This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft File: xlkRwmkydt2NDOt_hKoqtJ79EIk.mft (raw, json) Hash identifier: d76pYZIctD+s8h9KW4cQRrf8qJGgXqeiClsS8eKXSNk= Subject key identifier: 5F:88:93:B8:B6:23:62:7B:ED:03:7C:81:B4:87:A8:8F:C0:A7:3F:FD Authority key identifier: C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89 Certificate issuer: /CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089 Certificate serial: 019AF209866E77758FA73A5020FF879566C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft Manifest number: 055E Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: xlkRwmkydt2NDOt_hKoqtJ79EIk.crl (hash: SvxQV47C2KTJs0A1ifBUgbF9EYR3JMuVyxl2cjrZYII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:86:6e:77:75:8f:a7:3a:50:20:ff:87:95:66:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65911c2693276dd8d0ceb7f84aa2ab49efd1089 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=5f8893b8b623627bed037c81b487a88fc0a73ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:89:a3:bb:6f:52:a8:8b:02:78:1d:39:8e: 3d:18:ff:65:f7:2c:db:15:b9:87:b6:06:bc:f6:8c: 38:ee:41:57:ef:e5:3b:91:7d:36:ae:7e:ee:15:20: a4:da:8b:55:7a:37:bf:c8:6e:8e:08:14:ad:9b:78: 0f:5f:ba:80:d4:f5:82:7c:55:ba:95:84:c0:ee:87: 66:af:07:b5:b5:3c:f6:ce:00:43:24:ec:df:77:b1: c8:76:ac:28:17:0c:a6:af:e8:51:dc:79:f8:99:94: 36:fd:bc:34:4b:5b:3f:8a:14:a9:fa:62:c2:e5:12: 81:f1:5d:b6:e4:b3:16:e3:f2:90:af:9f:48:67:fb: 08:b1:d0:65:10:e4:96:65:84:11:e1:60:0c:46:71: b8:96:41:bb:07:d1:73:de:52:d2:81:a9:d1:c0:08: b1:7f:92:4f:56:2b:2e:2f:eb:51:a3:65:35:7b:82: 9c:f7:e4:1b:90:bb:c5:69:e7:ce:18:39:a5:e1:0e: cc:3b:ad:fa:1a:77:c7:cf:5d:54:42:53:de:c3:31: 51:d4:55:35:69:2a:c5:19:0c:e8:8c:b4:83:10:68: 55:ed:08:cd:98:96:a6:d8:12:a6:b7:b2:9c:d9:6d: 10:37:8f:9a:a7:7a:f9:68:4d:89:7f:34:ea:a8:da: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:88:93:B8:B6:23:62:7B:ED:03:7C:81:B4:87:A8:8F:C0:A7:3F:FD X509v3 Authority Key Identifier: keyid:C6:59:11:C2:69:32:76:DD:8D:0C:EB:7F:84:AA:2A:B4:9E:FD:10:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlkRwmkydt2NDOt_hKoqtJ79EIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e28279-9de9-48ab-b86f-a6e80949a029/1/xlkRwmkydt2NDOt_hKoqtJ79EIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b5:2e:0a:b2:5f:d2:ef:ad:9e:aa:54:d4:d7:01:78:a2:15: fd:ab:b6:45:a4:63:e9:02:79:24:33:16:ce:2e:73:93:07:1d: a4:31:50:a3:4e:78:3c:d5:81:23:5b:a6:2c:fd:b6:b4:f2:6f: 75:a2:19:b8:34:ba:3a:39:b0:26:54:92:c5:c9:5d:9a:a0:87: cc:27:46:14:f4:5c:3b:ca:21:32:7c:38:81:fb:cb:1f:0d:12: 3e:23:04:1f:70:8a:51:6b:0f:f8:2e:ef:f0:46:4f:fb:34:df: af:4b:5e:0c:eb:32:2e:8d:0c:48:db:cc:e1:71:31:18:75:fb: 8d:53:f2:69:ee:79:09:8a:83:ac:ae:e7:0f:6e:89:8f:ad:95: da:1b:e1:a3:1d:58:63:f5:9b:49:2b:94:33:57:9e:56:ff:f0: 24:fd:c5:d8:1e:ce:f9:19:66:f6:cb:94:d8:57:9d:c6:78:1a: 40:84:51:af:87:85:8e:53:2d:89:50:63:a6:77:24:2c:2c:8b: c2:67:82:48:69:07:d4:58:b9:41:7d:6f:6f:e2:14:39:e4:0d: f7:e3:c4:f0:e2:15:4d:e0:fa:fc:82:a3:ed:ab:26:21:03:59: ab:e3:5e:a4:1c:be:2f:c0:98:fd:72:19:a8:35:4f:ba:a8:7c: 4a:f3:ba:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYZud3WPpzpQIP+HlWbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NTkxMWMyNjkzMjc2ZGQ4ZDBjZWI3Zjg0YWEyYWI0OWVm ZDEwODkwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD Eyg1Zjg4OTNiOGI2MjM2MjdiZWQwMzdjODFiNDg3YTg4ZmMwYTczZmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfyJo7tvUqiLAngdOY49GP9l9yzb FbmHtga89ow47kFX7+U7kX02rn7uFSCk2otVeje/yG6OCBStm3gPX7qA1PWCfFW6 lYTA7odmrwe1tTz2zgBDJOzfd7HIdqwoFwymr+hR3Hn4mZQ2/bw0S1s/ihSp+mLC 5RKB8V225LMW4/KQr59IZ/sIsdBlEOSWZYQR4WAMRnG4lkG7B9Fz3lLSganRwAix f5JPVisuL+tRo2U1e4Kc9+QbkLvFaefOGDml4Q7MO636GnfHz11UQlPewzFR1FU1 aSrFGQzojLSDEGhV7QjNmJam2BKmt7Kc2W0QN4+ap3r5aE2JfzTqqNr/KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+Ik7i2I2J77QN8gbSHqI/Apz/9MB8GA1UdIwQY MBaAFMZZEcJpMnbdjQzrf4SqKrSe/RCJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxrUndta3lkdDJORE90X2hLb3F0Sjc5RUlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lMjgyNzktOWRlOS00OGFiLWI4NmYt YTZlODA5NDlhMDI5LzEveGxrUndta3lkdDJORE90X2hLb3F0Sjc5RUlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lMjgyNzktOWRlOS00OGFiLWI4NmYtYTZlODA5NDlhMDI5 LzEveGxrUndta3lkdDJORE90X2hLb3F0Sjc5RUlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLUuCrJf 0u+tnqpU1NcBeKIV/au2RaRj6QJ5JDMWzi5zkwcdpDFQo054PNWBI1umLP22tPJv daIZuDS6OjmwJlSSxcldmqCHzCdGFPRcO8ohMnw4gfvLHw0SPiMEH3CKUWsP+C7v 8EZP+zTfr0teDOsyLo0MSNvM4XExGHX7jVPyae55CYqDrK7nD26Jj62V2hvhox1Y Y/WbSSuUM1eeVv/wJP3F2B7O+Rlm9suU2FedxngaQIRRr4eFjlMtiVBjpnckLCyL wmeCSGkH1Fi5QX1vb+IUOeQN9+PE8OIVTeD6/IKj7asmIQNZq+NepBy+L8CY/XIZ qDVPuqh8SvO60A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:31 2025 by rpki-client