This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json) Hash identifier: JBzXlcrg3QjE5hiEfHJCO6O6o3fQjSYOQ1XJoC7FtS0= Subject key identifier: 04:B2:A9:8D:50:9C:4A:83:91:28:6D:15:1E:4E:A9:26:2F:08:06:C7 Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a Certificate serial: 019AF3F7855A9AE9AAECF78666C9E96BD425 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft Manifest number: 1254 Signing time: Sat 06 Dec 2025 14:01:16 +0000 Manifest this update: Sat 06 Dec 2025 14:01:16 +0000 Manifest next update: Sun 07 Dec 2025 14:01:16 +0000 Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: JD5Q6RJHqUj6qo3j4/+1RgpEHU/jOaqh8/dF60WmNPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:85:5a:9a:e9:aa:ec:f7:86:66:c9:e9:6b:d4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a Validity Not Before: Dec 6 14:01:16 2025 GMT Not After : Dec 7 14:01:16 2025 GMT Subject: CN=04b2a98d509c4a8391286d151e4ea9262f0806c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:09:f5:3d:9b:62:f1:a3:0a:f5:43:9d:5b:40: fd:3c:a5:52:7a:c4:28:5a:6f:f0:2b:59:0d:ef:fa: 6b:66:7a:e2:50:30:2f:ec:15:fb:50:6c:9d:e9:12: a7:ad:c6:04:e8:d3:73:e0:6f:a2:30:59:3d:b9:f8: c5:67:7a:a6:82:54:55:7f:a0:07:2c:b3:3d:9a:56: cf:96:a0:17:0a:dd:eb:00:c9:d1:44:97:70:d0:7b: 1c:b7:96:53:50:eb:71:ea:ee:d3:40:98:62:40:a8: 30:fe:4c:d8:e5:3e:d3:f3:59:da:ba:37:3c:d7:d7: 34:db:9e:7e:de:72:d8:e9:5f:9a:b7:7a:90:df:e7: 39:a4:01:24:2d:2d:9d:9f:7a:a7:76:18:ed:c8:d9: 58:4a:17:b4:6b:f3:d4:71:30:b5:ea:ca:65:84:9a: ab:90:67:f5:ab:32:ff:88:cb:26:12:84:78:52:4b: e3:32:34:4b:44:f5:b0:d1:6f:ee:da:e2:f1:79:83: 48:2a:d3:9c:29:31:19:61:42:90:bf:0f:a5:44:59: 88:32:f9:b3:99:fe:d5:39:55:ed:07:13:de:d6:1f: e9:60:c2:88:98:a2:bb:3c:db:38:54:68:c1:56:99: 32:02:7a:4b:68:bd:0c:f1:dd:14:76:94:35:5e:ed: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B2:A9:8D:50:9C:4A:83:91:28:6D:15:1E:4E:A9:26:2F:08:06:C7 X509v3 Authority Key Identifier: keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ad:a2:ec:0b:46:fb:d3:a4:58:e1:27:71:7d:06:9c:a2:59: ba:e9:01:da:f0:9e:c1:34:a3:7c:0d:0a:e6:f0:c4:4b:0d:da: 37:e7:6c:78:d6:6d:b7:53:71:c6:00:51:f3:8c:df:c8:22:a5: 29:4f:5d:1a:b7:06:ff:96:8d:79:e9:08:09:4a:e2:7e:01:63: dd:67:55:91:0a:2d:16:e2:da:71:6b:3a:65:b7:6e:fd:eb:d0: b3:f8:23:8a:ca:94:f9:6f:e9:15:f0:8d:51:89:47:32:89:67: ef:bb:07:7b:80:4f:5f:a1:97:0a:9f:58:56:3e:3b:68:19:65: 4c:0e:7e:11:fa:06:dd:82:b3:07:56:4e:70:c4:33:80:38:8a: 88:1d:f1:89:46:7c:37:e1:72:4e:5e:44:ed:dc:5e:1f:11:2f: 30:5f:2a:6b:b1:a6:12:8f:7d:37:a8:cc:b6:8d:53:60:ca:2f: ca:b5:36:c2:95:e1:c8:cc:05:af:7a:89:43:1a:89:0b:23:c7: 5c:5a:dd:36:7e:09:e9:bc:3c:6d:a9:f1:46:55:7c:40:5a:5c: 78:c7:1e:75:35:70:1b:14:87:c6:69:a1:61:e3:f5:3b:1a:00: 72:1a:ec:85:8f:a4:10:b2:80:73:2f:18:19:43:e0:64:a5:6f: ea:48:ae:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94Vamumq7PeGZsnpa9QlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi MzgxN2EwHhcNMjUxMjA2MTQwMTE2WhcNMjUxMjA3MTQwMTE2WjAzMTEwLwYDVQQD EygwNGIyYTk4ZDUwOWM0YTgzOTEyODZkMTUxZTRlYTkyNjJmMDgwNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Qn1PZti8aMK9UOdW0D9PKVSesQo Wm/wK1kN7/prZnriUDAv7BX7UGyd6RKnrcYE6NNz4G+iMFk9ufjFZ3qmglRVf6AH LLM9mlbPlqAXCt3rAMnRRJdw0Hsct5ZTUOtx6u7TQJhiQKgw/kzY5T7T81naujc8 19c0255+3nLY6V+at3qQ3+c5pAEkLS2dn3qndhjtyNlYShe0a/PUcTC16splhJqr kGf1qzL/iMsmEoR4UkvjMjRLRPWw0W/u2uLxeYNIKtOcKTEZYUKQvw+lRFmIMvmz mf7VOVXtBxPe1h/pYMKImKK7PNs4VGjBVpkyAnpLaL0M8d0UdpQ1Xu2oNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASyqY1QnEqDkShtFR5OqSYvCAbHMB8GA1UdIwQY MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXK2i7AtG +9OkWOEncX0GnKJZuukB2vCewTSjfA0K5vDESw3aN+dseNZtt1NxxgBR84zfyCKl KU9dGrcG/5aNeekICUrifgFj3WdVkQotFuLacWs6Zbdu/evQs/gjisqU+W/pFfCN UYlHMoln77sHe4BPX6GXCp9YVj47aBllTA5+EfoG3YKzB1ZOcMQzgDiKiB3xiUZ8 N+FyTl5E7dxeHxEvMF8qa7GmEo99N6jMto1TYMovyrU2wpXhyMwFr3qJQxqJCyPH XFrdNn4J6bw8banxRlV8QFpceMcedTVwGxSHxmmhYeP1OxoAchrshY+kELKAcy8Y GUPgZKVv6kiuYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:10 2025 by rpki-client