This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json) Hash identifier: qRGHYvWDkUX0A2bewcNzKY0bY0ha+6SzHXVlCp1uw9g= Subject key identifier: 91:19:84:2D:CE:60:5A:4D:D7:68:FF:6D:06:3A:CA:9B:1B:4D:67:43 Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Certificate serial: 019B2DE683090E50A38EDCB98EDA0F3225D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft Manifest number: 11E4 Signing time: Wed 17 Dec 2025 20:00:40 +0000 Manifest this update: Wed 17 Dec 2025 20:00:40 +0000 Manifest next update: Thu 18 Dec 2025 20:00:40 +0000 Files and hashes: 1: 5VZo9ps8QpZQVg7UKzMc-AqG1QE.roa (hash: TKaIjMaFIApeBa5ALjBN5UaQP2YQ3Ed/RXbYDHLeIEE=) 2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 6fx4M+j1hGkp8kQzkUnKbC2EKsQuStSEy/Ccgcldu+Y=) 3: yRPDQIAZVw5i0tWgAaueJZEEypk.roa (hash: GetSkeoUTrwODJqlM/GHRD8LuW8qqin0jorMiGWv6QI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:83:09:0e:50:a3:8e:dc:b9:8e:da:0f:32:25:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a Validity Not Before: Dec 17 20:00:40 2025 GMT Not After : Dec 18 20:00:40 2025 GMT Subject: CN=9119842dce605a4dd768ff6d063aca9b1b4d6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:54:a7:58:f3:34:1c:7b:18:02:17:18:0a: 14:bf:fd:8a:c3:c4:7d:ed:dc:79:f7:ce:71:f8:7a: 88:d0:6b:94:c8:fe:d5:9d:0f:29:e3:15:26:30:06: fa:78:f4:42:e5:46:26:db:04:a5:73:7f:9a:0a:c5: 65:1e:f6:be:df:46:3e:11:3d:7f:f5:9b:b5:32:f0: 54:01:1d:49:f1:7a:63:96:e0:11:e6:10:fa:b3:07: e9:0f:64:86:e9:ea:25:33:09:02:5b:23:eb:29:ed: 1b:da:ee:08:88:42:fe:5c:76:57:82:4a:b9:eb:13: e0:18:7d:e0:7f:e6:f4:53:a5:0f:86:c7:f6:44:3b: 94:93:b2:3c:44:76:ac:16:d7:d5:5f:85:82:d6:af: 9d:ca:78:63:c1:eb:8f:a3:79:de:54:09:b2:de:dc: 17:4b:5c:1d:c3:00:c5:bf:76:eb:46:57:67:2b:3e: 42:eb:35:7f:03:0c:0c:89:91:78:3c:72:92:bb:c7: a2:75:1e:c2:0b:5a:7d:d2:13:0e:9f:62:3b:b8:28: a8:1c:ac:0c:d9:99:ce:6b:06:9f:3b:02:67:b8:ca: db:85:3f:e2:73:b7:6c:d0:a3:5b:d3:c0:53:d7:ac: f6:1c:f5:02:b0:71:ea:9d:d5:0b:b3:11:7c:ce:d4: 0a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:19:84:2D:CE:60:5A:4D:D7:68:FF:6D:06:3A:CA:9B:1B:4D:67:43 X509v3 Authority Key Identifier: keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b2:8c:ec:30:d2:24:43:36:85:ab:e7:98:de:c4:78:05:2e: 8d:a3:e5:1b:eb:ef:cf:83:a5:d7:b4:d8:64:ee:bb:19:3c:e0: 08:33:a8:02:29:f4:9c:b0:10:f3:22:5d:50:7c:33:f5:ab:23: d7:72:d5:2b:65:55:23:a0:36:db:04:3a:d8:0a:d2:90:a7:b5: 1e:b5:63:4b:d9:79:f1:ec:9c:9b:41:f7:cb:57:61:53:8c:9c: 01:9f:36:0a:26:94:b5:43:03:3a:bb:54:66:be:b6:36:88:55: 04:2c:e4:5f:35:2b:2f:df:ae:53:a2:4b:5d:bd:a0:fd:5b:33: 13:ec:19:03:3a:2c:72:c8:60:5f:f5:cd:29:f8:6a:ee:00:a5: a6:e9:bf:55:95:1c:48:db:94:3d:56:66:54:a6:6c:74:be:26: d3:5e:51:85:62:96:71:f7:79:82:4f:61:77:6c:8a:65:62:33: 2c:90:8c:90:e2:d7:c7:cc:7f:4f:a5:11:6f:8f:b3:ec:a8:7b: 8b:11:29:74:ef:44:53:37:c2:94:2d:0e:5d:77:7b:7a:1a:28: 5e:7c:80:bc:bf:a6:3e:46:d7:63:1e:7c:ed:ba:5f:2b:22:73: 89:83:72:40:27:3a:0c:b0:8d:30:65:9b:8c:f9:c5:7c:06:b7: 96:8e:5a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5oMJDlCjjty5jtoPMiXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTFjMTkzZmI3ZmYxNzQ2YTIxNWM0MTgxN2Y1MGVjYmE1 YTU4MWEwHhcNMjUxMjE3MjAwMDQwWhcNMjUxMjE4MjAwMDQwWjAzMTEwLwYDVQQD Eyg5MTE5ODQyZGNlNjA1YTRkZDc2OGZmNmQwNjNhY2E5YjFiNGQ2NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gxUp1jzNBx7GAIXGAoUv/2Kw8R9 7dx5985x+HqI0GuUyP7VnQ8p4xUmMAb6ePRC5UYm2wSlc3+aCsVlHva+30Y+ET1/ 9Zu1MvBUAR1J8XpjluAR5hD6swfpD2SG6eolMwkCWyPrKe0b2u4IiEL+XHZXgkq5 6xPgGH3gf+b0U6UPhsf2RDuUk7I8RHasFtfVX4WC1q+dynhjweuPo3neVAmy3twX S1wdwwDFv3brRldnKz5C6zV/AwwMiZF4PHKSu8eidR7CC1p90hMOn2I7uCioHKwM 2ZnOawafOwJnuMrbhT/ic7ds0KNb08BT16z2HPUCsHHqndULsxF8ztQKdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEZhC3OYFpN12j/bQY6ypsbTWdDMB8GA1UdIwQY MBaAFF5RwZP7f/F0aiFcQYF/UOy6WlgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMt NmE2NWQ4MDQxODAzLzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iODA3MmYtZjM1NS00ZGQ2LTkzOTMtNmE2NWQ4MDQxODAz LzEvWGxIQmtfdF84WFJxSVZ4QmdYOVE3THBhV0JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7KM7DDS JEM2havnmN7EeAUujaPlG+vvz4Ol17TYZO67GTzgCDOoAin0nLAQ8yJdUHwz9asj 13LVK2VVI6A22wQ62ArSkKe1HrVjS9l58eycm0H3y1dhU4ycAZ82CiaUtUMDOrtU Zr62NohVBCzkXzUrL9+uU6JLXb2g/VszE+wZAzoscshgX/XNKfhq7gClpum/VZUc SNuUPVZmVKZsdL4m015RhWKWcfd5gk9hd2yKZWIzLJCMkOLXx8x/T6URb4+z7Kh7 ixEpdO9EUzfClC0OXXd7ehooXnyAvL+mPkbXYx587bpfKyJziYNyQCc6DLCNMGWb jPnFfAa3lo5aUg== -----END CERTIFICATE-----Generated at Wed Dec 17 23:09:32 2025 by rpki-client