This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json) Hash identifier: 1HwLJMC9lU0rC59dj6ye7wVNa45I+9FApFTZ2MiVwrY= Subject key identifier: 56:4B:CC:72:02:16:FE:E8:B7:00:27:85:39:E7:6C:18:BD:01:30:24 Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8 Certificate serial: 019AF12DD0B2F23A30A3B7A4DDC0E2246AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft Manifest number: 1732 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: itcwxXPC9pBlrLTJyLco+DsDqkhyvpNVqPa6MWqo39o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d0:b2:f2:3a:30:a3:b7:a4:dd:c0:e2:24:6a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=564bcc720216fee8b700278539e76c18bd013024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:d9:ac:04:74:ba:96:e4:01:a6:70:df:e8: f6:cd:d4:40:c3:03:9d:f0:e8:d0:ed:b2:b5:0f:99: 93:2b:63:11:61:62:8f:70:68:36:eb:26:b8:82:29: 68:71:81:2a:da:19:d6:76:2e:a9:56:f1:8c:06:51: 32:a3:ff:9d:ce:0c:63:a4:2f:ea:cf:e0:d6:76:c3: 76:7e:0e:8b:0e:bc:25:85:a2:21:a9:8c:60:c1:07: 20:13:9d:56:a2:c5:1a:0f:9b:20:f7:5b:7f:2b:8f: 4a:a1:db:da:dc:b6:99:01:3d:44:15:6f:86:c1:77: 39:1a:98:d6:d1:ac:1b:b4:01:7e:84:dd:df:a1:68: 55:3d:58:d4:16:ff:17:e6:5c:4e:1a:f9:a9:37:21: c2:19:47:8d:10:be:22:c9:5c:ff:5a:5a:68:8d:6f: f7:d4:e0:28:47:20:97:22:29:41:72:2a:8a:9a:3f: 57:d0:58:92:2b:9f:95:88:27:42:b8:bf:b6:3c:a6: be:93:40:f9:2f:8b:0b:53:3e:74:3a:75:45:c1:6f: 90:02:08:81:96:06:1f:3c:86:8a:22:87:46:64:8d: cb:16:91:f0:ec:27:1f:0c:84:a5:17:42:e1:dc:3a: b4:af:f5:d8:80:dc:6c:16:4e:0a:df:b0:cf:cc:8c: 7d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4B:CC:72:02:16:FE:E8:B7:00:27:85:39:E7:6C:18:BD:01:30:24 X509v3 Authority Key Identifier: keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d9:7d:41:c1:e1:7e:23:ba:45:7e:67:b0:fc:cf:65:e2:36: bb:52:1b:ac:f6:54:07:04:e8:4a:9c:6e:78:6c:8b:03:03:19: 36:24:50:f2:cc:93:04:5b:46:d4:c6:76:5d:75:65:c8:d2:97: e4:b4:d5:6d:58:ad:4a:7c:69:e1:5b:2b:51:f3:f0:55:25:06: 11:b5:3e:21:61:42:56:d8:d7:fb:c5:b9:2d:df:a3:ce:df:43: ff:a3:a9:af:84:55:22:be:67:66:4c:3a:ff:7f:ac:a1:52:73: 72:c7:c5:76:26:41:a3:9c:d8:73:67:27:03:1a:07:48:ed:f9: c6:ae:0b:f3:73:05:79:0c:f5:14:ee:ce:bc:51:11:65:1e:c8: dc:05:e1:33:59:cb:cd:2f:ae:0b:87:f4:2e:58:ea:b7:db:61: e5:1a:48:d5:91:9f:6b:6f:2b:2b:60:fd:45:6f:f9:cd:13:8b: ba:f3:5a:98:00:44:6c:53:38:ff:90:37:d5:ac:85:5f:da:39: ff:9b:73:44:b6:58:45:6c:72:51:cd:ba:4b:de:82:9d:73:e8: 32:ae:c6:de:53:4e:4f:52:a3:89:38:73:49:44:0f:50:cc:f8: f4:17:a5:32:84:84:22:ad:21:7c:89:8a:e5:92:7e:da:27:b6: 95:5f:07:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdCy8jowo7ek3cDiJGqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0 MDg3YTgwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD Eyg1NjRiY2M3MjAyMTZmZWU4YjcwMDI3ODUzOWU3NmMxOGJkMDEzMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmzZrAR0upbkAaZw3+j2zdRAwwOd 8OjQ7bK1D5mTK2MRYWKPcGg26ya4gilocYEq2hnWdi6pVvGMBlEyo/+dzgxjpC/q z+DWdsN2fg6LDrwlhaIhqYxgwQcgE51WosUaD5sg91t/K49Kodva3LaZAT1EFW+G wXc5GpjW0awbtAF+hN3foWhVPVjUFv8X5lxOGvmpNyHCGUeNEL4iyVz/WlpojW/3 1OAoRyCXIilBciqKmj9X0FiSK5+ViCdCuL+2PKa+k0D5L4sLUz50OnVFwW+QAgiB lgYfPIaKIodGZI3LFpHw7CcfDISlF0Lh3Dq0r/XYgNxsFk4K37DPzIx99wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZLzHICFv7otwAnhTnnbBi9ATAkMB8GA1UdIwQY MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtl9QcHh fiO6RX5nsPzPZeI2u1IbrPZUBwToSpxueGyLAwMZNiRQ8syTBFtG1MZ2XXVlyNKX 5LTVbVitSnxp4VsrUfPwVSUGEbU+IWFCVtjX+8W5Ld+jzt9D/6Opr4RVIr5nZkw6 /3+soVJzcsfFdiZBo5zYc2cnAxoHSO35xq4L83MFeQz1FO7OvFERZR7I3AXhM1nL zS+uC4f0Lljqt9th5RpI1ZGfa28rK2D9RW/5zROLuvNamABEbFM4/5A31ayFX9o5 /5tzRLZYRWxyUc26S96CnXPoMq7G3lNOT1KjiThzSUQPUMz49BelMoSEIq0hfImK 5ZJ+2ie2lV8HDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:33 2025 by rpki-client