This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json) Hash identifier: +CGjdxZtDCrZ1iluBJSfC4ajMcsoxuPMti/Buggrf0I= Subject key identifier: C3:2C:C9:F2:96:A3:F9:5E:38:EE:C9:8B:35:40:E6:13:3D:C5:CA:EC Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Certificate serial: 019AF2099B8725379BB86D6E7668180367B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft Manifest number: 0D13 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: XDkbiXE7aUDHG3+sx6Jt39v3KdsQsz9R8H6pm8W9B+I=) 2: fR8nd7Ui5M0TTCClOFZarT85ISQ.roa (hash: +LwloUzxUq85xV+wKMtA7KHt9ERuAgEUO4GtKVQXsDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9b:87:25:37:9b:b8:6d:6e:76:68:18:03:67:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=c32cc9f296a3f95e38eec98b3540e6133dc5caec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:71:f4:df:bd:5a:2b:bd:4c:88:40:ca:7d:8d: 27:5b:20:b3:29:df:9a:e4:fe:d5:8f:1a:70:51:43: d8:57:4f:3d:e0:d2:69:11:e0:63:4c:bd:9d:a1:75: 62:1d:d1:be:43:d8:f2:f1:d2:4b:a6:5f:64:1a:c3: 04:84:e2:69:cd:24:6a:a3:3c:c7:2a:91:08:6f:ac: 7c:d1:d4:5e:b3:16:d4:a2:e3:fd:68:c2:48:c2:f2: 7f:2b:4b:20:cc:5a:47:ba:d3:bd:db:8e:49:37:b8: 8d:fd:b9:34:f6:91:25:fc:1b:bd:05:06:98:0b:3c: 27:53:d3:60:e1:3c:d4:65:16:1a:30:ce:73:f0:e7: 53:88:f0:89:3b:81:c5:d7:f4:7f:4b:f1:58:19:0b: f0:1d:b6:c5:59:0a:b9:cd:f4:cb:5c:82:05:9c:c5: 2b:3f:86:32:69:a5:a4:b2:38:1a:cf:98:33:a8:17: 02:ba:a9:61:e4:5f:9a:05:3f:d0:ba:d6:7f:e7:1a: 52:54:57:f1:cb:f6:3c:e2:5d:d8:64:ec:4e:8f:e0: 7c:b1:fc:b0:bb:5f:92:c2:7f:75:95:11:d4:9e:47: ba:c2:d8:b3:fe:9c:e9:3b:e4:a8:ef:f4:0b:84:65: 12:a5:8a:f1:bf:7f:b6:d4:16:53:73:cd:d9:9b:19: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2C:C9:F2:96:A3:F9:5E:38:EE:C9:8B:35:40:E6:13:3D:C5:CA:EC X509v3 Authority Key Identifier: keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e4:50:6c:0c:2e:23:b5:59:dd:d1:4d:63:23:18:66:ab:9c: 46:1e:70:3f:ab:74:1c:94:ac:6b:32:19:c6:37:24:6e:cd:38: ae:e5:f1:2e:d9:55:f5:d8:61:9e:96:89:67:79:ea:be:66:c9: 6d:da:12:ad:19:d5:44:54:09:3b:8c:e1:49:4b:8f:2f:d6:c0: 8e:c8:c4:47:36:ad:a5:7e:20:f4:8f:16:47:16:74:cd:04:07: da:46:17:92:36:52:ca:ab:6d:39:94:b4:0a:50:b4:11:f8:4b: 43:a6:00:29:36:70:5f:a9:89:b3:86:25:ff:f7:ca:62:fe:1c: f7:40:49:50:10:2a:b8:72:85:36:69:99:ee:76:58:24:78:6f: 2a:6e:0c:90:76:b8:71:c6:c7:1c:46:f9:f2:f4:01:d7:ca:63: 37:73:99:fe:89:e7:b9:9d:9a:4e:06:45:47:73:bb:65:46:46: ba:9f:72:20:45:a5:04:b6:3c:2b:4b:d7:91:5a:79:3c:52:99: 36:e0:d3:80:4a:59:dc:d8:63:f0:cc:1f:df:e3:21:ce:b2:34: 61:f3:4e:47:b9:de:7b:00:a8:72:06:ff:e2:81:d8:73:ab:70: 02:ed:a6:55:94:ec:a3:e0:02:70:fc:1a:e7:cf:e8:51:59:b8: e7:d7:9a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZuHJTebuG1udmgYA2eyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjYmU5ZTQzMDI0ZWNjNjkyYzMzNTM5OGJiMmQ5NjcxMTZh YWMyZDkwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhjMzJjYzlmMjk2YTNmOTVlMzhlZWM5OGIzNTQwZTYxMzNkYzVjYWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXH0371aK71MiEDKfY0nWyCzKd+a 5P7VjxpwUUPYV0894NJpEeBjTL2doXViHdG+Q9jy8dJLpl9kGsMEhOJpzSRqozzH KpEIb6x80dResxbUouP9aMJIwvJ/K0sgzFpHutO9245JN7iN/bk09pEl/Bu9BQaY CzwnU9Ng4TzUZRYaMM5z8OdTiPCJO4HF1/R/S/FYGQvwHbbFWQq5zfTLXIIFnMUr P4YyaaWksjgaz5gzqBcCuqlh5F+aBT/QutZ/5xpSVFfxy/Y84l3YZOxOj+B8sfyw u1+Swn91lRHUnke6wtiz/pzpO+So7/QLhGUSpYrxv3+21BZTc83Zmxmd0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMsyfKWo/leOO7JizVA5hM9xcrsMB8GA1UdIwQY MBaAFFy+nkMCTsxpLDNTmLstlnEWqsLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5Zjct MjhhNTZlYTVjZjBiLzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8xYjA4OWMtZDc0Yi00OWE3LTg5ZjctMjhhNTZlYTVjZjBi LzEvWEw2ZVF3Sk96R2tzTTFPWXV5MldjUmFxd3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABORQbAwu I7VZ3dFNYyMYZqucRh5wP6t0HJSsazIZxjckbs04ruXxLtlV9dhhnpaJZ3nqvmbJ bdoSrRnVRFQJO4zhSUuPL9bAjsjERzatpX4g9I8WRxZ0zQQH2kYXkjZSyqttOZS0 ClC0EfhLQ6YAKTZwX6mJs4Yl//fKYv4c90BJUBAquHKFNmmZ7nZYJHhvKm4MkHa4 ccbHHEb58vQB18pjN3OZ/onnuZ2aTgZFR3O7ZUZGup9yIEWlBLY8K0vXkVp5PFKZ NuDTgEpZ3Nhj8Mwf3+MhzrI0YfNOR7neewCocgb/4oHYc6twAu2mVZTso+ACcPwa 58/oUVm459eaHw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:55 2025 by rpki-client