This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json) Hash identifier: aeQrMQg9rWhqv3ja/kr4o/B8FdNZ8WYITjTranH3OR8= Subject key identifier: 74:FB:9E:81:FA:CF:DD:9C:47:9F:77:60:4C:38:19:3B:7D:45:B2:94 Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d Certificate serial: 019AF12EA96B968971ABE1147C026AC7DED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: qwv84rX2vh+2P5gfLSSv8BKL36BshRMRecyyJH98ZeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a9:6b:96:89:71:ab:e1:14:7c:02:6a:c7:de:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=74fb9e81facfdd9c479f77604c38193b7d45b294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:78:d0:8a:f8:7f:e3:b3:68:3b:74:fd:2f:d6: 5b:6d:77:c7:1a:91:93:43:9f:35:b6:bd:9e:33:54: 90:e7:a0:11:94:94:0d:b9:c3:0a:dc:6e:40:05:cc: f5:59:17:51:c5:92:24:a3:a5:3f:b0:d4:71:13:90: f3:2b:04:bb:42:e1:cb:38:0d:3b:d0:36:dc:81:6e: 5b:45:e3:67:8b:07:5e:bf:c0:d7:4f:53:70:95:cb: df:f0:42:86:c2:d0:91:0b:df:a3:d9:2b:da:99:84: a0:20:20:ad:7f:c3:9e:e4:d8:92:8d:ba:87:be:a3: 46:91:fb:f8:81:dd:e4:2e:98:72:18:da:d9:08:11: 7d:2d:a7:62:26:43:4b:a7:02:6a:df:8e:64:68:01: 63:52:d6:0c:42:d8:7b:0e:b4:52:e9:60:5d:a8:51: 41:3f:7b:90:77:ed:89:5d:30:8f:0a:a0:99:6b:81: 42:60:65:1e:b0:da:61:5e:f8:f2:dc:de:6c:f4:b3: bb:15:0c:a7:9d:5f:c3:75:c1:34:92:f2:5f:68:ab: bc:47:c8:97:a4:27:48:dd:9d:45:79:84:00:35:2e: 90:8c:63:5f:a6:64:ab:3e:28:08:e2:de:0b:3e:d2: 14:1c:08:db:55:f8:2e:21:cf:61:ba:dc:33:3e:2f: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FB:9E:81:FA:CF:DD:9C:47:9F:77:60:4C:38:19:3B:7D:45:B2:94 X509v3 Authority Key Identifier: keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0a:c6:5e:e0:3e:ae:ff:c5:fb:44:f7:7e:f2:36:1e:f3:43: 8d:4e:3f:56:a0:24:c2:5e:e1:89:3e:81:4c:64:a7:18:72:fe: 2a:d7:c2:2d:ba:a9:f7:9b:42:55:20:83:41:e9:5c:e9:35:5a: 08:55:bd:7a:0c:64:9e:34:0c:84:74:ad:9b:b0:35:22:f4:0f: e1:f5:44:3a:42:0e:69:f0:ca:3f:d3:40:3c:5f:7d:1f:d0:db: c0:15:f8:05:f2:3e:d7:94:62:ff:7f:44:e4:5b:0e:92:13:5d: fe:f0:3d:bb:27:f5:83:e1:01:07:36:ee:60:9c:a9:27:1c:51: 99:91:03:1b:3b:a3:b7:9a:31:d8:1a:b6:77:53:27:de:50:aa: 44:ab:9b:a3:d3:7a:46:0b:fc:1e:9a:8e:41:66:89:48:81:3d: 6a:08:d3:32:a4:df:c1:58:0e:e8:3d:48:2d:bc:e4:80:67:53: f4:f1:13:f0:08:3e:3d:c0:71:22:ee:eb:62:d7:ad:c2:0b:13: fb:97:f3:3a:31:75:d2:6e:be:6b:78:53:22:4e:eb:68:01:c5: 45:79:93:b0:f8:aa:eb:ff:7b:a5:1d:78:1d:e9:7a:b8:0d:3a: f9:05:ec:dc:c9:ac:a9:3e:d0:73:be:2a:ae:8d:d4:9d:c4:4a: 8a:fb:6c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqlrlolxq+EUfAJqx97QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjA4NThhMzhhZDVlMTFiN2IxODkzOTI4ODNiYzgzZWI2 YjM2MWQwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD Eyg3NGZiOWU4MWZhY2ZkZDljNDc5Zjc3NjA0YzM4MTkzYjdkNDViMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3jQivh/47NoO3T9L9ZbbXfHGpGT Q581tr2eM1SQ56ARlJQNucMK3G5ABcz1WRdRxZIko6U/sNRxE5DzKwS7QuHLOA07 0DbcgW5bReNniwdev8DXT1Nwlcvf8EKGwtCRC9+j2SvamYSgICCtf8Oe5NiSjbqH vqNGkfv4gd3kLphyGNrZCBF9LadiJkNLpwJq345kaAFjUtYMQth7DrRS6WBdqFFB P3uQd+2JXTCPCqCZa4FCYGUesNphXvjy3N5s9LO7FQynnV/DdcE0kvJfaKu8R8iX pCdI3Z1FeYQANS6QjGNfpmSrPigI4t4LPtIUHAjbVfguIc9hutwzPi/6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT7noH6z92cR593YEw4GTt9RbKUMB8GA1UdIwQY MBaAFMZghYo4rV4Rt7GJOSiDvIPrazYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEt ZmE1ZDdiNDhhYWU5LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kYmI1ZTQtYzU1OC00ZWZlLTljOWEtZmE1ZDdiNDhhYWU5 LzEveG1DRmlqaXRYaEczc1lrNUtJTzhnLXRyTmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbArGXuA+ rv/F+0T3fvI2HvNDjU4/VqAkwl7hiT6BTGSnGHL+KtfCLbqp95tCVSCDQelc6TVa CFW9egxknjQMhHStm7A1IvQP4fVEOkIOafDKP9NAPF99H9DbwBX4BfI+15Ri/39E 5FsOkhNd/vA9uyf1g+EBBzbuYJypJxxRmZEDGzujt5ox2Bq2d1Mn3lCqRKubo9N6 Rgv8HpqOQWaJSIE9agjTMqTfwVgO6D1ILbzkgGdT9PET8Ag+PcBxIu7rYtetwgsT +5fzOjF10m6+a3hTIk7raAHFRXmTsPiq6/97pR14Hel6uA06+QXs3MmsqT7Qc74q ro3UncRKivtsPw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:44 2025 by rpki-client