This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft File: xb14VKoFD9blUPx80CtVhzC_u3o.mft (raw, json) Hash identifier: Fm9Jw//R/riDmHtK8auLQzzcpkeatyYxnJ6Va2qNCFI= Subject key identifier: AB:6B:89:14:BC:4B:43:55:5E:AF:B2:02:41:7B:B7:44:D1:A9:6E:63 Authority key identifier: C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A Certificate issuer: /CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Certificate serial: 019AFCC35D717CC2ACE6C71C236678A11855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft Manifest number: 06B5 Signing time: Mon 08 Dec 2025 07:00:53 +0000 Manifest this update: Mon 08 Dec 2025 07:00:53 +0000 Manifest next update: Tue 09 Dec 2025 07:00:53 +0000 Files and hashes: 1: 5uFqMN3aXlbPQyR_zV-aShdoN_Y.roa (hash: jy9SGKilmmhulS0SQ8USL/F90L5q42BS/yYoLYQj470=) 2: xb14VKoFD9blUPx80CtVhzC_u3o.crl (hash: CmMPCLrXWS1SHDoZrCokThkhaDIWsJ2mLGVluw4Hqrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:5d:71:7c:c2:ac:e6:c7:1c:23:66:78:a1:18:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5bd7854aa050fd6e550fc7cd02b558730bfbb7a Validity Not Before: Dec 8 07:00:53 2025 GMT Not After : Dec 9 07:00:53 2025 GMT Subject: CN=ab6b8914bc4b43555eafb202417bb744d1a96e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:c1:e7:bd:4f:8e:0f:75:0f:1d:da:28:ab: 7d:0b:07:fc:bb:b8:68:82:9f:00:db:4b:9c:5c:94: be:b1:28:b7:1a:d3:1c:16:28:d9:ad:de:8e:b9:b5: ba:dd:13:a0:86:52:19:90:d5:2c:9c:ee:04:d5:60: 25:98:12:55:35:71:a9:24:22:5e:cb:e8:ea:c3:a6: 09:94:0a:e8:19:61:ca:34:11:9f:35:81:ce:ec:ca: 69:cc:10:dc:82:bc:b8:ad:8a:bb:b1:67:69:0b:35: 40:c7:a0:02:7d:1f:f7:b5:32:16:87:a1:c2:8e:96: 80:4f:1f:ad:90:3f:42:fd:b4:3e:44:57:fb:31:af: 9a:7f:90:7e:f5:d3:6d:fd:9b:d1:78:a7:48:8b:73: 46:98:c4:c1:ce:69:35:ae:63:e1:ff:27:11:2b:92: e5:00:a5:d9:e9:10:8e:fa:7a:e7:69:a1:56:ad:bb: 15:d0:69:9f:92:c9:a2:02:c2:91:f7:53:6b:2d:48: 43:e0:f1:84:e9:36:b9:f9:23:07:87:6d:d1:30:90: 45:3c:1b:1a:7c:5c:80:91:5a:ae:1a:61:df:38:79: c5:fa:5a:ac:57:d4:0d:f7:ef:6b:b5:10:ed:31:19: 91:59:46:85:4b:25:01:70:59:d6:40:af:a8:ff:d2: e7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6B:89:14:BC:4B:43:55:5E:AF:B2:02:41:7B:B7:44:D1:A9:6E:63 X509v3 Authority Key Identifier: keyid:C5:BD:78:54:AA:05:0F:D6:E5:50:FC:7C:D0:2B:55:87:30:BF:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb14VKoFD9blUPx80CtVhzC_u3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3f6640-5d82-4ac6-9389-6ff1d427d971/1/xb14VKoFD9blUPx80CtVhzC_u3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:57:83:c7:45:38:38:49:18:23:08:c6:19:a8:d7:c9:e2:aa: