:f3:1d:eb:5f:d6:9c:f4:13:f8:94:d7: ad:78:76:d2:c2:f1:76:43:17:76:03:d9:db:3c:4a:72:90:b7: ee:62:8b:89:83:a6:7a:3a:e2:30:80:8e:0c:ea:0a:5d:12:8a: bc:8e:b2:9a:bf:2b:d1:11:dc:a2:2b:d3:13:33:15:3e:a7:1e: ff:0e:35:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ70kYfG+nc/S864m4VrSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh YWMyZDkwHhcNMjUxMjEyMDUwMTE1WhcNMjUxMjEzMDUwMTE1WjAzMTEwLwYDVQQD EyhmYTNhOGUzZGFmN2EzMTgzNzM0ZjRiNjE1OWFmMTk3ZGRiZTkyNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM7dvwLmPSF1uHtysX93hzfCW9MW iA8M+NKjVedh3C6Pf31Wc/jt6WsADZkEOk8ps/NT9Um0tNVK5j6Or0X0afoTGn5n XUEOVcWC4qBwNSBpf8SGOI2Ja/C9a3+pg/P189DTT7deTj48XUVXITDaFiqNFQDF VdeDV8ROo369R3BPleD9g52EbJ4N+9zm8+K172GkqkenzRZf6wmV4NQXW0eG0L7H rG7XKdgzYv/CoE+yiUwZ3pzHbdf9DD+ObCHK/py6lt+BPuY4kTwvKyA7uzciHqNo jS2N0zHBgMKMu6GUHD/Qd1i0nj3IgIGarcz/7ikT/I5S0x1VM/u9+NkGywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo6jj2vejGDc09LYVmvGX3b6SQPMB8GA1UdIwQY MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPswoIU7l hAmPpF1fzh+NWFwaosqDm8L1nCl1y+QhUCMevqR2qyhi4eQ/XhiZuyF/6IOklBrY RHI12yv6uXk3e7usr+o321zHmYaFUh64m6CAKC5m5eHsfui/nU/Dnav4Fg1IY1IQ j7YSMh49NleGGaoUtGYRBQLjAfKpqE9PjIM+fkgKxRoO1puaRVHN+5Q/OCd2QRWb dC2uM78AwdA1yXyxq7BIO7nBOXPQyN6S1dSw30NfbSJlkhhGsvMd61/WnPQT+JTX rXh20sLxdkMXdgPZ2zxKcpC37mKLiYOmejriMICODOoKXRKKvI6ymr8r0RHcoivT EzMVPqce/w41wA== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:16 2025 by rpki-client