This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json) Hash identifier: j7GTMI/oAK10jBgEtHrLK8nLyDrDHHapRGi4OpO+OqI= Subject key identifier: 93:22:E2:93:79:4D:93:B8:60:EB:78:5B:48:35:BA:18:A9:0C:B2:6A Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c Certificate serial: 019AF2AD83D3C89E427B08655E4BD32C1E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft Manifest number: 0E85 Signing time: Sat 06 Dec 2025 08:00:48 +0000 Manifest this update: Sat 06 Dec 2025 08:00:48 +0000 Manifest next update: Sun 07 Dec 2025 08:00:48 +0000 Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: A1Pa+tJfFd39UnKup6R0keXVY4iOP4jHXXfsxq619LU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:83:d3:c8:9e:42:7b:08:65:5e:4b:d3:2c:1e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c Validity Not Before: Dec 6 08:00:48 2025 GMT Not After : Dec 7 08:00:48 2025 GMT Subject: CN=9322e293794d93b860eb785b4835ba18a90cb26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c4:82:8d:f7:ae:ae:0f:f8:38:51:5d:36:e8: d3:93:e3:82:26:bc:71:72:8f:2d:20:36:65:89:61: 73:41:01:d4:36:ef:0f:10:a0:97:34:06:9d:59:a7: 4e:f4:9d:d9:35:ef:04:75:39:98:58:13:d2:ca:41: 15:78:1e:b8:21:2f:28:46:dd:4f:3a:b4:f6:b8:38: 0d:79:d2:77:b3:f5:72:9d:69:a8:ba:62:f8:d8:b7: de:59:6d:48:b5:27:94:91:14:d2:10:a5:df:a1:b3: 5f:89:ec:09:91:be:68:34:13:57:ab:05:ac:55:a5: ba:e2:d7:8d:5d:65:8b:ef:d4:3f:f2:65:ab:2c:17: cb:31:d0:37:49:bb:b6:3f:07:58:4b:ea:e9:57:07: 9c:ce:50:35:45:da:82:f8:56:53:38:5b:55:94:06: 5c:12:c1:bf:38:29:85:b9:95:4a:95:2e:95:a0:f7: 9c:2e:ca:a6:f4:ee:60:ee:06:91:f6:b1:2c:08:64: 81:0d:5a:9f:75:b2:b1:66:50:a6:d6:b0:0e:53:0f: 3f:c2:72:5d:1c:76:c2:83:5d:fb:dd:21:a6:71:01: 57:07:de:1f:16:c2:b9:e9:ae:8e:20:c8:92:c5:65: 9b:e0:27:d9:6f:b3:99:ad:53:28:14:a4:a5:97:91: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:22:E2:93:79:4D:93:B8:60:EB:78:5B:48:35:BA:18:A9:0C:B2:6A X509v3 Authority Key Identifier: keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7e:b0:7a:5b:3c:67:4b:3c:30:8a:49:1c:07:f3:78:58:15: d9:41:ee:ff:1e:e8:87:0c:bc:6a:89:72:c0:9e:48:fa:af:ac: 39:8d:47:46:1e:af:19:de:f1:67:83:8d:7d:18:67:ba:ea:5f: 6e:01:5d:ea:80:3d:0c:d6:4e:ed:79:e2:55:65:35:9f:49:03: 52:c1:cd:48:1a:35:83:72:fa:a2:38:17:62:f6:30:60:75:6c: ee:57:31:85:c3:7b:88:c3:10:9d:56:ab:73:cc:00:9d:d0:18: 2e:23:74:d6:08:cc:73:8c:4d:2d:1f:dd:8f:3f:60:b9:2c:e5: 03:a0:70:9c:3d:92:ca:10:80:52:16:37:38:5e:5e:2e:c3:50: b1:e7:44:14:df:59:5c:68:54:f3:b3:70:16:37:e8:a7:36:18: a7:89:d1:f1:f5:40:70:1c:b2:43:57:50:24:98:4b:ea:0b:61: 97:d9:9c:b3:df:45:e0:03:50:dd:ee:f2:8a:65:1f:67:cb:7d: 29:93:fd:89:13:d1:b4:05:4c:0d:84:72:b2:fb:e5:e6:5b:72: 56:ae:52:bd:a5:5d:05:ff:d9:2e:ca:90:26:9c:07:5f:ce:1c: 63:fc:d0:cd:3a:85:05:ae:66:2b:53:78:54:dd:51:a3:c5:84: eb:cb:7e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYPTyJ5CewhlXkvTLB4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTgzYjFiNjE1YTcwZDc5N2MyNzdjZmM4NDBiOTBhMzJk OTY5NmMwHhcNMjUxMjA2MDgwMDQ4WhcNMjUxMjA3MDgwMDQ4WjAzMTEwLwYDVQQD Eyg5MzIyZTI5Mzc5NGQ5M2I4NjBlYjc4NWI0ODM1YmExOGE5MGNiMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MSCjfeurg/4OFFdNujTk+OCJrxx co8tIDZliWFzQQHUNu8PEKCXNAadWadO9J3ZNe8EdTmYWBPSykEVeB64IS8oRt1P OrT2uDgNedJ3s/VynWmoumL42LfeWW1ItSeUkRTSEKXfobNfiewJkb5oNBNXqwWs VaW64teNXWWL79Q/8mWrLBfLMdA3Sbu2PwdYS+rpVweczlA1RdqC+FZTOFtVlAZc EsG/OCmFuZVKlS6VoPecLsqm9O5g7gaR9rEsCGSBDVqfdbKxZlCm1rAOUw8/wnJd HHbCg1373SGmcQFXB94fFsK56a6OIMiSxWWb4CfZb7OZrVMoFKSll5FFmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMi4pN5TZO4YOt4W0g1uhipDLJqMB8GA1UdIwQY MBaAFMUYOxthWnDXl8J3z8hAuQoy2WlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMt NjU2ZTJlYjgwNGM3LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMtNjU2ZTJlYjgwNGM3 LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY36wels8 Z0s8MIpJHAfzeFgV2UHu/x7ohwy8aolywJ5I+q+sOY1HRh6vGd7xZ4ONfRhnuupf bgFd6oA9DNZO7XniVWU1n0kDUsHNSBo1g3L6ojgXYvYwYHVs7lcxhcN7iMMQnVar c8wAndAYLiN01gjMc4xNLR/djz9guSzlA6BwnD2SyhCAUhY3OF5eLsNQsedEFN9Z XGhU87NwFjfopzYYp4nR8fVAcByyQ1dQJJhL6gthl9mcs99F4ANQ3e7yimUfZ8t9 KZP9iRPRtAVMDYRysvvl5ltyVq5SvaVdBf/ZLsqQJpwHX84cY/zQzTqFBa5mK1N4 VN1Ro8WE68t+XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:42 2025 by rpki-client