This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft File: xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft (raw, json) Hash identifier: dCfoeaYiQg3B5qQ0QuJldLZuim+aZFZR5hozibPJECU= Subject key identifier: 9C:E1:E7:9F:A2:28:A6:1C:27:1B:49:17:AD:C9:F3:0B:44:0D:B1:0D Authority key identifier: C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64 Certificate issuer: /CN=c59717450187ffd38ef41b71abc01dced8bbbe64 Certificate serial: 019AF42DF721D5F9A2E6E22182D425CAF1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft Manifest number: 032B Signing time: Sat 06 Dec 2025 15:00:44 +0000 Manifest this update: Sat 06 Dec 2025 15:00:44 +0000 Manifest next update: Sun 07 Dec 2025 15:00:44 +0000 Files and hashes: 1: xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl (hash: ceW9cJ+gv5Ax6d/CiBEHPxEMiE6vtMm1TzDV0duUfi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f7:21:d5:f9:a2:e6:e2:21:82:d4:25:ca:f1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59717450187ffd38ef41b71abc01dced8bbbe64 Validity Not Before: Dec 6 15:00:44 2025 GMT Not After : Dec 7 15:00:44 2025 GMT Subject: CN=9ce1e79fa228a61c271b4917adc9f30b440db10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:46:fd:60:b5:97:83:70:9b:64:9d:7c:d0: a8:2d:eb:35:5b:b4:c4:d9:ef:c4:5e:f9:b4:e9:df: 80:b5:63:a5:5b:08:31:d2:0c:56:a9:6f:5d:aa:dd: 4f:62:e8:2b:5e:eb:e6:9e:52:11:bd:97:47:05:d3: 69:5a:14:fa:e1:37:f0:29:b1:ae:a5:73:64:a9:67: 9b:62:be:8b:c2:83:bc:8b:d6:82:4f:7e:ca:bf:55: dc:e7:ab:9d:ab:c4:c1:54:96:6b:92:31:e2:9a:82: 7f:6e:13:3c:61:08:59:35:d0:be:d6:3b:d5:c4:f7: bf:96:a1:91:e3:fb:6b:e8:63:07:38:00:24:6e:28: 46:66:cf:a2:6a:a9:82:4b:7f:98:74:10:a7:ca:4a: 7d:a3:61:79:a1:fc:5b:89:3e:b4:6d:fd:9d:f7:00: e5:44:43:12:fa:2b:f3:0c:b0:8f:b6:fa:06:93:4d: ae:c1:65:71:cd:15:de:18:ae:1b:99:5a:c3:c4:1d: 7f:8f:37:6c:47:b3:6e:04:a0:c2:d0:2f:6f:79:a2: 8b:a2:06:cd:5b:f4:9e:9a:11:e2:c6:30:5b:48:b5: f6:80:ae:d4:7f:1a:3f:7f:79:11:a9:4a:5b:8d:ad: 24:58:23:d1:db:62:99:a0:e9:9c:74:ec:5a:9d:2c: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E1:E7:9F:A2:28:A6:1C:27:1B:49:17:AD:C9:F3:0B:44:0D:B1:0D X509v3 Authority Key Identifier: keyid:C5:97:17:45:01:87:FF:D3:8E:F4:1B:71:AB:C0:1D:CE:D8:BB:BE:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZcXRQGH_9OO9Btxq8Adzti7vmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/568f82-8e35-4eb3-8104-a802d9e6bc16/1/xZcXRQGH_9OO9Btxq8Adzti7vmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ae:65:42:64:dd:c9:a4:13:51:fa:f3:07:a4:0c:3e:cc:c3: 