This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json) Hash identifier: wNacDLt9txOgVi4+fdgX8qcZk0Seq2kHdKrPVxQqF6I= Subject key identifier: 08:BD:40:EC:C8:05:84:32:45:72:FB:B2:CE:06:99:25:C0:A3:54:54 Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Certificate serial: 019B104A24F593AB87DBA672E0CF2990AB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 02:00:53 +0000 Manifest this update: Fri 12 Dec 2025 02:00:53 +0000 Manifest next update: Sat 13 Dec 2025 02:00:53 +0000 Files and hashes: 1: xg8lxjJPCVI2QjzHXxxw_4cHXSo.roa (hash: HY5QQYkL4OBC+/cJgD5NihIRGwwm0R3a0QruU+xabgs=) 2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: +isg+o3vsHLS/azlQi7lM/uT4OWAdvz0e/zFGHK4Cl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:24:f5:93:ab:87:db:a6:72:e0:cf:29:90:ab:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07 Validity Not Before: Dec 12 02:00:53 2025 GMT Not After : Dec 13 02:00:53 2025 GMT Subject: CN=08bd40ecc80584324572fbb2ce069925c0a35454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:74:d1:5c:8d:2d:15:5e:70:ab:e7:ce:8d:a5: 40:a9:0f:e0:a9:37:d9:59:92:df:59:24:29:a2:20: 17:3e:e2:0b:3c:11:71:5b:96:a7:d4:6f:d3:24:ae: e3:6d:68:44:88:c4:a9:19:b2:aa:8b:1e:44:5b:95: 90:39:1e:cc:18:be:30:54:41:ac:71:cb:76:d3:84: 2c:78:5e:04:a0:a7:a0:e2:47:83:4f:44:0d:ca:77: 1d:95:1d:1f:d0:4c:62:0b:c2:85:26:75:63:69:33: 1f:5d:72:c2:3a:c9:d3:64:09:8a:e6:a3:1d:b9:3f: fa:34:e4:27:b4:5b:86:58:d0:7e:13:e1:8f:72:90: e6:92:94:98:7c:67:e6:89:e9:65:03:0f:05:73:4d: 36:c8:a1:c7:40:d1:2c:d3:70:59:ac:ab:2b:5a:cf: 1d:c8:70:81:53:60:aa:6c:c2:c7:fb:b8:e6:6f:3a: 62:53:89:90:14:50:98:2d:a8:ae:8f:6d:03:94:c3: 43:75:0a:79:46:37:85:fc:86:39:c1:76:47:19:fa: 71:92:0d:ed:2b:10:6c:9b:32:7b:e9:5d:c1:a6:42: 8a:72:d9:67:47:8c:9b:a0:52:e1:eb:de:57:63:70: 7f:fd:f1:51:8a:ba:20:8e:26:4d:34:eb:26:f9:91: b2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BD:40:EC:C8:05:84:32:45:72:FB:B2:CE:06:99:25:C0:A3:54:54 X509v3 Authority Key Identifier: keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:fb:8a:d7:70:2f:82:ef:3e:1c:5d:69:30:6d:51:a0:f4:9a: 6c:bb:56:fe:75:d5:8a:f3:e2:b6:b6:f7:b9:a9:7b:5a:2e:8e: f4:82:3a:2f:c0:b1:e2:13:9a:58:90:f3:53:08:d8:e4:98:f9: f1:b0:c8:8f:ef:e5:d0:ca:da:cc:c2:bb:28:ed:33:60:61:2c: 06:09:f3:17:19:5c:50:a6:1a:6a:64:85:8f:33:ba:e1:5b:99: 5f:71:84:9a:d0:0c:3a:86:90:64:c0:a3:1d:f8:d1:7f:32:d2: 66:3e:a1:19:a2:f9:e1:4c:fe:e8:98:ba:dd:e7:6d:10:e8:42: 96:16:86:f1:38:ff:f2:ce:45:92:2a:c2:05:52:f9:7d:de:cc: e9:45:97:ce:df:f7:a0:3f:bf:3b:e1:13:3d:7d:d3:b9:b4:0e: 73:ab:5c:7b:0c:ca:9d:18:a9:35:ab:ee:b6:d4:46:76:46:2a: b7:89:4f:40:d7:71:e1:a7:23:bd:16:e9:9b:aa:aa:0f:b1:40: a8:1b:6e:60:ad:3b:dc:b0:1a:6c:02:72:d0:3b:45:01:64:0e: 9b:7c:23:2b:be:d9:50:01:0a:e5:93:c1:68:d0:0e:88:e1:69: 7c:16:15:5d:f8:52:b8:f4:4e:bc:93:10:bd:40:ab:cb:63:f1: f0:9f:52:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSiT1k6uH26Zy4M8pkKsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjZmMDdiMTczMzYwZjIxNWYxNTE4Yzg3MTJhNGIwNTRk ODVjMDcwHhcNMjUxMjEyMDIwMDUzWhcNMjUxMjEzMDIwMDUzWjAzMTEwLwYDVQQD EygwOGJkNDBlY2M4MDU4NDMyNDU3MmZiYjJjZTA2OTkyNWMwYTM1NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXTRXI0tFV5wq+fOjaVAqQ/gqTfZ WZLfWSQpoiAXPuILPBFxW5an1G/TJK7jbWhEiMSpGbKqix5EW5WQOR7MGL4wVEGs cct204QseF4EoKeg4keDT0QNyncdlR0f0ExiC8KFJnVjaTMfXXLCOsnTZAmK5qMd uT/6NOQntFuGWNB+E+GPcpDmkpSYfGfmiellAw8Fc002yKHHQNEs03BZrKsrWs8d yHCBU2CqbMLH+7jmbzpiU4mQFFCYLaiuj20DlMNDdQp5RjeF/IY5wXZHGfpxkg3t KxBsmzJ76V3BpkKKctlnR4yboFLh695XY3B//fFRirogjiZNNOsm+ZGyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi9QOzIBYQyRXL7ss4GmSXAo1RUMB8GA1UdIwQY MBaAFMa28HsXM2DyFfFRjIcSpLBU2FwHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTct MjhkOTRmY2IxMDg4LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9iODcyYjYtYzMwYS00NjE2LWI1YTctMjhkOTRmY2IxMDg4 LzEveHJid2V4Y3pZUElWOFZHTWh4S2tzRlRZWEFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/uK13Av gu8+HF1pMG1RoPSabLtW/nXVivPitrb3ual7Wi6O9II6L8Cx4hOaWJDzUwjY5Jj5 8bDIj+/l0MrazMK7KO0zYGEsBgnzFxlcUKYaamSFjzO64VuZX3GEmtAMOoaQZMCj HfjRfzLSZj6hGaL54Uz+6Ji63edtEOhClhaG8Tj/8s5FkirCBVL5fd7M6UWXzt/3 oD+/O+ETPX3TubQOc6tcewzKnRipNavuttRGdkYqt4lPQNdx4acjvRbpm6qqD7FA qBtuYK073LAabAJy0DtFAWQOm3wjK77ZUAEK5ZPBaNAOiOFpfBYVXfhSuPROvJMQ vUCry2Px8J9S5Q== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:09 2025 by rpki-client