This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft File: XO56utwc1TZH4rILdg1aXHqxp8w.mft (raw, json) Hash identifier: /nfgzwUtLpqImH9KC7/qtZIBc3D3wSXi5kCz77vDkwM= Subject key identifier: 3E:AF:92:E0:18:D3:13:74:7F:23:1F:44:B3:BB:A8:DD:CE:03:19:4E Authority key identifier: 5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC Certificate issuer: /CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc Certificate serial: 019AF208B83706A0617F477E8CEAED0953BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft Manifest number: 024E Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: XO56utwc1TZH4rILdg1aXHqxp8w.crl (hash: TKn5IbtgbpUdme/IXJFebuKYszBDQJDr8545IOaaisQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b8:37:06:a0:61:7f:47:7e:8c:ea:ed:09:53:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cee7abadc1cd53647e2b20b760d5a5c7ab1a7cc Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=3eaf92e018d313747f231f44b3bba8ddce03194e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:1d:a5:af:8f:c9:ec:dd:bb:36:55:7d:fb: c1:8b:1a:33:38:b9:00:0c:e3:d6:d2:69:cb:aa:87: e5:de:55:b7:94:8c:f7:e1:57:97:f8:91:29:3f:4d: 01:f1:b1:2e:0e:c2:80:ad:85:e6:bc:69:02:68:59: af:3d:5b:19:5d:e0:08:d7:ee:e1:c0:ea:9a:f9:e1: fa:ff:38:c5:f2:cb:f2:23:76:de:cd:60:3b:37:3a: 25:cc:4b:e1:b4:ec:03:72:db:0a:ef:07:af:f8:73: 11:45:0f:17:7c:5d:96:47:35:bb:35:68:fa:5a:1d: a6:1c:9f:ea:04:d9:cc:f8:0e:5e:d5:76:20:8e:91: ad:1e:63:b8:14:31:d9:e6:95:a7:94:a4:5f:1d:a3: fa:cf:fa:63:2d:16:7c:51:5f:ed:98:36:c3:ef:3a: 28:bf:7d:45:24:32:2a:8b:01:ba:fa:c0:5a:32:c3: 13:2d:a7:84:53:80:9e:07:75:e7:fd:df:16:11:66: e2:ae:56:e3:3d:32:6f:10:43:69:eb:a8:7f:90:f5: 9b:b1:a7:33:cf:d2:9d:72:d0:14:88:1a:16:38:56: 35:45:d1:2e:bf:82:c1:45:02:9a:04:a5:87:41:01: e1:ed:47:04:05:35:a8:6b:9f:21:31:a0:ed:cf:f1: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:AF:92:E0:18:D3:13:74:7F:23:1F:44:B3:BB:A8:DD:CE:03:19:4E X509v3 Authority Key Identifier: keyid:5C:EE:7A:BA:DC:1C:D5:36:47:E2:B2:0B:76:0D:5A:5C:7A:B1:A7:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XO56utwc1TZH4rILdg1aXHqxp8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/50c205-2189-4734-9648-486a8cdddbe8/1/XO56utwc1TZH4rILdg1aXHqxp8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:43:14:7d:5a:58:9f:32:7c:98:2f:76:b3:c0:8c:d6:5f:0a: ab:46:c7:b8:7c:fc:37:7b:38:50:9d:49:50:66:08:14:62:b5: 6e:24:55:d1:44:ed:2a:b0:06:35:7b:ab:b7:40:c5:2d:7d:0f: c4:45:51:63:3c:28:c1:34:fb:fc:ee:05:ca:96:e2:e3:b6:0a: 8d:bd:ce:c2:05:a1:f5:35:65:cf:8e:a1:7e:43:89:3c:a4:e0: 5a:45:5c:d1:b1:e8:b3:3e:57:09:4d:06:d5:98:68:72:ed:86: dd:79:01:d4:26:61:6e:db:d0:5e:35:66:f8:f1:a7:73:e2:23: e9:d2:59:4d:0f:5a:bb:38:6c:68:10:fb:74:d4:2b:bf:3e:72: 79:46:06:33:ea:f3:76:a0:d0:f7:9b:b7:82:f6:0c:d0:90:b3: c7:8d:c2:92:51:8f:4b:bf:a6:8f:c8:55:13:e8:30:1c:34:28: ae:0a:d0:ef:1f:0b:d5:59:ff:53:6d:49:de:a7:f9:f5:35:a2: 4f:ab:5e:39:23:3d:f6:9c:e6:ce:b5:e0:b2:da:b9:1b:01:09: 96:52:e2:0f:d7:4c:09:6c:8b:ac:fc:84:a8:43:81:07:06:21: 14:e4:cd:eb:b7:9b:c2:cb:cd:72:ac:32:a7:7e:13:04:48:8f: bc:79:c4:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLg3BqBhf0d+jOrtCVO9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZWU3YWJhZGMxY2Q1MzY0N2UyYjIwYjc2MGQ1YTVjN2Fi MWE3Y2MwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygzZWFmOTJlMDE4ZDMxMzc0N2YyMzFmNDRiM2JiYThkZGNlMDMxOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgcdpa+PyezduzZVffvBixozOLkA DOPW0mnLqofl3lW3lIz34VeX+JEpP00B8bEuDsKArYXmvGkCaFmvPVsZXeAI1+7h wOqa+eH6/zjF8svyI3bezWA7NzolzEvhtOwDctsK7wev+HMRRQ8XfF2WRzW7NWj6 Wh2mHJ/qBNnM+A5e1XYgjpGtHmO4FDHZ5pWnlKRfHaP6z/pjLRZ8UV/tmDbD7zoo v31FJDIqiwG6+sBaMsMTLaeEU4CeB3Xn/d8WEWbirlbjPTJvEENp66h/kPWbsacz z9KdctAUiBoWOFY1RdEuv4LBRQKaBKWHQQHh7UcEBTWoa58hMaDtz/FHaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6vkuAY0xN0fyMfRLO7qN3OAxlOMB8GA1UdIwQY MBaAFFzuerrcHNU2R+KyC3YNWlx6safMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81MGMyMDUtMjE4OS00NzM0LTk2NDgt NDg2YThjZGRkYmU4LzEvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81MGMyMDUtMjE4OS00NzM0LTk2NDgtNDg2YThjZGRkYmU4 LzEvWE81NnV0d2MxVFpINHJJTGRnMWFYSHF4cDh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlEMUfVpY nzJ8mC92s8CM1l8Kq0bHuHz8N3s4UJ1JUGYIFGK1biRV0UTtKrAGNXurt0DFLX0P xEVRYzwowTT7/O4Fypbi47YKjb3OwgWh9TVlz46hfkOJPKTgWkVc0bHosz5XCU0G 1Zhocu2G3XkB1CZhbtvQXjVm+PGnc+Ij6dJZTQ9auzhsaBD7dNQrvz5yeUYGM+rz dqDQ95u3gvYM0JCzx43CklGPS7+mj8hVE+gwHDQorgrQ7x8L1Vn/U21J3qf59TWi T6teOSM99pzmzrXgstq5GwEJllLiD9dMCWyLrPyEqEOBBwYhFOTN67ebwsvNcqwy p34TBEiPvHnEDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:06 2025 by rpki-client