This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json) Hash identifier: d+Nm1eYMaPpAd0aQmcFtyfrBKU7Gw+Q+2aM2ygHrrCw= Subject key identifier: D0:F6:9B:64:DF:C0:AF:3D:6E:BA:DD:E6:36:21:90:19:F1:4A:CE:C5 Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7 Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7 Certificate serial: 019B2F6722CDBCAA32C67160C07FC8D3D80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft Manifest number: 1368 Signing time: Thu 18 Dec 2025 03:00:46 +0000 Manifest this update: Thu 18 Dec 2025 03:00:46 +0000 Manifest next update: Fri 19 Dec 2025 03:00:46 +0000 Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 7Efylf0IMjkF8XKxfExIH9e2USUMVssr7Dpnj4dYe2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:22:cd:bc:aa:32:c6:71:60:c0:7f:c8:d3:d8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7 Validity Not Before: Dec 18 03:00:46 2025 GMT Not After : Dec 19 03:00:46 2025 GMT Subject: CN=d0f69b64dfc0af3d6ebadde636219019f14acec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2d:9a:0b:28:16:8b:a1:22:93:b3:f1:2d:f6: bc:7e:10:21:31:7d:85:d6:53:a7:2c:62:f8:f9:3f: 05:81:dd:b0:58:a8:85:79:76:38:77:a2:2c:55:89: 73:76:c2:9b:73:cc:50:fe:46:6c:1c:d1:7d:4e:e6: 5e:6c:06:27:02:c0:71:4b:f2:c7:e6:b6:0c:07:6c: 5c:24:5b:cd:15:a7:6d:e1:96:42:30:7c:a6:a7:f5: b2:59:d2:4b:eb:52:ca:d7:01:00:b9:14:98:e8:d6: 1f:7e:7d:9a:f4:3f:b6:c0:a4:82:53:09:2a:38:de: 78:42:fd:b3:86:d1:4d:9f:9b:47:ec:a2:64:7f:7a: 4a:76:eb:cf:c2:dc:bd:6a:fb:a9:3a:e9:1d:03:ca: f5:8c:df:6f:69:89:24:35:0f:a9:e1:b7:0f:0c:77: 80:c0:03:47:c7:03:df:60:2a:21:8d:a8:b8:17:c3: b2:c2:6c:41:4c:3d:b3:6f:26:f2:91:fa:60:36:b7: b1:9c:4e:41:35:a8:02:47:0e:6f:aa:f4:0c:ce:c3: 59:6c:ee:b7:af:56:ab:12:cb:c5:93:bc:1b:b8:37: 88:0b:98:ee:7a:fb:9f:15:a3:36:1d:3e:c2:23:7c: 1d:22:9f:e7:b8:36:94:e2:1b:ae:c5:20:fd:db:03: 82:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F6:9B:64:DF:C0:AF:3D:6E:BA:DD:E6:36:21:90:19:F1:4A:CE:C5 X509v3 Authority Key Identifier: keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:47:7c:99:9f:70:23:96:72:27:47:ac:e2:2f:89:45:ca:48: 35:99:61:84:4b:0d:f3:e3:b1:9f:2c:a6:3c:82:ad:07:0f:fb: fa:11:f0:96:52:e4:1d:4b:10:93:8d:0d:94:57:f0:16:bf:5d: a0:5b:c6:12:bc:e6:31:ff:5e:f4:ce:cc:e9:0a:57:d3:e1:57: 38:5c:65:ad:82:35:ed:79:aa:a5:25:70:9e:66:e6:0d:58:38: 63:6e:f6:d2:a1:e6:7d:39:fb:58:51:f7:cc:c5:cc:2d:a5:fc: f0:01:a0:7e:be:bb:86:62:cd:3c:01:37:a7:f7:dd:a6:5b:49: da:35:fc:c3:12:1d:6d:98:ad:bd:9b:f5:bc:91:58:70:15:db: fa:d0:97:05:f1:35:86:17:74:dc:35:b4:63:6b:93:c2:d8:35: 79:1a:cd:ef:3a:7a:30:6d:79:eb:a8:37:7b:68:bc:6a:22:aa: 73:5d:b1:a4:d1:cc:72:5c:3e:6c:7e:ce:8e:29:44:78:05:d8: f4:9f:38:db:48:e9:6b:e5:35:ee:df:58:4a:06:3b:6d:9f:e9: 2f:d6:1f:54:1b:89:f2:a9:4e:af:5b:3b:4a:31:06:ca:8d:2f: c4:7b:11:bf:24:5b:57:07:7a:c9:f9:63:4d:59:93:24:a5:a5: ba:ef:a3:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyLNvKoyxnFgwH/I09gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZWE4MTRhOTkyYTcxZjVhMmE5YmVmY2VmNjZmYzYyMjBm MTc4ZjcwHhcNMjUxMjE4MDMwMDQ2WhcNMjUxMjE5MDMwMDQ2WjAzMTEwLwYDVQQD EyhkMGY2OWI2NGRmYzBhZjNkNmViYWRkZTYzNjIxOTAxOWYxNGFjZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy2aCygWi6Eik7PxLfa8fhAhMX2F 1lOnLGL4+T8Fgd2wWKiFeXY4d6IsVYlzdsKbc8xQ/kZsHNF9TuZebAYnAsBxS/LH 5rYMB2xcJFvNFadt4ZZCMHymp/WyWdJL61LK1wEAuRSY6NYffn2a9D+2wKSCUwkq ON54Qv2zhtFNn5tH7KJkf3pKduvPwty9avupOukdA8r1jN9vaYkkNQ+p4bcPDHeA wANHxwPfYCohjai4F8OywmxBTD2zbybykfpgNrexnE5BNagCRw5vqvQMzsNZbO63 r1arEsvFk7wbuDeIC5juevufFaM2HT7CI3wdIp/nuDaU4huuxSD92wOCmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND2m2TfwK89brrd5jYhkBnxSs7FMB8GA1UdIwQY MBaAFMbqgUqZKnH1oqm+/O9m/GIg8Xj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAt YWZhNjNkOGZhNjM4LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAtYWZhNjNkOGZhNjM4 LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkd8mZ9w I5ZyJ0es4i+JRcpINZlhhEsN8+OxnyymPIKtBw/7+hHwllLkHUsQk40NlFfwFr9d oFvGErzmMf9e9M7M6QpX0+FXOFxlrYI17XmqpSVwnmbmDVg4Y2720qHmfTn7WFH3 zMXMLaX88AGgfr67hmLNPAE3p/fdpltJ2jX8wxIdbZitvZv1vJFYcBXb+tCXBfE1 hhd03DW0Y2uTwtg1eRrN7zp6MG1566g3e2i8aiKqc12xpNHMclw+bH7OjilEeAXY 9J8420jpa+U17t9YSgY7bZ/pL9YfVBuJ8qlOr1s7SjEGyo0vxHsRvyRbVwd6yflj TVmTJKWluu+jvw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:28 2025 by rpki-client