This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft File: xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft (raw, json) Hash identifier: c6Xq7OUNWEwCoTo5dV1O6PW4HaY1K73BmCcKuE6UH3g= Subject key identifier: 32:EF:DC:0E:DB:A9:09:62:56:4B:D7:A5:ED:7D:84:0B:1A:9F:44:8A Authority key identifier: C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 Certificate issuer: /CN=c42490e6980b79fa4ab17e5f657371da66c36af4 Certificate serial: 019AF19B6B24415DE74A8B8CCB1BFD19E9ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft Manifest number: 047B Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl (hash: lqXYkIjWQQ8tCIbFD/Pv6HGytc8q9tvgGzjE0PyQUi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6b:24:41:5d:e7:4a:8b:8c:cb:1b:fd:19:e9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42490e6980b79fa4ab17e5f657371da66c36af4 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=32efdc0edba90962564bd7a5ed7d840b1a9f448a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:63:20:cf:22:c2:88:47:43:3e:72:91:f3:5f: 93:49:f0:fc:9d:d1:5f:04:4b:a5:5d:4f:ef:24:6e: 99:01:59:b4:52:da:3b:5a:a8:78:21:c9:90:b7:78: 30:8b:81:01:f1:9f:61:84:d0:02:57:71:f3:23:eb: 59:cd:87:a9:e7:df:31:67:45:6c:0e:a9:17:6a:ee: ca:b3:1b:f7:f4:49:53:7b:a0:e8:51:2f:a9:08:86: aa:08:61:9f:66:b2:68:fa:61:d1:a2:68:8b:91:50: db:0f:87:a4:4b:ff:d5:2c:96:2c:06:fa:16:7d:28: 15:c9:37:1b:40:bd:72:5d:46:f3:b0:28:f2:33:75: 1b:5b:fb:ed:fc:ab:32:b9:be:4b:65:1f:85:da:1b: 3a:b4:0a:13:a0:cd:b3:29:46:48:42:5a:cb:77:14: 6d:4a:36:46:ce:1a:bc:b3:c4:73:8b:02:c2:d8:55: 72:ea:a2:40:53:f2:a5:ab:57:0d:64:47:8f:42:b3: ab:c8:fe:64:55:a8:70:30:a1:2b:e4:8b:c4:3a:f0: 4d:c1:16:26:4b:47:1c:39:88:d3:37:45:14:3e:21: 9d:71:05:23:18:e7:3e:8d:30:58:84:52:73:41:53: 08:97:bd:8c:fc:0d:95:44:27:57:ad:ff:d4:53:92: e1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:DC:0E:DB:A9:09:62:56:4B:D7:A5:ED:7D:84:0B:1A:9F:44:8A X509v3 Authority Key Identifier: keyid:C4:24:90:E6:98:0B:79:FA:4A:B1:7E:5F:65:73:71:DA:66:C3:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCSQ5pgLefpKsX5fZXNx2mbDavQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/798da8-a0ba-488c-9184-58c189c6efed/1/xCSQ5pgLefpKsX5fZXNx2mbDavQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:51:84:3e:e5:7d:20:86:12:7b:72:16:42:ca:52:df:a2:c4: 84:45:fd:5b:0c:c9:8e:41:ca:d9:40:ba:1a:28:dd:df:4e:d0: c6:01:71:8c:f7:69:e2:85:11:0c:fc:b3:7c:82:b7:c2:c9:3b: 3c:b4:5a:6f:1c:6e:c1:d5:35:9c:ce:8e:30:0a:ba:00:7b:87: c6:c5:72:b1:c4:a1:b2:d1:fe:c0:e3:29:d4:97:cf:d6:9b:c3: c3:0e:10:7c:8a:c2:bc:0b:7d:b2:0a:20:6d:34:b8:a6:02:90: 4b:7e:e9:f6:f4:10:4d:c4:ce:ca:63:76:55:d9:28:44:88:93: 2f:1c:1c:58:00:72:fc:e3:98:ae:40:01:83:dc:78:f2:89:94: 21:56:16:ef:d6:c4:4d:76:da:d0:20:39:94:a0:cc:2a:e2:ad: 45:b3:cc:14:ce:d9:46:8f:55:50:29:f9:53:1b:10:08:93:4c: 18:f4:54:fc:c4:4b:aa:50:54:1d:1c:e8:ca:6a:1a:df:c6:d2: 44:07:a4:d7:21:15:e2:a7:02:1e:7b:5d:54:a8:24:6e:ff:b6: 45:10:11:91:da:5e:6d:f3:66:18:f8:1e:aa:54:6a:7c:1d:5b: ec:31:63:98:a2:a3:50:34:7e:17:a1:92:b7:c3:cf:66:fb:88: d4:fd:b7:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2skQV3nSouMyxv9GentMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjQ5MGU2OTgwYjc5ZmE0YWIxN2U1ZjY1NzM3MWRhNjZj MzZhZjQwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD EygzMmVmZGMwZWRiYTkwOTYyNTY0YmQ3YTVlZDdkODQwYjFhOWY0NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WMgzyLCiEdDPnKR81+TSfD8ndFf BEulXU/vJG6ZAVm0Uto7Wqh4IcmQt3gwi4EB8Z9hhNACV3HzI+tZzYep598xZ0Vs DqkXau7Ksxv39ElTe6DoUS+pCIaqCGGfZrJo+mHRomiLkVDbD4ekS//VLJYsBvoW fSgVyTcbQL1yXUbzsCjyM3UbW/vt/Ksyub5LZR+F2hs6tAoToM2zKUZIQlrLdxRt SjZGzhq8s8RziwLC2FVy6qJAU/Klq1cNZEePQrOryP5kVahwMKEr5IvEOvBNwRYm S0ccOYjTN0UUPiGdcQUjGOc+jTBYhFJzQVMIl72M/A2VRCdXrf/UU5LhFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLv3A7bqQliVkvXpe19hAsan0SKMB8GA1UdIwQY MBaAFMQkkOaYC3n6SrF+X2Vzcdpmw2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQt NThjMTg5YzZlZmVkLzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni83OThkYTgtYTBiYS00ODhjLTkxODQtNThjMTg5YzZlZmVk LzEveENTUTVwZ0xlZnBLc1g1ZlpYTngybWJEYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2FGEPuV9 IIYSe3IWQspS36LEhEX9WwzJjkHK2UC6Gijd307QxgFxjPdp4oURDPyzfIK3wsk7 PLRabxxuwdU1nM6OMAq6AHuHxsVyscShstH+wOMp1JfP1pvDww4QfIrCvAt9sgog bTS4pgKQS37p9vQQTcTOymN2VdkoRIiTLxwcWABy/OOYrkABg9x48omUIVYW79bE TXba0CA5lKDMKuKtRbPMFM7ZRo9VUCn5UxsQCJNMGPRU/MRLqlBUHRzoymoa38bS RAek1yEV4qcCHntdVKgkbv+2RRARkdpebfNmGPgeqlRqfB1b7DFjmKKjUDR+F6GS t8PPZvuI1P23+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:48 2025 by rpki-client