This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft File: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft (raw, json) Hash identifier: AbjFWpKwtln6+q7w2uu+xQrbeRdu8+IJ4caB02oznkE= Subject key identifier: 3D:72:46:79:8E:18:CC:B6:F1:CE:63:FB:46:F1:C7:D8:E3:66:88:11 Authority key identifier: 5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 Certificate issuer: /CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Certificate serial: 019B1BAA3AD0B1786A3274F7A8B91FF8A954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft Manifest number: 1774 Signing time: Sun 14 Dec 2025 07:01:39 +0000 Manifest this update: Sun 14 Dec 2025 07:01:39 +0000 Manifest next update: Mon 15 Dec 2025 07:01:39 +0000 Files and hashes: 1: HZdIrchIDCiQCwbuPhc70E8YbWU.roa (hash: uDrefFzWXlfoxlCxsdKnI68bX6+lo8xUQyNPFxh8fsk=) 2: XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl (hash: H7gKnSLBBq0mBemnkuz4IXj0+hZQHFvf4lqFyb2nmDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:aa:3a:d0:b1:78:6a:32:74:f7:a8:b9:1f:f8:a9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d16dccfb2e2c88cf09f487c421fc8af7bbd3574 Validity Not Before: Dec 14 07:01:39 2025 GMT Not After : Dec 15 07:01:39 2025 GMT Subject: CN=3d7246798e18ccb6f1ce63fb46f1c7d8e3668811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:81:e5:b8:d8:9c:35:95:da:36:fb:ae:78: c2:71:a8:0d:99:ee:04:83:26:30:15:10:c4:4a:61: 97:a5:e1:32:cd:c4:70:e9:f5:5e:8f:60:19:d5:48: 0c:a6:87:0f:e9:60:54:67:6b:01:7c:24:b2:45:8b: 9d:75:5e:09:19:19:08:85:99:e2:62:de:23:5e:4d: c6:f2:3d:31:d1:8b:73:e3:66:5c:23:7d:83:95:1f: 8f:be:3e:c0:4f:9e:d3:54:1e:5c:a3:78:6f:5c:4d: 6e:83:30:92:bf:2c:c5:45:95:cf:f4:e5:69:b9:57: 0b:d0:98:fe:57:f5:71:f1:ab:65:c2:18:91:6c:0e: 7c:bf:c3:d7:88:5d:50:18:30:6c:aa:44:02:62:93: 4d:8c:75:e6:53:e1:c1:e5:dd:fb:4c:ee:9f:5f:22: 40:4c:4d:69:7b:2a:c2:0e:63:6c:28:85:0f:6d:3f: 67:36:16:84:cf:3b:33:11:b2:b3:3c:a6:a3:e6:71: fa:c9:76:c7:c5:a2:8c:dd:aa:d4:4a:11:14:f4:54: 07:10:8d:94:65:2a:6f:b6:fa:9f:60:b0:07:66:04: 9c:8c:f2:12:40:d8:ec:47:19:9d:57:49:6b:31:a5: ca:94:fd:69:17:2f:7e:50:85:f1:91:7f:0d:60:f7: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:46:79:8E:18:CC:B6:F1:CE:63:FB:46:F1:C7:D8:E3:66:88:11 X509v3 Authority Key Identifier: