This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft File: xuqBSpkqcfWiqb7872b8YiDxePc.mft (raw, json) Hash identifier: kn8ReYwbRhRb8UQ4TpUxOWMBdWJK4KIPal9UjAGkr6s= Subject key identifier: CF:25:D5:A3:B9:9C:E8:2B:3E:8A:4E:A4:D6:93:20:47:E3:2F:58:D8 Authority key identifier: C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7 Certificate issuer: /CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7 Certificate serial: 019AF19B4DC6456D065B8D6DBE099AB7364D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft Manifest number: 1348 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: xuqBSpkqcfWiqb7872b8YiDxePc.crl (hash: 8U05TMdRQI7DDJc+yIROIC/gJGDHGM5+H1IXH1eE+gQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4d:c6:45:6d:06:5b:8d:6d:be:09:9a:b7:36:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ea814a992a71f5a2a9befcef66fc6220f178f7 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=cf25d5a3b99ce82b3e8a4ea4d6932047e32f58d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:21:36:08:15:ad:81:cd:a5:17:db:df:73: 6d:4e:57:33:69:44:a9:92:20:39:57:0e:8f:5b:81: 09:7b:81:9d:26:95:4f:90:f6:81:80:64:64:85:df: fd:02:d9:98:3c:f2:f4:39:aa:e5:ee:de:e5:61:aa: 97:86:94:fd:02:de:8e:df:4f:d0:df:93:91:4b:1d: 28:e4:fe:59:1f:70:88:bd:6d:4f:66:5a:44:13:f5: 9f:9f:58:1a:f5:bc:a6:1b:18:00:aa:c2:3a:60:a1: c8:f8:d2:ae:ca:4d:47:54:e7:78:c9:20:a4:b6:71: 6f:7b:c2:64:3e:9f:3c:94:44:20:2a:40:d4:98:af: 6c:0f:c6:fa:4a:d4:df:b0:17:d0:5e:74:eb:b5:5b: c9:5e:a9:40:cb:36:c2:fd:c1:d3:b1:92:f8:04:cc: 5d:fd:68:12:25:0e:5b:ba:68:b8:b3:d1:26:5a:dc: 29:01:ba:9a:b5:f4:ce:cb:f7:38:bc:2a:ec:2c:81: d5:0e:bf:00:a8:61:f7:c4:1e:2e:66:21:a3:d1:50: 1a:4c:e1:e2:21:20:d8:aa:f3:49:23:dc:38:71:ce: 42:66:99:97:db:ae:9a:1a:83:89:01:90:73:20:ee: 8a:b8:52:8b:1c:70:d9:82:1a:cd:9e:45:8d:d8:e7: 44:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:25:D5:A3:B9:9C:E8:2B:3E:8A:4E:A4:D6:93:20:47:E3:2F:58:D8 X509v3 Authority Key Identifier: keyid:C6:EA:81:4A:99:2A:71:F5:A2:A9:BE:FC:EF:66:FC:62:20:F1:78:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuqBSpkqcfWiqb7872b8YiDxePc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df664a-3bbe-4939-a5e0-afa63d8fa638/1/xuqBSpkqcfWiqb7872b8YiDxePc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:60:03:b3:96:2e:a3:ae:72:b0:cf:ea:10:63:6c:a1:85:42: 27:2d:db:53:a6:17:a5:55:b3:c5:df:b1:e9:62:b9:3f:9f:6f: 89:d0:90:61:dc:38:d1:70:bc:fd:e0:ec:c8:b2:09:51:ed:11: c8:28:48:b0:b8:8c:c5:e3:9f:e3:9e:cf:48:e6:3c:a5:b0:4e: a6:98:81:44:64:a4:59:0a:73:5a:62:ed:01:b8:34:7f:eb:d2: d4:1a:5a:5c:30:44:09:ab:1d:e7:03:52:3f:e5:59:ab:f7:b7: b1:df:90:67:62:34:19:53:fa:1b:77:89:b9:cb:e1:11:ab:1a: d1:c1:6e:60:1f:cc:03:2d:84:87:11:b7:d8:05:af:e6:b6:a4: 13:13:62:58:48:66:87:d7:af:00:20:bd:65:56:4b:eb:fd:84: a6:ec:f3:16:02:c9:ed:d8:de:a6:51:c8:a4:b1:32:e2:4b:dc: ca:cf:ea:58:c5:ac:cf:ba:c0:0a:33:f3:f5:6d:0c:8f:32:c5: 54:a6:96:5c:44:17:aa:a3:6e:1e:e4:69:5d:9d:89:01:86:c9: 08:f9:6f:3c:41:77:cd:20:e0:98:91:e8:e5:f1:67:85:78:60: 22:12:9d:e3:e0:e2:4f:b3:7b:a9:cc:e4:41:a6:d4:38:b3:78: cd:9c:5a:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm03GRW0GW41tvgmatzZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZWE4MTRhOTkyYTcxZjVhMmE5YmVmY2VmNjZmYzYyMjBm MTc4ZjcwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EyhjZjI1ZDVhM2I5OWNlODJiM2U4YTRlYTRkNjkzMjA0N2UzMmY1OGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WkhNggVrYHNpRfb33NtTlczaUSp kiA5Vw6PW4EJe4GdJpVPkPaBgGRkhd/9AtmYPPL0Oarl7t7lYaqXhpT9At6O30/Q 35ORSx0o5P5ZH3CIvW1PZlpEE/Wfn1ga9bymGxgAqsI6YKHI+NKuyk1HVOd4ySCk tnFve8JkPp88lEQgKkDUmK9sD8b6StTfsBfQXnTrtVvJXqlAyzbC/cHTsZL4BMxd /WgSJQ5bumi4s9EmWtwpAbqatfTOy/c4vCrsLIHVDr8AqGH3xB4uZiGj0VAaTOHi ISDYqvNJI9w4cc5CZpmX266aGoOJAZBzIO6KuFKLHHDZghrNnkWN2OdE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8l1aO5nOgrPopOpNaTIEfjL1jYMB8GA1UdIwQY MBaAFMbqgUqZKnH1oqm+/O9m/GIg8Xj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAt YWZhNjNkOGZhNjM4LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9kZjY2NGEtM2JiZS00OTM5LWE1ZTAtYWZhNjNkOGZhNjM4 LzEveHVxQlNwa3FjZldpcWI3ODcyYjhZaUR4ZVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmADs5Yu o65ysM/qEGNsoYVCJy3bU6YXpVWzxd+x6WK5P59vidCQYdw40XC8/eDsyLIJUe0R yChIsLiMxeOf457PSOY8pbBOppiBRGSkWQpzWmLtAbg0f+vS1BpaXDBECasd5wNS P+VZq/e3sd+QZ2I0GVP6G3eJucvhEasa0cFuYB/MAy2EhxG32AWv5rakExNiWEhm h9evACC9ZVZL6/2EpuzzFgLJ7djeplHIpLEy4kvcys/qWMWsz7rACjPz9W0MjzLF VKaWXEQXqqNuHuRpXZ2JAYbJCPlvPEF3zSDgmJHo5fFnhXhgIhKd4+DiT7N7qczk QabUOLN4zZxaag== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:11 2025 by rpki-client