This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json) Hash identifier: wsjxB9M0ZgbOt20csfNdI+n3YR/D2KB6KZkgid3w4io= Subject key identifier: 0B:89:D4:4A:61:FC:0A:A7:33:4F:FE:2D:F7:1E:31:28:E6:E4:81:64 Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Certificate serial: 019AF3F70B63329150A7ACB6D50EAE6C4D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft Manifest number: 1211 Signing time: Sat 06 Dec 2025 14:00:44 +0000 Manifest this update: Sat 06 Dec 2025 14:00:44 +0000 Manifest next update: Sun 07 Dec 2025 14:00:44 +0000 Files and hashes: 1: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: XvX2k++VrZR/skUYn+b8pMh9Uw7O81lyXi/BqJWNQ94=) 2: xq3w8Wz_hOjqLagFRh_rUp9lCwM.roa (hash: TgceUdzJ8ko0xPfAB7dusGM3rsCqRGqcd0Fbo4I7cfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:0b:63:32:91:50:a7:ac:b6:d5:0e:ae:6c:4d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f Validity Not Before: Dec 6 14:00:44 2025 GMT Not After : Dec 7 14:00:44 2025 GMT Subject: CN=0b89d44a61fc0aa7334ffe2df71e3128e6e48164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:80:03:4f:3a:66:e3:34:08:d5:70:7d:db:42: 73:76:e6:b2:f7:12:c1:bf:4d:dc:fc:e8:ec:7b:f9: d7:8d:68:32:16:d2:40:50:31:f0:28:f3:d3:a3:bd: 3b:e2:4d:ba:25:4c:40:0f:36:be:ad:1a:74:b3:04: 94:cb:36:a3:54:02:c1:1a:27:66:b3:5e:99:a6:bd: f6:ad:d9:ba:41:79:b0:88:8c:7c:a5:00:ca:2b:ed: 52:2b:4d:15:8b:4a:c5:1a:6e:01:53:75:a4:fe:96: 46:65:e4:6f:42:4b:70:4a:34:ea:28:19:0b:46:ea: 75:f5:0b:ba:84:a0:c2:e6:cd:fe:4f:4e:d4:73:95: ea:e0:0f:76:50:c1:9d:30:cc:90:a7:0a:2f:92:ac: d7:06:7c:a7:e1:73:6e:40:49:7d:bc:88:f9:80:90: 70:d6:4b:2a:c4:3a:4c:36:9e:80:a2:79:77:83:8f: e2:a4:f1:e6:9f:e2:e1:c8:50:67:8a:59:ff:47:86: 67:14:f3:53:7c:cb:92:99:c0:06:28:b9:ce:d8:2e: 63:64:22:3b:20:f7:1d:e8:ac:8f:fb:95:c2:a0:66: 82:b8:d0:de:4e:83:fd:de:2e:f5:19:a4:3e:4a:75: f8:a4:36:d3:88:18:43:cc:fe:23:96:ae:15:ac:c3: 23:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:D4:4A:61:FC:0A:A7:33:4F:FE:2D:F7:1E:31:28:E6:E4:81:64 X509v3 Authority Key Identifier: keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:dc:cf:86:5b:af:04:f5:b9:eb:6f:13:d4:5c:3b:5d:73:65: 94:9d:a4:33:03:e0:f7:7e:fd:19:6e:8a:b3:03:0f:5e:e2:73: f6:c6:bf:5f:c8:4e:27:69:82:4e:bb:3f:d7:cc:a2:80:94:10: 57:60:33:d6:65:68:28:bc:8b:6f:6b:16:4c:55:7b:12:71:14: 76:e5:88:16:bc:95:8c:8b:28:a1:cf:48:15:de:26:e7:be:72: 9e:4e:29:4f:22:4b:01:ff:93:5e:61:61:7b:cd:dd:a2:7d:19: e9:93:9f:aa:2f:6f:f8:ea:b5:97:95:3d:ea:bc:bd:89:bd:f8: 32:7a:1c:4c:b4:e9:b9:cd:03:5c:ef:02:8f:b6:5e:7c:81:2c: 60:c0:17:a3:2b:c0:85:5d:95:a9:11:1c:89:22:f0:2b:3f:02: ff:0d:87:d5:02:33:a2:7a:0a:18:82:81:d7:06:7b:02:eb:35: 45:4b:0e:98:d7:d3:fa:6b:e1:86:ef:34:d3:fc:57:56:b6:5b: f5:e6:4c:ee:55:cd:e9:c3:9d:5e:f5:42:0a:6c:1f:ab:fb:12: 76:83:23:fe:a5:3c:bf:e6:99:00:5b:41:77:d3:24:8d:0e:fe: 81:b5:52:e4:89:ec:3c:b8:df:84:3e:31:c8:b7:e9:f6:2c:26: be:39:52:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9wtjMpFQp6y21Q6ubE2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Zjg4YjVjNmU1MTE2ZTUwY2YyYjViZGY0M2U4NzIwZjFk OGM2MGYwHhcNMjUxMjA2MTQwMDQ0WhcNMjUxMjA3MTQwMDQ0WjAzMTEwLwYDVQQD EygwYjg5ZDQ0YTYxZmMwYWE3MzM0ZmZlMmRmNzFlMzEyOGU2ZTQ4MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ADTzpm4zQI1XB920Jzduay9xLB v03c/Ojse/nXjWgyFtJAUDHwKPPTo7074k26JUxADza+rRp0swSUyzajVALBGidm s16Zpr32rdm6QXmwiIx8pQDKK+1SK00Vi0rFGm4BU3Wk/pZGZeRvQktwSjTqKBkL Rup19Qu6hKDC5s3+T07Uc5Xq4A92UMGdMMyQpwovkqzXBnyn4XNuQEl9vIj5gJBw 1ksqxDpMNp6Aonl3g4/ipPHmn+LhyFBniln/R4ZnFPNTfMuSmcAGKLnO2C5jZCI7 IPcd6KyP+5XCoGaCuNDeToP93i71GaQ+SnX4pDbTiBhDzP4jlq4VrMMj+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuJ1Eph/AqnM0/+LfceMSjm5IFkMB8GA1UdIwQY MBaAFMT4i1xuURblDPK1vfQ+hyDx2MYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjct MDczNjM5OTM4NDM3LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8yNTMwNzgtMGE3Yi00NWJiLWJjNjctMDczNjM5OTM4NDM3 LzEveFBpTFhHNVJGdVVNOHJXOTlENkhJUEhZeGc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdzPhluv BPW5628T1Fw7XXNllJ2kMwPg9379GW6KswMPXuJz9sa/X8hOJ2mCTrs/18yigJQQ V2Az1mVoKLyLb2sWTFV7EnEUduWIFryVjIsooc9IFd4m575ynk4pTyJLAf+TXmFh e83don0Z6ZOfqi9v+Oq1l5U96ry9ib34MnocTLTpuc0DXO8Cj7ZefIEsYMAXoyvA hV2VqREciSLwKz8C/w2H1QIzonoKGIKB1wZ7Aus1RUsOmNfT+mvhhu800/xXVrZb 9eZM7lXN6cOdXvVCCmwfq/sSdoMj/qU8v+aZAFtBd9MkjQ7+gbVS5InsPLjfhD4x yLfp9iwmvjlSow== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:07 2025 by rpki-client