This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json) Hash identifier: tDVkg5OxGLoLyJCMAsGnZ5OfmpAjzMROUUYmgqwES+M= Subject key identifier: D8:F8:ED:C5:CC:5A:C9:A5:C8:E8:71:FF:60:78:18:27:77:2E:86:F9 Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54 Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754 Certificate serial: 019AF12EA0FAA3337E674AEF8250B6234BA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft Manifest number: 14B9 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: 5+cgMCCOMKEA1+vcIhcIeKRjJEOOJXmL8fhd9HzW3Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a0:fa:a3:33:7e:67:4a:ef:82:50:b6:23:4b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754 Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=d8f8edc5cc5ac9a5c8e871ff60781827772e86f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:71:7e:21:a6:84:23:e9:85:85:14:f5:a8: 62:dd:19:a9:90:5e:42:20:05:c4:4f:a0:67:0c:a5: a9:21:9b:32:22:b5:c3:23:c1:4e:96:20:93:57:39: f1:82:47:f3:73:db:f2:6e:92:2f:14:03:91:b3:6f: 42:38:9f:a8:26:28:03:9a:30:84:bf:8e:ce:77:b8: 8d:68:88:c5:fa:ab:a5:1c:75:78:7c:5d:68:02:2b: d7:d6:95:78:05:d3:97:75:5d:c4:7c:f3:e2:c0:21: 49:85:43:ae:3b:70:29:fb:7d:7b:a2:0f:c8:49:9c: de:35:12:08:73:b1:c1:23:95:35:ca:33:4f:13:50: 90:22:1a:7b:1b:36:8d:79:2e:9a:a6:eb:04:48:c6: 32:81:ff:25:d6:73:51:ea:95:2b:c8:71:d8:34:dd: f9:14:a5:84:b6:be:55:bf:d2:ba:a8:c1:32:93:97: 4c:8f:0f:7b:44:8f:80:f0:6b:e0:aa:30:87:dd:8c: cb:e0:a4:78:95:06:24:d6:0c:fd:00:3d:e4:20:66: f0:33:f0:7f:3b:3c:ea:e4:38:77:f9:9c:aa:2a:14: d7:87:75:38:b0:8b:73:fe:dd:52:2f:4b:54:97:b9: 42:b4:88:d1:6b:cb:f3:18:76:f9:0f:d2:bf:6f:bd: a7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F8:ED:C5:CC:5A:C9:A5:C8:E8:71:FF:60:78:18:27:77:2E:86:F9 X509v3 Authority Key Identifier: keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:ae:f8:ed:bb:43:8b:de:1f:a6:ac:c9:c4:68:74:f0:fe: 4c:5e:62:16:e3:18:d6:27:45:62:b5:3e:a6:c0:cb:05:97:28: dc:63:40:41:86:b7:80:cb:c9:f0:a8:14:6f:6e:7f:9b:c9:52: 20:29:68:46:d1:e1:98:bb:b1:ff:00:ca:ee:99:92:60:aa:6e: ee:a1:ee:9c:3a:ed:34:ae:d5:7f:24:56:28:82:cb:fc:f3:c7: ab:f7:2c:51:f5:38:ee:de:76:53:ec:fd:0c:33:2f:02:7e:5a: 3b:eb:2c:5d:86:d9:53:3b:ca:ff:17:6a:73:c7:7d:aa:2d:f9: ab:e5:b0:4c:ea:a6:bd:61:ea:e2:9e:77:57:3d:a7:e5:f4:40: 06:de:f4:41:ae:3a:91:47:08:9e:48:cc:6b:5a:d4:6e:64:6e: 15:0b:b8:30:43:76:d1:18:b6:74:6c:1c:29:67:aa:45:21:2c: 64:b3:d0:67:db:83:65:1e:ad:19:74:3a:b0:61:54:c6:98:ad: 86:bf:7b:50:21:5c:3c:94:e4:5f:51:59:8a:80:20:dd:ef:5c: 1b:32:d9:05:db:bf:25:7f:84:1e:7d:54:bc:f1:99:5f:31:88: a0:c2:f6:f2:d5:99:96:3c:93:5d:6c:e0:a7:90:0d:c7:0f:bc: 45:cc:7f:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqD6ozN+Z0rvglC2I0ulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm YTI3NTQwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD EyhkOGY4ZWRjNWNjNWFjOWE1YzhlODcxZmY2MDc4MTgyNzc3MmU4NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UtxfiGmhCPphYUU9ahi3RmpkF5C IAXET6BnDKWpIZsyIrXDI8FOliCTVznxgkfzc9vybpIvFAORs29COJ+oJigDmjCE v47Od7iNaIjF+qulHHV4fF1oAivX1pV4BdOXdV3EfPPiwCFJhUOuO3Ap+317og/I SZzeNRIIc7HBI5U1yjNPE1CQIhp7GzaNeS6apusESMYygf8l1nNR6pUryHHYNN35 FKWEtr5Vv9K6qMEyk5dMjw97RI+A8GvgqjCH3YzL4KR4lQYk1gz9AD3kIGbwM/B/ Ozzq5Dh3+ZyqKhTXh3U4sItz/t1SL0tUl7lCtIjRa8vzGHb5D9K/b72n+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj47cXMWsmlyOhx/2B4GCd3Lob5MB8GA1UdIwQY MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3 LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetyu+O27 Q4veH6asycRodPD+TF5iFuMY1idFYrU+psDLBZco3GNAQYa3gMvJ8KgUb25/m8lS ICloRtHhmLux/wDK7pmSYKpu7qHunDrtNK7VfyRWKILL/PPHq/csUfU47t52U+z9 DDMvAn5aO+ssXYbZUzvK/xdqc8d9qi35q+WwTOqmvWHq4p53Vz2n5fRABt70Qa46 kUcInkjMa1rUbmRuFQu4MEN20Ri2dGwcKWeqRSEsZLPQZ9uDZR6tGXQ6sGFUxpit hr97UCFcPJTkX1FZioAg3e9cGzLZBdu/JX+EHn1UvPGZXzGIoML28tWZljyTXWzg p5ANxw+8Rcx/MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:42 2025 by rpki-client