42:f1:13:7c:84:a5:bb:3c:2a:25:6c:15:2c:0a:37:94:16:fd: fd:b1:68:f1:97:25:95:f3:31:22:72:bb:f8:27:3d:60:4a:72: 4c:bc:45:ff:fd:37:4c:57:dd:63:b0:44:da:46:95:78:41:f3: ce:3f:89:c7:5e:87:0e:ca:90:b4:6c:e7:0b:6f:b1:d3:88:b6: d0:7e:e5:33:05:3d:16:e3:ac:14:20:3c:b0:6d:d4:4c:70:ad: 8e:26:cf:a1:02:13:5e:ea:58:dd:79:36:05:34:d0:0c:67:48: 16:06:b4:3a:20:67:d9:c2:8e:0c:d4:c7:a3:50:05:5e:79:53: 3d:6c:b0:84:36:fc:3c:87:96:02:42:ce:e9:6a:71:63:b1:b5: b3:1c:63:01:6d:71:83:29:44:58:1c:fb:cf:76:8c:3c:11:15: 3a:98:80:ef:4c:26:e9:2f:e3:90:00:01:93:8b:f7:f0:89:aa: 8a:6f:69:f2:d4:a5:2a:8f:64:15:b1:aa:2f:c3:91:e7:dd:db: 4b:1e:df:cf:f3:1a:ed:3b:ca:bb:e4:bf:d3:f1:b7:27:44:dc: 23:a6:0d:a3:85:66:78:20:a6:6d:bf:4a:fd:14:85:1c:45:3b: ba:59:b4:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lfch1fmi5uIhgtQlyvHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTcxNzQ1MDE4N2ZmZDM4ZWY0MWI3MWFiYzAxZGNlZDhi YmJlNjQwHhcNMjUxMjA2MTUwMDQ0WhcNMjUxMjA3MTUwMDQ0WjAzMTEwLwYDVQQD Eyg5Y2UxZTc5ZmEyMjhhNjFjMjcxYjQ5MTdhZGM5ZjMwYjQ0MGRiMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgVG/WC1l4Nwm2SdfNCoLes1W7TE 2e/EXvm06d+AtWOlWwgx0gxWqW9dqt1PYugrXuvmnlIRvZdHBdNpWhT64TfwKbGu pXNkqWebYr6LwoO8i9aCT37Kv1Xc56udq8TBVJZrkjHimoJ/bhM8YQhZNdC+1jvV xPe/lqGR4/tr6GMHOAAkbihGZs+iaqmCS3+YdBCnykp9o2F5ofxbiT60bf2d9wDl REMS+ivzDLCPtvoGk02uwWVxzRXeGK4bmVrDxB1/jzdsR7NuBKDC0C9veaKLogbN W/SemhHixjBbSLX2gK7Ufxo/f3kRqUpbja0kWCPR22KZoOmcdOxanSwvywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzh55+iKKYcJxtJF63J8wtEDbENMB8GA1UdIwQY MBaAFMWXF0UBh//TjvQbcavAHc7Yu75kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQt YTgwMmQ5ZTZiYzE2LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NjhmODItOGUzNS00ZWIzLTgxMDQtYTgwMmQ5ZTZiYzE2 LzEveFpjWFJRR0hfOU9POUJ0eHE4QWR6dGk3dm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH65lQmTd yaQTUfrzB6QMPszDQvETfISluzwqJWwVLAo3lBb9/bFo8ZcllfMxInK7+Cc9YEpy TLxF//03TFfdY7BE2kaVeEHzzj+Jx16HDsqQtGznC2+x04i20H7lMwU9FuOsFCA8 sG3UTHCtjibPoQITXupY3Xk2BTTQDGdIFga0OiBn2cKODNTHo1AFXnlTPWywhDb8 PIeWAkLO6WpxY7G1sxxjAW1xgylEWBz7z3aMPBEVOpiA70wm6S/jkAABk4v38Imq im9p8tSlKo9kFbGqL8OR593bSx7fz/Ma7TvKu+S/0/G3J0TcI6YNo4VmeCCmbb9K /RSFHEU7ulm0jg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:06 2025 by rpki-client