This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft File: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft (raw, json) Hash identifier: Xd29jwBAUBXABXE/dQg1PVb0SDHhDdxsxQeO6KqEsso= Subject key identifier: E6:5A:33:AA:2A:16:8F:03:95:D8:3F:DA:D2:99:2F:C5:2D:44:8E:0A Authority key identifier: C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78 Certificate issuer: /CN=c68106f44957d194020335b0bfd6077ccbcdc878 Certificate serial: 019AF27653D5219AC68B63598D250FC3F2D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl (hash: fGFy2ji6CxTvnn1/gw4t27NEcv1slDk3Qhf3LSzu9VI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:53:d5:21:9a:c6:8b:63:59:8d:25:0f:c3:f2:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68106f44957d194020335b0bfd6077ccbcdc878 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=e65a33aa2a168f0395d83fdad2992fc52d448e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:e4:10:22:96:96:e8:f3:83:ad:75:a7:3a: bd:63:36:13:c1:31:06:23:b1:0e:e8:a1:9f:f7:24: a0:4f:93:3d:d2:85:e5:8d:e6:66:7c:af:1e:fd:b7: cf:60:56:a1:0e:7c:7b:fe:88:f7:b1:f5:e6:63:e8: a5:d6:82:d5:1c:f2:e2:6d:e5:85:e9:8f:90:82:2e: 7c:54:f6:6b:75:42:f5:87:93:ae:dd:f7:e1:74:7c: 3a:cc:ad:c2:d5:ea:bd:44:e0:86:98:9e:f3:2e:e1: 47:59:8a:a2:66:61:2f:dd:15:98:db:75:ae:5c:9d: cd:c4:20:d3:7d:ed:e7:b8:72:71:82:af:05:85:f5: 42:57:9d:c5:7b:5b:01:20:70:ef:db:4a:f7:a9:b0: d0:5e:cf:5e:77:af:44:1c:f0:df:1f:9a:18:1b:d9: 1f:f4:38:d6:77:a1:0b:27:bf:80:24:ab:24:18:a2: df:6b:16:0a:e3:0d:5b:6a:7a:fe:75:f2:c8:da:33: fd:2d:df:18:0b:c7:62:a7:5e:88:a3:94:76:29:4b: 37:27:bc:d2:4b:9d:1d:5b:41:28:34:9f:c9:4e:0f: 8d:fa:1a:1f:64:67:39:4f:2d:97:7a:3e:4d:b7:43: e6:7f:11:2b:c6:16:d0:e0:2d:9a:e2:ba:e9:ba:3c: 65:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:33:AA:2A:16:8F:03:95:D8:3F:DA:D2:99:2F:C5:2D:44:8E:0A X509v3 Authority Key Identifier: keyid:C6:81:06:F4:49:57:D1:94:02:03:35:B0:BF:D6:07:7C:CB:CD:C8:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/43e70b-df62-4028-a386-a029fbb4be29/1/xoEG9ElX0ZQCAzWwv9YHfMvNyHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:69:4a:06:04:c7:27:0a:23:8b:be:45:ac:80:de:56:ff:dd: 84:63:14:dd:27:52:fb:2b:7e:84:5d:29:61:58:b8:be:f0:95: cc:d4:80:e2:d8:e7:da:6d:ef:ae:3b:a8:53:f4:2b:26:63:91: d3:ac:eb:18:9a:79:5d:26:9b:8a:06:20:85:3b:85:07:1c:6c: 3d:cc:49:37:7b:7b:54:76:5d:74:a1:8c:65:d1:ea:61:57:37: b7:f6:e4:b1:4b:5b:30:6a:da:11:b6:69:bf:0d:78:74:77:63: 3e:d1:49:3b:6c:35:d9:da:93:7e:f8:2c:59:5a:da:23:c1:d9: b9:ee:cd:d9:88:78:58:37:5b:69:d9:ba:03:b6:7f:ab:52:d3: 39:be:05:8d:08:8b:6b:01:ef:7c:32:08:d0:b5:1e:49:34:78: 38:26:b9:24:e2:55:53:72:f2:98:73:26:66:41:d9:47:d0:20: 0d:38:0f:77:6b:c0:73:e9:e8:2a:38:09:03:4b:61:5d:20:f0: 5c:41:61:ab:d2:d7:1b:c6:e8:cc:1c:dd:78:a8:e9:53:d5:da: 4c:5a:57:e9:53:c2:4b:25:ed:11:fc:97:74:35:0c:76:eb:1c: d5:7f:98:33:dc:c5:45:7f:d4:1d:21:46:46:65:42:1e:6e:33: d8:af:d5:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlPVIZrGi2NZjSUPw/LWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ODEwNmY0NDk1N2QxOTQwMjAzMzViMGJmZDYwNzdjY2Jj ZGM4NzgwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD EyhlNjVhMzNhYTJhMTY4ZjAzOTVkODNmZGFkMjk5MmZjNTJkNDQ4ZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjHkECKWlujzg611pzq9YzYTwTEG I7EO6KGf9ySgT5M90oXljeZmfK8e/bfPYFahDnx7/oj3sfXmY+il1oLVHPLibeWF 6Y+Qgi58VPZrdUL1h5Ou3ffhdHw6zK3C1eq9ROCGmJ7zLuFHWYqiZmEv3RWY23Wu XJ3NxCDTfe3nuHJxgq8FhfVCV53Fe1sBIHDv20r3qbDQXs9ed69EHPDfH5oYG9kf 9DjWd6ELJ7+AJKskGKLfaxYK4w1banr+dfLI2jP9Ld8YC8dip16Io5R2KUs3J7zS S50dW0EoNJ/JTg+N+hofZGc5Ty2Xej5Nt0PmfxErxhbQ4C2a4rrpujxlJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZaM6oqFo8Dldg/2tKZL8UtRI4KMB8GA1UdIwQY MBaAFMaBBvRJV9GUAgM1sL/WB3zLzch4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYt YTAyOWZiYjRiZTI5LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80M2U3MGItZGY2Mi00MDI4LWEzODYtYTAyOWZiYjRiZTI5 LzEveG9FRzlFbFgwWlFDQXpXd3Y5WUhmTXZOeUhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGlKBgTH Jwoji75FrIDeVv/dhGMU3SdS+yt+hF0pYVi4vvCVzNSA4tjn2m3vrjuoU/QrJmOR 06zrGJp5XSabigYghTuFBxxsPcxJN3t7VHZddKGMZdHqYVc3t/bksUtbMGraEbZp vw14dHdjPtFJO2w12dqTfvgsWVraI8HZue7N2Yh4WDdbadm6A7Z/q1LTOb4FjQiL awHvfDII0LUeSTR4OCa5JOJVU3LymHMmZkHZR9AgDTgPd2vAc+noKjgJA0thXSDw XEFhq9LXG8bozBzdeKjpU9XaTFpX6VPCSyXtEfyXdDUMdusc1X+YM9zFRX/UHSFG RmVCHm4z2K/VcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:20:42 2025 by rpki-client