This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft File: xljr82IzPBhfPBI8Qr5En9KneTg.mft (raw, json) Hash identifier: ZjAWS/Rq/ViaOdPMEF1RdM7tg6kgskWG2ANV7tFX8FA= Subject key identifier: 44:36:AF:DE:CF:B7:CC:9F:65:F4:07:03:B8:37:24:B0:17:1B:D3:E0 Authority key identifier: C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38 Certificate issuer: /CN=c658ebf362333c185f3c123c42be449fd2a77938 Certificate serial: 019B59AC812037FA6F70C5FFA9F131FA7EA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft Manifest number: BE Signing time: Fri 26 Dec 2025 08:00:36 +0000 Manifest this update: Fri 26 Dec 2025 08:00:36 +0000 Manifest next update: Sat 27 Dec 2025 08:00:36 +0000 Files and hashes: 1: xljr82IzPBhfPBI8Qr5En9KneTg.crl (hash: ZxeRtYjIEjFyPEQeun5oQxojjQMtvIivzhhpPcquMZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:81:20:37:fa:6f:70:c5:ff:a9:f1:31:fa:7e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c658ebf362333c185f3c123c42be449fd2a77938 Validity Not Before: Dec 26 08:00:36 2025 GMT Not After : Dec 27 08:00:36 2025 GMT Subject: CN=4436afdecfb7cc9f65f40703b83724b0171bd3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ec:0f:2f:ff:6d:35:61:d9:ad:5f:b8:69:65: 6a:32:54:48:52:5b:11:b2:d5:99:c9:bd:16:83:76: f4:22:a5:c4:c4:6f:16:00:27:1b:3f:95:b2:fb:3c: 81:26:7a:ef:bf:b4:2d:f8:68:b1:73:b2:b4:0d:f5: 67:77:c7:e5:26:11:20:77:23:56:fe:18:6f:0e:50: 15:f4:89:c2:6a:f9:05:ff:7e:b2:35:74:75:47:48: 60:ea:4f:d5:39:f1:0e:cf:e4:91:f7:66:25:e4:66: 69:0f:b6:26:f3:17:9b:53:c7:01:3d:8d:15:aa:95: 3c:a1:cc:a2:73:04:24:d3:da:ef:1e:f5:ca:c8:d4: fc:67:d6:39:7e:35:7a:3b:76:16:11:22:9f:d6:cf: e4:53:3a:e3:71:b3:bf:19:13:7d:49:7e:ea:ca:0c: 4e:06:77:8e:1c:7e:88:13:c4:ee:04:b4:41:71:e8: 14:31:70:cd:e1:e9:7d:77:78:e9:f7:ed:9b:00:67: cf:cf:40:7a:cb:a5:2f:dc:ab:e3:d0:a6:08:20:14: 72:79:62:92:d1:54:46:c7:7c:fe:45:10:41:12:df: 91:26:69:14:8b:39:ac:75:64:a1:59:8c:ae:e7:ad: 6e:18:94:ab:a4:fc:f4:31:27:05:5c:7a:ff:6d:c0: 22:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:36:AF:DE:CF:B7:CC:9F:65:F4:07:03:B8:37:24:B0:17:1B:D3:E0 X509v3 Authority Key Identifier: keyid:C6:58:EB:F3:62:33:3C:18:5F:3C:12:3C:42:BE:44:9F:D2:A7:79:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xljr82IzPBhfPBI8Qr5En9KneTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/54245a-993d-41de-9091-6daa4a4a421c/1/xljr82IzPBhfPBI8Qr5En9KneTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e9:c1:58:49:f4:88:8b:13:2d:6c:ba:c2:7a:56:17:0a:15: