This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft File: Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft (raw, json) Hash identifier: 1zMpLycUV6Qt08c73UzyP/p30ZtJ/Q4G8Gh4nPaYwwU= Subject key identifier: 0B:C5:4B:AC:D0:F1:26:57:52:8C:CE:55:B1:7B:5F:DA:A8:EB:5D:6C Authority key identifier: 5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D Certificate issuer: /CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d Certificate serial: 019AF1D23BC5CF2077F849BB1EB216BD1872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft Manifest number: 1570 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl (hash: wC1O/3FlNfbxTHUjGULeoA8HdAtoPN1V7bEWPCDtoxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3b:c5:cf:20:77:f8:49:bb:1e:b2:16:bd:18:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea8790a08c8e0d84588d94d1a51bca9abe7581d Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=0bc54bacd0f12657528cce55b17b5fdaa8eb5d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:f1:45:b1:f4:26:9e:ad:49:46:50:10:60: 63:e1:1b:8b:a8:83:a2:41:a5:04:6b:3e:d4:f4:6b: 0d:41:6f:58:7a:92:ea:79:e1:41:8d:8f:95:f1:b2: 5d:17:01:c8:42:df:ce:99:64:1b:1d:b4:c4:12:9d: 5a:c7:93:0c:67:eb:70:97:af:58:ea:51:c9:fd:50: 00:cf:ae:8b:fd:bb:4d:5c:02:27:23:ad:31:47:b5: 5a:e3:05:8c:44:21:15:83:7c:e2:8c:c5:76:2b:a4: 9b:34:3c:f0:a9:9a:5e:0f:61:7c:37:b5:eb:65:45: f1:28:0a:dc:96:22:18:6e:50:fe:8c:aa:a3:97:d3: d7:71:07:c4:39:85:9f:bd:ec:97:e0:4b:7c:00:7f: b2:4b:b0:72:0a:ca:15:81:4b:9c:4c:3d:4e:d6:6c: df:e1:eb:45:a1:12:9f:b2:fc:7b:51:aa:6d:c0:b7: a8:b1:ab:63:af:72:d3:ba:4f:b3:d3:46:a8:e1:ae: 16:61:28:d1:7a:6e:59:71:9e:8d:1a:84:71:bd:a8: 71:4e:67:e7:88:f9:3f:b1:bf:2b:36:40:49:48:b5: f7:3f:25:8d:c0:27:d1:99:08:96:14:6d:b1:47:d4: 4c:06:01:92:ad:24:e7:53:26:a4:05:20:16:f4:1f: b7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C5:4B:AC:D0:F1:26:57:52:8C:CE:55:B1:7B:5F:DA:A8:EB:5D:6C X509v3 Authority Key Identifier: keyid:5E:A8:79:0A:08:C8:E0:D8:45:88:D9:4D:1A:51:BC:A9:AB:E7:58:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqh5CgjI4NhFiNlNGlG8qavnWB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c06a23-0163-47a5-8608-30c0a111cd55/1/Xqh5CgjI4NhFiNlNGlG8qavnWB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:e4:c2:5d:30:ff:cf:64:92:d2:3c:44:98:c9:ff:1b:e9: 86:86:43:d8:bd:a4:39:a1:ac:bc:85:00:65:20:0d:12:63:6c: d7:32:5c:c7:b7:0a:a4:37:c9:b2:e3:42:b2:e0:74:12:97:57: f3:5a:1e:9d:6a:7a:91:ec:52:96:e4:ed:53:cf:8b:75:84:42: cf:ec:08:2a:7b:96:a0:ba:4d:bc:92:d2:a9:a3:39:3d:46:ba: 9b:7c:70:bf:66:39:0b:87:af:05:65:4c:32:df:b4:f9:e1:2e: cd:5d:3a:58:73:9c:85:25:18:33:6f:fb:5e:62:b2:df:1c:29: 15:11:3e:cc:f4:13:9c:ef:ec:8c:97:d6:9c:43:68:01:75:ad: 75:6d:d8:a9:df:9f:bc:80:58:ee:5b:b1:4b:ba:82:47:c2:48: c6:fa:ec:36:23:36:b1:5f:23:36:b7:e8:03:49:49:1a:08:cc: 03:90:de:65:2b:df:c5:78:18:ed:f5:7e:62:60:76:b8:2f:fc: 03:c0:b9:ac:e2:f1:f0:29:08:5f:85:26:4a:b4:27:25:63:a3: 85:f4:95:3f:b7:8e:a2:a7:af:cf:59:fe:ee:e0:d3:56:68:85: 4f:e0:e2:0a:60:a2:78:a8:0f:d3:1c:c8:64:22:e1:2b:9f:5e: 2f:68:df:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jvFzyB3+Em7HrIWvRhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTg3OTBhMDhjOGUwZDg0NTg4ZDk0ZDFhNTFiY2E5YWJl NzU4MWQwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygwYmM1NGJhY2QwZjEyNjU3NTI4Y2NlNTViMTdiNWZkYWE4ZWI1ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHPxRbH0Jp6tSUZQEGBj4RuLqIOi QaUEaz7U9GsNQW9YepLqeeFBjY+V8bJdFwHIQt/OmWQbHbTEEp1ax5MMZ+twl69Y 6lHJ/VAAz66L/btNXAInI60xR7Va4wWMRCEVg3zijMV2K6SbNDzwqZpeD2F8N7Xr ZUXxKArcliIYblD+jKqjl9PXcQfEOYWfveyX4Et8AH+yS7ByCsoVgUucTD1O1mzf 4etFoRKfsvx7UaptwLeosatjr3LTuk+z00ao4a4WYSjRem5ZcZ6NGoRxvahxTmfn iPk/sb8rNkBJSLX3PyWNwCfRmQiWFG2xR9RMBgGSrSTnUyakBSAW9B+3/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvFS6zQ8SZXUozOVbF7X9qo611sMB8GA1UdIwQY MBaAFF6oeQoIyODYRYjZTRpRvKmr51gdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMDZhMjMtMDE2My00N2E1LTg2MDgt MzBjMGExMTFjZDU1LzEvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMDZhMjMtMDE2My00N2E1LTg2MDgtMzBjMGExMTFjZDU1 LzEvWHFoNUNnakk0TmhGaU5sTkdsRzhxYXZuV0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFLkwl0w /89kktI8RJjJ/xvphoZD2L2kOaGsvIUAZSANEmNs1zJcx7cKpDfJsuNCsuB0EpdX 81oenWp6kexSluTtU8+LdYRCz+wIKnuWoLpNvJLSqaM5PUa6m3xwv2Y5C4evBWVM Mt+0+eEuzV06WHOchSUYM2/7XmKy3xwpFRE+zPQTnO/sjJfWnENoAXWtdW3Yqd+f vIBY7luxS7qCR8JIxvrsNiM2sV8jNrfoA0lJGgjMA5DeZSvfxXgY7fV+YmB2uC/8 A8C5rOLx8CkIX4UmSrQnJWOjhfSVP7eOoqevz1n+7uDTVmiFT+DiCmCieKgP0xzI ZCLhK59eL2jfjg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:40 2025 by rpki-client