This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json) Hash identifier: eDs6XXagSZA07KG9waRa3Gnx1d1IfbWp8VA6jVf5+U4= Subject key identifier: A4:9D:B4:3F:12:5D:F8:87:74:E3:58:C3:54:2C:A9:2B:B6:A2:8F:D8 Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a Certificate serial: 019AF31BCE84BEE9EF920FA2200604E7208D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft Manifest number: 0EC0 Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: H9iaJd5S5FHKBdO3wuFNeYec22/wZOurMRw0aVnaHAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ce:84:be:e9:ef:92:0f:a2:20:06:04:e7:20:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=a49db43f125df88774e358c3542ca92bb6a28fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e4:47:23:fb:b3:44:c8:ae:d9:85:e9:52:a1: 1a:5f:b7:73:af:20:7f:94:d7:71:ce:23:c1:d7:78: 60:ef:1c:30:92:84:51:7b:27:c0:5e:dd:e8:e1:f3: 45:a1:35:e2:27:b9:81:9e:a2:28:d3:11:8b:8d:b1: a0:56:d3:06:ff:fe:06:5b:4d:b0:b3:11:8c:94:cb: 97:fe:91:2c:43:4f:45:81:d5:1f:31:af:a5:74:1a: 74:f0:a6:4e:1e:bd:8d:bb:2b:89:b2:36:67:54:08: 8e:9d:4b:97:21:2f:ee:2c:1d:a0:98:3f:b6:63:44: 15:fd:55:73:a9:4f:cd:18:c5:9a:52:b5:83:22:65: 5d:79:04:8c:e0:58:df:7b:21:2f:39:1a:25:fe:c4: 82:2b:97:7f:9c:28:ef:12:a3:c3:f5:63:b8:8e:65: 4d:c3:a4:47:c1:9e:18:3a:0f:9f:e1:d8:a0:c1:d5: 3d:c6:2d:22:1a:e1:25:03:6b:d3:24:83:50:d4:f8: ec:c1:c9:b7:4c:fe:b8:b7:9f:48:0f:ca:f7:9f:42: 4e:33:88:67:75:24:c3:56:28:2a:42:63:9d:d0:2f: ca:bd:8b:23:e4:9e:1d:c2:14:d3:b5:e8:e6:39:b2: 40:0d:17:2f:43:47:28:25:d9:da:91:07:e5:e2:4f: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9D:B4:3F:12:5D:F8:87:74:E3:58:C3:54:2C:A9:2B:B6:A2:8F:D8 X509v3 Authority Key Identifier: keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:95:2e:45:17:3d:0c:d9:3e:fc:6e:46:53:48:d9:33:c6:b4: f3:23:18:9e:48:a8:1c:a5:43:4d:91:7d:7b:90:43:c0:f4:3c: 52:e8:3a:c9:02:cc:7c:27:b9:08:2c:9b:cd:7f:de:7d:94:40: f5:55:e2:cf:6c:67:1c:4c:7c:82:d5:b1:e1:64:2e:9b:a1:ce: 12:9b:cf:2f:87:90:58:26:97:1b:81:74:79:5c:bf:d1:4d:c0: 85:67:36:fb:3b:1b:94:94:1a:40:6b:ef:e2:34:bd:a2:0e:93: a1:6d:10:fa:a9:8f:39:23:11:65:11:80:6d:42:41:05:9c:98: 63:c5:8a:b2:1e:9c:31:ec:af:5d:cd:08:2f:ac:a0:d2:a6:ca: 70:dc:7a:be:0d:e4:44:db:93:e5:de:08:3d:3b:9a:04:2d:04: 56:e1:13:c0:a7:d8:ab:5f:45:c3:ae:60:4c:5e:33:e7:9b:8d: 4b:c8:af:d2:18:54:05:02:8c:93:01:d9:ef:ca:60:10:58:8a: b4:04:eb:75:a0:bd:5b:ac:a0:90:06:f7:86:4d:f2:1a:f7:8a: 85:83:b2:1f:15:ab:d5:9c:98:3e:d3:c6:a6:eb:60:27:f2:fe: 70:a2:93:55:8f:d8:60:30:84:89:07:0b:52:b0:20:6a:70:48: 0a:b5:e6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG86Evunvkg+iIAYE5yCNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2NmOWNlOTdkMTIzMmUwMTYyZmNjZDQzZjYwYzRlNzk4 MzFlMWEwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD EyhhNDlkYjQzZjEyNWRmODg3NzRlMzU4YzM1NDJjYTkyYmI2YTI4ZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqORHI/uzRMiu2YXpUqEaX7dzryB/ lNdxziPB13hg7xwwkoRReyfAXt3o4fNFoTXiJ7mBnqIo0xGLjbGgVtMG//4GW02w sxGMlMuX/pEsQ09FgdUfMa+ldBp08KZOHr2NuyuJsjZnVAiOnUuXIS/uLB2gmD+2 Y0QV/VVzqU/NGMWaUrWDImVdeQSM4FjfeyEvORol/sSCK5d/nCjvEqPD9WO4jmVN w6RHwZ4YOg+f4digwdU9xi0iGuElA2vTJINQ1Pjswcm3TP64t59ID8r3n0JOM4hn dSTDVigqQmOd0C/KvYsj5J4dwhTTtejmObJADRcvQ0coJdnakQfl4k/6aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSdtD8SXfiHdONYw1QsqSu2oo/YMB8GA1UdIwQY MBaAFMbM+c6X0SMuAWL8zUP2DE55gx4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjct NWExZTVmYTczZTRkLzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjctNWExZTVmYTczZTRk LzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpUuRRc9 DNk+/G5GU0jZM8a08yMYnkioHKVDTZF9e5BDwPQ8Uug6yQLMfCe5CCybzX/efZRA 9VXiz2xnHEx8gtWx4WQum6HOEpvPL4eQWCaXG4F0eVy/0U3AhWc2+zsblJQaQGvv 4jS9og6ToW0Q+qmPOSMRZRGAbUJBBZyYY8WKsh6cMeyvXc0IL6yg0qbKcNx6vg3k RNuT5d4IPTuaBC0EVuETwKfYq19Fw65gTF4z55uNS8iv0hhUBQKMkwHZ78pgEFiK tATrdaC9W6ygkAb3hk3yGveKhYOyHxWr1ZyYPtPGputgJ/L+cKKTVY/YYDCEiQcL UrAganBICrXmDw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:25 2025 by rpki-client