This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft File: XHOCiOHdRuIcmgORGXJEtHjQqyY.mft (raw, json) Hash identifier: pkOkoI37jDiZRTbp882XHe9iXU83jZY9s0IOeY8azYg= Subject key identifier: CD:49:FC:91:B1:6B:F6:A9:8C:BD:42:79:0F:91:AB:A1:74:D6:0D:18 Authority key identifier: 5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26 Certificate issuer: /CN=5c738288e1dd46e21c9a0391197244b478d0ab26 Certificate serial: 019AF31C7B129BE05B00515C2D7974A8E126 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: XHOCiOHdRuIcmgORGXJEtHjQqyY.crl (hash: g2FygAFn4dYZ2KxtIpafY6iXfM1pyAN+B13F5YYpTtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7b:12:9b:e0:5b:00:51:5c:2d:79:74:a8:e1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c738288e1dd46e21c9a0391197244b478d0ab26 Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=cd49fc91b16bf6a98cbd42790f91aba174d60d18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:60:a1:24:b9:40:20:dc:6a:0e:c0:c4:c7: d3:9b:bf:67:95:0b:5f:19:67:9f:3f:52:d5:bf:6b: 4f:d6:0d:0b:2c:cd:04:47:87:ca:c9:17:94:f0:ba: 3b:df:ff:69:be:9d:09:96:53:a9:fe:1d:8c:9c:67: 2b:68:6e:de:6b:12:93:5a:26:26:cc:42:6c:ee:ad: 10:6f:04:cb:b4:94:93:22:b4:c8:aa:8b:6f:49:d6: 0a:6d:c0:61:2c:54:1c:c7:00:ed:42:e7:15:5a:ea: 6b:19:ed:17:03:70:55:28:49:c9:a0:a2:cd:4a:2f: ba:a3:9f:ea:b6:d9:4f:5d:d2:21:f4:bb:7d:67:8e: d4:91:03:d0:f1:7b:57:1f:24:40:ce:0c:c2:74:be: 3d:ac:b2:71:4a:04:20:8e:43:ff:32:6e:f0:73:b4: b8:a1:0e:b1:b7:b6:ea:b7:81:0b:11:e1:a1:54:54: ce:3b:cd:fc:4a:42:48:0c:69:8b:c2:1f:ce:73:51: 49:be:9a:99:bf:87:07:c8:e0:da:e9:f6:9a:69:45: 32:e4:c9:20:cf:1d:27:54:06:a8:77:6d:5e:88:0a: 95:14:04:ee:d4:b4:e8:bb:bf:d1:66:dc:f9:4a:3b: 8e:9a:75:05:3e:e4:11:52:20:1b:8c:48:67:88:ad: 6a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:FC:91:B1:6B:F6:A9:8C:BD:42:79:0F:91:AB:A1:74:D6:0D:18 X509v3 Authority Key Identifier: keyid:5C:73:82:88:E1:DD:46:E2:1C:9A:03:91:19:72:44:B4:78:D0:AB:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHOCiOHdRuIcmgORGXJEtHjQqyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e35121-9d16-4a26-a7b7-50140c681aca/1/XHOCiOHdRuIcmgORGXJEtHjQqyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b4:5c:13:50:f0:2a:5b:27:04:40:e8:98:62:3a:af:08:db: 0f:5c:ab:f3:65:a6:92:9c:e8:86:54:93:78:c8:75:54:7c:c9: 20:5e:1a:42:35:ab:2b:d2:b4:16:89:a0:74:22:69:24:33:ac: fd:73:a3:89:65:92:62:36:5d:13:bd:72:53:7b:09:49:47:65: 7a:b8:24:df:ba:63:df:9d:7e:25:27:d3:83:1c:06:57:a6:43: 5a:74:25:e1:5b:1e:32:b3:ee:65:5d:64:02:16:38:03:8c:96: 4e:87:2a:07:4c:78:b7:74:a3:e5:0a:77:ff:18:fc:98:53:42: 2c:46:fa:60:3d:14:3c:07:cc:ff:1b:15:97:c3:5f:75:51:84: 0b:85:04:b2:a7:ec:e8:07:88:ba:88:a5:19:8c:ff:e8:02:58: 63:88:a9:59:89:cc:8e:be:77:78:8e:e3:0c:72:44:9f:bd:be: 3a:8d:83:93:c7:be:01:53:8b:a9:1f:e2:d3:0b:16:cf:89:ad: eb:d5:ea:72:84:15:0b:d3:0d:09:7d:57:7f:d4:96:14:cd:0a: 71:cf:3f:00:85:c3:14:ae:44:69:36:7b:8a:de:1c:d2:be:39: ae:d1:ec:e4:b2:e3:45:57:a5:79:a2:b9:a4:e3:9b:e5:5e:24: a8:f6:28:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHsSm+BbAFFcLXl0qOEmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzM4Mjg4ZTFkZDQ2ZTIxYzlhMDM5MTE5NzI0NGI0Nzhk MGFiMjYwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EyhjZDQ5ZmM5MWIxNmJmNmE5OGNiZDQyNzkwZjkxYWJhMTc0ZDYwZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYlgoSS5QCDcag7AxMfTm79nlQtf GWefP1LVv2tP1g0LLM0ER4fKyReU8Lo73/9pvp0JllOp/h2MnGcraG7eaxKTWiYm zEJs7q0QbwTLtJSTIrTIqotvSdYKbcBhLFQcxwDtQucVWuprGe0XA3BVKEnJoKLN Si+6o5/qttlPXdIh9Lt9Z47UkQPQ8XtXHyRAzgzCdL49rLJxSgQgjkP/Mm7wc7S4 oQ6xt7bqt4ELEeGhVFTOO838SkJIDGmLwh/Oc1FJvpqZv4cHyODa6faaaUUy5Mkg zx0nVAaod21eiAqVFATu1LTou7/RZtz5SjuOmnUFPuQRUiAbjEhniK1qrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1J/JGxa/apjL1CeQ+Rq6F01g0YMB8GA1UdIwQY MBaAFFxzgojh3UbiHJoDkRlyRLR40KsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhPQ2lPSGRSdUljbWdPUkdYSkV0SGpRcXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzUxMjEtOWQxNi00YTI2LWE3Yjct NTAxNDBjNjgxYWNhLzEvWEhPQ2lPSGRSdUljbWdPUkdYSkV0SGpRcXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMzUxMjEtOWQxNi00YTI2LWE3YjctNTAxNDBjNjgxYWNh LzEvWEhPQ2lPSGRSdUljbWdPUkdYSkV0SGpRcXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibRcE1Dw KlsnBEDomGI6rwjbD1yr82WmkpzohlSTeMh1VHzJIF4aQjWrK9K0FomgdCJpJDOs /XOjiWWSYjZdE71yU3sJSUdlergk37pj351+JSfTgxwGV6ZDWnQl4VseMrPuZV1k AhY4A4yWTocqB0x4t3Sj5Qp3/xj8mFNCLEb6YD0UPAfM/xsVl8NfdVGEC4UEsqfs 6AeIuoilGYz/6AJYY4ipWYnMjr53eI7jDHJEn72+Oo2Dk8e+AVOLqR/i0wsWz4mt 69XqcoQVC9MNCX1Xf9SWFM0Kcc8/AIXDFK5EaTZ7it4c0r45rtHs5LLjRVeleaK5 pOOb5V4kqPYoBw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:55 2025 by rpki-client