This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json) Hash identifier: BgWKpVBHBcWauuC75BjJcuS/rvXnmnTpMlmUiozRaPE= Subject key identifier: 51:DF:26:4C:C6:BF:C5:FF:33:34:3B:2B:9B:23:FB:F5:B2:67:69:9B Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16 Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16 Certificate serial: 019AF208E9ED1A6FA225D01F64C5AB05B8A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft Manifest number: 0B47 Signing time: Sat 06 Dec 2025 05:01:01 +0000 Manifest this update: Sat 06 Dec 2025 05:01:01 +0000 Manifest next update: Sun 07 Dec 2025 05:01:01 +0000 Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: 1SiLMX4q1oyry2yNGiuKsVScKkjelf/Fg21Lxps6dpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e9:ed:1a:6f:a2:25:d0:1f:64:c5:ab:05:b8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16 Validity Not Before: Dec 6 05:01:01 2025 GMT Not After : Dec 7 05:01:01 2025 GMT Subject: CN=51df264cc6bfc5ff33343b2b9b23fbf5b267699b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:48:9a:1a:ea:a8:59:03:74:72:6f:35:53:9e: 1a:50:01:a0:db:29:2a:4a:c4:2f:84:bb:48:39:34: 3b:61:a9:5f:12:8a:58:72:ac:62:ab:46:22:45:06: 84:9b:96:88:da:88:c3:ae:c2:41:05:ae:a3:dc:7a: 6d:17:95:e1:b2:3e:ae:2b:72:e8:21:2c:02:dc:ad: b5:56:83:34:12:5e:2b:38:1c:10:b3:0f:9f:4a:02: d8:47:c6:5b:a9:02:2f:f3:fb:f2:b7:08:58:6c:e9: dc:8e:68:4c:7d:f0:ac:19:cb:24:90:f2:c8:79:a9: 2f:48:3c:16:49:1d:ff:16:9c:4d:b8:70:90:e9:f2: 9c:f7:2e:c5:6a:4f:67:8a:0e:36:18:66:86:f6:75: 5c:f0:1c:1a:9a:12:c3:98:06:71:be:68:17:2b:90: 6f:4b:c5:d3:78:05:8d:e0:27:64:0b:0f:e6:83:eb: 7d:f3:f1:8d:10:6c:9f:11:16:fa:ba:2b:b7:6d:84: 62:e6:fa:c4:58:38:60:ab:9b:06:91:ab:3a:bc:dc: 51:08:ea:35:a1:b5:27:86:a1:22:ba:8d:34:b1:bf: a8:df:6c:24:06:8c:e8:80:3e:8d:7e:84:0b:2d:64: c0:40:66:63:9a:2f:91:65:7b:d7:c1:e9:8e:31:ed: 82:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DF:26:4C:C6:BF:C5:FF:33:34:3B:2B:9B:23:FB:F5:B2:67:69:9B X509v3 Authority Key Identifier: keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e3:97:68:85:f2:92:8a:a5:0c:01:00:1f:63:08:a2:10:6c: 1f:18:3d:43:0d:b2:77:ef:ef:e9:a6:d9:c0:24:8f:49:6a:a7: de:ff:15:3e:52:5f:c7:53:56:a8:c4:78:fd:d8:94:bd:09:a4: ce:b3:8b:5b:dd:e6:47:7e:28:05:30:8d:74:e8:d9:ff:1d:e1: 32:11:7a:61:f1:f9:98:ef:a4:7a:39:a9:19:c0:35:15:fa:0e: 0e:f4:ed:ae:c7:7e:1b:32:54:fa:c2:26:20:44:dc:03:41:b4: 59:50:6d:16:05:23:20:0e:c6:af:f2:8d:9c:55:fa:e8:40:28: 96:66:99:e1:f8:ca:26:ab:52:d3:b0:01:4e:54:cd:e5:bd:83: 65:ba:e3:cd:6c:75:b1:4f:2e:08:ac:96:c3:17:4a:a2:9f:70: dc:46:d3:09:7b:02:c9:98:a1:a3:4f:57:70:b7:0a:bd:bd:38: b4:c2:74:ac:fb:de:6b:f0:d5:61:e5:18:e6:0e:dc:dc:4a:67: 72:3c:e6:b6:ec:2e:d5:b9:43:f0:17:f7:51:e6:fc:e0:93:c0: 76:59:8a:eb:f1:b6:30:4f:62:b2:53:dd:75:d5:a4:4f:d8:be: 83:74:94:b5:85:9c:f6:55:c5:4a:da:7f:3b:70:ba:31:62:19: 53:ac:b5:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOntGm+iJdAfZMWrBbipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOTM4ZTI2YjI5ODRiMmZhMTYxYWFjMDdiMDRiZGI4NTBh YWRkMTYwHhcNMjUxMjA2MDUwMTAxWhcNMjUxMjA3MDUwMTAxWjAzMTEwLwYDVQQD Eyg1MWRmMjY0Y2M2YmZjNWZmMzMzNDNiMmI5YjIzZmJmNWIyNjc2OTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0iaGuqoWQN0cm81U54aUAGg2ykq SsQvhLtIOTQ7YalfEopYcqxiq0YiRQaEm5aI2ojDrsJBBa6j3HptF5Xhsj6uK3Lo ISwC3K21VoM0El4rOBwQsw+fSgLYR8ZbqQIv8/vytwhYbOncjmhMffCsGcskkPLI eakvSDwWSR3/FpxNuHCQ6fKc9y7Fak9nig42GGaG9nVc8BwamhLDmAZxvmgXK5Bv S8XTeAWN4CdkCw/mg+t98/GNEGyfERb6uiu3bYRi5vrEWDhgq5sGkas6vNxRCOo1 obUnhqEiuo00sb+o32wkBozogD6NfoQLLWTAQGZjmi+RZXvXwemOMe2CQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHfJkzGv8X/MzQ7K5sj+/WyZ2mbMB8GA1UdIwQY MBaAFF2TjiaymEsvoWGqwHsEvbhQqt0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEt NmVjN2RiZTI3YmIzLzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEtNmVjN2RiZTI3YmIz LzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOOXaIXy koqlDAEAH2MIohBsHxg9Qw2yd+/v6abZwCSPSWqn3v8VPlJfx1NWqMR4/diUvQmk zrOLW93mR34oBTCNdOjZ/x3hMhF6YfH5mO+kejmpGcA1FfoODvTtrsd+GzJU+sIm IETcA0G0WVBtFgUjIA7Gr/KNnFX66EAolmaZ4fjKJqtS07ABTlTN5b2DZbrjzWx1 sU8uCKyWwxdKop9w3EbTCXsCyZiho09XcLcKvb04tMJ0rPvea/DVYeUY5g7c3Epn cjzmtuwu1blD8Bf3Ueb84JPAdlmK6/G2ME9islPdddWkT9i+g3SUtYWc9lXFStp/ O3C6MWIZU6y1Zw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:12 2025 by rpki-client