This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft File: xM-i_E8u6evIO-eTZrCulNHyv8c.mft (raw, json) Hash identifier: 9/gpUwlB0kf+5OCBpKPEjFiuXyTrXklVQ49CodChnRg= Subject key identifier: B6:3E:77:29:DB:5F:75:E3:09:84:48:2B:EE:84:60:6C:6A:90:14:8B Authority key identifier: C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 Certificate issuer: /CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7 Certificate serial: 019AF208C2CC48A7541B7961EE2BA842436B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft Manifest number: 07C0 Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: xM-i_E8u6evIO-eTZrCulNHyv8c.crl (hash: 4hMaxBojlOtfFT+f1s+SLg0xF+fT+UJI4zxtVbkaxUU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c2:cc:48:a7:54:1b:79:61:ee:2b:a8:42:43:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4cfa2fc4f2ee9ebc83be79366b0ae94d1f2bfc7 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=b63e7729db5f75e30984482bee84606c6a90148b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:eb:fc:09:ff:6b:dd:f5:c3:e5:43:ca:34: 98:2b:f3:82:13:f5:64:f2:b6:8e:46:e3:ad:0e:e7: 00:00:e5:46:48:31:b9:74:bf:29:6e:4e:51:b7:ba: 36:87:8f:fb:e1:db:d6:43:2d:b3:29:ea:7e:e1:3e: 8b:e7:5f:01:da:f7:4a:11:38:3b:05:ee:e9:ec:a3: 2c:91:99:52:4d:04:33:7f:28:8c:08:ef:ed:21:8b: 89:90:01:7f:a4:bd:34:d8:66:2b:d3:48:75:f4:7b: d5:f6:54:ef:de:5f:e4:99:3e:eb:6d:df:ba:e5:20: ce:dc:57:fa:4a:15:3b:cd:84:5f:63:0c:e3:c3:99: 86:f5:d9:6d:c6:3d:79:94:84:a3:48:e5:60:e8:ea: e2:52:2e:2a:69:40:8d:3c:37:0b:2b:cc:95:7b:88: 35:fd:d1:f0:82:d5:6b:a5:59:3f:f1:03:23:46:67: c2:6f:bb:63:3a:24:84:1b:bb:f4:b8:c7:62:82:34: 97:a0:e3:3b:f0:7b:58:1e:be:d6:f6:82:ab:a9:f5: 3b:38:5d:00:5d:43:46:82:1a:f5:ef:a6:26:40:38: 9c:b8:99:c3:50:87:1c:6f:3f:74:b7:4b:ea:ec:a1: e5:01:c9:0e:9c:8b:eb:fb:5b:a1:90:4d:48:5d:84: 51:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3E:77:29:DB:5F:75:E3:09:84:48:2B:EE:84:60:6C:6A:90:14:8B X509v3 Authority Key Identifier: keyid:C4:CF:A2:FC:4F:2E:E9:EB:C8:3B:E7:93:66:B0:AE:94:D1:F2:BF:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM-i_E8u6evIO-eTZrCulNHyv8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4396c2-8ed1-432e-99fb-7c573b6e00ea/1/xM-i_E8u6evIO-eTZrCulNHyv8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2f:51:63:cc:c5:85:4c:9f:8d:97:3f:4a:9f:d6:6e:a5:b1: bf:6f:ba:fd:fb:79:40:4a:44:e3:77:71:1e:ed:1b:07:2b:39: 9c:18:53:27:ec:9a:d6:f6:bb:65:01:7a:0c:f5:db:00:c1:0a: 79:d9:28:8e:8f:ec:08:8e:a7:d0:57:b5:3c:e8:b4:7d:4e:37: cc:4e:a6:17:3e:c9:ef:c5:8b:9f:2f:c9:f9:e0:11:4c:57:fd: 5f:1b:39:4a:c2:97:9f:1c:47:8e:4f:18:a1:e8:f7:c5:62:bd: 52:82:08:08:b2:0c:2c:17:4c:bf:1d:71:19:b9:28:9a:94:13: e6:e7:27:35:44:13:2a:d5:06:9c:7a:4a:85:4a:6a:ed:5b:74: f8:5c:30:23:be:a4:de:38:74:4d:64:9c:58:e0:ab:0c:23:50: 0e:df:db:1a:ab:cc:bf:8e:fe:31:21:fd:7e:c2:62:63:dd:51: 98:d8:ba:35:51:6d:eb:df:50:4b:c1:56:89:ae:c6:40:45:5a: c4:30:dd:92:e1:e9:19:69:56:53:5d:79:e1:ed:15:97:5b:66: 69:b8:d0:e8:18:00:e4:6e:1e:42:32:38:17:95:60:cc:28:ce: 7f:b9:29:1a:e1:df:ae:73:71:3f:55:ad:2e:63:a3:80:cf:dd: 51:05:59:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMLMSKdUG3lh7iuoQkNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Y2ZhMmZjNGYyZWU5ZWJjODNiZTc5MzY2YjBhZTk0ZDFm MmJmYzcwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD EyhiNjNlNzcyOWRiNWY3NWUzMDk4NDQ4MmJlZTg0NjA2YzZhOTAxNDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Pr/An/a931w+VDyjSYK/OCE/Vk 8raORuOtDucAAOVGSDG5dL8pbk5Rt7o2h4/74dvWQy2zKep+4T6L518B2vdKETg7 Be7p7KMskZlSTQQzfyiMCO/tIYuJkAF/pL002GYr00h19HvV9lTv3l/kmT7rbd+6 5SDO3Ff6ShU7zYRfYwzjw5mG9dltxj15lISjSOVg6OriUi4qaUCNPDcLK8yVe4g1 /dHwgtVrpVk/8QMjRmfCb7tjOiSEG7v0uMdigjSXoOM78HtYHr7W9oKrqfU7OF0A XUNGghr176YmQDicuJnDUIccbz90t0vq7KHlAckOnIvr+1uhkE1IXYRRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY+dynbX3XjCYRIK+6EYGxqkBSLMB8GA1UdIwQY MBaAFMTPovxPLunryDvnk2awrpTR8r/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmIt N2M1NzNiNmUwMGVhLzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS80Mzk2YzItOGVkMS00MzJlLTk5ZmItN2M1NzNiNmUwMGVh LzEveE0taV9FOHU2ZXZJTy1lVFpyQ3VsTkh5djhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi9RY8zF hUyfjZc/Sp/WbqWxv2+6/ft5QEpE43dxHu0bBys5nBhTJ+ya1va7ZQF6DPXbAMEK edkojo/sCI6n0Fe1POi0fU43zE6mFz7J78WLny/J+eARTFf9Xxs5SsKXnxxHjk8Y oej3xWK9UoIICLIMLBdMvx1xGbkompQT5ucnNUQTKtUGnHpKhUpq7Vt0+FwwI76k 3jh0TWScWOCrDCNQDt/bGqvMv47+MSH9fsJiY91RmNi6NVFt699QS8FWia7GQEVa xDDdkuHpGWlWU1154e0Vl1tmabjQ6BgA5G4eQjI4F5VgzCjOf7kpGuHfrnNxP1Wt LmOjgM/dUQVZtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:24 2025 by rpki-client