This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft File: xc_pCq_i6Ahev28AU5YLlrd4BJE.mft (raw, json) Hash identifier: CWNPNk7MpzA9Uc3QodI2BYuBgJJx07V8KF3dir5g2e8= Subject key identifier: B7:AC:3A:87:64:62:61:47:A3:A0:A6:09:D9:92:C4:AD:56:D3:E1:98 Authority key identifier: C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91 Certificate issuer: /CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491 Certificate serial: 019AF1D24D55B4FA236A3F1DD759028BE44E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft Manifest number: 0971 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: xc_pCq_i6Ahev28AU5YLlrd4BJE.crl (hash: /MYDYSXViw8RT3ymKYBL9aoxnBwyfDVqnBUA7cL7FbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4d:55:b4:fa:23:6a:3f:1d:d7:59:02:8b:e4:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cfe90aafe2e8085ebf6f0053960b96b7780491 Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=b7ac3a8764626147a3a0a609d992c4ad56d3e198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2d:c9:75:d9:ed:0b:46:ba:71:59:88:87:17: b1:e4:c1:b3:ef:f3:a2:a9:3b:28:a2:63:a3:78:8a: e0:6e:92:9e:9a:74:0d:01:cd:de:cb:8a:28:da:c0: fe:17:c7:7d:c7:e4:6d:f8:a7:87:52:a1:2d:ae:7c: a3:23:97:42:be:0d:c8:ac:fd:3b:be:bf:8f:33:3e: 10:d4:65:40:9e:52:60:43:9f:58:13:b9:0d:58:53: 39:a0:3f:6b:ca:de:b3:32:48:85:dc:da:20:60:a1: 6b:55:0e:bb:ec:5e:7d:b1:18:26:f5:68:1f:82:51: cf:93:93:54:31:bf:d8:e5:1a:4c:f6:e3:29:24:b4: fd:bf:90:81:92:cf:dd:f1:b9:ba:0e:9b:2b:9b:59: f0:04:ab:c7:1f:73:0d:43:ec:73:b9:e6:b7:0d:a9: 62:b6:c5:f0:82:dc:78:50:40:99:37:0a:af:2b:e5: 3f:38:da:85:e1:f0:ba:e9:b3:a1:fe:6a:00:f3:91: d3:3c:0d:41:82:cd:bf:19:1b:78:41:5b:79:14:e1: 65:39:3a:04:90:80:df:d4:0f:8d:6b:1d:cc:8d:ab: f8:2b:4f:78:c6:40:df:b7:19:9c:f4:c5:4c:d6:9d: 66:97:d6:36:04:1b:a7:b0:97:3a:52:c4:96:6b:29: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:3A:87:64:62:61:47:A3:A0:A6:09:D9:92:C4:AD:56:D3:E1:98 X509v3 Authority Key Identifier: keyid:C5:CF:E9:0A:AF:E2:E8:08:5E:BF:6F:00:53:96:0B:96:B7:78:04:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xc_pCq_i6Ahev28AU5YLlrd4BJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b93b01-1cf4-437b-830d-eb2359c242dd/1/xc_pCq_i6Ahev28AU5YLlrd4BJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d4:bd:44:b6:d0:4e:b5:7c:22:c5:79:42:2b:0d:a3:86:3c: 02:31:b2:10:0f:a3:34:45:5d:55:60:5f:fa:d1:d3:a8:c0:39: fc:69:ba:1e:dd:ae:38:c5:52:da:18:43:e0:cd:0a:0a:03:8d: 9b:4b:a8:b8:2f:6e:13:e5:02:fc:6a:56:8a:39:13:dd:ca:34: 74:77:7c:44:b6:48:a3:ac:c8:e9:53:4e:ea:ca:f1:d1:b0:2f: 4d:f5:b2:4b:c9:22:84:30:53:7b:a2:46:e1:6c:68:dd:a2:d1: 7f:d2:3b:e4:57:05:cf:06:71:1a:ee:9a:d6:2f:9f:a9:a7:46: 60:f6:c2:12:f7:c0:47:2d:7e:54:f6:35:dd:15:7e:95:34:ed: 41:22:14:ee:20:f4:d9:3b:07:cc:40:21:b0:37:35:a0:84:26: 74:81:1f:6a:0a:36:bf:a7:ee:b2:bc:5b:c0:48:4a:c6:57:ee: 62:ce:4e:f0:eb:50:da:db:c6:5c:c5:c5:40:76:88:95:e7:5a: 6b:29:b2:c8:a1:b9:0f:39:61:69:e9:b1:79:45:4b:e3:d0:59: 34:ea:a2:c3:80:30:e0:4e:e1:dc:cf:08:e5:0d:12:f4:c8:86: 14:27:1a:b8:2e:75:bd:e4:ac:a6:99:b7:9b:67:3b:4d:7a:72: 3b:27:36:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k1VtPojaj8d11kCi+ROMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2ZlOTBhYWZlMmU4MDg1ZWJmNmYwMDUzOTYwYjk2Yjc3 ODA0OTEwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EyhiN2FjM2E4NzY0NjI2MTQ3YTNhMGE2MDlkOTkyYzRhZDU2ZDNlMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC3JddntC0a6cVmIhxex5MGz7/Oi qTsoomOjeIrgbpKemnQNAc3ey4oo2sD+F8d9x+Rt+KeHUqEtrnyjI5dCvg3IrP07 vr+PMz4Q1GVAnlJgQ59YE7kNWFM5oD9ryt6zMkiF3NogYKFrVQ677F59sRgm9Wgf glHPk5NUMb/Y5RpM9uMpJLT9v5CBks/d8bm6Dpsrm1nwBKvHH3MNQ+xzuea3Dali tsXwgtx4UECZNwqvK+U/ONqF4fC66bOh/moA85HTPA1Bgs2/GRt4QVt5FOFlOToE kIDf1A+Nax3Mjav4K094xkDftxmc9MVM1p1ml9Y2BBunsJc6UsSWayl45QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLesOodkYmFHo6CmCdmSxK1W0+GYMB8GA1UdIwQY MBaAFMXP6Qqv4ugIXr9vAFOWC5a3eASRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQt ZWIyMzU5YzI0MmRkLzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iOTNiMDEtMWNmNC00MzdiLTgzMGQtZWIyMzU5YzI0MmRk LzEveGNfcENxX2k2QWhldjI4QVU1WUxscmQ0QkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9S9RLbQ TrV8IsV5QisNo4Y8AjGyEA+jNEVdVWBf+tHTqMA5/Gm6Ht2uOMVS2hhD4M0KCgON m0uouC9uE+UC/GpWijkT3co0dHd8RLZIo6zI6VNO6srx0bAvTfWyS8kihDBTe6JG 4Wxo3aLRf9I75FcFzwZxGu6a1i+fqadGYPbCEvfARy1+VPY13RV+lTTtQSIU7iD0 2TsHzEAhsDc1oIQmdIEfago2v6fusrxbwEhKxlfuYs5O8OtQ2tvGXMXFQHaIleda aymyyKG5DzlhaemxeUVL49BZNOqiw4Aw4E7h3M8I5Q0S9MiGFCcauC51veSsppm3 m2c7TXpyOyc2nA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:03 2025 by rpki-client