This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json) Hash identifier: NMk+YHa+P5P5YToJZBSvC1YYnJFt8/CpoKr5LqW9jPY= Subject key identifier: 6F:51:52:93:74:F3:B6:FF:2C:52:FD:5D:5A:A6:F7:53:D1:FF:15:91 Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91 Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491 Certificate serial: 019B2F9E11FAE6C917E956E0459B296E5EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft Manifest number: 0991 Signing time: Thu 18 Dec 2025 04:00:46 +0000 Manifest this update: Thu 18 Dec 2025 04:00:46 +0000 Manifest next update: Fri 19 Dec 2025 04:00:46 +0000 Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: 4Y/h1yTkp1GV2zVN2RvkQyMJjn7YfncYPPeiKvc7etk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:11:fa:e6:c9:17:e9:56:e0:45:9b:29:6e:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491 Validity Not Before: Dec 18 04:00:46 2025 GMT Not After : Dec 19 04:00:46 2025 GMT Subject: CN=6f51529374f3b6ff2c52fd5d5aa6f753d1ff1591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:e0:eb:45:3f:62:e2:ef:02:b4:77:62:76: 78:d9:db:52:9e:5a:a5:98:de:08:3a:60:da:3e:b1: bc:f8:60:10:7e:d1:ad:0e:e9:21:62:bd:64:32:60: 88:e2:b3:8b:71:46:d7:cd:4f:b4:2b:51:16:f3:99: 4f:59:0d:bc:55:55:3f:dc:bf:89:bc:3c:c6:d5:59: a9:7d:0e:79:f8:ad:e9:ac:79:1a:f9:e9:bc:68:48: f4:8e:2a:ea:25:de:bb:dc:dd:b9:ab:b8:2a:bf:2e: af:c9:29:76:26:1a:22:e7:38:dc:9a:1b:fb:61:8c: d1:f7:8f:b1:c4:f7:c7:cc:a7:91:ac:d1:da:55:d6: c8:20:a4:6c:aa:f5:4b:ae:3d:4b:3c:36:65:02:ff: 1b:8a:19:43:50:68:18:12:f6:04:f9:14:bc:79:5c: 8b:50:27:af:9e:ca:60:5a:45:74:03:26:d1:2c:b0: 0a:19:34:3d:f5:25:e2:62:40:ee:b8:31:bf:09:bc: a5:cb:cb:9a:50:22:47:0b:db:25:7a:64:2a:c4:d5: ef:9f:78:9c:29:41:52:b8:13:b7:14:67:09:d1:34: d3:24:f8:16:00:b9:ff:76:e0:1a:bd:d3:df:8a:ca: 01:7a:e5:da:70:21:cb:9c:03:43:0a:3a:fa:17:aa: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:51:52:93:74:F3:B6:FF:2C:52:FD:5D:5A:A6:F7:53:D1:FF:15:91 X509v3 Authority Key Identifier: keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:25:e0:ad:ca:98:0c:af:73:3c:67:b4:34:9e:81:ed:f0:87: 45:f4:7d:61:fb:cc:0f:39:e7:fa:c3:3f:c8:75:38:d0:f3:91: 29:89:6a:c7:ac:df:9e:43:a0:8e:2b:7c:4c:43:86:53:ce:f8: ba:a8:e0:47:e7:fc:3e:fa:2a:ac:83:4b:d7:e3:70:3d:31:9c: f3:5d:e2:c5:d7:6a:a9:d0:11:4c:dc:62:5d:14:bb:60:74:03: 16:59:79:88:c9:c9:78:90:94:81:8f:68:c0:69:9c:0d:89:21: b2:92:3f:47:16:fe:c9:d1:2d:61:a0:22:95:20:fb:d1:06:32: 9b:d1:33:f7:69:63:11:a3:32:41:1b:c5:c4:c3:6d:b9:1b:7f: 9e:76:5a:c0:ec:86:f8:a4:56:92:39:58:59:2c:10:a9:63:b6: 12:7e:7d:34:f9:e7:bc:ae:5d:0d:c2:28:82:5a:b7:12:ee:1d: a3:9f:2b:23:c5:d4:7a:9d:61:73:7d:47:b4:67:51:07:d3:f9: 7d:05:b8:5a:aa:5f:df:ff:ef:a6:6d:e6:70:2d:cf:1f:63:cb: 26:17:c9:e8:75:55:5f:cd:11:d1:78:05:7f:5b:51:f2:24:43: 9d:15:c4:c0:5c:f3:7c:53:c0:1b:bb:cf:c3:a5:5d:53:ae:e7: 43:9e:1a:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnhH65skX6VbgRZspbl7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2ZlOTBhYWZlMmU4MDg1ZWJmNmYwMDUzOTYwYjk2Yjc3 ODA0OTEwHhcNMjUxMjE4MDQwMDQ2WhcNMjUxMjE5MDQwMDQ2WjAzMTEwLwYDVQQD Eyg2ZjUxNTI5Mzc0ZjNiNmZmMmM1MmZkNWQ1YWE2Zjc1M2QxZmYxNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkfg60U/YuLvArR3YnZ42dtSnlql mN4IOmDaPrG8+GAQftGtDukhYr1kMmCI4rOLcUbXzU+0K1EW85lPWQ28VVU/3L+J vDzG1VmpfQ55+K3prHka+em8aEj0jirqJd673N25q7gqvy6vySl2Jhoi5zjcmhv7 YYzR94+xxPfHzKeRrNHaVdbIIKRsqvVLrj1LPDZlAv8bihlDUGgYEvYE+RS8eVyL UCevnspgWkV0AybRLLAKGTQ99SXiYkDuuDG/Cbyly8uaUCJHC9slemQqxNXvn3ic KUFSuBO3FGcJ0TTTJPgWALn/duAavdPfisoBeuXacCHLnANDCjr6F6omiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9RUpN087b/LFL9XVqm91PR/xWRMB8GA1UdIwQY MBaAFMXP6Qqv4ugIXr9vAFOWC5a3eASRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQt ZWIyMzU5YzI0MmRkLzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQtZWIyMzU5YzI0MmRk LzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiXgrcqY DK9zPGe0NJ6B7fCHRfR9YfvMDznn+sM/yHU40PORKYlqx6zfnkOgjit8TEOGU874 uqjgR+f8PvoqrINL1+NwPTGc813ixddqqdARTNxiXRS7YHQDFll5iMnJeJCUgY9o wGmcDYkhspI/Rxb+ydEtYaAilSD70QYym9Ez92ljEaMyQRvFxMNtuRt/nnZawOyG +KRWkjlYWSwQqWO2En59NPnnvK5dDcIoglq3Eu4do58rI8XUep1hc31HtGdRB9P5 fQW4Wqpf3//vpm3mcC3PH2PLJhfJ6HVVX80R0XgFf1tR8iRDnRXEwFzzfFPAG7vP w6VdU67nQ54a1g== -----END CERTIFICATE-----Generated at Thu Dec 18 07:44:50 2025 by rpki-client