This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft File: xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json) Hash identifier: m2a75vYCWvaxBCARmws1vZ9mdcbEWCYDNpfCAduv6Tg= Subject key identifier: A1:56:9E:26:C2:9D:F1:41:C7:F2:52:CA:26:B0:17:51:55:FA:DD:25 Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C Certificate issuer: /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c Certificate serial: 019AF2091B10D5FEA9A5180343B666454FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft Manifest number: 1262 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: iAh1IniT41wafvJ29TshWqBzIvXKLaTvDd+YIDQqp8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1b:10:d5:fe:a9:a5:18:03:43:b6:66:45:4f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=a1569e26c29df141c7f252ca26b0175155fadd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:49:97:38:1c:77:81:39:c4:bd:98:83:60: 6c:71:be:5f:61:90:48:fd:e2:63:11:ad:bd:a1:9e: 70:e6:e8:55:7e:65:aa:fc:50:02:04:75:57:7e:6c: 88:8a:88:62:ff:56:45:5d:d4:8b:97:ee:c3:48:51: 68:5a:55:5d:8b:72:5d:ad:c1:f3:6f:0f:5a:1a:3d: 7d:ea:24:3f:3e:ac:2b:5c:b1:97:3f:77:64:11:5f: 85:f7:8b:40:bd:fd:d6:d5:39:63:6d:4b:6d:17:35: 4b:e5:1a:52:b0:a3:a4:50:4b:ca:73:5b:cd:b9:e3: dd:e5:ff:f4:6a:3d:b9:eb:1b:19:1e:28:f5:5b:23: 79:11:19:56:e0:cd:61:4e:4f:28:5e:a3:e6:27:ff: 7a:73:71:65:e1:ba:38:63:07:bb:e7:af:d9:5a:a4: 4e:e9:39:55:6a:39:81:00:4f:c6:26:a8:5e:6b:61: e3:bd:bb:e3:79:33:f6:9b:50:9a:c8:6f:a8:00:db: 44:50:28:97:8d:eb:e7:2a:87:cc:cc:28:19:32:d8: 1c:a3:26:63:20:0b:c3:72:f3:94:81:b6:e4:33:66: fe:c4:0b:c4:2c:3d:ec:f1:65:4e:9f:88:ec:38:bd: b3:24:05:d6:8f:03:c3:9d:8c:46:eb:fc:b3:05:19: de:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:56:9E:26:C2:9D:F1:41:C7:F2:52:CA:26:B0:17:51:55:FA:DD:25 X509v3 Authority Key Identifier: keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:30:f0:62:5a:d5:2d:30:7f:3c:1a:f2:db:c7:d3:ec:c2:c0: a7:ac:71:91:64:6e:66:5b:90:d6:89:35:81:42:aa:f9:b7:e6: 0b:d1:2b:a0:6d:53:51:52:e0:2f:6a:21:db:ea:da:47:5b:9a: f1:70:e2:d9:6c:3b:a9:5f:24:6c:bb:6a:d7:c0:74:94:ca:36: c6:75:cd:2d:42:7e:2f:22:a3:4d:07:3f:55:8e:b1:2b:45:a5: 6b:d7:6b:48:90:5c:cf:fd:c6:f0:45:7e:ca:15:59:56:d3:6f: 66:45:d9:a6:19:f8:4a:66:eb:9d:71:a8:96:20:64:98:ed:07: 07:61:6a:02:f5:18:e2:5c:51:30:be:79:0c:a7:71:cd:5d:28: e5:7d:a0:d1:7a:32:ec:53:cd:b9:83:95:76:88:9d:fe:32:92: 37:33:ae:c0:80:f8:29:16:fd:96:b2:39:b5:0c:98:a8:15:18: ad:4c:45:11:f0:ec:9b:9d:87:9f:2b:ac:cc:fd:97:6a:f4:6f: dd:bf:37:4b:cc:f7:a1:79:e3:2c:2f:13:25:b6:2d:9f:f3:0d: 72:7c:56:e6:11:9f:32:98:35:31:84:28:f9:a3:45:ac:14:e3: 08:b4:88:b7:fc:a2:5b:a1:ce:52:96:a0:98:af:43:ac:24:7f: b0:05:f1:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRsQ1f6ppRgDQ7ZmRU+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmZiNjEwNTNiYTJkYWJjNTE3MTViMGY1M2NkN2I2Yjk0 NTRkMGMwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhhMTU2OWUyNmMyOWRmMTQxYzdmMjUyY2EyNmIwMTc1MTU1ZmFkZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnxJlzgcd4E5xL2Yg2Bscb5fYZBI /eJjEa29oZ5w5uhVfmWq/FACBHVXfmyIiohi/1ZFXdSLl+7DSFFoWlVdi3JdrcHz bw9aGj196iQ/PqwrXLGXP3dkEV+F94tAvf3W1TljbUttFzVL5RpSsKOkUEvKc1vN uePd5f/0aj256xsZHij1WyN5ERlW4M1hTk8oXqPmJ/96c3Fl4bo4Ywe756/ZWqRO 6TlVajmBAE/GJqhea2HjvbvjeTP2m1CayG+oANtEUCiXjevnKofMzCgZMtgcoyZj IAvDcvOUgbbkM2b+xAvELD3s8WVOn4jsOL2zJAXWjwPDnYxG6/yzBRneDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFWnibCnfFBx/JSyiawF1FV+t0lMB8GA1UdIwQY MBaAFMQvthBTui2rxRcVsPU817a5RU0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjIt OGYxMWY2Mjc1YWFmLzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mNzYzNmEtNWUwYy00MGIwLWIwYjItOGYxMWY2Mjc1YWFm LzEveEMtMkVGTzZMYXZGRnhXdzlUelh0cmxGVFF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizDwYlrV LTB/PBry28fT7MLAp6xxkWRuZluQ1ok1gUKq+bfmC9EroG1TUVLgL2oh2+raR1ua 8XDi2Ww7qV8kbLtq18B0lMo2xnXNLUJ+LyKjTQc/VY6xK0Wla9drSJBcz/3G8EV+ yhVZVtNvZkXZphn4SmbrnXGoliBkmO0HB2FqAvUY4lxRML55DKdxzV0o5X2g0Xoy 7FPNuYOVdoid/jKSNzOuwID4KRb9lrI5tQyYqBUYrUxFEfDsm52HnyuszP2XavRv 3b83S8z3oXnjLC8TJbYtn/MNcnxW5hGfMpg1MYQo+aNFrBTjCLSIt/yiW6HOUpag mK9DrCR/sAXxvg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:20 2025 by rpki-client