This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft File: XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft (raw, json) Hash identifier: qalF2xyCC7i5H2SBbyCipRKBR822AZ598kkI1mJIRt4= Subject key identifier: AE:25:C3:3D:33:E6:0B:78:95:1A:3A:47:84:74:71:70:BD:CB:0F:21 Authority key identifier: 5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 Certificate issuer: /CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55 Certificate serial: 019AF509C9B58D52AA002F303D024ABBB27B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 19:00:50 +0000 Manifest this update: Sat 06 Dec 2025 19:00:50 +0000 Manifest next update: Sun 07 Dec 2025 19:00:50 +0000 Files and hashes: 1: XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl (hash: lD+5cApBJiwHiZ+yVthujvD58S102YsyCf9nlZumnrg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:c9:b5:8d:52:aa:00:2f:30:3d:02:4a:bb:b2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecaa447f09bcb0ddf8afc10c73e8e91bbf08e55 Validity Not Before: Dec 6 19:00:50 2025 GMT Not After : Dec 7 19:00:50 2025 GMT Subject: CN=ae25c33d33e60b78951a3a4784747170bdcb0f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:a8:dd:98:14:ba:74:49:6a:bb:dc:c8:70: ed:81:e3:da:08:0b:ec:bf:6b:7a:31:fb:64:66:42: 99:eb:48:91:bb:12:ee:ae:7a:5e:22:23:5e:38:07: 99:10:4f:3c:f3:fc:9c:a3:ac:08:46:d7:39:65:3d: c6:a5:9b:aa:cf:d8:fb:24:fe:6a:c8:fa:6c:f9:28: fb:76:a2:10:93:d5:ab:8b:e6:29:6a:53:89:d3:2c: 32:f6:0b:18:07:ea:2f:0c:12:f3:6f:6b:a0:b0:f8: 0d:1a:34:a0:71:83:0e:44:40:76:ce:82:0d:36:fb: 67:bd:7d:64:de:2b:b4:6e:5b:e0:ac:d1:b9:4e:35: 25:7a:11:ef:57:df:9a:ee:ba:e5:91:cf:e7:5b:67: db:9b:dc:e5:9f:f7:46:68:58:65:73:15:03:f2:1e: 3a:b9:95:cb:3f:c9:37:b7:6a:7c:c5:cf:25:f4:b9: 93:b7:0b:23:b9:3c:86:66:99:53:fa:b5:ae:86:01: 18:04:85:a4:a6:28:a6:52:7b:97:8c:7a:cc:8c:ff: 16:44:c8:4b:16:bc:e1:ea:ae:21:ba:60:fd:ab:e7: e7:e8:f4:d5:78:20:17:1a:88:bd:dd:fb:69:ac:6e: ae:d8:fe:bd:dc:b3:e2:23:07:bd:4b:7e:1a:d0:c6: 0a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:25:C3:3D:33:E6:0B:78:95:1A:3A:47:84:74:71:70:BD:CB:0F:21 X509v3 Authority Key Identifier: keyid:5E:CA:A4:47:F0:9B:CB:0D:DF:8A:FC:10:C7:3E:8E:91:BB:F0:8E:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsqkR_Cbyw3fivwQxz6OkbvwjlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e428da-0c18-4489-8ed2-93c44ac8414e/1/XsqkR_Cbyw3fivwQxz6OkbvwjlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:7e:2b:e6:36:5e:9a:69:d5:cc:f7:36:16:40:90:08:3a:de: 17:d2:40:34:56:cf:46:4d:1d:03:55:a5:79:5d:4f:dc:37:82: 5f:fa:19:a6:0e:81:69:ca:82:bc:ba:fe:d5:50:83:22:ba:64: 51:bc:05:65:aa:5b:e5:e7:99:30:2f:e9:3b:15:3f:5a:11:98: 23:bc:49:1f:dc:e0:1f:a6:2c:05:bc:d8:22:1e:64:93:4c:6c: 8c:11:9b:13:77:89:d9:8a:93:f7:64:80:da:e7:df:7b:0d:a8: b4:ce:0e:ec:85:e4:7f:61:cb:9e:da:84:bd:eb:e5:e3:ca:c9: 65:6f:98:4f:20:65:21:16:2c:8b:9c:f7:23:d2:7b:eb:6e:74: 66:7e:1c:d0:79:02:8e:84:7d:0f:e1:6d:71:4f:1b:9c:d0:68: f3:f9:11:66:97:b7:a0:fd:fa:b1:3e:e2:d0:a0:17:09:c0:be: 68:c7:82:b3:dc:44:b8:eb:d7:c7:ea:57:aa:8c:6a:2a:9e:87: 4c:dc:aa:fe:8e:e1:8c:0f:00:b5:c8:2f:8a:bc:a9:a1:01:31: a8:76:5c:0f:16:e1:82:1e:46:3d:35:63:b3:8a:d8:fe:5b:8c: 74:44:37:73:90:b6:79:50:5c:da:94:1d:f1:2e:cd:d9:5e:5d: 50:80:66:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ccm1jVKqAC8wPQJKu7J7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlY2FhNDQ3ZjA5YmNiMGRkZjhhZmMxMGM3M2U4ZTkxYmJm MDhlNTUwHhcNMjUxMjA2MTkwMDUwWhcNMjUxMjA3MTkwMDUwWjAzMTEwLwYDVQQD EyhhZTI1YzMzZDMzZTYwYjc4OTUxYTNhNDc4NDc0NzE3MGJkY2IwZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qmo3ZgUunRJarvcyHDtgePaCAvs v2t6MftkZkKZ60iRuxLurnpeIiNeOAeZEE888/yco6wIRtc5ZT3GpZuqz9j7JP5q yPps+Sj7dqIQk9Wri+YpalOJ0ywy9gsYB+ovDBLzb2ugsPgNGjSgcYMOREB2zoIN NvtnvX1k3iu0blvgrNG5TjUlehHvV9+a7rrlkc/nW2fbm9zln/dGaFhlcxUD8h46 uZXLP8k3t2p8xc8l9LmTtwsjuTyGZplT+rWuhgEYBIWkpiimUnuXjHrMjP8WRMhL Frzh6q4humD9q+fn6PTVeCAXGoi93ftprG6u2P693LPiIwe9S34a0MYKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4lwz0z5gt4lRo6R4R0cXC9yw8hMB8GA1UdIwQY MBaAFF7KpEfwm8sN34r8EMc+jpG78I5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDIt OTNjNDRhYzg0MTRlLzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lNDI4ZGEtMGMxOC00NDg5LThlZDItOTNjNDRhYzg0MTRl LzEvWHNxa1JfQ2J5dzNmaXZ3UXh6Nk9rYnZ3amxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtX4r5jZe mmnVzPc2FkCQCDreF9JANFbPRk0dA1WleV1P3DeCX/oZpg6BacqCvLr+1VCDIrpk UbwFZapb5eeZMC/pOxU/WhGYI7xJH9zgH6YsBbzYIh5kk0xsjBGbE3eJ2YqT92SA 2uffew2otM4O7IXkf2HLntqEvevl48rJZW+YTyBlIRYsi5z3I9J76250Zn4c0HkC joR9D+FtcU8bnNBo8/kRZpe3oP36sT7i0KAXCcC+aMeCs9xEuOvXx+pXqoxqKp6H TNyq/o7hjA8AtcgvirypoQExqHZcDxbhgh5GPTVjs4rY/luMdEQ3c5C2eVBc2pQd 8S7N2V5dUIBmvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:11:54 2025 by rpki-client