This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json) Hash identifier: Eh21VMBiJyT+PGejb167j9FCWhPd8LjYJKFWFNJf+Rw= Subject key identifier: 5F:89:9E:ED:D3:68:85:B3:B0:68:C1:2B:B3:13:76:25:D2:74:29:CF Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c Certificate serial: 019AF19B390C1D86F591ACF0C5CB05260EEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft Manifest number: 169B Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: F4OKy4HNUcc0h6GKBcDCyhA11/2rfR1RNTrmYWz4JAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:39:0c:1d:86:f5:91:ac:f0:c5:cb:05:26:0e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=5f899eedd36885b3b068c12bb3137625d27429cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:70:13:8d:f4:2b:e5:57:09:90:96:2f:77:39: 6e:34:75:94:9d:c7:76:45:8b:a8:0d:b6:a7:25:b9: 50:76:63:e9:d2:2b:f2:cd:de:c7:04:92:c1:75:6c: ec:b2:a0:a2:03:4e:0b:e9:17:16:05:8e:59:d2:7f: 9e:d8:c6:ec:a0:6e:c1:d2:99:58:3e:27:f9:b3:51: f5:d2:cc:26:ef:a0:df:ce:1e:07:da:cc:43:2e:f8: 63:14:ae:7f:5d:c2:0e:45:61:28:9c:7a:2a:a6:46: 89:d5:61:d8:8a:5c:43:8f:c3:4f:31:75:25:15:76: 0e:f9:52:c5:ff:3b:23:0a:f3:dc:67:0e:43:c3:a9: e8:fc:fa:35:73:48:d9:55:91:b8:65:15:a3:f2:80: 90:51:a2:5c:8b:49:2e:bf:50:a2:8c:62:07:c7:41: f5:10:8b:f8:32:25:c8:06:09:07:39:6c:bc:93:c6: 73:84:c7:cf:56:40:6b:e4:a4:74:aa:78:b8:79:85: 3b:10:0d:fb:da:67:23:9e:a4:67:13:b9:fa:f5:64: 29:8b:f3:96:47:1b:52:aa:19:56:06:59:d9:d0:57: af:28:b5:0d:c3:fd:5a:27:13:9e:ff:1b:37:ac:50: d3:92:63:c3:4e:eb:4a:f5:79:7f:bd:18:6d:cd:c6: 51:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:9E:ED:D3:68:85:B3:B0:68:C1:2B:B3:13:76:25:D2:74:29:CF X509v3 Authority Key Identifier: keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c4:29:69:d6:f2:53:93:27:94:c5:92:7e:10:a7:11:a0:a3: c4:9e:26:b7:55:78:49:c8:89:0e:3c:f2:2c:8e:65:05:36:ad: bb:fa:0e:6a:5f:18:22:2e:4e:64:31:b3:c2:8f:7c:c9:3b:c7: 0f:4b:86:ad:fd:1c:d3:71:45:4e:a3:de:d7:c4:32:ff:57:0d: f7:7c:3b:f3:77:79:9e:82:e7:59:68:a7:12:f1:72:6b:9a:c1: 47:74:07:17:fc:04:67:d9:e0:1d:14:49:96:d6:82:63:fe:85: e4:86:e7:76:63:ab:4f:56:46:ee:35:4d:fb:f0:48:6b:a1:13: 9f:12:98:99:35:d7:a7:7b:3a:9c:fc:63:8e:26:98:25:3a:c7: e2:55:cf:a0:c4:f3:dc:85:cc:3f:f3:7b:b7:62:87:f5:64:f9: f7:f7:b8:d9:9c:0c:b0:f5:c8:c0:79:7d:79:f6:57:20:55:ee: c6:72:7b:86:97:e2:ed:82:b0:d8:f2:3e:59:9c:6f:c5:2b:d6: 81:a7:95:62:be:28:9f:cf:54:a9:37:11:20:13:9e:d1:74:04: 66:c6:32:15:21:ea:4f:cd:9a:66:0a:f6:85:9e:82:dc:47:59: e7:62:0a:07:d5:c6:98:84:8a:f2:40:78:66:7a:49:84:eb:1d: 1d:45:e3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzkMHYb1kazwxcsFJg7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDcxZWIxZmVmNjM1MjA4YWM3MGU2ZmUyYzU2YjAwNDc3 ZjBiOGMwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg1Zjg5OWVlZGQzNjg4NWIzYjA2OGMxMmJiMzEzNzYyNWQyNzQyOWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHATjfQr5VcJkJYvdzluNHWUncd2 RYuoDbanJblQdmPp0ivyzd7HBJLBdWzssqCiA04L6RcWBY5Z0n+e2MbsoG7B0plY Pif5s1H10swm76Dfzh4H2sxDLvhjFK5/XcIORWEonHoqpkaJ1WHYilxDj8NPMXUl FXYO+VLF/zsjCvPcZw5Dw6no/Po1c0jZVZG4ZRWj8oCQUaJci0kuv1CijGIHx0H1 EIv4MiXIBgkHOWy8k8ZzhMfPVkBr5KR0qni4eYU7EA372mcjnqRnE7n69WQpi/OW RxtSqhlWBlnZ0FevKLUNw/1aJxOe/xs3rFDTkmPDTutK9Xl/vRhtzcZR+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Jnu3TaIWzsGjBK7MTdiXSdCnPMB8GA1UdIwQY MBaAFF9HHrH+9jUgiscOb+LFawBHfwuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYt OTZjN2NiODMzM2M4LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYtOTZjN2NiODMzM2M4 LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMQpadby U5MnlMWSfhCnEaCjxJ4mt1V4SciJDjzyLI5lBTatu/oOal8YIi5OZDGzwo98yTvH D0uGrf0c03FFTqPe18Qy/1cN93w783d5noLnWWinEvFya5rBR3QHF/wEZ9ngHRRJ ltaCY/6F5IbndmOrT1ZG7jVN+/BIa6ETnxKYmTXXp3s6nPxjjiaYJTrH4lXPoMTz 3IXMP/N7t2KH9WT59/e42ZwMsPXIwHl9efZXIFXuxnJ7hpfi7YKw2PI+WZxvxSvW gaeVYr4on89UqTcRIBOe0XQEZsYyFSHqT82aZgr2hZ6C3EdZ52IKB9XGmISK8kB4 ZnpJhOsdHUXjHA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:57 2025 by rpki-client