This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json) Hash identifier: ldBZPS3Sd16EhiWM62BNze0pGAUv4AMFENfJtPDYF10= Subject key identifier: EA:FC:29:31:32:7B:81:0C:41:4E:57:CE:D2:6E:28:3C:52:66:1A:E9 Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d Certificate serial: 019B2C2FA6D23D9E907801F91D1CD648C998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft Manifest number: 027E Signing time: Wed 17 Dec 2025 12:01:18 +0000 Manifest this update: Wed 17 Dec 2025 12:01:18 +0000 Manifest next update: Thu 18 Dec 2025 12:01:18 +0000 Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: SiK56c8NkXrG2kqGbvO0KDaasB6TjFgTDwsqkBV+Ptc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:a6:d2:3d:9e:90:78:01:f9:1d:1c:d6:48:c9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d Validity Not Before: Dec 17 12:01:18 2025 GMT Not After : Dec 18 12:01:18 2025 GMT Subject: CN=eafc2931327b810c414e57ced26e283c52661ae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:93:01:bb:7a:fb:1e:96:8a:ec:aa:fc:60: 55:ce:72:4e:c8:a9:cf:28:69:98:73:05:4c:d8:46: d4:91:66:64:7f:5a:64:0f:be:b3:49:c8:ec:1d:e4: 0c:94:99:3d:1e:7d:28:47:57:ea:a5:67:6e:96:b9: d5:04:d4:4c:90:40:88:3c:75:4e:14:08:1f:46:1e: ef:f0:5a:5f:6c:79:5c:fd:ac:a1:b4:1f:59:80:43: c7:f9:a5:1e:ea:22:c1:8b:bd:8c:e5:93:3b:d0:5f: 1d:9d:b9:f4:b5:23:31:44:69:2b:9d:96:98:d3:24: e3:86:c0:e6:a2:ab:5d:ea:72:86:d3:07:b3:20:6b: 1d:9a:10:c4:a7:39:22:56:10:cf:1e:be:a6:94:8d: 61:02:d2:8e:e7:c4:87:82:79:0a:51:20:64:fc:fe: 37:13:83:0c:43:5f:82:36:74:b6:8e:58:fa:8e:fd: c0:9a:3d:fb:82:af:e2:f8:bb:d7:29:5d:79:2c:50: 74:87:dc:04:40:6d:0e:cb:66:37:7a:41:0b:0a:53: 30:2c:77:fc:6d:21:eb:98:e5:eb:55:84:66:e2:ce: f9:fd:f7:9c:2a:2b:c7:23:f7:34:15:1f:ce:63:31: 56:99:52:48:f2:06:82:83:35:69:4a:83:57:84:fa: aa:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FC:29:31:32:7B:81:0C:41:4E:57:CE:D2:6E:28:3C:52:66:1A:E9 X509v3 Authority Key Identifier: keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:62:c4:2e:20:c6:36:f6:8b:4a:2b:45:f1:25:29:32:b3:77: c9:52:bb:e2:98:8d:e3:63:d4:38:b3:fd:74:01:6c:5d:f9:93: 25:16:bc:ea:0c:8a:cb:fd:f3:63:77:3a:f7:4c:1c:a1:ed:72: df:89:60:8f:c7:18:fc:3b:61:0e:e9:74:8c:2d:6f:13:5c:e2: 7e:f0:e6:2b:95:12:7d:06:22:b2:ff:8d:eb:7d:a9:2e:cf:61: 6d:be:d2:ea:b9:7f:12:ca:f7:d7:e8:bb:8c:c7:e9:b0:6b:d1: 76:35:cd:01:1d:c9:f4:6d:06:74:ae:96:8e:d4:63:ec:c2:a1: 26:63:04:41:43:7e:43:99:b5:df:15:a3:43:fa:07:a0:b0:90: 42:39:b0:6a:8a:f1:33:e8:fd:a8:f8:66:46:87:d7:ed:4f:79: c8:6a:0c:33:32:c1:b5:3d:42:1c:a6:7b:89:f0:e1:0a:79:5a: 89:35:54:2e:55:8e:61:14:37:69:f0:75:da:b4:2e:a8:c4:b6: 6e:5c:0f:c8:69:a8:54:25:9f:81:bd:fc:f0:ed:55:64:c8:16: ec:35:ca:0c:ec:a2:c9:1b:70:9e:19:bc:7e:21:24:4f:87:fc: b7:0c:af:8c:f8:7c:38:15:60:a9:f7:2c:0c:5d:74:1b:89:cc: c0:de:94:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL6bSPZ6QeAH5HRzWSMmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWY4ZTg1NWJmMWIwNDMwOWM0OWM0MWY3ZjQzMGRjYzhm OTQ1OGQwHhcNMjUxMjE3MTIwMTE4WhcNMjUxMjE4MTIwMTE4WjAzMTEwLwYDVQQD EyhlYWZjMjkzMTMyN2I4MTBjNDE0ZTU3Y2VkMjZlMjgzYzUyNjYxYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bqTAbt6+x6Wiuyq/GBVznJOyKnP KGmYcwVM2EbUkWZkf1pkD76zScjsHeQMlJk9Hn0oR1fqpWdulrnVBNRMkECIPHVO FAgfRh7v8FpfbHlc/ayhtB9ZgEPH+aUe6iLBi72M5ZM70F8dnbn0tSMxRGkrnZaY 0yTjhsDmoqtd6nKG0wezIGsdmhDEpzkiVhDPHr6mlI1hAtKO58SHgnkKUSBk/P43 E4MMQ1+CNnS2jlj6jv3Amj37gq/i+LvXKV15LFB0h9wEQG0Oy2Y3ekELClMwLHf8 bSHrmOXrVYRm4s75/fecKivHI/c0FR/OYzFWmVJI8gaCgzVpSoNXhPqqJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOr8KTEye4EMQU5XztJuKDxSZhrpMB8GA1UdIwQY MBaAFF2fjoVb8bBDCcScQff0MNzI+UWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80ZmJhMGItN2JlZS00MzEyLWFiODkt YjRmY2VmZDM3Y2UxLzEvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS80ZmJhMGItN2JlZS00MzEyLWFiODktYjRmY2VmZDM3Y2Ux LzEvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWLELiDG NvaLSitF8SUpMrN3yVK74piN42PUOLP9dAFsXfmTJRa86gyKy/3zY3c690wcoe1y 34lgj8cY/DthDul0jC1vE1zifvDmK5USfQYisv+N632pLs9hbb7S6rl/Esr31+i7 jMfpsGvRdjXNAR3J9G0GdK6WjtRj7MKhJmMEQUN+Q5m13xWjQ/oHoLCQQjmwaorx M+j9qPhmRofX7U95yGoMMzLBtT1CHKZ7ifDhCnlaiTVULlWOYRQ3afB12rQuqMS2 blwPyGmoVCWfgb388O1VZMgW7DXKDOyiyRtwnhm8fiEkT4f8twyvjPh8OBVgqfcs DF10G4nMwN6UzQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:50:28 2025 by rpki-client