This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft File: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft (raw, json) Hash identifier: 5inPQXDF9XThkV5RmnlvEUNldCI1ERpYpwGg3KjXq6c= Subject key identifier: C5:0D:36:F4:D2:08:EC:03:52:13:DC:F3:8F:49:76:B8:7B:83:6A:F5 Authority key identifier: 5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 Certificate issuer: /CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Certificate serial: 019B35322BB7AFEC256D9F8C70915A255F1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft Manifest number: 06B9 Signing time: Fri 19 Dec 2025 06:00:38 +0000 Manifest this update: Fri 19 Dec 2025 06:00:38 +0000 Manifest next update: Sat 20 Dec 2025 06:00:38 +0000 Files and hashes: 1: SzmhUfWJuFhyT5TGLouRAgBLoIM.roa (hash: Qov0MeRXvHn6kZBTJQaoc48+Yw0xT2B5xVOV+b6Nifs=) 2: XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl (hash: 0vBiy4+LlFsRpY7jJ8KuHR982OPDtjoJVC1zBCL+erA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:2b:b7:af:ec:25:6d:9f:8c:70:91:5a:25:5f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da38f7c3ecad29ec50644b70068b92a1be47074 Validity Not Before: Dec 19 06:00:38 2025 GMT Not After : Dec 20 06:00:38 2025 GMT Subject: CN=c50d36f4d208ec035213dcf38f4976b87b836af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:61:4c:e8:f3:20:0b:f9:07:13:cf:60:e0: 3b:15:e0:e6:15:46:0c:a8:d7:73:4a:73:89:b8:12: ad:a9:be:cf:2b:c2:4c:dc:34:fd:3c:9f:bc:45:c8: b4:df:0d:af:3f:e9:b4:e8:b3:52:74:1a:3e:72:b2: 42:3e:37:a3:6f:1e:ea:ab:50:b0:fb:73:af:45:1a: 43:76:9e:6b:1d:75:22:4b:e0:89:7e:54:f3:85:9f: 22:e5:cf:30:f6:88:e4:91:50:e3:fa:85:97:ca:cd: d3:31:1f:41:fb:20:ab:dd:f4:be:3c:e0:02:65:f7: 2b:74:35:1e:26:1f:e8:31:6f:39:aa:31:1f:83:f2: aa:4d:85:ae:ed:e1:e2:5a:19:82:fd:f3:b4:e9:f8: 75:71:ef:98:bd:05:d5:3f:fc:1f:0d:e2:8a:27:f1: 44:05:40:a1:a9:3e:dd:fb:06:bf:9a:fb:8a:b6:4a: 47:35:1b:ab:43:65:9d:a4:68:5f:32:0d:08:c3:f0: 4f:2e:34:07:45:e5:09:4c:9e:c4:eb:a9:55:42:24: fd:f1:56:2b:4b:66:e7:0b:f2:73:24:c7:ce:b0:ca: 4b:69:2a:8f:1c:d5:cb:15:91:8d:07:f8:4d:ce:63: 20:eb:25:b7:f7:81:2a:91:30:86:a1:d3:c9:40:1a: f4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0D:36:F4:D2:08:EC:03:52:13:DC:F3:8F:49:76:B8:7B:83:6A:F5 X509v3 Authority Key Identifier: keyid:5D:A3:8F:7C:3E:CA:D2:9E:C5:06:44:B7:00:68:B9:2A:1B:E4:70:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/bba8e7-b9d2-4d9b-88b9-9408f1bc0d12/1/XaOPfD7K0p7FBkS3AGi5KhvkcHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e0:e9:3d:31:f3:81:a2:e5:8b:b7:5d:c4:22:12:64:cc:59: 5a:4b:09:4d:ed:d4:7b:cf:9f:81:b4:0f:71:60:4b:bc:5d:f8: 12:e5:1b:f5:7f:b7:06:a7:69:eb:4e:bb:20:7a:9a:99:c5:58: d8:1a:50:d5:06:30:43:0b:56:9e:7f:ab:d0:f6:56:d1:92:c8: 4b:e1:73:58:36:d3:6a:3b:30:e0:4c:ac:f6:84:52:14:f8:70: 42:bb:27:32:40:b5:75:41:27:ad:97:85:6b:ea:21:7f:55:05: 3f:be:07:b3:ba:85:13:cf:29:d7:cc:94:ee:2d:37:c8:ca:03: 8b:f3:04:c0:40:51:4f:0a:c5:db:44:76:41:78:62:ee:ae:83: b3:52:2b:7a:d1:30:5a:8f:be:e7:a7:36:82:39:a9:ca:84:e1: ae:ea:1b:b6:0f:7f:1b:e8:2e:ae:22:7a:d8:5c:95:74:dc:db: d8:e3:fe:7b:47:2e:7e:55:d0:de:0c:0e:4a:3b:0b:85:bd:24: 0d:b4:c3:1e:b6:3f:a9:d1:29:8e:a9:01:b3:b4:ad:00:d6:ac: 8a:14:48:dc:6d:59:b2:27:91:b6:ea:87:3c:d8:03:c0:28:41: c1:b1:32:cf:e1:f6:d2:7f:c4:06:95:13:1a:4b:a2:c5:72:b8: cf:78:16:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Miu3r+wlbZ+McJFaJV8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYTM4ZjdjM2VjYWQyOWVjNTA2NDRiNzAwNjhiOTJhMWJl NDcwNzQwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD EyhjNTBkMzZmNGQyMDhlYzAzNTIxM2RjZjM4ZjQ5NzZiODdiODM2YWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJhTOjzIAv5BxPPYOA7FeDmFUYM qNdzSnOJuBKtqb7PK8JM3DT9PJ+8Rci03w2vP+m06LNSdBo+crJCPjejbx7qq1Cw +3OvRRpDdp5rHXUiS+CJflTzhZ8i5c8w9ojkkVDj+oWXys3TMR9B+yCr3fS+POAC ZfcrdDUeJh/oMW85qjEfg/KqTYWu7eHiWhmC/fO06fh1ce+YvQXVP/wfDeKKJ/FE BUChqT7d+wa/mvuKtkpHNRurQ2WdpGhfMg0Iw/BPLjQHReUJTJ7E66lVQiT98VYr S2bnC/JzJMfOsMpLaSqPHNXLFZGNB/hNzmMg6yW394EqkTCGodPJQBr0fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUNNvTSCOwDUhPc849Jdrh7g2r1MB8GA1UdIwQY MBaAFF2jj3w+ytKexQZEtwBouSob5HB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4Yjkt OTQwOGYxYmMwZDEyLzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iYmE4ZTctYjlkMi00ZDliLTg4YjktOTQwOGYxYmMwZDEy LzEvWGFPUGZEN0swcDdGQmtTM0FHaTVLaHZrY0hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+DpPTHz gaLli7ddxCISZMxZWksJTe3Ue8+fgbQPcWBLvF34EuUb9X+3Bqdp6067IHqamcVY 2BpQ1QYwQwtWnn+r0PZW0ZLIS+FzWDbTajsw4Eys9oRSFPhwQrsnMkC1dUEnrZeF a+ohf1UFP74Hs7qFE88p18yU7i03yMoDi/MEwEBRTwrF20R2QXhi7q6Ds1IretEw Wo++56c2gjmpyoThruobtg9/G+guriJ62FyVdNzb2OP+e0cuflXQ3gwOSjsLhb0k DbTDHrY/qdEpjqkBs7StANasihRI3G1ZsieRtuqHPNgDwChBwbEyz+H20n/EBpUT GkuixXK4z3gWaA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:52 2025 by rpki-client