This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json) Hash identifier: vg19PUposk+734qBCmT0Ens2k36HVs5I0et/t2JLcPQ= Subject key identifier: 0D:E5:2D:D5:B0:90:8F:00:EE:38:AF:E1:DC:B7:2F:9A:22:E5:82:16 Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1 Certificate serial: 019AF577E89A401005BEDAB3E480E1B61F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft Manifest number: 0F8D Signing time: Sat 06 Dec 2025 21:01:07 +0000 Manifest this update: Sat 06 Dec 2025 21:01:07 +0000 Manifest next update: Sun 07 Dec 2025 21:01:07 +0000 Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: szSDo336omSly6mCEQ8iP27MMS5KpQhIJBxWrqhZCyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e8:9a:40:10:05:be:da:b3:e4:80:e1:b6:1f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1 Validity Not Before: Dec 6 21:01:07 2025 GMT Not After : Dec 7 21:01:07 2025 GMT Subject: CN=0de52dd5b0908f00ee38afe1dcb72f9a22e58216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:52:bf:40:8a:b5:8a:40:a7:d8:3e:6c:ed: 60:dc:bf:e7:9a:eb:98:e7:16:a8:aa:fb:34:4c:b5: da:9b:4d:18:a9:a1:07:ea:fe:41:24:2e:f4:0e:4f: 89:bb:9f:29:b6:8a:ae:ab:cd:d6:14:77:a5:c6:ed: 0d:33:0d:28:f9:ea:32:70:4a:c4:46:d3:50:7d:b6: 07:c8:ad:c3:6b:68:07:b5:72:bc:a5:c8:fe:af:f1: 21:7e:c1:65:38:c5:ce:6f:ee:59:b3:23:26:5a:50: f6:ea:ca:86:4c:6a:84:fe:bc:76:6b:54:6b:18:85: 8c:8e:da:10:6d:9b:8e:12:93:3c:8e:29:88:04:25: b3:d1:6c:64:78:4f:1a:29:0e:4b:2d:6c:2b:5e:ec: 5d:94:1f:a2:d1:d0:cc:82:f2:35:05:77:40:a9:b9: ca:fc:e4:1b:c6:be:bf:d4:63:c2:b3:44:a8:13:05: 30:be:7b:4b:72:8e:38:4d:4a:a3:73:c3:ac:f1:53: 40:35:53:24:17:ce:13:13:74:1a:97:9e:30:fc:da: f4:83:d5:82:9b:f0:ba:09:80:cb:35:56:90:13:d5: be:e3:9a:ee:20:fa:f3:ba:ad:b8:79:32:06:d1:0f: ec:80:65:f6:3b:d7:21:46:e5:92:e1:ad:0b:28:6d: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E5:2D:D5:B0:90:8F:00:EE:38:AF:E1:DC:B7:2F:9A:22:E5:82:16 X509v3 Authority Key Identifier: keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:52:73:45:17:e6:7b:fb:6b:78:f2:56:36:8b:0d:68:32:60: 6e:7c:81:20:6b:50:96:36:35:f1:b6:7f:63:33:f3:a8:22:45: 06:40:e5:b8:0d:af:bb:ea:ff:b2:b3:1d:40:e1:c0:ff:3c:39: 38:6e:e0:f4:d0:12:ed:99:d3:4a:11:c8:a9:e4:81:a5:10:e9: d5:db:38:6f:a2:4c:ae:9c:f8:ad:8f:2f:20:64:8e:c9:1d:81: 68:a6:fd:86:c1:5b:6d:83:28:f8:7e:e3:b8:d8:f8:49:bb:73: 5c:36:a8:bf:a4:27:92:a6:bb:62:13:61:f0:83:16:85:93:4e: f5:a7:a5:ec:b9:bf:40:5c:16:49:81:ed:14:53:41:5c:a1:a3: 84:f6:2c:1b:88:51:65:d5:42:03:a9:5a:91:66:6e:19:b8:6e: 03:c6:05:43:94:2b:2a:f3:04:2d:97:b1:c9:65:10:0a:7f:6e: ae:4e:6e:3c:29:37:e6:dc:80:24:d9:19:fa:7e:61:5f:45:29: 60:a1:0f:e8:ce:9c:22:21:fd:36:0b:a7:7a:6b:e7:8f:12:e5: 5a:4d:43:f0:01:e2:a2:df:2f:8f:75:e2:a8:ea:a5:29:7c:04: c1:72:a2:f5:e0:32:c7:a2:97:ad:8e:10:61:f5:7d:1f:c7:b0: 50:09:2f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+iaQBAFvtqz5IDhth87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NmI0NGQ3MDczMzI0YWIyODQxNjM2N2RlMDQwZjBlNDYz MzQ4ZDEwHhcNMjUxMjA2MjEwMTA3WhcNMjUxMjA3MjEwMTA3WjAzMTEwLwYDVQQD EygwZGU1MmRkNWIwOTA4ZjAwZWUzOGFmZTFkY2I3MmY5YTIyZTU4MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqppSv0CKtYpAp9g+bO1g3L/nmuuY 5xaoqvs0TLXam00YqaEH6v5BJC70Dk+Ju58ptoquq83WFHelxu0NMw0o+eoycErE RtNQfbYHyK3Da2gHtXK8pcj+r/EhfsFlOMXOb+5ZsyMmWlD26sqGTGqE/rx2a1Rr GIWMjtoQbZuOEpM8jimIBCWz0WxkeE8aKQ5LLWwrXuxdlB+i0dDMgvI1BXdAqbnK /OQbxr6/1GPCs0SoEwUwvntLco44TUqjc8Os8VNANVMkF84TE3Qal54w/Nr0g9WC m/C6CYDLNVaQE9W+45ruIPrzuq24eTIG0Q/sgGX2O9chRuWS4a0LKG3WxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3lLdWwkI8A7jiv4dy3L5oi5YIWMB8GA1UdIwQY MBaAFMRrRNcHMySrKEFjZ94EDw5GM0jRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEt MWYwYWFjMTQ5NWFjLzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEtMWYwYWFjMTQ5NWFj LzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVJzRRfm e/trePJWNosNaDJgbnyBIGtQljY18bZ/YzPzqCJFBkDluA2vu+r/srMdQOHA/zw5 OG7g9NAS7ZnTShHIqeSBpRDp1ds4b6JMrpz4rY8vIGSOyR2BaKb9hsFbbYMo+H7j uNj4SbtzXDaov6Qnkqa7YhNh8IMWhZNO9ael7Lm/QFwWSYHtFFNBXKGjhPYsG4hR ZdVCA6lakWZuGbhuA8YFQ5QrKvMELZexyWUQCn9urk5uPCk35tyAJNkZ+n5hX0Up YKEP6M6cIiH9NgunemvnjxLlWk1D8AHiot8vj3XiqOqlKXwEwXKi9eAyx6KXrY4Q YfV9H8ewUAkvwg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:02:30 2025 by rpki-client