This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json) Hash identifier: HRlKmBy68o4FloPydg7Dwt6aRdUxcguXwsUmIBl1HxI= Subject key identifier: 1E:00:36:D6:84:35:F0:B5:B0:19:F0:D8:56:AA:B6:1D:9F:11:7A:05 Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Certificate serial: 019AF0882FB43F581A16FFEA5693314CEACE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft Manifest number: 175E Signing time: Fri 05 Dec 2025 22:00:48 +0000 Manifest this update: Fri 05 Dec 2025 22:00:48 +0000 Manifest next update: Sat 06 Dec 2025 22:00:48 +0000 Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: E6tTgZbL2SfVT9NVu5YosVNc4iSuVoYBHx7tNJTCKsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2f:b4:3f:58:1a:16:ff:ea:56:93:31:4c:ea:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Validity Not Before: Dec 5 22:00:48 2025 GMT Not After : Dec 6 22:00:48 2025 GMT Subject: CN=1e0036d68435f0b5b019f0d856aab61d9f117a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9c:79:7e:b6:a7:1a:50:35:52:eb:37:65:95: 45:c7:3f:45:49:86:39:4e:07:34:f3:20:c9:3f:7f: 56:8d:07:7b:c8:6e:dc:38:1a:08:47:7f:46:86:0c: f0:6f:b3:4c:9b:c9:97:ae:cd:29:dd:46:17:48:3c: 22:74:51:8b:dc:64:5f:cf:d7:e9:70:85:09:b0:f9: 2b:b1:e0:d9:d8:30:cf:97:ab:4f:15:76:62:5e:d7: 6b:e3:c8:9f:a1:d6:a2:e3:38:01:bd:e1:f8:b1:70: 2e:08:b5:16:3a:85:87:f6:73:15:6b:d2:c6:7e:6b: 30:70:b0:1c:64:3d:a9:54:f5:4c:f2:42:be:97:d0: 68:57:1b:93:b4:c0:39:40:23:10:fa:70:87:12:ae: 82:93:2a:4e:34:4c:c7:ef:fd:ba:e8:16:ce:71:0a: 3f:8b:3e:7e:90:5a:c9:f8:44:9b:2b:ec:7a:da:15: d1:e0:18:db:33:a8:c3:ae:75:7c:21:de:cb:41:af: 92:e8:fa:ee:e3:71:0a:af:00:20:8c:ba:79:05:79: 5e:72:64:04:4d:63:40:33:4f:84:a0:e2:20:e1:2e: 5b:d1:04:2a:63:ef:7a:11:93:d2:29:5a:ce:79:a9: 0d:9f:0a:bc:2e:f9:d2:2f:2a:32:82:d0:99:df:47: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:00:36:D6:84:35:F0:B5:B0:19:F0:D8:56:AA:B6:1D:9F:11:7A:05 X509v3 Authority Key Identifier: keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a6:f3:96:d1:94:ce:94:88:6f:d5:99:b6:03:8b:b3:e9:f5: 71:a6:34:00:ef:ee:26:64:a1:b0:2a:f1:81:b3:ef:a6:03:91: db:b5:ac:87:75:9b:98:78:4b:7b:6a:a5:ab:40:a8:af:28:9e: 14:3d:87:d0:c6:10:f3:db:63:4a:13:da:c4:79:72:d7:1e:ee: a2:03:b3:17:bb:74:d6:d3:36:97:01:a7:6b:79:8d:35:e2:23: c7:44:e8:02:20:43:c9:7c:d2:fd:66:34:a2:70:3b:e8:30:33: 96:45:d1:f8:d2:67:5d:d0:98:3c:1b:65:52:31:01:fb:71:ab: b1:bd:bf:c6:40:1d:fe:2e:f4:c2:bf:56:23:bd:67:5b:02:af: 37:31:b0:0c:07:f0:53:99:78:cb:9f:ac:fa:6f:48:ad:8f:79: 09:8e:52:03:e8:87:eb:b1:30:74:57:49:52:e6:a9:95:09:37: 35:3b:fd:dc:d5:8e:ec:52:bf:db:48:50:2c:a8:06:7a:30:70: 29:d0:80:71:fd:15:61:ad:5f:9f:7d:e3:7b:f0:1d:ca:5d:06: f8:8b:8f:8a:b2:71:e6:6f:36:ca:c1:7a:20:ae:ad:b1:2c:98: e0:45:62:74:24:20:b0:d0:e8:a5:51:e2:8b:a4:3b:21:c4:b6: 21:98:60:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC+0P1gaFv/qVpMxTOrOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MGNiY2VjZjI1YTg2NjVjMzVhNzhjODIxZDExZWIzYTY0 MjM2MjEwHhcNMjUxMjA1MjIwMDQ4WhcNMjUxMjA2MjIwMDQ4WjAzMTEwLwYDVQQD EygxZTAwMzZkNjg0MzVmMGI1YjAxOWYwZDg1NmFhYjYxZDlmMTE3YTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpx5franGlA1Uus3ZZVFxz9FSYY5 Tgc08yDJP39WjQd7yG7cOBoIR39Ghgzwb7NMm8mXrs0p3UYXSDwidFGL3GRfz9fp cIUJsPkrseDZ2DDPl6tPFXZiXtdr48ifodai4zgBveH4sXAuCLUWOoWH9nMVa9LG fmswcLAcZD2pVPVM8kK+l9BoVxuTtMA5QCMQ+nCHEq6CkypONEzH7/266BbOcQo/ iz5+kFrJ+ESbK+x62hXR4BjbM6jDrnV8Id7LQa+S6Pru43EKrwAgjLp5BXlecmQE TWNAM0+EoOIg4S5b0QQqY+96EZPSKVrOeakNnwq8LvnSLyoygtCZ30cFiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4ANtaENfC1sBnw2Faqth2fEXoFMB8GA1UdIwQY MBaAFMcMvOzyWoZlw1p4yCHRHrOmQjYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgt ZTY5N2JiNTc2NGMzLzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgtZTY5N2JiNTc2NGMz LzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6bzltGU zpSIb9WZtgOLs+n1caY0AO/uJmShsCrxgbPvpgOR27Wsh3WbmHhLe2qlq0Coryie FD2H0MYQ89tjShPaxHly1x7uogOzF7t01tM2lwGna3mNNeIjx0ToAiBDyXzS/WY0 onA76DAzlkXR+NJnXdCYPBtlUjEB+3Grsb2/xkAd/i70wr9WI71nWwKvNzGwDAfw U5l4y5+s+m9IrY95CY5SA+iH67EwdFdJUuaplQk3NTv93NWO7FK/20hQLKgGejBw KdCAcf0VYa1fn33je/Adyl0G+IuPirJx5m82ysF6IK6tsSyY4EVidCQgsNDopVHi i6Q7IcS2IZhgKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:54 2025 by rpki-client