This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft File: XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json) Hash identifier: darA8H+LEz4K+Am1KdgU7Y30q5ol5WDhybA2R4gEStM= Subject key identifier: 1F:F8:AC:30:CD:10:98:0F:A8:D7:5C:49:72:00:BD:5A:0C:17:D4:14 Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3 Certificate issuer: /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3 Certificate serial: 019AF276EEEAA975B8602FC8E931605BE2FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft Manifest number: 12AF Signing time: Sat 06 Dec 2025 07:01:11 +0000 Manifest this update: Sat 06 Dec 2025 07:01:11 +0000 Manifest next update: Sun 07 Dec 2025 07:01:11 +0000 Files and hashes: 1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: +VmCXXGVTaKj22CX8kK1Y4lc4bwB7olBbzA3IhyiPKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ee:ea:a9:75:b8:60:2f:c8:e9:31:60:5b:e2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3 Validity Not Before: Dec 6 07:01:11 2025 GMT Not After : Dec 7 07:01:11 2025 GMT Subject: CN=1ff8ac30cd10980fa8d75c497200bd5a0c17d414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:ee:77:ef:63:a7:a4:df:36:49:fb:61:68: 92:91:1d:96:ea:1c:a1:41:08:a0:cc:79:e2:81:fc: 5c:28:11:1c:64:cc:67:16:e5:30:98:b6:e5:d4:a4: 1f:fd:78:51:fb:54:12:58:0c:f8:b1:14:eb:31:5a: 66:b2:ab:12:eb:03:ad:0c:49:9a:9f:7a:f4:9f:1f: ff:e8:f7:b3:f0:21:0d:48:c0:d9:c4:b4:6e:36:68: 0c:a3:65:de:59:0c:4a:01:c6:18:56:7a:fc:a6:a4: 8a:bb:e2:73:c0:e5:79:13:eb:c8:04:86:58:ce:72: da:37:45:f0:13:3a:e3:36:db:bd:85:2c:64:74:d2: 72:ee:61:6a:96:c8:7f:f1:e8:fb:31:5c:da:9e:ab: 68:4e:d4:0a:a4:1e:b8:2b:1a:0c:48:1b:cb:2e:60: e1:be:90:94:1c:d1:a9:20:e1:9c:1e:e8:54:50:fe: 0d:5f:03:33:37:f5:65:14:0f:87:fd:e9:9b:07:48: e4:b8:43:c4:cb:5e:a0:99:f5:53:dc:a2:ae:22:dc: 4f:c8:41:b2:72:75:f0:f0:c2:12:4a:98:0c:a6:53: 55:46:93:23:e5:5b:d2:9a:8e:da:4b:5e:99:98:65: e1:4d:a6:d1:ce:19:d1:af:06:a0:07:fe:50:67:ab: 78:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:AC:30:CD:10:98:0F:A8:D7:5C:49:72:00:BD:5A:0C:17:D4:14 X509v3 Authority Key Identifier: keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:22:0c:ab:c5:8b:e8:ef:57:4e:0b:22:91:31:cd:d0:41:cb: d7:d4:2f:ec:3c:30:ae:84:79:4e:0c:c8:39:19:71:fa:9b:30: 44:2f:d6:51:49:2c:0a:30:38:9f:86:bd:9a:88:4d:88:be:b6: 91:ad:95:3a:62:99:a3:38:ee:6c:5e:5d:fa:cc:f2:0b:fd:98: 58:84:88:f3:8e:fb:3a:05:4c:60:78:9e:f9:c6:d4:04:91:1c: a8:30:41:bd:08:e6:25:b1:f9:2b:e3:23:f8:84:81:56:bc:7c: cd:6c:79:15:4c:23:b3:2c:c7:ee:f0:cb:e6:e4:bf:33:04:66: 16:1d:0c:09:a4:ab:cc:e7:b7:38:bb:31:40:7d:a1:10:66:46: 27:69:bf:e2:19:ad:d0:79:bd:d4:09:69:17:12:20:10:0b:c9: 89:50:cb:24:9f:a1:08:d1:b9:e4:4f:e6:91:e4:88:af:4b:41: 40:dc:47:ef:d8:80:f7:c1:a5:1d:48:c2:48:25:f3:0f:ed:ac: fe:10:5c:a9:f9:8a:89:00:b8:d4:d5:41:c9:87:7d:4d:dd:f6: 81:8e:f8:66:17:b0:b1:b5:ac:92:58:1a:d6:b8:bd:47:61:d7: 36:88:20:94:46:6f:9a:db:16:f7:fd:be:29:60:af:89:7a:4a: a3:4a:f1:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydu7qqXW4YC/I6TFgW+L8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDM0ODc4ODMyZTkxN2ZmZjljZDNjODZjMGZhMWU1NjVm ODIxZDMwHhcNMjUxMjA2MDcwMTExWhcNMjUxMjA3MDcwMTExWjAzMTEwLwYDVQQD EygxZmY4YWMzMGNkMTA5ODBmYThkNzVjNDk3MjAwYmQ1YTBjMTdkNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XLud+9jp6TfNkn7YWiSkR2W6hyh QQigzHnigfxcKBEcZMxnFuUwmLbl1KQf/XhR+1QSWAz4sRTrMVpmsqsS6wOtDEma n3r0nx//6Pez8CENSMDZxLRuNmgMo2XeWQxKAcYYVnr8pqSKu+JzwOV5E+vIBIZY znLaN0XwEzrjNtu9hSxkdNJy7mFqlsh/8ej7MVzanqtoTtQKpB64KxoMSBvLLmDh vpCUHNGpIOGcHuhUUP4NXwMzN/VlFA+H/embB0jkuEPEy16gmfVT3KKuItxPyEGy cnXw8MISSpgMplNVRpMj5VvSmo7aS16ZmGXhTabRzhnRrwagB/5QZ6t4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/4rDDNEJgPqNdcSXIAvVoMF9QUMB8GA1UdIwQY MBaAFF8DSHiDLpF//5zTyGwPoeVl+CHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1Njkt ZGYxYzU3YzJhNzUxLzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1NjktZGYxYzU3YzJhNzUx LzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSIMq8WL 6O9XTgsikTHN0EHL19Qv7DwwroR5TgzIORlx+pswRC/WUUksCjA4n4a9mohNiL62 ka2VOmKZozjubF5d+szyC/2YWISI8477OgVMYHie+cbUBJEcqDBBvQjmJbH5K+Mj +ISBVrx8zWx5FUwjsyzH7vDL5uS/MwRmFh0MCaSrzOe3OLsxQH2hEGZGJ2m/4hmt 0Hm91AlpFxIgEAvJiVDLJJ+hCNG55E/mkeSIr0tBQNxH79iA98GlHUjCSCXzD+2s /hBcqfmKiQC41NVByYd9Td32gY74ZhewsbWsklga1ri9R2HXNogglEZvmtsW9/2+ KWCviXpKo0rxQg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:10 2025 by rpki-client