This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft File: x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json) Hash identifier: guNN5r16+R+bCmXjN3E5aJogdbUQtlzl8Q2kh5x3utE= Subject key identifier: EE:93:2E:F4:B9:C5:49:99:A0:02:7A:49:9E:B5:9C:C4:10:34:6C:1A Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84 Certificate issuer: /CN=c74a0da757092d6eccf7d94ede2758753a1cd784 Certificate serial: 019AF19AE13058669598FBE0DF94F22E47A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft Manifest number: 1659 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: 9Wy12fC1Bu3n6dFpwxx3jchBwXmwsqXEzykMwUnbLfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e1:30:58:66:95:98:fb:e0:df:94:f2:2e:47:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=ee932ef4b9c54999a0027a499eb59cc410346c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2c:2c:a7:b2:10:c0:0d:46:42:bf:b6:68:e7: b9:eb:a7:d6:94:7f:1a:22:43:fd:cd:63:b7:1a:3e: ea:fd:f6:94:0a:a1:91:7b:82:26:3f:90:9f:1f:b7: c4:91:bb:ec:ed:a9:00:dc:ad:9f:f2:01:d7:ee:eb: 6e:3a:e6:f6:e8:39:a8:34:cb:de:ef:4d:ec:f1:0e: ab:3f:7b:2b:19:f0:fc:60:3a:66:84:8e:8c:6e:b8: 54:a0:2a:99:a4:5a:a2:60:3c:f9:ef:ac:b6:70:59: f8:67:8b:a4:7d:12:38:e9:41:25:a5:18:32:70:28: 4b:a3:c8:b3:c9:5a:6e:dd:ec:d5:c6:3e:9f:a0:a4: 18:96:6f:f4:f0:aa:9a:97:4c:a8:4a:e1:c3:32:a0: b3:c9:f9:ce:9e:03:bc:b2:f4:3a:c5:27:12:47:60: c9:b1:67:66:d2:0e:12:c4:cc:b2:34:0b:1c:d2:f8: 21:18:32:66:3b:bd:7c:0c:94:69:0d:a0:33:31:af: a0:fc:4c:f2:39:ed:36:c5:61:f7:75:85:35:9e:aa: 87:9c:5d:21:92:d6:c9:61:ed:a6:6a:19:67:2b:bc: cf:1b:e2:e0:7e:00:6a:b7:1a:1e:2d:80:4e:10:af: 44:72:61:ac:b5:4e:a3:5f:ef:33:f2:4d:a2:be:22: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:93:2E:F4:B9:C5:49:99:A0:02:7A:49:9E:B5:9C:C4:10:34:6C:1A X509v3 Authority Key Identifier: keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:39:63:44:39:5d:50:8c:06:70:2a:8d:f4:a4:60:e3:12:cf: 08:07:87:62:a5:3c:1f:59:c1:8d:5c:4a:1c:4b:22:ec:7e:71: e8:ec:93:eb:e6:d5:c2:f9:37:37:fe:17:75:f9:72:13:5c:81: e1:64:b3:ea:4c:be:0d:36:a3:bf:e1:52:62:5b:de:fb:62:6f: 47:28:d8:db:83:94:e3:5a:11:08:95:a9:1d:51:d1:cc:1c:3f: 48:a1:3e:85:61:1e:07:08:ee:1d:c0:63:5c:35:f5:8e:6e:ce: 48:6d:41:18:5a:4b:78:d3:7d:db:d1:c2:e2:10:f4:0a:22:1d: b5:46:b9:29:9d:45:b9:5d:4c:cf:c0:44:d0:52:34:96:c5:c9: a7:81:b8:e1:42:af:a9:d6:11:39:ce:36:fa:92:dc:c0:7c:43: f3:76:49:2f:47:a7:7e:94:68:b4:e9:0c:68:7a:0f:b6:99:62: 2b:73:2f:e9:12:20:10:ef:90:07:3d:7f:1c:4c:bd:c5:ba:79: 88:cc:b2:96:25:e0:f6:85:c0:18:18:88:94:c4:a7:8b:cb:fb: de:ce:2e:64:03:b0:48:84:65:ae:ff:da:a0:08:af:37:8a:be: 5f:18:c5:69:b3:6a:0a:64:8c:38:8b:79:c1:d2:bb:79:96:3f: ce:bb:43:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuEwWGaVmPvg35TyLkemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGEwZGE3NTcwOTJkNmVjY2Y3ZDk0ZWRlMjc1ODc1M2Ex Y2Q3ODQwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EyhlZTkzMmVmNGI5YzU0OTk5YTAwMjdhNDk5ZWI1OWNjNDEwMzQ2YzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliwsp7IQwA1GQr+2aOe566fWlH8a IkP9zWO3Gj7q/faUCqGRe4ImP5CfH7fEkbvs7akA3K2f8gHX7utuOub26DmoNMve 703s8Q6rP3srGfD8YDpmhI6MbrhUoCqZpFqiYDz576y2cFn4Z4ukfRI46UElpRgy cChLo8izyVpu3ezVxj6foKQYlm/08Kqal0yoSuHDMqCzyfnOngO8svQ6xScSR2DJ sWdm0g4SxMyyNAsc0vghGDJmO718DJRpDaAzMa+g/EzyOe02xWH3dYU1nqqHnF0h ktbJYe2mahlnK7zPG+LgfgBqtxoeLYBOEK9EcmGstU6jX+8z8k2iviLtKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6TLvS5xUmZoAJ6SZ61nMQQNGwaMB8GA1UdIwQY MBaAFMdKDadXCS1uzPfZTt4nWHU6HNeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjct ZTdhY2I1YjQ0ZWVlLzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yNmFiZjMtNWIzMS00MTgxLWEzZjctZTdhY2I1YjQ0ZWVl LzEveDBvTnAxY0pMVzdNOTlsTzNpZFlkVG9jMTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzljRDld UIwGcCqN9KRg4xLPCAeHYqU8H1nBjVxKHEsi7H5x6OyT6+bVwvk3N/4XdflyE1yB 4WSz6ky+DTajv+FSYlve+2JvRyjY24OU41oRCJWpHVHRzBw/SKE+hWEeBwjuHcBj XDX1jm7OSG1BGFpLeNN929HC4hD0CiIdtUa5KZ1FuV1Mz8BE0FI0lsXJp4G44UKv qdYROc42+pLcwHxD83ZJL0enfpRotOkMaHoPtpliK3Mv6RIgEO+QBz1/HEy9xbp5 iMyyliXg9oXAGBiIlMSni8v73s4uZAOwSIRlrv/aoAivN4q+XxjFabNqCmSMOIt5 wdK7eZY/zrtD6A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:57 2025 by rpki-client