This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft File: XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json) Hash identifier: 3zwDV33XZ8Gsq1fntGQYWZsfL4c7OnwVjYj8ScviMmE= Subject key identifier: 72:38:54:9F:62:F2:03:10:4C:60:63:AC:5D:B8:6E:3B:A6:CC:DD:62 Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7 Certificate issuer: /CN=5ce316ba8fb30567cecbc727051d36400e251fc7 Certificate serial: 019AF1D1C0557EA88CBDFFE0281F68874BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft Manifest number: 0539 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: GO7j1FqK4mUr0UcDUTea2+VCoCLWhtpoVUMo7Q2cDzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c0:55:7e:a8:8c:bd:ff:e0:28:1f:68:87:4b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=7238549f62f203104c6063ac5db86e3ba6ccdd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:60:bd:9b:4a:86:4f:c8:2a:b0:74:00:ab:42: f4:e2:21:0a:d6:45:be:90:6d:96:68:62:33:6f:cf: 36:b7:25:76:7f:ce:77:5f:35:45:a6:31:4d:b1:d8: 75:8f:fc:23:7f:82:a5:44:6a:7d:93:da:9c:89:df: 45:83:92:d1:81:51:92:ab:a4:30:6e:5c:b4:b1:1a: cd:76:7e:5a:67:0c:82:9a:37:97:97:fe:3d:52:e7: f9:43:c1:a7:9d:87:47:fe:b7:8d:e2:92:69:d8:73: cd:7e:31:37:22:e1:19:69:2a:2b:c9:32:71:23:54: 77:f7:b4:b7:27:ce:84:77:e7:6e:59:72:a7:91:71: 04:1f:40:15:ea:db:3b:c6:d1:2b:01:34:fb:19:a7: 85:b7:2f:67:3e:96:a0:9d:f1:a6:e9:08:65:11:02: 9b:ab:37:25:6c:17:2c:84:8b:08:fc:1f:34:60:77: cd:5b:5f:9f:d9:97:02:09:d9:bd:9e:cc:ac:91:20: 92:64:b9:1f:da:ac:7d:af:67:56:da:64:9a:da:49: b3:65:31:1d:99:34:0a:f0:9f:19:5c:24:f6:3c:a9: df:1a:72:5e:fc:0d:8c:c8:e4:44:8f:ad:ac:a9:44: 05:76:5d:6b:e5:6e:1f:d4:a6:c1:87:24:9c:dc:cc: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:38:54:9F:62:F2:03:10:4C:60:63:AC:5D:B8:6E:3B:A6:CC:DD:62 X509v3 Authority Key Identifier: keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ea:68:92:ca:64:f5:f5:dc:b5:84:01:98:0c:4b:d4:a3:68: d3:bc:0e:67:69:18:f2:f0:1b:aa:d7:fb:e0:64:fc:c1:78:99: 19:64:10:0b:a0:2d:8d:e5:82:8a:26:9f:dc:76:82:4e:80:c7: 16:03:fe:28:81:c9:4d:0d:05:0f:17:11:c7:35:0d:f5:97:ae: 2e:b8:5a:34:ad:c9:0f:e8:31:ff:c3:63:de:a1:5a:c3:b2:59: 7b:9e:93:2d:f0:82:3f:9c:d4:dd:45:ce:d4:be:94:9e:e4:46: e1:23:c7:c2:6d:02:61:b7:70:80:8e:e8:cb:d3:31:1c:9a:42: db:b0:b7:81:da:14:57:13:d5:e4:62:b7:2b:8d:ea:c4:ac:a3: c0:44:52:59:96:6c:8f:38:f5:07:84:3d:91:33:31:9e:b5:44: e6:5e:b9:75:5c:d3:46:3d:53:e5:22:f8:9b:f0:d2:15:46:b7: 81:d0:63:8b:c5:70:52:b6:7e:9c:0e:b6:aa:2a:3c:1f:97:b3: 48:3d:92:36:5c:b7:f7:ed:e5:33:55:1c:5b:22:b2:64:bc:c2: e6:41:c0:ed:c8:02:96:b7:e7:be:86:5a:01:b5:df:0e:f1:86: c4:7b:b4:a5:37:6d:ae:6b:06:6f:dd:8d:25:3d:8a:ab:67:95: f5:40:a3:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cBVfqiMvf/gKB9oh0vWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZTMxNmJhOGZiMzA1NjdjZWNiYzcyNzA1MWQzNjQwMGUy NTFmYzcwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD Eyg3MjM4NTQ5ZjYyZjIwMzEwNGM2MDYzYWM1ZGI4NmUzYmE2Y2NkZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WC9m0qGT8gqsHQAq0L04iEK1kW+ kG2WaGIzb882tyV2f853XzVFpjFNsdh1j/wjf4KlRGp9k9qcid9Fg5LRgVGSq6Qw bly0sRrNdn5aZwyCmjeXl/49Uuf5Q8GnnYdH/reN4pJp2HPNfjE3IuEZaSoryTJx I1R397S3J86Ed+duWXKnkXEEH0AV6ts7xtErATT7GaeFty9nPpagnfGm6QhlEQKb qzclbBcshIsI/B80YHfNW1+f2ZcCCdm9nsyskSCSZLkf2qx9r2dW2mSa2kmzZTEd mTQK8J8ZXCT2PKnfGnJe/A2MyOREj62sqUQFdl1r5W4f1KbBhySc3MxqNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI4VJ9i8gMQTGBjrF24bjumzN1iMB8GA1UdIwQY MBaAFFzjFrqPswVnzsvHJwUdNkAOJR/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYt MjY3MjlkODk0ZWY3LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYtMjY3MjlkODk0ZWY3 LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOepokspk 9fXctYQBmAxL1KNo07wOZ2kY8vAbqtf74GT8wXiZGWQQC6AtjeWCiiaf3HaCToDH FgP+KIHJTQ0FDxcRxzUN9ZeuLrhaNK3JD+gx/8Nj3qFaw7JZe56TLfCCP5zU3UXO 1L6UnuRG4SPHwm0CYbdwgI7oy9MxHJpC27C3gdoUVxPV5GK3K43qxKyjwERSWZZs jzj1B4Q9kTMxnrVE5l65dVzTRj1T5SL4m/DSFUa3gdBji8VwUrZ+nA62qio8H5ez SD2SNly39+3lM1UcWyKyZLzC5kHA7cgClrfnvoZaAbXfDvGGxHu0pTdtrmsGb92N JT2Kq2eV9UCj7g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:22 2025 by rpki-client