This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json) Hash identifier: errsghoa2WRhDjlnOB+hCsBsQTJFM52U1vkFYr4kbIk= Subject key identifier: 13:F5:D0:E8:86:FA:07:04:33:68:3E:9F:72:7E:10:D0:E1:27:80:3B Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33 Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933 Certificate serial: 019AF19A988B304EB5A00115A079F51338E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: qTxp4J3zRR29+cJqK52r5ZoFk6ZFonaYhPZCdn2DUyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:98:8b:30:4e:b5:a0:01:15:a0:79:f5:13:38:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=13f5d0e886fa070433683e9f727e10d0e127803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:e2:32:4e:02:f8:5d:5f:91:47:6a:b1:e1: a0:4d:d3:b3:37:f3:46:58:35:d1:8d:b2:13:a5:9e: 27:4b:98:21:a2:1d:08:86:f1:4a:5b:b9:29:0b:70: 30:9a:a1:a4:51:01:45:e0:d7:31:99:4c:7c:e7:84: 55:51:fb:d1:41:37:59:24:fc:9a:fa:c0:8d:7d:80: 88:9f:ee:2e:92:a1:1f:91:cb:56:45:8c:c2:f7:50: 2c:ee:e1:83:23:08:bd:17:3a:fb:4e:e1:4c:46:6f: e9:88:07:a6:39:3b:7b:71:9b:f7:73:12:82:84:02: 97:b5:c1:cd:78:2b:72:fb:6c:20:6e:e1:4b:6d:33: 2f:b2:78:48:0e:a0:22:25:59:d3:38:3f:e4:e1:b5: dd:cf:d8:90:30:95:16:d9:ed:d2:92:26:89:58:b5: 43:db:b7:a5:8e:4d:05:41:15:ac:00:45:1e:06:9b: c4:ce:47:f9:19:37:b5:b3:10:60:73:09:7d:da:0b: cf:8d:26:3f:d1:14:09:0f:68:be:56:44:54:37:5d: 08:63:27:19:26:6d:1d:da:f5:0b:0f:3d:3d:57:a7: 6d:40:81:6e:b3:4f:84:58:c2:fb:5e:e9:e3:81:c9: 4c:75:d7:2e:b2:e0:09:6a:0c:0d:6c:b1:5d:80:f0: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F5:D0:E8:86:FA:07:04:33:68:3E:9F:72:7E:10:D0:E1:27:80:3B X509v3 Authority Key Identifier: keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2c:ab:48:af:64:60:db:93:a1:6f:ee:a5:07:80:31:31:fe: 00:a1:f1:d0:5d:7c:e4:e7:13:93:4e:1f:0c:9c:ab:c6:fd:59: ef:70:05:30:42:4c:f0:02:e7:df:e3:a4:6f:7b:4e:b0:8d:bb: 86:83:c4:06:48:ed:73:a5:e9:41:9c:ac:1c:bb:1f:87:7d:2a: be:f9:be:63:27:d0:62:27:15:e8:cd:65:20:fa:03:9e:54:18: 94:90:a9:45:35:71:1a:14:9d:d7:49:07:82:0b:f6:ab:83:92: 91:68:67:95:b6:ac:14:e1:3e:53:54:0e:1b:e0:b0:46:42:46: 83:93:be:e0:74:a5:13:32:8c:09:40:b3:00:7c:6f:30:4c:57: f1:29:c1:c0:c0:f4:15:d4:f9:4c:c2:d4:90:8f:b2:a1:33:91: bb:7e:42:cd:ff:5c:ea:94:80:65:bb:01:00:60:d7:29:ae:7d: 5f:30:38:e2:8a:18:31:11:bf:3d:f8:11:08:12:1a:d1:dd:f2: 87:d9:d8:d8:92:88:e5:31:c3:82:8a:87:74:6f:d3:4f:b2:26: 75:a4:e8:df:90:07:a7:ae:c1:15:2b:21:db:3e:62:c3:a3:c4: 31:78:7a:1b:8e:3c:c0:72:32:6c:e2:3d:2f:14:a3:c7:0e:bf: e1:dc:a9:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpiLME61oAEVoHn1EzjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj YzA5MzMwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD EygxM2Y1ZDBlODg2ZmEwNzA0MzM2ODNlOWY3MjdlMTBkMGUxMjc4MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGjiMk4C+F1fkUdqseGgTdOzN/NG WDXRjbITpZ4nS5ghoh0IhvFKW7kpC3AwmqGkUQFF4NcxmUx854RVUfvRQTdZJPya +sCNfYCIn+4ukqEfkctWRYzC91As7uGDIwi9Fzr7TuFMRm/piAemOTt7cZv3cxKC hAKXtcHNeCty+2wgbuFLbTMvsnhIDqAiJVnTOD/k4bXdz9iQMJUW2e3SkiaJWLVD 27eljk0FQRWsAEUeBpvEzkf5GTe1sxBgcwl92gvPjSY/0RQJD2i+VkRUN10IYycZ Jm0d2vULDz09V6dtQIFus0+EWML7XunjgclMddcusuAJagwNbLFdgPBwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP10OiG+gcEM2g+n3J+ENDhJ4A7MB8GA1UdIwQY MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyyrSK9k YNuToW/upQeAMTH+AKHx0F185OcTk04fDJyrxv1Z73AFMEJM8ALn3+Okb3tOsI27 hoPEBkjtc6XpQZysHLsfh30qvvm+YyfQYicV6M1lIPoDnlQYlJCpRTVxGhSd10kH ggv2q4OSkWhnlbasFOE+U1QOG+CwRkJGg5O+4HSlEzKMCUCzAHxvMExX8SnBwMD0 FdT5TMLUkI+yoTORu35Czf9c6pSAZbsBAGDXKa59XzA44ooYMRG/PfgRCBIa0d3y h9nY2JKI5THDgoqHdG/TT7ImdaTo35AHp67BFSsh2z5iw6PEMXh6G448wHIybOI9 LxSjxw6/4dypMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:12 2025 by rpki-client