This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json) Hash identifier: LOxgc+Gvz8l0CD6ev3MWaIlsp9Pxj5XAs9LSQw3j7I4= Subject key identifier: C8:E5:15:AA:40:F7:6B:D6:0E:EB:B7:24:82:00:8D:08:DB:54:2C:9D Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5 Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5 Certificate serial: 019AF4658E77310FEF88BF21EC6B2486B912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft Manifest number: 1082 Signing time: Sat 06 Dec 2025 16:01:27 +0000 Manifest this update: Sat 06 Dec 2025 16:01:27 +0000 Manifest next update: Sun 07 Dec 2025 16:01:27 +0000 Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: aHP4qYPFCOha2+SGFqiSjxhXUX4ac5+tW41HBVIcPGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:8e:77:31:0f:ef:88:bf:21:ec:6b:24:86:b9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5 Validity Not Before: Dec 6 16:01:27 2025 GMT Not After : Dec 7 16:01:27 2025 GMT Subject: CN=c8e515aa40f76bd60eebb72482008d08db542c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:64:f8:55:61:83:be:d5:58:45:9f:ca:6d: 8d:66:23:8b:5a:d6:5a:a9:e1:3f:91:7a:50:1f:68: 64:f3:ef:c8:22:39:dc:5a:48:a6:b1:6f:09:5f:29: d9:3e:00:3f:d7:0d:8f:21:dd:3a:ec:a9:d5:46:8a: 2c:a7:06:29:36:ae:51:1a:d2:11:4a:6d:b3:20:71: 76:fc:fb:6c:50:40:e0:08:ce:88:1f:41:fd:7a:05: 9b:ff:cb:9c:6b:fc:9f:65:04:9f:17:32:2e:96:2e: bb:e9:5b:d3:58:7e:74:7d:41:dc:de:bc:38:78:c5: 06:67:ab:73:bc:59:f8:97:b3:9a:2c:bf:62:cf:f3: c9:5e:18:79:8f:8f:e6:5d:7a:d1:48:61:fd:7a:57: e1:11:ee:8f:66:40:e1:88:cb:85:5b:0e:c3:b9:95: 31:82:b4:9f:5e:64:6c:12:8f:f5:9f:5c:de:05:89: f2:7e:0f:17:be:8c:b3:df:64:c9:10:b7:45:4f:b4: 5d:31:75:da:94:ef:d9:38:af:36:5c:a1:08:0d:4f: 11:24:2b:47:6c:1b:b3:01:37:63:8c:02:c5:ce:93: b9:7e:4a:85:67:ad:d1:d2:03:a2:53:99:4e:06:36: ba:0b:70:66:eb:77:8b:ea:32:72:b2:95:ac:8e:29: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E5:15:AA:40:F7:6B:D6:0E:EB:B7:24:82:00:8D:08:DB:54:2C:9D X509v3 Authority Key Identifier: keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:21:de:73:0b:12:5d:63:bf:bb:98:3f:27:05:63:ae:90:27: c5:ef:fb:12:d9:1e:cc:52:b9:3d:6a:3a:9d:11:69:69:61:4f: 6d:67:b8:fe:a7:62:9e:b6:87:c5:48:07:d3:7b:7b:3a:ce:c4: 20:6b:fe:3f:41:84:53:ac:c1:3d:29:5a:fc:11:f9:2c:bf:9b: d9:ef:6a:3d:df:72:20:57:4a:c6:be:d5:d7:f1:cb:4b:83:90: 31:b6:c3:93:69:0d:90:d2:35:c3:c0:e4:c8:15:fd:10:1c:1d: 74:5d:93:a5:44:5e:ad:1d:17:2b:0e:95:bd:40:c2:6e:e5:20: 77:78:0a:da:a7:14:a8:21:8b:f0:1c:01:c3:31:f4:76:d9:95: a5:1a:af:41:96:ab:23:f1:34:09:45:a4:d0:51:f7:37:0a:06: bd:b5:b7:8a:f5:f1:a7:8e:d5:65:e1:fe:c3:65:a1:2a:bf:1d: 32:52:63:62:29:89:d4:e5:17:56:88:a8:10:8a:a3:35:8f:6a: fe:46:b1:b5:2a:a2:2a:56:59:5c:49:4e:b5:b1:49:20:b4:b5: ac:25:f8:a1:dc:86:0e:6d:0c:6c:7a:62:6b:0a:ce:0e:1e:6f: aa:f1:28:2c:56:c8:a7:d0:91:cb:ef:8a:57:41:da:44:1b:80: 30:7f:67:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZY53MQ/viL8h7GskhrkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTQ0Y2U0MGQxMWQ2MWQzYjgwYTdkMTAzMjMwMTIzZmI3 ZDY4YTUwHhcNMjUxMjA2MTYwMTI3WhcNMjUxMjA3MTYwMTI3WjAzMTEwLwYDVQQD EyhjOGU1MTVhYTQwZjc2YmQ2MGVlYmI3MjQ4MjAwOGQwOGRiNTQyYzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOVk+FVhg77VWEWfym2NZiOLWtZa qeE/kXpQH2hk8+/IIjncWkimsW8JXynZPgA/1w2PId067KnVRoospwYpNq5RGtIR Sm2zIHF2/PtsUEDgCM6IH0H9egWb/8uca/yfZQSfFzIuli676VvTWH50fUHc3rw4 eMUGZ6tzvFn4l7OaLL9iz/PJXhh5j4/mXXrRSGH9elfhEe6PZkDhiMuFWw7DuZUx grSfXmRsEo/1n1zeBYnyfg8Xvoyz32TJELdFT7RdMXXalO/ZOK82XKEIDU8RJCtH bBuzATdjjALFzpO5fkqFZ63R0gOiU5lOBja6C3Bm63eL6jJyspWsjinhowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjlFapA92vWDuu3JIIAjQjbVCydMB8GA1UdIwQY MBaAFMVUTOQNEdYdO4Cn0QMjASP7fWilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQt NTI3Y2IyNGRiZDQwLzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQtNTI3Y2IyNGRiZDQw LzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuiHecwsS XWO/u5g/JwVjrpAnxe/7EtkezFK5PWo6nRFpaWFPbWe4/qdinraHxUgH03t7Os7E IGv+P0GEU6zBPSla/BH5LL+b2e9qPd9yIFdKxr7V1/HLS4OQMbbDk2kNkNI1w8Dk yBX9EBwddF2TpURerR0XKw6VvUDCbuUgd3gK2qcUqCGL8BwBwzH0dtmVpRqvQZar I/E0CUWk0FH3NwoGvbW3ivXxp47VZeH+w2WhKr8dMlJjYimJ1OUXVoioEIqjNY9q /kaxtSqiKlZZXElOtbFJILS1rCX4odyGDm0MbHpiawrODh5vqvEoLFbIp9CRy++K V0HaRBuAMH9npA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:37 2025 by rpki-client