This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft File: XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json) Hash identifier: Bkip1XhUcq+LnaxJBxEJ3q19ID2G8w65/5ZssYQ189Y= Subject key identifier: B8:EF:26:4C:97:B3:6F:25:85:A6:B2:87:C8:62:B4:B8:0C:C1:59:B7 Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB Certificate issuer: /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb Certificate serial: 019AF12D14438842F99684D922DAECAFEAD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft Manifest number: 0C6D Signing time: Sat 06 Dec 2025 01:00:54 +0000 Manifest this update: Sat 06 Dec 2025 01:00:54 +0000 Manifest next update: Sun 07 Dec 2025 01:00:54 +0000 Files and hashes: 1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: paPgfrt046CNJlPt6F5Xs6m+5GupHLqXwMPPYZ6ROIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:14:43:88:42:f9:96:84:d9:22:da:ec:af:ea:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb Validity Not Before: Dec 6 01:00:54 2025 GMT Not After : Dec 7 01:00:54 2025 GMT Subject: CN=b8ef264c97b36f2585a6b287c862b4b80cc159b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:53:f6:2e:40:df:0f:aa:96:da:0d:45:f0:ef: c0:57:70:e8:98:ae:c7:7a:81:12:02:8f:b0:31:3a: a2:3e:0d:c5:9d:84:ef:22:13:de:07:6b:3f:b9:ec: de:04:00:6d:bd:75:8e:f7:57:20:f9:bc:e2:2c:83: 66:73:31:c7:b6:e8:26:e4:dc:d2:a0:d6:5d:3f:5c: 58:13:ef:43:0d:76:5b:70:4e:df:b4:ab:81:0d:d6: f8:bd:af:d3:8d:5e:3b:db:3c:a1:1b:33:34:51:78: 08:51:46:5a:b9:0a:b4:d7:1e:a9:ff:b1:93:f7:2f: e1:04:5c:8d:cb:cf:e1:d3:92:8c:b4:5d:59:9f:86: 02:d7:8d:3c:40:29:49:53:61:66:16:e5:b1:90:28: 3a:20:2c:29:aa:1d:3f:9d:c6:56:24:83:c5:ff:ae: 7c:94:c1:e1:df:74:84:c2:33:0d:0b:03:06:72:34: 30:22:3a:00:da:d9:72:34:d3:f1:b1:29:b1:4f:3c: 8e:32:5c:9e:43:75:27:25:7d:a1:61:6e:ea:73:0a: b0:a3:f0:a0:8e:f9:95:ec:80:29:6c:43:68:89:7c: 87:92:57:8f:c2:27:2b:74:6b:b7:06:53:b2:41:fe: 5f:9e:c9:36:b6:ea:45:22:f6:ec:63:fb:77:d9:20: 3b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EF:26:4C:97:B3:6F:25:85:A6:B2:87:C8:62:B4:B8:0C:C1:59:B7 X509v3 Authority Key Identifier: keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0c:10:8f:93:2b:ad:31:de:0b:a0:32:74:88:db:9c:28:de: 45:20:7a:d8:e3:54:30:7e:66:57:20:a0:8a:b4:e8:b9:cc:8c: ae:54:a6:38:98:1a:cd:10:a7:53:54:50:8d:e5:e7:60:f3:b9: 92:79:53:a1:56:9f:a8:b1:1c:04:a0:a8:16:df:8f:56:8f:5b: 1b:15:7c:a8:76:ae:79:1c:a5:ac:ae:e5:90:7e:a7:10:15:09: e9:a4:98:7b:0b:ef:a3:9e:cc:b3:17:01:53:d5:d1:73:43:4b: 79:03:e3:70:8e:80:5c:9d:58:2b:02:9d:37:4d:77:1c:6b:53: 89:94:69:dd:67:fe:87:c4:b3:af:50:f8:46:47:94:1f:25:1b: e6:d7:8f:5d:14:d1:01:9b:a1:31:73:87:e1:fb:c7:35:cf:1a: ac:09:1f:a5:bf:9b:69:28:7f:1b:87:4b:9a:40:76:28:aa:fb: 1f:e2:2e:f3:1f:f5:4f:8b:c4:b3:f3:60:d5:c5:53:40:be:4b: 70:38:48:cc:59:da:b5:db:d0:9e:92:53:d3:10:2c:e5:0d:14: 22:73:d0:0f:a0:11:cf:3c:f3:99:eb:d5:90:f3:a2:7a:19:b5: 82:e3:07:b6:87:54:8e:6c:77:02:37:a9:4f:78:30:c4:bc:e2: fd:fc:eb:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRRDiEL5loTZItrsr+rUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTY5YzkxZDQ1MzM5NmJmYTE2NmYwNTFiZjhmMDZjMDNh MDg1Y2IwHhcNMjUxMjA2MDEwMDU0WhcNMjUxMjA3MDEwMDU0WjAzMTEwLwYDVQQD EyhiOGVmMjY0Yzk3YjM2ZjI1ODVhNmIyODdjODYyYjRiODBjYzE1OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFP2LkDfD6qW2g1F8O/AV3DomK7H eoESAo+wMTqiPg3FnYTvIhPeB2s/uezeBABtvXWO91cg+bziLINmczHHtugm5NzS oNZdP1xYE+9DDXZbcE7ftKuBDdb4va/TjV472zyhGzM0UXgIUUZauQq01x6p/7GT 9y/hBFyNy8/h05KMtF1Zn4YC1408QClJU2FmFuWxkCg6ICwpqh0/ncZWJIPF/658 lMHh33SEwjMNCwMGcjQwIjoA2tlyNNPxsSmxTzyOMlyeQ3UnJX2hYW7qcwqwo/Cg jvmV7IApbENoiXyHklePwicrdGu3BlOyQf5fnsk2tupFIvbsY/t32SA7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjvJkyXs28lhaayh8hitLgMwVm3MB8GA1UdIwQY MBaAFFzmnJHUUzlr+hZvBRv48GwDoIXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQt YTU5N2VlNjM3ZGI0LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC82ZTZkZDgtMWJjYS00NjMwLTk1NzQtYTU5N2VlNjM3ZGI0 LzEvWE9hY2tkUlRPV3Y2Rm04RkdfandiQU9naGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgwQj5Mr rTHeC6AydIjbnCjeRSB62ONUMH5mVyCgirToucyMrlSmOJgazRCnU1RQjeXnYPO5 knlToVafqLEcBKCoFt+PVo9bGxV8qHaueRylrK7lkH6nEBUJ6aSYewvvo57MsxcB U9XRc0NLeQPjcI6AXJ1YKwKdN013HGtTiZRp3Wf+h8Szr1D4RkeUHyUb5tePXRTR AZuhMXOH4fvHNc8arAkfpb+baSh/G4dLmkB2KKr7H+Iu8x/1T4vEs/Ng1cVTQL5L cDhIzFnatdvQnpJT0xAs5Q0UInPQD6ARzzzzmevVkPOiehm1guMHtodUjmx3Ajep T3gwxLzi/fzrQw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:44 2025 by rpki-client