This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft File: Xm0H9Lv9HbNwmWp192soq8TWs-o.mft (raw, json) Hash identifier: qc4+tpLX59a/cVwBhE1p+B5qaYsIj8NdAgoSwGL/XcI= Subject key identifier: 7D:6B:53:DF:FB:6F:9F:BB:92:4F:64:14:93:9C:26:79:CC:B9:6F:FB Authority key identifier: 5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA Certificate issuer: /CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea Certificate serial: 019AF1D21C8C31E21CC8DD3364833E1BF2B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft Manifest number: 0546 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: Xm0H9Lv9HbNwmWp192soq8TWs-o.crl (hash: bSslwodoBNAWea6OkEkhIDqvsQUF8mTEJrog4rNfvOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1c:8c:31:e2:1c:c8:dd:33:64:83:3e:1b:f2:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6d07f4bbfd1db370996a75f76b28abc4d6b3ea Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=7d6b53dffb6f9fbb924f6414939c2679ccb96ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:01:5d:97:5c:52:b0:50:a4:02:dd:03:79:6a: 55:fa:75:c6:62:8d:06:5b:0c:8a:89:52:d0:9c:f4: 85:e7:91:a9:19:80:8d:cb:82:a2:7c:91:b4:77:cc: f6:55:d4:80:fa:8b:c4:c7:67:d7:ce:21:b1:a3:32: bf:58:4c:a6:fc:39:70:a0:99:9a:ab:1b:46:6c:e2: b4:01:c0:69:ce:01:06:ee:3c:f3:3e:b9:fe:34:5d: 1f:d1:c7:29:61:df:61:7a:d6:64:ae:fd:1d:cb:b5: 5a:da:86:8d:26:8c:f6:52:4c:74:62:80:e2:6d:08: 03:ea:53:a3:7c:8c:82:44:1f:33:81:cf:08:47:e8: ea:95:d0:42:cd:62:8a:70:80:0a:08:45:01:e3:0f: 7f:90:f4:cc:fc:82:35:09:44:96:85:c4:f9:54:89: a2:f5:c5:e4:be:60:7a:de:49:bd:e2:e7:5b:d0:39: cf:fb:45:8d:be:41:35:ce:49:95:c1:0d:23:7b:cd: 83:84:3d:a0:16:e9:80:25:5f:ae:23:5f:1e:78:84: 41:fc:43:97:01:51:54:0b:4f:30:84:8f:35:1d:74: ea:68:fc:47:91:93:36:aa:76:f2:07:08:1b:fe:ac: 80:8b:61:55:d3:ed:3f:d6:b3:8f:11:92:4b:06:8a: 8c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6B:53:DF:FB:6F:9F:BB:92:4F:64:14:93:9C:26:79:CC:B9:6F:FB X509v3 Authority Key Identifier: keyid:5E:6D:07:F4:BB:FD:1D:B3:70:99:6A:75:F7:6B:28:AB:C4:D6:B3:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xm0H9Lv9HbNwmWp192soq8TWs-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/fd1fbc-cb90-4827-8ed0-00c3b612e98c/1/Xm0H9Lv9HbNwmWp192soq8TWs-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4b:8e:bc:aa:6a:eb:06:ee:69:f6:d5:1d:d7:d0:62:be:e8: ba:73:11:7b:97:d6:73:29:cd:af:8b:c3:5d:a5:d7:4e:6b:87: 64:92:1d:15:f1:4b:a1:5d:cb:f3:07:25:3f:da:8e:3f:8f:20: 0a:e7:f3:08:39:ea:18:f7:3b:eb:fc:98:a0:d4:6d:89:dd:99: f8:99:29:0a:68:22:ea:da:11:40:30:5a:3d:b6:7c:c4:c6:06: 74:63:8f:1c:5a:b8:c0:04:65:38:c1:d1:ba:00:fd:a5:49:1f: 3d:6d:6d:85:e7:0c:06:41:8f:d9:6c:85:c4:ed:e6:b2:09:7c: 93:70:97:08:38:41:52:fd:23:ca:73:dc:9f:7d:ee:05:7a:38: 68:24:6f:d3:ea:ea:6e:6d:d7:6d:11:5b:cb:e2:30:e0:b6:40: 9f:d1:df:f0:61:12:ad:31:87:b8:a3:2e:fc:6b:89:c1:38:87: 37:7a:3e:7d:d9:1c:f4:8d:30:f7:e7:e8:52:e1:74:13:16:bc: 13:66:6d:fc:0a:f1:5c:ce:c8:9a:29:43:a9:73:c1:f8:d0:ce: c9:e7:5e:12:86:04:83:e1:e3:56:e4:2e:c8:91:f4:db:4d:2d: f8:66:f4:50:c8:39:9e:2e:48:6d:3c:a4:a4:9e:52:70:a8:52: ef:2a:d2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hyMMeIcyN0zZIM+G/K1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmQwN2Y0YmJmZDFkYjM3MDk5NmE3NWY3NmIyOGFiYzRk NmIzZWEwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD Eyg3ZDZiNTNkZmZiNmY5ZmJiOTI0ZjY0MTQ5MzljMjY3OWNjYjk2ZmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgFdl1xSsFCkAt0DeWpV+nXGYo0G WwyKiVLQnPSF55GpGYCNy4KifJG0d8z2VdSA+ovEx2fXziGxozK/WEym/DlwoJma qxtGbOK0AcBpzgEG7jzzPrn+NF0f0ccpYd9hetZkrv0dy7Va2oaNJoz2Ukx0YoDi bQgD6lOjfIyCRB8zgc8IR+jqldBCzWKKcIAKCEUB4w9/kPTM/II1CUSWhcT5VImi 9cXkvmB63km94udb0DnP+0WNvkE1zkmVwQ0je82DhD2gFumAJV+uI18eeIRB/EOX AVFUC08whI81HXTqaPxHkZM2qnbyBwgb/qyAi2FV0+0/1rOPEZJLBoqM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1rU9/7b5+7kk9kFJOcJnnMuW/7MB8GA1UdIwQY MBaAFF5tB/S7/R2zcJlqdfdrKKvE1rPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAt MDBjM2I2MTJlOThjLzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9mZDFmYmMtY2I5MC00ODI3LThlZDAtMDBjM2I2MTJlOThj LzEvWG0wSDlMdjlIYk53bVdwMTkyc29xOFRXcy1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUuOvKpq 6wbuafbVHdfQYr7ounMRe5fWcynNr4vDXaXXTmuHZJIdFfFLoV3L8wclP9qOP48g CufzCDnqGPc76/yYoNRtid2Z+JkpCmgi6toRQDBaPbZ8xMYGdGOPHFq4wARlOMHR ugD9pUkfPW1thecMBkGP2WyFxO3msgl8k3CXCDhBUv0jynPcn33uBXo4aCRv0+rq bm3XbRFby+Iw4LZAn9Hf8GESrTGHuKMu/GuJwTiHN3o+fdkc9I0w9+foUuF0Exa8 E2Zt/ArxXM7ImilDqXPB+NDOyedeEoYEg+HjVuQuyJH0200t+Gb0UMg5ni5IbTyk pJ5ScKhS7yrSSw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:57 2025 by rpki-client