ca:c6:58:e2:aa:48:37:5c:30:15:ce:78:ca:45:da:28:8b:f8: bb:14:7e:18:70:da:65:13:05:e2:5d:9e:1e:50:62:ce:4a:b2: e0:b1:1b:50:8c:e3:77:fd:f3:78:36:71:d3:51:55:5e:fa:de: b2:81:05:cb:a2:b2:a9:35:56:07:b2:aa:2e:60:17:49:f4:99: 13:28:57:41:a5:a2:8c:37:6d:16:08:99:7c:2d:fe:cb:4d:ed: 04:da:05:3b:14:79:e7:4d:92:a1:be:0f:16:dc:fc:84:f4:4b: 99:14:3d:28:88:21:cc:98:4a:47:b0:0b:60:f1:c9:ed:87:0a: 17:be:5a:fd:04:c5:80:5e:85:2e:d7:da:38:40:1d:f4:c3:60: a9:a3:e3:8c:e7:53:58:ed:5d:ef:67:87:3b:97:e6:f5:84:5c: 34:eb:5a:70:c8:62:77:82:54:5f:4b:23:e2:f4:cb:ee:54:75: c8:7c:a9:d0:17:9a:05:8a:5f:f8:f5:1b:3b:bb:63:03:ff:cb: de:e2:e5:45:d8:6c:2d:4d:98:6a:a0:91:39:f5:18:59:d5:ed: 91:30:25:d7:74:0b:df:0b:0a:23:79:2d:6b:ba:e6:80:82:ac: 38:7f:4a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIEgN/pvcMX/qfEx+n6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NThlYmYzNjIzMzNjMTg1ZjNjMTIzYzQyYmU0NDlmZDJh Nzc5MzgwHhcNMjUxMjI2MDgwMDM2WhcNMjUxMjI3MDgwMDM2WjAzMTEwLwYDVQQD Eyg0NDM2YWZkZWNmYjdjYzlmNjVmNDA3MDNiODM3MjRiMDE3MWJkM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ewPL/9tNWHZrV+4aWVqMlRIUlsR stWZyb0Wg3b0IqXExG8WACcbP5Wy+zyBJnrvv7Qt+Gixc7K0DfVnd8flJhEgdyNW /hhvDlAV9InCavkF/36yNXR1R0hg6k/VOfEOz+SR92Yl5GZpD7Ym8xebU8cBPY0V qpU8ocyicwQk09rvHvXKyNT8Z9Y5fjV6O3YWESKf1s/kUzrjcbO/GRN9SX7qygxO BneOHH6IE8TuBLRBcegUMXDN4el9d3jp9+2bAGfPz0B6y6Uv3Kvj0KYIIBRyeWKS 0VRGx3z+RRBBEt+RJmkUizmsdWShWYyu561uGJSrpPz0MScFXHr/bcAi1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ2r97Pt8yfZfQHA7g3JLAXG9PgMB8GA1UdIwQY MBaAFMZY6/NiMzwYXzwSPEK+RJ/Sp3k4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NDI0NWEtOTkzZC00MWRlLTkwOTEt NmRhYTRhNGE0MjFjLzEveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NDI0NWEtOTkzZC00MWRlLTkwOTEtNmRhYTRhNGE0MjFj LzEveGxqcjgySXpQQmhmUEJJOFFyNUVuOUtuZVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+nBWEn0 iIsTLWy6wnpWFwoVysZY4qpIN1wwFc54ykXaKIv4uxR+GHDaZRMF4l2eHlBizkqy 4LEbUIzjd/3zeDZx01FVXvresoEFy6KyqTVWB7KqLmAXSfSZEyhXQaWijDdtFgiZ fC3+y03tBNoFOxR5502Sob4PFtz8hPRLmRQ9KIghzJhKR7ALYPHJ7YcKF75a/QTF gF6FLtfaOEAd9MNgqaPjjOdTWO1d72eHO5fm9YRcNOtacMhid4JUX0sj4vTL7lR1 yHyp0BeaBYpf+PUbO7tjA//L3uLlRdhsLU2YaqCROfUYWdXtkTAl13QL3wsKI3kt a7rmgIKsOH9Kdg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:02 2025 by rpki-client