This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft File: xpjOogluk-LClNqo5corQqSUqEQ.mft (raw, json) Hash identifier: w99+hon+Ta06pg+TpQDKOZmaTJ8JTyOD769IOJ5CmnY= Subject key identifier: 8E:1E:F7:29:1F:60:7F:AC:5D:2A:D2:28:78:C1:D6:64:52:BB:B5:65 Authority key identifier: C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44 Certificate issuer: /CN=c698cea2096e93e2c294daa8e5ca2b42a494a844 Certificate serial: 019AF1D24DCBDB5685FA0AE874D2ABD596D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft Manifest number: 0B73 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: xpjOogluk-LClNqo5corQqSUqEQ.crl (hash: Li2xJhsP6+0TXtIZbqNnRWuQnl1JP8zgOU/CpU4Xd0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4d:cb:db:56:85:fa:0a:e8:74:d2:ab:d5:96:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c698cea2096e93e2c294daa8e5ca2b42a494a844 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=8e1ef7291f607fac5d2ad22878c1d66452bbb565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:ce:c5:1b:0a:af:01:d7:d7:57:4f:98:1c: 9f:fe:74:5a:19:0b:e6:3c:ed:bf:af:0a:0b:42:63: 18:7b:59:6e:44:ac:82:6f:e1:3b:24:1e:fb:31:27: c3:e8:df:e7:1c:24:b4:25:83:ba:68:d9:67:75:f1: 79:53:8c:7b:8e:80:03:6e:90:58:39:9d:fd:54:fe: ce:3c:ec:5c:c6:e3:1f:af:f3:c7:9e:84:46:45:77: 65:ae:ec:fb:17:c5:45:1c:9a:32:76:52:43:17:5b: 1e:37:b9:47:2b:a6:3f:2b:be:5d:31:1c:95:18:60: d3:c2:18:19:68:cb:27:c6:eb:ce:60:20:41:2b:9a: 16:7f:e8:c9:fd:85:09:13:74:93:90:00:9e:68:6f: 30:07:9a:fe:a5:3c:f2:64:18:3c:87:8e:2b:7b:28: b7:fc:06:cf:74:41:35:01:f2:0d:30:53:cf:6c:8e: ca:66:6c:59:79:f6:8c:80:8e:1a:73:c0:82:da:0f: 82:5e:5b:53:a5:85:1d:df:0d:82:d6:d2:2b:89:2e: ce:7a:56:8c:37:3d:02:15:23:fd:c7:d7:ae:0d:4d: 3c:30:bb:1c:41:ca:c4:40:2d:9e:cb:6e:2f:ea:db: 31:7d:88:05:a2:bc:7c:73:88:07:7e:87:97:d4:7b: 57:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:F7:29:1F:60:7F:AC:5D:2A:D2:28:78:C1:D6:64:52:BB:B5:65 X509v3 Authority Key Identifier: keyid:C6:98:CE:A2:09:6E:93:E2:C2:94:DA:A8:E5:CA:2B:42:A4:94:A8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpjOogluk-LClNqo5corQqSUqEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cb4ab1-d336-46fa-854a-92ad6db7d030/1/xpjOogluk-LClNqo5corQqSUqEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ee:b0:2b:26:8a:20:dc:f1:d6:3a:e1:51:35:d4:c3:ec:8d: 33:8f:37:ce:54:8b:d6:d7:f8:56:ca:14:66:a0:f9:d6:21:5c: 8e:af:8f:8e:35:70:b5:a7:f8:a7:e6:78:01:da:24:02:c5:da: 46:a3:b5:28:95:96:28:e3:3d:89:76:51:fb:a3:41:e8:c2:38: 60:c7:7f:2b:20:8e:a0:b0:f4:14:91:d2:5f:dd:87:08:f3:b4: 0f:d3:d1:86:62:39:47:13:fe:90:97:ff:ee:7c:19:a3:8d:ad: 10:7b:6f:ba:0c:70:bb:2c:85:5c:99:3e:40:cd:16:c3:28:f3: 29:d3:1d:f2:e3:ad:8e:92:92:0e:87:72:72:c0:c5:d1:db:66: 4f:83:84:77:ab:a6:b8:92:0c:79:10:81:5f:0d:d3:d1:ef:18: 52:10:26:a8:58:b6:3e:f3:2e:ae:fa:bc:b1:4d:ad:31:92:df: 63:23:50:e0:f2:d0:4d:14:37:39:7f:c3:15:57:f2:4f:84:c1: 46:3c:fe:24:25:06:17:45:4d:5b:7d:64:8b:68:de:e5:a7:c2: ba:56:ba:36:23:b5:0f:50:42:b6:8b:f4:41:20:24:cb:37:ef: 6a:0a:40:40:c6:ea:97:bd:68:5a:5f:1d:c9:4a:cf:72:cc:9b: 80:8e:1e:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k3L21aF+grodNKr1ZbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OThjZWEyMDk2ZTkzZTJjMjk0ZGFhOGU1Y2EyYjQyYTQ5 NGE4NDQwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg4ZTFlZjcyOTFmNjA3ZmFjNWQyYWQyMjg3OGMxZDY2NDUyYmJiNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoLOxRsKrwHX11dPmByf/nRaGQvm PO2/rwoLQmMYe1luRKyCb+E7JB77MSfD6N/nHCS0JYO6aNlndfF5U4x7joADbpBY OZ39VP7OPOxcxuMfr/PHnoRGRXdlruz7F8VFHJoydlJDF1seN7lHK6Y/K75dMRyV GGDTwhgZaMsnxuvOYCBBK5oWf+jJ/YUJE3STkACeaG8wB5r+pTzyZBg8h44reyi3 /AbPdEE1AfINMFPPbI7KZmxZefaMgI4ac8CC2g+CXltTpYUd3w2C1tIriS7OelaM Nz0CFSP9x9euDU08MLscQcrEQC2ey24v6tsxfYgForx8c4gHfoeX1HtXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4e9ykfYH+sXSrSKHjB1mRSu7VlMB8GA1UdIwQY MBaAFMaYzqIJbpPiwpTaqOXKK0KklKhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBqT29nbHVrLUxDbE5xbzVjb3JRcVNVcUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jYjRhYjEtZDMzNi00NmZhLTg1NGEt OTJhZDZkYjdkMDMwLzEveHBqT29nbHVrLUxDbE5xbzVjb3JRcVNVcUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jYjRhYjEtZDMzNi00NmZhLTg1NGEtOTJhZDZkYjdkMDMw LzEveHBqT29nbHVrLUxDbE5xbzVjb3JRcVNVcUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu6wKyaK INzx1jrhUTXUw+yNM483zlSL1tf4VsoUZqD51iFcjq+PjjVwtaf4p+Z4AdokAsXa RqO1KJWWKOM9iXZR+6NB6MI4YMd/KyCOoLD0FJHSX92HCPO0D9PRhmI5RxP+kJf/ 7nwZo42tEHtvugxwuyyFXJk+QM0WwyjzKdMd8uOtjpKSDodycsDF0dtmT4OEd6um uJIMeRCBXw3T0e8YUhAmqFi2PvMurvq8sU2tMZLfYyNQ4PLQTRQ3OX/DFVfyT4TB Rjz+JCUGF0VNW31ki2je5afCula6NiO1D1BCtov0QSAkyzfvagpAQMbql71oWl8d yUrPcsybgI4ekA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:20 2025 by rpki-client