This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft File: xSe66XlBtg89zTqgfixf2d0DpsE.mft (raw, json) Hash identifier: I6VCxpVfzJNGl0drZR9LZ61c1vniPHTcpK7LsZzOFzo= Subject key identifier: 16:B3:91:C7:71:BD:F4:0B:22:B0:DD:4F:6E:AA:A1:E8:4D:1F:57:10 Authority key identifier: C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1 Certificate issuer: /CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1 Certificate serial: 019AF3C005DDF91120F1813E5436CB535351 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft Manifest number: 0DA3 Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: xSe66XlBtg89zTqgfixf2d0DpsE.crl (hash: cHmSpRyAkaByTEuesE6pNf0vHRnbwgXkx7gbS7TM9Ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:05:dd:f9:11:20:f1:81:3e:54:36:cb:53:53:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c527bae97941b60f3dcd3aa07e2c5fd9dd03a6c1 Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=16b391c771bdf40b22b0dd4f6eaaa1e84d1f5710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:48:3f:fa:a1:b0:56:5c:f8:3e:47:35:f6:14: db:81:a9:90:67:5e:b5:bf:27:8e:23:aa:6a:bd:e6: cf:bf:45:87:80:ff:93:96:96:4c:70:10:4b:7a:0f: c5:8c:45:38:fd:82:e5:95:d9:72:3a:a5:97:14:5c: f3:98:84:11:39:98:56:75:fe:93:30:58:61:8a:c1: 66:cb:91:66:dd:f8:1d:5d:66:29:5e:f7:5f:7d:bc: 13:a0:23:d0:ab:57:7c:89:21:1a:21:dc:d5:b9:7c: 20:42:d0:68:46:97:f3:de:84:8a:b9:65:68:e4:20: 49:d9:55:d6:ec:68:fc:b4:ed:de:1f:62:fd:80:29: 48:ef:1b:b1:8f:c7:fb:03:00:b2:9c:32:17:15:c3: dd:32:3c:e6:1b:1f:59:b2:97:b9:87:fc:4e:17:f9: 52:8f:ae:83:2a:bb:a3:b2:d9:d3:e2:31:c7:06:e5: 6e:fb:06:f8:8c:f4:7f:aa:35:0d:71:60:19:db:84: f6:ef:cc:c0:e7:b7:61:42:cf:c7:76:9b:00:b1:6f: 6a:8b:7b:e3:18:b4:d7:24:29:dd:0b:ab:aa:0f:0b: 7a:59:d0:0d:31:4a:a7:78:ad:b9:6d:02:d7:c5:14: 07:66:bb:a7:c3:33:3c:2c:92:48:54:cb:e2:6b:69: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B3:91:C7:71:BD:F4:0B:22:B0:DD:4F:6E:AA:A1:E8:4D:1F:57:10 X509v3 Authority Key Identifier: keyid:C5:27:BA:E9:79:41:B6:0F:3D:CD:3A:A0:7E:2C:5F:D9:DD:03:A6:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSe66XlBtg89zTqgfixf2d0DpsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/02b115-fc5e-4bac-b0ad-1366d4ef7f3b/1/xSe66XlBtg89zTqgfixf2d0DpsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:25:63:af:47:a6:03:57:2e:8b:3a:f0:d3:d3:21:24:8c:36: 29:f7:dd:ca:b6:a6:ba:23:9e:16:46:9b:60:8c:68:ed:58:ac: 3f:6e:e5:57:15:75:1f:ad:67:8e:b5:f9:96:8a:5a:f2:b3:c2: 1c:36:df:b0:11:13:46:0c:7b:bb:3e:d9:1b:49:3f:f7:48:e6: d5:2f:52:3c:14:0d:8b:4b:6a:b3:f4:4a:8e:d9:60:14:1d:a6: 04:2c:fa:0a:e0:ba:98:78:42:66:0f:de:55:37:e7:51:bd:d5: d6:fb:ce:01:31:1f:4d:45:0b:7d:26:d9:8c:9b:aa:9c:d8:23: 4d:72:e2:6c:bb:04:07:a3:5f:88:bd:6e:38:c0:0a:c5:34:99: b0:c5:d9:8b:0f:18:3c:26:d0:7f:6f:e6:16:b1:2d:dd:74:3f: fa:a1:d1:f0:54:0e:f1:7b:22:7f:6d:a4:c1:49:14:14:12:5f: ef:20:11:04:3a:7e:e6:7f:dc:63:be:62:2f:a0:ae:27:cd:03: 83:ea:2c:08:fe:f6:e4:19:fc:0f:6f:21:29:e1:e2:51:e8:7f: d0:cb:ca:a1:fd:f3:8c:e4:4f:f7:3a:8d:a6:8d:68:7a:80:44: 23:aa:5c:8f:21:6f:fb:ff:5a:0d:f5:4d:80:23:1f:3e:3e:da: 17:5a:40:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAXd+REg8YE+VDbLU1NRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MjdiYWU5Nzk0MWI2MGYzZGNkM2FhMDdlMmM1ZmQ5ZGQw M2E2YzEwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD EygxNmIzOTFjNzcxYmRmNDBiMjJiMGRkNGY2ZWFhYTFlODRkMWY1NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ug/+qGwVlz4Pkc19hTbgamQZ161 vyeOI6pqvebPv0WHgP+TlpZMcBBLeg/FjEU4/YLlldlyOqWXFFzzmIQROZhWdf6T MFhhisFmy5Fm3fgdXWYpXvdffbwToCPQq1d8iSEaIdzVuXwgQtBoRpfz3oSKuWVo 5CBJ2VXW7Gj8tO3eH2L9gClI7xuxj8f7AwCynDIXFcPdMjzmGx9Zspe5h/xOF/lS j66DKrujstnT4jHHBuVu+wb4jPR/qjUNcWAZ24T278zA57dhQs/HdpsAsW9qi3vj GLTXJCndC6uqDwt6WdANMUqneK25bQLXxRQHZrunwzM8LJJIVMvia2mnTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBazkcdxvfQLIrDdT26qoehNH1cQMB8GA1UdIwQY MBaAFMUnuul5QbYPPc06oH4sX9ndA6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQt MTM2NmQ0ZWY3ZjNiLzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wMmIxMTUtZmM1ZS00YmFjLWIwYWQtMTM2NmQ0ZWY3ZjNi LzEveFNlNjZYbEJ0Zzg5elRxZ2ZpeGYyZDBEcHNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSVjr0em A1cuizrw09MhJIw2KffdyramuiOeFkabYIxo7VisP27lVxV1H61njrX5lopa8rPC HDbfsBETRgx7uz7ZG0k/90jm1S9SPBQNi0tqs/RKjtlgFB2mBCz6CuC6mHhCZg/e VTfnUb3V1vvOATEfTUULfSbZjJuqnNgjTXLibLsEB6NfiL1uOMAKxTSZsMXZiw8Y PCbQf2/mFrEt3XQ/+qHR8FQO8Xsif22kwUkUFBJf7yARBDp+5n/cY75iL6CuJ80D g+osCP725Bn8D28hKeHiUeh/0MvKof3zjORP9zqNpo1oeoBEI6pcjyFv+/9aDfVN gCMfPj7aF1pA/A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:15 2025 by rpki-client