This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json) Hash identifier: Np6JMu3/L3PZCYbfO+zTAVx8yJLsO9ua32Bt5Dj68c4= Subject key identifier: 4C:C0:51:C2:7E:81:13:37:2E:31:7F:51:B9:3C:BA:B7:4B:EC:17:DF Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5 Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5 Certificate serial: 019AF31D9AF09048411C0000D83E85CB12B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft Manifest number: 0363 Signing time: Sat 06 Dec 2025 10:03:14 +0000 Manifest this update: Sat 06 Dec 2025 10:03:14 +0000 Manifest next update: Sun 07 Dec 2025 10:03:14 +0000 Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: Z7ZQtjonX9r0Hpb/fk75njL08BmWH5+R2cUmGtw7a28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:9a:f0:90:48:41:1c:00:00:d8:3e:85:cb:12:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5 Validity Not Before: Dec 6 10:03:14 2025 GMT Not After : Dec 7 10:03:14 2025 GMT Subject: CN=4cc051c27e8113372e317f51b93cbab74bec17df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c5:cc:cc:ff:91:97:12:8e:87:2d:c6:d1:8f: 02:74:93:36:54:ec:1c:38:eb:be:b4:d8:1e:60:71: de:f7:36:f8:be:4c:97:ae:43:04:1a:f8:0e:89:cb: ef:58:9b:63:70:b0:0a:3e:29:1b:9f:4b:63:17:d1: ec:98:d5:ca:f0:13:53:f8:05:9d:d9:f5:64:88:fb: 30:fc:ca:ab:44:a6:5a:72:87:29:63:4e:ff:e2:58: f6:ce:28:6b:23:9e:b0:6e:56:2b:3d:fd:87:e4:c8: 93:eb:a8:14:01:6b:d7:26:c7:de:34:23:dc:e9:27: 4d:f6:43:ef:f0:23:26:af:11:68:ff:51:4a:44:26: 79:d6:65:c7:d2:11:59:86:95:69:69:42:6e:41:28: e0:e4:4c:c4:e1:ea:df:df:4b:6c:18:db:88:70:30: e4:8f:30:ce:2f:c4:e5:d0:08:6f:21:af:b9:37:6e: e7:0c:9a:b6:a1:80:f7:cd:32:fd:09:e6:a6:e5:6b: 6f:df:98:90:27:61:cf:a2:4a:d1:2b:f9:57:6a:e9: 2f:89:97:67:0c:9b:d3:6b:17:cf:4e:e6:0d:a8:ca: 57:f6:fc:e3:61:03:40:19:51:4d:87:b1:2f:d3:ac: 9e:12:2b:56:04:ae:95:45:13:bf:2f:cd:94:ce:f8: 26:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C0:51:C2:7E:81:13:37:2E:31:7F:51:B9:3C:BA:B7:4B:EC:17:DF X509v3 Authority Key Identifier: keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5b:e8:06:c6:0e:20:e1:3e:7c:4b:f2:28:0f:44:1e:df:40: 94:a2:69:5b:55:8f:54:46:a3:46:b4:c8:f7:68:6a:c5:2f:a7: fe:3c:f8:ff:d1:1a:a8:98:76:f7:13:90:84:c0:0d:71:23:da: 67:28:7b:19:26:98:9f:1a:f7:92:d2:e4:11:dd:6b:13:a4:4f: 9b:3e:dd:de:7f:d5:a4:12:85:42:56:f6:1e:66:63:05:db:60: 1f:44:8e:ce:07:83:28:b7:0a:d2:66:04:6c:3d:1a:dd:62:f3: e9:5b:20:45:67:25:34:43:c6:a9:8d:bf:f8:f7:a9:bd:6e:f4: 61:1e:a7:7c:00:77:ae:db:f8:ef:8f:47:6a:b9:95:36:a7:d7: 6d:be:60:02:92:50:19:98:fc:b6:85:3b:a4:e3:1e:75:a9:61: b7:3c:3d:af:c8:fb:ad:24:b8:61:1d:5c:f0:ad:c6:7e:b2:a5: c7:79:90:5d:54:24:9a:f6:4f:b9:f8:c8:e9:e7:db:67:8c:91: 0a:68:db:88:bc:c0:87:ad:a6:18:25:27:99:5f:a1:85:8b:f1: 25:dd:7c:f9:bb:26:d9:ca:09:06:5d:f4:7c:8b:77:dc:bd:72: 23:89:4d:e3:ab:46:39:fb:37:ef:b4:a6:15:5f:12:e4:00:9c: 29:46:4d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHZrwkEhBHAAA2D6FyxK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi N2MzZTUwHhcNMjUxMjA2MTAwMzE0WhcNMjUxMjA3MTAwMzE0WjAzMTEwLwYDVQQD Eyg0Y2MwNTFjMjdlODExMzM3MmUzMTdmNTFiOTNjYmFiNzRiZWMxN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMXMzP+RlxKOhy3G0Y8CdJM2VOwc OOu+tNgeYHHe9zb4vkyXrkMEGvgOicvvWJtjcLAKPikbn0tjF9HsmNXK8BNT+AWd 2fVkiPsw/MqrRKZacocpY07/4lj2zihrI56wblYrPf2H5MiT66gUAWvXJsfeNCPc 6SdN9kPv8CMmrxFo/1FKRCZ51mXH0hFZhpVpaUJuQSjg5EzE4erf30tsGNuIcDDk jzDOL8Tl0AhvIa+5N27nDJq2oYD3zTL9Ceam5Wtv35iQJ2HPokrRK/lXaukviZdn DJvTaxfPTuYNqMpX9vzjYQNAGVFNh7Ev06yeEitWBK6VRRO/L82UzvgmKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzAUcJ+gRM3LjF/Ubk8urdL7BffMB8GA1UdIwQY MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnFvoBsYO IOE+fEvyKA9EHt9AlKJpW1WPVEajRrTI92hqxS+n/jz4/9EaqJh29xOQhMANcSPa Zyh7GSaYnxr3ktLkEd1rE6RPmz7d3n/VpBKFQlb2HmZjBdtgH0SOzgeDKLcK0mYE bD0a3WLz6VsgRWclNEPGqY2/+PepvW70YR6nfAB3rtv4749HarmVNqfXbb5gApJQ GZj8toU7pOMedalhtzw9r8j7rSS4YR1c8K3GfrKlx3mQXVQkmvZPufjI6efbZ4yR CmjbiLzAh62mGCUnmV+hhYvxJd18+bsm2coJBl30fIt33L1yI4lN46tGOfs377Sm FV8S5ACcKUZNKg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:50:38 2025 by rpki-client