This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft File: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft (raw, json) Hash identifier: HgwneYqumYqmIXueLghMtNgcAilv8AqfiZVD52w/ufs= Subject key identifier: 2C:5E:97:22:71:31:F3:60:EF:BD:2B:00:51:21:2A:E3:EC:FA:47:94 Authority key identifier: 5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA Certificate issuer: /CN=5e6d2c2b69c24851623bf91476902635a4ce09ea Certificate serial: 019AF38912840AF03FFBCDFBF184C74AF2C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl (hash: Xatx32WmGgawzPJsRMpkpxiSOBYdLGKvuDPEJ6vCQQU=) 2: b2qcws1yCmD6AFlTLFciLaL0rpc.roa (hash: Rv3+U639/BXH8ADZzkpPGvsw+vziwnjLXX+TiB3flx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:12:84:0a:f0:3f:fb:cd:fb:f1:84:c7:4a:f2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6d2c2b69c24851623bf91476902635a4ce09ea Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=2c5e97227131f360efbd2b0051212ae3ecfa4794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:87:13:fb:1d:1b:c3:2c:37:9d:28:ab:89: 4a:9c:91:a5:b2:86:c2:aa:10:72:7f:50:4d:ad:b3: db:c3:64:79:20:ac:a3:8a:2b:77:7c:38:d7:83:df: 15:8a:e5:f8:1a:76:b1:1b:25:03:1d:eb:c0:b3:a3: ca:1d:07:76:9a:12:d3:3f:48:92:bf:38:f7:33:d8: 39:6f:ab:10:35:49:1f:ea:4b:64:3a:6f:f1:a9:c6: 08:be:bf:f2:aa:76:0e:e3:06:c1:0e:91:53:2a:a3: 78:42:e4:5b:f0:a6:61:24:5c:34:5f:da:01:5e:a3: 3b:b6:d1:dc:b7:78:ac:1f:79:ab:75:62:8f:88:82: 6b:e7:c3:83:02:af:d0:b8:c9:d1:e4:85:5f:8a:71: 69:72:54:1e:63:46:61:90:30:25:8a:c2:2f:33:e8: f9:73:9d:8a:63:1e:19:eb:dd:6f:d3:f4:b4:00:e3: c5:a5:91:08:cc:5f:8d:a0:3a:82:1d:0e:d3:a5:99: 4e:a6:3b:ae:2e:13:51:f8:59:37:e0:49:54:82:89: bc:90:6a:87:17:4b:25:f2:c8:8b:73:69:03:73:10: 31:b2:34:4e:0e:2a:4a:6f:5f:a7:f0:58:a5:22:66: c5:5b:c3:de:80:2c:76:f3:4d:eb:b6:30:e9:88:3a: ae:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5E:97:22:71:31:F3:60:EF:BD:2B:00:51:21:2A:E3:EC:FA:47:94 X509v3 Authority Key Identifier: keyid:5E:6D:2C:2B:69:C2:48:51:62:3B:F9:14:76:90:26:35:A4:CE:09:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/38a401-f27b-497a-bbfa-e7bb50bc081b/1/Xm0sK2nCSFFiO_kUdpAmNaTOCeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f3:1b:88:3a:61:02:88:d1:26:cd:90:a6:8c:ca:b8:21:01: 74:b0:ce:a6:e8:7d:ed:a9:5e:08:e5:09:f6:63:da:1c:20:ba: ae:70:16:51:d3:90:af:35:88:2f:72:62:61:a6:65:25:b3:44: 71:c8:a1:fd:52:0e:55:c9:00:6e:7c:3a:b8:6d:1d:89:bd:74: 39:de:f0:d0:4c:3a:34:77:d9:11:d6:5a:d8:97:5b:1f:ca:1e: 0c:87:0f:8b:dc:a1:14:9e:2e:42:ab:53:13:01:3b:f6:5a:62: 79:89:9a:90:64:eb:bf:fb:d8:6b:72:2c:45:6f:2c:6e:7a:5b: a2:ee:14:26:8e:be:a5:dd:1d:1d:b9:ca:69:01:04:d7:9c:46: 23:e6:a0:d0:6f:76:ff:42:6b:37:c0:da:f1:ec:5a:5b:44:b3: 88:39:2f:a2:43:b9:de:71:ed:d9:fb:28:c6:80:8b:e5:48:0b: a0:74:13:99:d8:02:e6:83:f6:da:03:0c:86:95:7a:b7:76:00: 61:3a:e0:de:0f:1d:b8:99:2e:48:97:2a:96:32:2d:23:24:31: a3:57:8e:1d:4c:66:d4:bc:91:ed:80:57:90:35:ad:6d:23:e6: 94:a5:05:01:bf:7a:db:94:a4:3e:37:cc:a4:6a:0b:04:f8:e8: 6c:94:84:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRKECvA/+8378YTHSvLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmQyYzJiNjljMjQ4NTE2MjNiZjkxNDc2OTAyNjM1YTRj ZTA5ZWEwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD EygyYzVlOTcyMjcxMzFmMzYwZWZiZDJiMDA1MTIxMmFlM2VjZmE0Nzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwiHE/sdG8MsN50oq4lKnJGlsobC qhByf1BNrbPbw2R5IKyjiit3fDjXg98ViuX4GnaxGyUDHevAs6PKHQd2mhLTP0iS vzj3M9g5b6sQNUkf6ktkOm/xqcYIvr/yqnYO4wbBDpFTKqN4QuRb8KZhJFw0X9oB XqM7ttHct3isH3mrdWKPiIJr58ODAq/QuMnR5IVfinFpclQeY0ZhkDAlisIvM+j5 c52KYx4Z691v0/S0AOPFpZEIzF+NoDqCHQ7TpZlOpjuuLhNR+Fk34ElUgom8kGqH F0sl8siLc2kDcxAxsjRODipKb1+n8FilImbFW8PegCx2803rtjDpiDquLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxelyJxMfNg770rAFEhKuPs+keUMB8GA1UdIwQY MBaAFF5tLCtpwkhRYjv5FHaQJjWkzgnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEt ZTdiYjUwYmMwODFiLzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8zOGE0MDEtZjI3Yi00OTdhLWJiZmEtZTdiYjUwYmMwODFi LzEvWG0wc0sybkNTRkZpT19rVWRwQW1OYVRPQ2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/MbiDph AojRJs2QpozKuCEBdLDOpuh97aleCOUJ9mPaHCC6rnAWUdOQrzWIL3JiYaZlJbNE ccih/VIOVckAbnw6uG0dib10Od7w0Ew6NHfZEdZa2JdbH8oeDIcPi9yhFJ4uQqtT EwE79lpieYmakGTrv/vYa3IsRW8sbnpbou4UJo6+pd0dHbnKaQEE15xGI+ag0G92 /0JrN8Da8exaW0SziDkvokO53nHt2fsoxoCL5UgLoHQTmdgC5oP22gMMhpV6t3YA YTrg3g8duJkuSJcqljItIyQxo1eOHUxm1LyR7YBXkDWtbSPmlKUFAb9625SkPjfM pGoLBPjobJSE1g== -----END CERTIFICATE-----Generated at Sat Dec 6 16:40:39 2025 by rpki-client