This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft File: XebyWkVRz4ssLvOVlGiNrwqbJWs.mft (raw, json) Hash identifier: Uneti1LSuf+RA/NBW9HIDR8xF08IK3sbJVBegMqE0tM= Subject key identifier: CD:4A:54:D2:F4:0B:B4:AF:2F:83:7B:DA:6E:E0:44:1F:76:08:AA:24 Authority key identifier: 5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B Certificate issuer: /CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Certificate serial: 019B5ABFCA269647F313B3C7919929D9078C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft Manifest number: 1687 Signing time: Fri 26 Dec 2025 13:01:17 +0000 Manifest this update: Fri 26 Dec 2025 13:01:17 +0000 Manifest next update: Sat 27 Dec 2025 13:01:17 +0000 Files and hashes: 1: XebyWkVRz4ssLvOVlGiNrwqbJWs.crl (hash: i91+upF/JyMIg346B38Bq5jFFkIlur133lQMBryWYp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ca:26:96:47:f3:13:b3:c7:91:99:29:d9:07:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5de6f25a4551cf8b2c2ef39594688daf0a9b256b Validity Not Before: Dec 26 13:01:17 2025 GMT Not After : Dec 27 13:01:17 2025 GMT Subject: CN=cd4a54d2f40bb4af2f837bda6ee0441f7608aa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:24:97:9a:03:96:d1:89:66:45:db:cf:75: a9:6a:df:a9:03:d6:a1:b0:6f:ec:00:d0:95:87:ce: 2b:a7:7f:fb:1e:f4:26:95:6d:43:eb:a2:05:7c:fb: b2:31:fe:5a:2a:db:c4:73:1c:24:f7:9b:f5:27:46: fd:26:14:e3:f3:5a:98:94:07:61:f5:4e:9e:90:f5: cf:db:42:80:70:2f:c5:65:7d:ed:d9:53:ca:a5:84: b8:d5:f4:2c:65:8b:df:ee:9a:73:c6:d1:e9:cd:b5: 4c:6f:f3:93:3a:ad:1b:8e:86:32:3c:11:fe:e7:06: f9:c7:92:6e:03:e3:6c:19:36:8e:db:f3:a5:a0:60: aa:58:47:94:20:15:5b:c8:44:9f:ca:04:69:ef:b0: 5b:9c:43:85:68:fa:d6:0f:53:07:d2:e8:ae:bd:50: e4:0a:d0:ef:86:c8:99:03:45:ab:e3:63:a1:74:4c: 97:5f:fd:11:e6:b4:48:d6:fa:12:60:56:a1:dd:92: 2f:b3:42:16:5b:be:83:64:f5:ae:cb:c0:fa:07:7a: a1:90:6e:c8:ad:08:53:a0:be:30:32:fe:dd:09:21: 9d:de:55:fd:ae:86:44:e0:c9:e0:fc:7f:79:74:04: 85:7d:5f:b3:60:ac:f1:c0:17:2d:34:44:7f:55:74: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:4A:54:D2:F4:0B:B4:AF:2F:83:7B:DA:6E:E0:44:1F:76:08:AA:24 X509v3 Authority Key Identifier: keyid:5D:E6:F2:5A:45:51:CF:8B:2C:2E:F3:95:94:68:8D:AF:0A:9B:25:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XebyWkVRz4ssLvOVlGiNrwqbJWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b71966-307d-440b-b136-648dcccee015/1/XebyWkVRz4ssLvOVlGiNrwqbJWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b0:fa:0d:16:8f:0b:d8:46:d7:8b:88:4c:d5:c6:4a:0e:f6: d8:6e:a0:d5:cb:20:b9:be:3f:d1:7f:da:c5:a9:e1:be:5f:cd: ef:79:99:70:b7:38:60:33:5c:b3:68:9f:ce:18:d9:41:de:a2: 2b:8b:9f:fe:1d:f0:6e:4d:19:23:81:6d:55:48:99:e8:ea:db: 15:ea:8e:79:c2:94:5c:00:45:6b:8c:8c:70:f2:4b:a6:52:d0: 7e:df:91:0f:2c:1a:10:bb:e5:d5:6a:0a:98:11:46:28:75:f3: e7:c7:e2:7b:10:74:72:b1:59:3c:07:e0:c4:e4:e6:8e:84:9e: 31:4a:52:f4:78:25:cc:c3:27:1b:fe:b5:23:b0:ab:11:2f:37: d8:90:b4:1d:8a:ec:9b:ed:e4:f7:5f:35:f2:1f:d2:2b:68:b0: 1b:db:2f:b8:15:6b:07:d5:04:b8:79:8f:91:37:2b:e4:63:76: 37:b7:57:32:3d:9c:cd:69:1a:7b:0e:c7:d0:66:b8:88:80:16: d4:a3:df:5f:0d:a3:df:cb:0c:bf:17:68:ca:20:17:b1:01:c8: 57:e8:0e:d0:67:38:62:dc:67:bb:ad:84:1c:e9:01:15:08:03: 89:eb:ca:78:96:1f:4c:ec:eb:40:26:a4:d6:26:0f:14:3e:e8: 90:c7:25:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8omlkfzE7PHkZkp2QeMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZTZmMjVhNDU1MWNmOGIyYzJlZjM5NTk0Njg4ZGFmMGE5 YjI1NmIwHhcNMjUxMjI2MTMwMTE3WhcNMjUxMjI3MTMwMTE3WjAzMTEwLwYDVQQD EyhjZDRhNTRkMmY0MGJiNGFmMmY4MzdiZGE2ZWUwNDQxZjc2MDhhYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu4kl5oDltGJZkXbz3Wpat+pA9ah sG/sANCVh84rp3/7HvQmlW1D66IFfPuyMf5aKtvEcxwk95v1J0b9JhTj81qYlAdh 9U6ekPXP20KAcC/FZX3t2VPKpYS41fQsZYvf7ppzxtHpzbVMb/OTOq0bjoYyPBH+ 5wb5x5JuA+NsGTaO2/OloGCqWEeUIBVbyESfygRp77BbnEOFaPrWD1MH0uiuvVDk CtDvhsiZA0Wr42OhdEyXX/0R5rRI1voSYFah3ZIvs0IWW76DZPWuy8D6B3qhkG7I rQhToL4wMv7dCSGd3lX9roZE4Mng/H95dASFfV+zYKzxwBctNER/VXRkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1KVNL0C7SvL4N72m7gRB92CKokMB8GA1UdIwQY MBaAFF3m8lpFUc+LLC7zlZRoja8KmyVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYt NjQ4ZGNjY2VlMDE1LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNzE5NjYtMzA3ZC00NDBiLWIxMzYtNjQ4ZGNjY2VlMDE1 LzEvWGVieVdrVlJ6NHNzTHZPVmxHaU5yd3FiSldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLD6DRaP C9hG14uITNXGSg722G6g1csgub4/0X/axanhvl/N73mZcLc4YDNcs2ifzhjZQd6i K4uf/h3wbk0ZI4FtVUiZ6OrbFeqOecKUXABFa4yMcPJLplLQft+RDywaELvl1WoK mBFGKHXz58fiexB0crFZPAfgxOTmjoSeMUpS9HglzMMnG/61I7CrES832JC0HYrs m+3k91818h/SK2iwG9svuBVrB9UEuHmPkTcr5GN2N7dXMj2czWkaew7H0Ga4iIAW 1KPfXw2j38sMvxdoyiAXsQHIV+gO0Gc4Ytxnu62EHOkBFQgDievKeJYfTOzrQCak 1iYPFD7okMclqA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:54 2025 by rpki-client