This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json) Hash identifier: 689WZ4XkIvWNWxHwvW6sYA9l2/RUsqbCz1HzHDP7Cb4= Subject key identifier: 17:51:67:34:30:27:35:77:11:EF:03:E8:60:55:05:A2:99:F0:0D:FB Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Certificate serial: 019B3A21DECD5468EFD364E7504B1C599E1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft Manifest number: 13BE Signing time: Sat 20 Dec 2025 05:00:56 +0000 Manifest this update: Sat 20 Dec 2025 05:00:56 +0000 Manifest next update: Sun 21 Dec 2025 05:00:56 +0000 Files and hashes: 1: 5CQ4eO5LX17KXZ4KRK1zO2WmDio.roa (hash: elGO+kkXCWf6xUhLxKQr6fK8y3EJu/aqnItwgZKwIWc=) 2: B7NZ-u78J5mcpsov1XyIGK10cH0.roa (hash: U6kZ6B0tG819VSZmmXYNrc7xdPGbBot/5/JsXAv6Iss=) 3: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (hash: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=) 4: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: sxD600WKqTXjFQnEuNO1Kc0oBS5XT1q7vg8V99bABiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:de:cd:54:68:ef:d3:64:e7:50:4b:1c:59:9e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37 Validity Not Before: Dec 20 05:00:56 2025 GMT Not After : Dec 21 05:00:56 2025 GMT Subject: CN=175167343027357711ef03e8605505a299f00dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:3b:af:64:4b:50:71:07:59:64:1d:b5:0a: e5:29:f2:63:17:ea:53:46:ce:1c:96:f9:0b:b9:6b: eb:67:c5:9c:eb:0d:68:a0:39:56:b6:3f:4e:40:77: 7d:f8:60:ea:db:78:22:ee:d4:fd:92:3c:67:39:27: 91:61:ce:31:df:52:98:0f:87:09:55:09:b8:ef:d7: 83:7f:60:3b:39:2d:ce:7f:52:d3:b8:96:cd:e0:0e: eb:5b:d2:02:d8:b5:86:8a:83:1f:50:69:0f:84:91: 53:82:b9:43:90:39:c1:56:da:65:8b:f7:e8:31:39: 80:cd:fd:24:cc:fd:e0:37:7a:8b:f6:12:e2:1e:7b: a1:74:5d:e5:04:9c:6e:e4:88:1b:b6:f9:e4:15:24: 88:b6:8d:5e:27:0c:19:87:f2:2c:2f:ec:98:51:16: f8:85:8c:7a:fd:a3:7a:cc:1c:9f:e0:83:80:81:13: f7:be:df:83:7e:6f:4b:2e:3e:52:64:69:2f:74:8a: e0:20:72:75:cc:e2:94:fb:98:a8:b9:5b:75:9a:77: ef:3c:c8:a5:6a:1b:de:f3:41:6d:6b:bc:5a:c0:e2: 0f:b3:fc:65:81:b5:0a:a8:a4:1d:4b:ec:54:f2:0b: 71:1b:fa:4e:70:e0:fc:09:c2:01:45:a9:d4:65:d4: 6b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:67:34:30:27:35:77:11:EF:03:E8:60:55:05:A2:99:F0:0D:FB X509v3 Authority Key Identifier: keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e2:59:c2:49:5a:5b:da:eb:82:3d:76:37:c3:81:54:10:28: 29:89:de:51:93:a1:97:68:20:9a:0a:1c:46:7f:a1:ef:41:cc: 3b:eb:b0:c4:95:bd:9a:99:01:59:e0:a0:80:0b:67:88:9b:ae: ab:53:db:c1:31:dc:51:a0:8e:30:df:ca:76:1e:67:42:44:27: e3:c1:d6:a4:b1:9a:32:8d:02:8c:3a:95:e1:52:be:18:d8:a4: 57:d5:cc:a3:d0:a1:3d:32:62:74:f2:55:f1:71:d0:09:41:0d: 57:35:36:94:ff:a7:cd:a0:8f:69:f9:b0:e4:3f:cf:6e:a6:30: a5:58:09:3e:99:d7:6a:db:72:f6:6e:01:e1:cd:e6:03:96:f6: 3e:88:5e:8b:ec:67:73:e0:e4:00:f1:31:87:52:10:49:97:01: 9e:82:11:51:e3:f2:a3:b4:ab:4b:a1:0e:c1:97:dc:27:96:cb: 6a:27:db:c1:a9:05:2e:15:6c:9d:f4:67:d3:8f:1d:0c:b8:7d: ac:58:e5:16:4e:76:19:65:e9:73:1b:f0:53:df:ce:7d:e1:81: 73:18:1d:15:b4:e2:75:20:b2:02:35:7a:61:0d:20:d9:6a:c7: 6d:b2:30:1d:7e:f9:cb:e1:c1:c9:c5:d8:f0:66:aa:2d:3f:ab: 69:c2:96:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Id7NVGjv02TnUEscWZ4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi MDJhMzcwHhcNMjUxMjIwMDUwMDU2WhcNMjUxMjIxMDUwMDU2WjAzMTEwLwYDVQQD EygxNzUxNjczNDMwMjczNTc3MTFlZjAzZTg2MDU1MDVhMjk5ZjAwZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Y7r2RLUHEHWWQdtQrlKfJjF+pT Rs4clvkLuWvrZ8Wc6w1ooDlWtj9OQHd9+GDq23gi7tT9kjxnOSeRYc4x31KYD4cJ VQm479eDf2A7OS3Of1LTuJbN4A7rW9IC2LWGioMfUGkPhJFTgrlDkDnBVtpli/fo MTmAzf0kzP3gN3qL9hLiHnuhdF3lBJxu5IgbtvnkFSSIto1eJwwZh/IsL+yYURb4 hYx6/aN6zByf4IOAgRP3vt+Dfm9LLj5SZGkvdIrgIHJ1zOKU+5iouVt1mnfvPMil ahve80Fta7xawOIPs/xlgbUKqKQdS+xU8gtxG/pOcOD8CcIBRanUZdRrgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdRZzQwJzV3Ee8D6GBVBaKZ8A37MB8GA1UdIwQY MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt YjVmMGQyMTA1M2Y4LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4 LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOJZwkla W9rrgj12N8OBVBAoKYneUZOhl2ggmgocRn+h70HMO+uwxJW9mpkBWeCggAtniJuu q1PbwTHcUaCOMN/Kdh5nQkQn48HWpLGaMo0CjDqV4VK+GNikV9XMo9ChPTJidPJV 8XHQCUENVzU2lP+nzaCPafmw5D/PbqYwpVgJPpnXatty9m4B4c3mA5b2Pohei+xn c+DkAPExh1IQSZcBnoIRUePyo7SrS6EOwZfcJ5bLaifbwakFLhVsnfRn048dDLh9 rFjlFk52GWXpcxvwU9/OfeGBcxgdFbTidSCyAjV6YQ0g2WrHbbIwHX75y+HBycXY 8GaqLT+racKWqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:01 2025 by rpki-client