This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft File: xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft (raw, json) Hash identifier: dWgz1ysBw43H0hy08FfiU7OZe0+0cWQyS1xf/0hY1BQ= Subject key identifier: 42:F4:D4:31:DF:83:D7:9A:9E:60:87:65:3A:77:37:62:70:79:F1:4A Authority key identifier: C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0 Certificate issuer: /CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0 Certificate serial: 019AF12D9992224B2BBA5047BFB00BC86E90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl (hash: Glb2uFvluUnzUoNNDX1aQ4JtR13xBsFIMqTUX4dNnUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:99:92:22:4b:2b:ba:50:47:bf:b0:0b:c8:6e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5d18e1a1dc6558c4dba731efa32769c45f54ba0 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=42f4d431df83d79a9e6087653a7737627079f14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:22:31:fa:a7:7e:45:af:1a:37:a1:af:dd: 14:66:89:dc:ea:d0:d4:e1:16:0e:b5:86:e3:34:4a: ef:2c:1c:19:6f:c5:a9:72:a5:f5:09:29:f4:98:d6: a4:4a:a6:68:97:85:14:25:62:0a:da:0a:dc:65:b2: d1:f8:10:8c:20:0b:b6:ce:0f:e7:fe:b1:5c:66:78: 67:cf:dd:1e:c4:38:e4:bd:fb:57:42:d1:43:e2:79: 4a:29:e1:a1:eb:62:bd:bc:66:dc:af:da:f6:e6:b9: d9:0c:b3:bd:61:be:c2:74:6f:ac:2a:e8:c9:1c:bd: 8c:da:2e:0b:48:ab:21:81:68:b6:85:78:1e:24:ec: 08:dc:35:34:a5:03:2f:12:bc:06:24:88:61:57:8b: 6f:0a:db:c5:07:57:44:26:ca:f1:a7:49:3b:7e:40: ef:1a:71:9e:2f:a9:06:31:b2:da:8a:4f:83:af:5f: 64:52:67:cf:3d:3c:3b:9a:30:23:9d:5b:44:ab:3b: 80:b8:02:9e:99:fc:8d:62:14:b2:02:b9:39:15:8f: 5f:ae:05:6a:98:72:6b:df:47:78:9a:3a:c6:36:62: 15:d0:3d:50:9f:74:2b:b6:e7:71:d0:bb:7a:87:cd: 21:f7:ce:80:61:80:17:33:09:16:c1:2f:c8:d9:22: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F4:D4:31:DF:83:D7:9A:9E:60:87:65:3A:77:37:62:70:79:F1:4A X509v3 Authority Key Identifier: keyid:C5:D1:8E:1A:1D:C6:55:8C:4D:BA:73:1E:FA:32:76:9C:45:F5:4B:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xdGOGh3GVYxNunMe-jJ2nEX1S6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6b07-2e45-410f-9318-1cbe661a63ff/1/xdGOGh3GVYxNunMe-jJ2nEX1S6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:cd:7b:a4:25:c9:de:a3:de:5a:51:18:88:ce:13:e5:3b:8b: f5:cf:60:72:0c:3b:7a:da:92:5a:36:6a:48:e9:6b:3f:bc:e0: 00:6c:00:61:c4:fd:1b:4d:c2:d0:66:72:6b:4d:8f:86:16:69: c0:0e:9d:18:6b:f9:5e:b2:e3:64:ef:a2:a0:22:a3:b5:ec:32: 23:59:13:76:00:21:27:d3:68:4e:b5:f1:8e:29:5e:cf:4a:8b: 93:1a:cf:19:4c:50:63:b1:75:f5:7b:d5:e6:c4:82:f9:6c:0e: cc:f4:86:1e:fe:c3:a6:a1:65:0c:2d:9e:02:ec:08:5c:01:0d: 37:ae:78:f2:7b:90:5d:5d:dd:28:e0:49:d9:fb:63:0f:a3:ce: ff:28:74:18:fd:e4:d5:a5:ee:3f:de:69:eb:a3:75:bb:9f:69: ce:1f:c6:4c:a3:0c:53:1e:f8:b4:40:a6:3e:ff:60:13:9e:ee: 29:ee:ed:45:0c:c5:45:3a:fa:33:3c:7d:35:1d:aa:20:bc:cc: 07:f5:94:16:c3:b9:cc:52:50:ba:f8:db:6f:0a:d4:9a:9b:8e: a5:98:bc:4d:83:0c:0f:14:f4:86:8b:14:ca:17:6d:4a:e5:8d: ea:2e:2a:ce:8a:34:f5:86:dd:6a:e7:3a:00:28:c5:6d:97:3e: 6d:ad:79:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZmSIksrulBHv7ALyG6QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZDE4ZTFhMWRjNjU1OGM0ZGJhNzMxZWZhMzI3NjljNDVm NTRiYTAwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD Eyg0MmY0ZDQzMWRmODNkNzlhOWU2MDg3NjUzYTc3Mzc2MjcwNzlmMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1AiMfqnfkWvGjehr90UZonc6tDU 4RYOtYbjNErvLBwZb8WpcqX1CSn0mNakSqZol4UUJWIK2grcZbLR+BCMIAu2zg/n /rFcZnhnz90exDjkvftXQtFD4nlKKeGh62K9vGbcr9r25rnZDLO9Yb7CdG+sKujJ HL2M2i4LSKshgWi2hXgeJOwI3DU0pQMvErwGJIhhV4tvCtvFB1dEJsrxp0k7fkDv GnGeL6kGMbLaik+Dr19kUmfPPTw7mjAjnVtEqzuAuAKemfyNYhSyArk5FY9frgVq mHJr30d4mjrGNmIV0D1Qn3Qrtudx0Lt6h80h986AYYAXMwkWwS/I2SLV/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL01DHfg9eanmCHZTp3N2JwefFKMB8GA1UdIwQY MBaAFMXRjhodxlWMTbpzHvoydpxF9UugMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82ZjZiMDctMmU0NS00MTBmLTkzMTgt MWNiZTY2MWE2M2ZmLzEveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82ZjZiMDctMmU0NS00MTBmLTkzMTgtMWNiZTY2MWE2M2Zm LzEveGRHT0doM0dWWXhOdW5NZS1qSjJuRVgxUzZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIs17pCXJ 3qPeWlEYiM4T5TuL9c9gcgw7etqSWjZqSOlrP7zgAGwAYcT9G03C0GZya02PhhZp wA6dGGv5XrLjZO+ioCKjtewyI1kTdgAhJ9NoTrXxjilez0qLkxrPGUxQY7F19XvV 5sSC+WwOzPSGHv7DpqFlDC2eAuwIXAENN6548nuQXV3dKOBJ2ftjD6PO/yh0GP3k 1aXuP95p66N1u59pzh/GTKMMUx74tECmPv9gE57uKe7tRQzFRTr6Mzx9NR2qILzM B/WUFsO5zFJQuvjbbwrUmpuOpZi8TYMMDxT0hosUyhdtSuWN6i4qzoo09Ybdauc6 ACjFbZc+ba15pA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:28:11 2025 by rpki-client