This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft File: xEuito7PJQE5XMZUCOiTWsnYbJc.mft (raw, json) Hash identifier: D9pb/gyhGK2rzLFwK1F4mk54fQxjhJwkkIxB7Lx5emA= Subject key identifier: DB:82:E5:4B:32:AA:E7:01:40:8F:FC:0A:00:E5:8E:61:7F:55:0F:AD Authority key identifier: C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97 Certificate issuer: /CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97 Certificate serial: 019AF2097D99E51ADD76F3D19570191CD7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft Manifest number: 043C Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: xEuito7PJQE5XMZUCOiTWsnYbJc.crl (hash: oJ0ZiZi0NbFP+XHoehdWFU+QdY+Bgcg7+xTuAoogp08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7d:99:e5:1a:dd:76:f3:d1:95:70:19:1c:d7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44ba2b68ecf2501395cc65408e8935ac9d86c97 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=db82e54b32aae701408ffc0a00e58e617f550fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:ca:28:e3:b3:6f:9d:aa:95:13:30:f2:53: 0c:1c:18:26:77:ca:54:f5:ad:7f:4a:fd:9f:a0:9e: 17:f2:69:66:7a:73:16:74:4d:ea:1d:73:db:d2:5d: d5:0f:5b:e5:79:37:3e:93:2a:48:9b:66:0c:54:96: b4:af:20:09:f4:58:06:cb:ca:bb:c4:c1:6c:72:4a: cf:4d:ea:84:c9:b9:b0:ae:ed:5e:8b:63:dc:c5:b4: 6a:b0:0e:4c:6b:d4:76:c3:31:02:ba:6c:ab:28:30: 24:7c:90:2a:ec:af:49:ea:52:e8:63:cf:ee:0a:08: fe:8a:ee:0d:2a:83:8d:b0:14:c6:1b:bc:4b:93:a8: 0b:26:8b:5f:e6:e4:2d:4f:07:10:70:2b:41:9d:3c: 82:47:9b:85:fc:61:19:0d:78:24:c3:c3:4d:dc:86: 5a:95:43:f1:4f:d8:1a:87:30:d1:8a:64:6c:98:29: 6c:84:9c:3d:ee:45:4f:2c:a5:8e:91:9a:4f:a2:63: 21:f4:10:94:f7:80:b3:a2:3b:64:4e:d5:ce:b0:71: 3f:b6:c2:fc:db:4b:f3:54:d2:f4:31:08:5c:6e:ed: 0f:3e:50:29:e0:f2:48:9c:de:6f:33:50:4f:4f:c5: 8b:87:91:3c:0c:d5:3f:16:af:19:c8:eb:ad:21:c8: 72:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:82:E5:4B:32:AA:E7:01:40:8F:FC:0A:00:E5:8E:61:7F:55:0F:AD X509v3 Authority Key Identifier: keyid:C4:4B:A2:B6:8E:CF:25:01:39:5C:C6:54:08:E8:93:5A:C9:D8:6C:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xEuito7PJQE5XMZUCOiTWsnYbJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0a3944-1a69-4dd1-837b-ef579f2ad63a/1/xEuito7PJQE5XMZUCOiTWsnYbJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:06:3c:68:c9:dd:f0:76:da:e3:80:9e:5a:b4:e5:bb:25:2b: 2d:07:54:49:2f:28:fd:6e:93:03:24:bf:f1:17:c6:bd:75:5e: 10:a9:17:6b:d6:d3:61:61:2f:93:d6:b8:df:ee:08:25:59:fe: fa:93:ec:f7:48:b0:02:54:7a:66:41:f3:f5:ed:b5:ad:ff:33: e2:81:82:95:cf:1f:2c:58:6e:98:46:e1:3c:7c:b9:3f:41:6d: e1:78:bd:fc:97:02:5d:5b:19:16:01:42:e1:96:dd:45:a3:ac: f9:82:bf:d6:ea:1e:c9:50:a0:9c:d2:ee:28:db:63:2a:53:76: f4:56:bf:fb:56:32:20:18:27:0e:7a:2b:8b:f6:22:15:5b:6d: 77:bd:36:83:39:af:e1:e1:8c:99:12:ac:2b:84:09:cc:04:39: b9:fc:b0:47:06:ca:ac:48:c4:ca:c5:cd:84:79:37:aa:f3:59: 89:a2:e0:8e:5e:f2:42:0a:de:05:95:37:e9:ab:25:7a:f1:b5: 06:9e:eb:2e:f7:e5:8e:11:c4:0a:f6:cc:1a:ec:33:cd:7d:cc: fd:be:e5:c9:1d:a1:2f:30:d7:fc:fa:ec:30:bb:1b:c5:0f:c0: 62:f6:5d:92:9c:d1:2c:44:96:fd:c5:69:3a:62:1e:f8:9a:fd: 5c:39:a3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCX2Z5RrddvPRlXAZHNe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGJhMmI2OGVjZjI1MDEzOTVjYzY1NDA4ZTg5MzVhYzlk ODZjOTcwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EyhkYjgyZTU0YjMyYWFlNzAxNDA4ZmZjMGEwMGU1OGU2MTdmNTUwZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP7KKOOzb52qlRMw8lMMHBgmd8pU 9a1/Sv2foJ4X8mlmenMWdE3qHXPb0l3VD1vleTc+kypIm2YMVJa0ryAJ9FgGy8q7 xMFsckrPTeqEybmwru1ei2PcxbRqsA5Ma9R2wzECumyrKDAkfJAq7K9J6lLoY8/u Cgj+iu4NKoONsBTGG7xLk6gLJotf5uQtTwcQcCtBnTyCR5uF/GEZDXgkw8NN3IZa lUPxT9gahzDRimRsmClshJw97kVPLKWOkZpPomMh9BCU94CzojtkTtXOsHE/tsL8 20vzVNL0MQhcbu0PPlAp4PJInN5vM1BPT8WLh5E8DNU/Fq8ZyOutIchy1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuC5UsyqucBQI/8CgDljmF/VQ+tMB8GA1UdIwQY MBaAFMRLoraOzyUBOVzGVAjok1rJ2GyXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wYTM5NDQtMWE2OS00ZGQxLTgzN2It ZWY1NzlmMmFkNjNhLzEveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wYTM5NDQtMWE2OS00ZGQxLTgzN2ItZWY1NzlmMmFkNjNh LzEveEV1aXRvN1BKUUU1WE1aVUNPaVRXc25ZYkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATgY8aMnd 8Hba44CeWrTluyUrLQdUSS8o/W6TAyS/8RfGvXVeEKkXa9bTYWEvk9a43+4IJVn+ +pPs90iwAlR6ZkHz9e21rf8z4oGClc8fLFhumEbhPHy5P0Ft4Xi9/JcCXVsZFgFC 4ZbdRaOs+YK/1uoeyVCgnNLuKNtjKlN29Fa/+1YyIBgnDnori/YiFVttd702gzmv 4eGMmRKsK4QJzAQ5ufywRwbKrEjEysXNhHk3qvNZiaLgjl7yQgreBZU36aslevG1 Bp7rLvfljhHECvbMGuwzzX3M/b7lyR2hLzDX/PrsMLsbxQ/AYvZdkpzRLESW/cVp OmIe+Jr9XDmj/A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:17 2025 by rpki-client