b3:14:ab:02:45:84:95:20:3b:76:32:1a:16:a9:ca:5e:4f:c9: 49:e4:d9:96:34:8a:13:c9:4c:2f:df:76:72:f6:e3:b3:f0:d5: a0:35:8f:1c:63:33:59:3b:98:de:9f:e2:9c:2d:21:00:15:6c: 19:3a:38:5b:0e:6d:8c:b9:5c:64:fa:e0:b9:79:f4:8b:e5:0f: 8b:6c:5d:dc:0b:f9:0d:3c:44:fb:c8:66:c1:7c:a6:bf:80:e3: f1:77:b7:55:5d:a6:4e:f2:9f:75:9e:88:20:9d:42:c6:9f:3e: 63:ca:d0:c6:ed:cf:db:72:d3:04:b2:0d:74:0a:b6:79:75:d1: e3:3e:f0:33:15:58:0a:bc:47:dd:7e:f4:23:8b:c8:a0:9d:9d: ee:a7:cf:e4:e0:88:82:69:ce:11:8a:b5:54:6c:d4:a7:bf:2a: 2c:0b:49:0b:c0:05:a1:e9:6a:99:7d:6f:f2:cb:90:06:18:79: 4f:b8:b8:3c:df:a5:64:62:1d:9f:54:40:75:a5:94:df:22:e1: 70:fe:c1:52:43:e6:2f:b6:0f:25:4f:36:de:6d:36:96:b3:a0: 98:4c:75:b3:f4:61:ee:37:89:90:04:0a:8d:e6:3c:f5:b8:79: 59:f0:5c:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w11xfMKs5sccI2Z4oRhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YmQ3ODU0YWEwNTBmZDZlNTUwZmM3Y2QwMmI1NTg3MzBi ZmJiN2EwHhcNMjUxMjA4MDcwMDUzWhcNMjUxMjA5MDcwMDUzWjAzMTEwLwYDVQQD EyhhYjZiODkxNGJjNGI0MzU1NWVhZmIyMDI0MTdiYjc0NGQxYTk2ZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm63B571Pjg91Dx3aKKt9Cwf8u7ho gp8A20ucXJS+sSi3GtMcFijZrd6OubW63ROghlIZkNUsnO4E1WAlmBJVNXGpJCJe y+jqw6YJlAroGWHKNBGfNYHO7MppzBDcgry4rYq7sWdpCzVAx6ACfR/3tTIWh6HC jpaATx+tkD9C/bQ+RFf7Ma+af5B+9dNt/ZvReKdIi3NGmMTBzmk1rmPh/ycRK5Ll AKXZ6RCO+nrnaaFWrbsV0GmfksmiAsKR91NrLUhD4PGE6Ta5+SMHh23RMJBFPBsa fFyAkVquGmHfOHnF+lqsV9QN9+9rtRDtMRmRWUaFSyUBcFnWQK+o/9LnWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtriRS8S0NVXq+yAkF7t0TRqW5jMB8GA1UdIwQY MBaAFMW9eFSqBQ/W5VD8fNArVYcwv7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODkt NmZmMWQ0MjdkOTcxLzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8zZjY2NDAtNWQ4Mi00YWM2LTkzODktNmZmMWQ0MjdkOTcx LzEveGIxNFZLb0ZEOWJsVVB4ODBDdFZoekNfdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVeDx0U4 OEkYIwjGGajXyeKqsxSrAkWElSA7djIaFqnKXk/JSeTZljSKE8lML992cvbjs/DV oDWPHGMzWTuY3p/inC0hABVsGTo4Ww5tjLlcZPrguXn0i+UPi2xd3Av5DTxE+8hm wXymv4Dj8Xe3VV2mTvKfdZ6IIJ1Cxp8+Y8rQxu3P23LTBLINdAq2eXXR4z7wMxVY CrxH3X70I4vIoJ2d7qfP5OCIgmnOEYq1VGzUp78qLAtJC8AFoelqmX1v8suQBhh5 T7i4PN+lZGIdn1RAdaWU3yLhcP7BUkPmL7YPJU823m02lrOgmEx1s/Rh7jeJkAQK jeY89bh5WfBc9Q== -----END CERTIFICATE-----Generated at Mon Dec 8 08:35:35 2025 by rpki-client