This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft File: xLxp1Co7FePOy5HHcrpkM8URvpk.mft (raw, json) Hash identifier: fuHF7/MTQZJ4AZQ++AET0Z3em+XLW5ssbzMvd9C8izk= Subject key identifier: 03:EC:0F:F6:C8:1F:C7:BE:18:14:E7:96:2A:EC:AE:DD:33:74:0B:6C Authority key identifier: C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99 Certificate issuer: /CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99 Certificate serial: 019AF23FB1603C390911BF7E268005796D2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 06:00:51 +0000 Manifest this update: Sat 06 Dec 2025 06:00:51 +0000 Manifest next update: Sun 07 Dec 2025 06:00:51 +0000 Files and hashes: 1: xLxp1Co7FePOy5HHcrpkM8URvpk.crl (hash: j1W9iAKlNC8r1obwmDqSACplyEgN15dGSEYL5Hm0WXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b1:60:3c:39:09:11:bf:7e:26:80:05:79:6d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4bc69d42a3b15e3cecb91c772ba6433c511be99 Validity Not Before: Dec 6 06:00:51 2025 GMT Not After : Dec 7 06:00:51 2025 GMT Subject: CN=03ec0ff6c81fc7be1814e7962aecaedd33740b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:d7:5a:da:b9:52:f1:6a:32:93:56:2f:e1: 79:70:d6:af:19:66:2f:f7:26:74:2b:fb:fa:9d:18: 09:53:78:db:b6:04:86:30:16:dc:e3:57:c5:aa:36: 70:6a:cd:d1:bd:5a:20:94:86:aa:90:de:7c:c6:4c: 2c:c8:5f:b7:c2:01:d2:0d:d1:6b:48:23:cb:e0:5b: 16:76:d1:31:71:a4:63:55:97:43:47:7c:94:24:e8: 0a:82:e9:24:63:1d:05:4d:44:b3:eb:e3:d2:7f:3a: 35:88:45:2e:7c:e7:5f:25:f1:1e:a1:c7:0d:f9:54: 65:fe:8c:bf:98:c7:fb:79:d8:4b:e1:92:f8:71:13: 28:64:da:b8:05:64:14:2e:9c:42:2b:f6:7b:a6:49: 78:7e:92:a2:b0:a8:be:ed:01:46:f4:7f:b1:d1:69: 39:3b:53:82:be:9a:30:d9:2f:c9:96:2d:85:ab:70: cc:eb:15:7a:62:2f:da:67:5f:14:a5:40:31:2f:3a: fa:0d:33:b9:33:28:92:92:6f:aa:cd:18:83:ae:43: 3d:be:84:e2:3f:be:73:bb:be:63:7a:d2:ee:ed:a9: e7:e0:74:3e:64:1b:ce:0a:0e:11:58:9e:4e:6d:4e: cc:d7:e9:e8:83:69:6d:b5:4b:00:10:fc:72:70:90: c2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:EC:0F:F6:C8:1F:C7:BE:18:14:E7:96:2A:EC:AE:DD:33:74:0B:6C X509v3 Authority Key Identifier: keyid:C4:BC:69:D4:2A:3B:15:E3:CE:CB:91:C7:72:BA:64:33:C5:11:BE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLxp1Co7FePOy5HHcrpkM8URvpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d8c21b-fe36-4a2e-ac2e-d17f98114070/1/xLxp1Co7FePOy5HHcrpkM8URvpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:8b:b7:eb:a1:7d:63:79:65:10:de:8e:31:ef:d9:02:fb:2e: 2a:60:bb:0c:39:0a:4f:3a:bf:a7:66:c0:53:1a:ca:17:9d:81: 6c:fb:78:b3:0d:6e:64:af:96:53:1f:f8:34:5c:84:86:1a:12: c3:23:72:64:55:75:ee:1c:e6:d6:3a:72:7b:50:47:10:ff:28: 81:e8:95:3e:d6:e1:5e:24:6e:f8:fd:94:b3:83:61:bf:73:5f: 9c:4d:98:5b:44:61:ef:53:74:d1:2b:58:74:b7:62:57:ed:95: 34:1e:92:d1:04:cc:c8:4c:ac:65:da:ee:f0:a8:93:67:33:24: 82:9e:67:87:b2:c4:ee:13:59:ab:8c:2e:2c:32:55:dc:ae:d8: 3a:48:93:72:3e:1a:6c:9f:85:8b:c9:ed:12:31:d1:2a:91:c5: 7a:7a:f5:2f:c2:43:43:de:5e:b6:ec:72:c1:6a:91:96:91:a4: 69:14:c8:8c:dc:77:c0:9f:6f:ea:a2:c5:17:ed:18:a0:b1:00: bc:c9:62:7c:43:6f:be:d0:91:b2:41:f2:e5:6e:75:d7:e7:42: 80:e3:48:3d:b2:38:ef:55:5a:35:97:fa:5e:b6:dc:b7:a4:50: 67:cd:8b:ee:a5:95:ba:17:09:c3:3a:77:16:60:61:45:7f:5f: a6:94:d3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7FgPDkJEb9+JoAFeW0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YmM2OWQ0MmEzYjE1ZTNjZWNiOTFjNzcyYmE2NDMzYzUx MWJlOTkwHhcNMjUxMjA2MDYwMDUxWhcNMjUxMjA3MDYwMDUxWjAzMTEwLwYDVQQD EygwM2VjMGZmNmM4MWZjN2JlMTgxNGU3OTYyYWVjYWVkZDMzNzQwYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK7XWtq5UvFqMpNWL+F5cNavGWYv 9yZ0K/v6nRgJU3jbtgSGMBbc41fFqjZwas3RvVoglIaqkN58xkwsyF+3wgHSDdFr SCPL4FsWdtExcaRjVZdDR3yUJOgKgukkYx0FTUSz6+PSfzo1iEUufOdfJfEeoccN +VRl/oy/mMf7edhL4ZL4cRMoZNq4BWQULpxCK/Z7pkl4fpKisKi+7QFG9H+x0Wk5 O1OCvpow2S/Jli2Fq3DM6xV6Yi/aZ18UpUAxLzr6DTO5MyiSkm+qzRiDrkM9voTi P75zu75jetLu7ann4HQ+ZBvOCg4RWJ5ObU7M1+nog2lttUsAEPxycJDCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPsD/bIH8e+GBTnlirsrt0zdAtsMB8GA1UdIwQY MBaAFMS8adQqOxXjzsuRx3K6ZDPFEb6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kOGMyMWItZmUzNi00YTJlLWFjMmUt ZDE3Zjk4MTE0MDcwLzEveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kOGMyMWItZmUzNi00YTJlLWFjMmUtZDE3Zjk4MTE0MDcw LzEveEx4cDFDbzdGZVBPeTVISGNycGtNOFVSdnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArou366F9 Y3llEN6OMe/ZAvsuKmC7DDkKTzq/p2bAUxrKF52BbPt4sw1uZK+WUx/4NFyEhhoS wyNyZFV17hzm1jpye1BHEP8ogeiVPtbhXiRu+P2Us4Nhv3NfnE2YW0Rh71N00StY dLdiV+2VNB6S0QTMyEysZdru8KiTZzMkgp5nh7LE7hNZq4wuLDJV3K7YOkiTcj4a bJ+Fi8ntEjHRKpHFenr1L8JDQ95etuxywWqRlpGkaRTIjNx3wJ9v6qLFF+0YoLEA vMlifENvvtCRskHy5W511+dCgONIPbI471VaNZf6Xrbct6RQZ82L7qWVuhcJwzp3 FmBhRX9fppTT5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:03 2025 by rpki-client