keyid:5D:16:DC:CF:B2:E2:C8:8C:F0:9F:48:7C:42:1F:C8:AF:7B:BD:35:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ad0241-1ae3-4d5b-b0d1-85c5d5302d88/1/XRbcz7LiyIzwn0h8Qh_Ir3u9NXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:02:00:6c:fd:40:42:18:7d:67:e9:ac:ed:e0:6a:9d:bf:c7: 4b:64:75:dc:3f:6d:3c:8d:2e:96:bd:f7:a6:a8:ea:d1:5a:aa: 21:fa:0e:38:bc:a9:0e:93:83:39:db:b8:c2:7e:29:72:bd:a7: 1f:c2:a5:cf:a9:e4:1d:aa:a0:ba:78:b7:38:96:44:44:a5:bd: 26:b9:4d:ee:58:14:40:62:70:1f:06:5a:c9:74:33:04:ec:0a: 4b:58:07:99:1c:4a:a0:b1:ef:bb:06:61:1d:be:c7:4f:e1:5a: 02:cb:52:ed:48:4a:10:e8:7f:48:35:65:4e:27:dc:6d:38:82: 4c:46:32:17:47:9d:3e:25:e2:61:57:59:f3:5f:79:22:c9:98: c3:05:73:03:e9:2a:34:7b:82:09:32:4e:39:07:cd:e3:7c:f2: ab:2f:87:80:5f:b1:79:1c:06:99:f5:56:8c:ee:cb:19:c0:c7: 7d:3a:96:75:41:de:55:03:95:fa:b3:6e:bb:2e:68:4b:4b:b8: c9:d1:b1:d2:ec:23:6d:5c:93:40:67:ee:42:2e:46:a6:1a:ba: fe:a4:31:7e:a0:0a:d4:dc:b8:fd:75:3b:a3:fd:86:6b:33:e0: d0:ed:dd:4d:5a:80:cb:95:f8:ab:94:cf:e9:48:0f:49:c5:30: 31:b7:d6:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqjrQsXhqMnT3qLkf+KlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMTZkY2NmYjJlMmM4OGNmMDlmNDg3YzQyMWZjOGFmN2Ji ZDM1NzQwHhcNMjUxMjE0MDcwMTM5WhcNMjUxMjE1MDcwMTM5WjAzMTEwLwYDVQQD EygzZDcyNDY3OThlMThjY2I2ZjFjZTYzZmI0NmYxYzdkOGUzNjY4ODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EmB5bjYnDWV2jb7rnjCcagNme4E gyYwFRDESmGXpeEyzcRw6fVej2AZ1UgMpocP6WBUZ2sBfCSyRYuddV4JGRkIhZni Yt4jXk3G8j0x0Ytz42ZcI32DlR+Pvj7AT57TVB5co3hvXE1ugzCSvyzFRZXP9OVp uVcL0Jj+V/Vx8atlwhiRbA58v8PXiF1QGDBsqkQCYpNNjHXmU+HB5d37TO6fXyJA TE1peyrCDmNsKIUPbT9nNhaEzzszEbKzPKaj5nH6yXbHxaKM3arUShEU9FQHEI2U ZSpvtvqfYLAHZgScjPISQNjsRxmdV0lrMaXKlP1pFy9+UIXxkX8NYPc0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1yRnmOGMy28c5j+0bxx9jjZogRMB8GA1UdIwQY MBaAFF0W3M+y4siM8J9IfEIfyK97vTV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEt ODVjNWQ1MzAyZDg4LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hZDAyNDEtMWFlMy00ZDViLWIwZDEtODVjNWQ1MzAyZDg4 LzEvWFJiY3o3TGl5SXp3bjBoOFFoX0lyM3U5TlhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAIAbP1A Qhh9Z+ms7eBqnb/HS2R13D9tPI0ulr33pqjq0VqqIfoOOLypDpODOdu4wn4pcr2n H8Klz6nkHaqguni3OJZERKW9JrlN7lgUQGJwHwZayXQzBOwKS1gHmRxKoLHvuwZh Hb7HT+FaAstS7UhKEOh/SDVlTifcbTiCTEYyF0edPiXiYVdZ8195IsmYwwVzA+kq NHuCCTJOOQfN43zyqy+HgF+xeRwGmfVWjO7LGcDHfTqWdUHeVQOV+rNuuy5oS0u4 ydGx0uwjbVyTQGfuQi5Gphq6/qQxfqAK1Ny4/XU7o/2GazPg0O3dTVqAy5X4q5TP 6UgPScUwMbfW6A== -----END CERTIFICATE-----Generated at Sun Dec 14 13:53:37 2025 by rpki-client