This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft File: XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json) Hash identifier: /sfA9uTdgvUcocaklSHh+VNkNYEvtzbc/QkIV76Ob9c= Subject key identifier: A1:6B:28:ED:99:31:E4:41:84:64:98:65:BC:06:15:F6:A1:A6:FA:0B Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE Certificate issuer: /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Certificate serial: 019AF509BEA23ABF2CE8344C1CECB4AD0DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 19:00:47 +0000 Manifest this update: Sat 06 Dec 2025 19:00:47 +0000 Manifest next update: Sun 07 Dec 2025 19:00:47 +0000 Files and hashes: 1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: X8jhThuQH+lzKR4ZkKAX0IhXDj8Y9KNrKwDPNBXWG08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:be:a2:3a:bf:2c:e8:34:4c:1c:ec:b4:ad:0d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae Validity Not Before: Dec 6 19:00:47 2025 GMT Not After : Dec 7 19:00:47 2025 GMT Subject: CN=a16b28ed9931e44184649865bc0615f6a1a6fa0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:d5:5b:70:b9:6a:9d:35:e1:e0:2f:69:b4: 32:9b:d8:7d:84:52:5a:da:a0:ab:28:e4:35:3d:e1: 5b:55:f2:8f:13:5b:bc:79:45:54:9d:bd:f9:75:04: 22:da:dc:79:ef:ca:43:73:35:0a:68:2d:32:5b:21: d1:c2:ac:b3:1e:d0:ce:7e:89:df:6a:18:80:16:a7: 27:0f:07:3a:ed:0d:42:19:7f:0a:fd:78:a4:a1:cb: 94:98:e3:68:96:6a:66:14:b7:62:e8:1c:62:70:2d: 87:a0:08:f1:78:f9:7c:26:ee:42:c7:44:aa:39:66: d7:6e:06:cd:5c:e8:da:81:25:7c:d4:ca:20:86:01: fe:4a:98:8a:ed:bd:af:37:46:23:64:d0:4b:10:0b: c8:56:a4:b8:8c:15:ed:d9:f0:29:6b:37:d5:5d:46: 47:23:81:16:cf:2c:b5:2b:a8:b1:1d:60:32:86:0a: f9:4b:0c:0a:35:1c:b6:12:82:2c:7d:88:7c:87:a1: b0:b0:8d:14:f6:08:70:6a:bf:ae:7d:b5:c4:b6:05: 80:ae:ee:11:c2:8e:99:85:89:a0:71:a9:9d:e8:ec: d7:c7:86:43:cc:0a:77:fb:61:c3:f7:15:d9:84:6f: 5f:73:c3:07:4b:e2:b6:73:77:9e:e5:72:01:d5:10: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:28:ED:99:31:E4:41:84:64:98:65:BC:06:15:F6:A1:A6:FA:0B X509v3 Authority Key Identifier: keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ea:cf:67:3c:07:a4:e7:79:a9:47:39:be:83:b2:d7:f8:61: a2:17:63:59:65:b0:37:17:49:7e:5f:24:c4:9a:de:f0:6d:31: b5:51:10:d4:5c:d2:ac:77:b0:f3:1d:09:5c:ed:bc:52:66:c7: 3d:e3:85:17:92:8b:14:61:89:2b:51:cf:a4:cd:45:a3:4e:94: 5c:9a:04:26:d5:02:6d:9c:8e:98:46:ec:95:90:e3:9e:47:c0: c6:6d:1c:04:58:95:df:33:44:66:ff:0b:cb:04:5f:06:0a:64: 10:2c:af:2d:c7:76:9d:7e:0d:cd:8a:2e:8d:c7:45:1e:62:29: 41:f6:c1:a4:cc:80:fe:9b:6a:95:2c:6c:43:9e:4a:67:0a:21: 45:2f:c5:61:57:8c:22:d8:d6:04:06:f5:7b:ab:f9:53:c9:01: 0d:d9:56:9d:3d:af:f4:65:eb:74:48:be:24:98:24:8e:a6:68: 56:81:9a:aa:08:6f:f4:11:8c:48:7d:52:2b:d0:a2:f4:7a:08: bd:e8:e0:0f:12:93:4f:ac:4f:4b:02:8b:ba:67:3d:ce:12:93: a9:00:4f:22:95:60:7b:36:a2:6b:ee:31:90:e9:c2:c0:ee:ba: e3:9d:77:51:7c:e6:91:f4:97:1b:99:98:95:e9:07:d2:2d:38: e5:69:8a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cb6iOr8s6DRMHOy0rQ3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDI0NmJmZmUwNGUyZDZmMWUxOTM5ZmU2Mzg2YTI0ZGZj ZGY3YWUwHhcNMjUxMjA2MTkwMDQ3WhcNMjUxMjA3MTkwMDQ3WjAzMTEwLwYDVQQD EyhhMTZiMjhlZDk5MzFlNDQxODQ2NDk4NjViYzA2MTVmNmExYTZmYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSbVW3C5ap014eAvabQym9h9hFJa 2qCrKOQ1PeFbVfKPE1u8eUVUnb35dQQi2tx578pDczUKaC0yWyHRwqyzHtDOfonf ahiAFqcnDwc67Q1CGX8K/XikocuUmONolmpmFLdi6BxicC2HoAjxePl8Ju5Cx0Sq OWbXbgbNXOjagSV81MoghgH+SpiK7b2vN0YjZNBLEAvIVqS4jBXt2fApazfVXUZH I4EWzyy1K6ixHWAyhgr5SwwKNRy2EoIsfYh8h6GwsI0U9ghwar+ufbXEtgWAru4R wo6ZhYmgcamd6OzXx4ZDzAp3+2HD9xXZhG9fc8MHS+K2c3ee5XIB1RBUawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFrKO2ZMeRBhGSYZbwGFfahpvoLMB8GA1UdIwQY MBaAFF4CRr/+BOLW8eGTn+Y4aiTfzfeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQt NGM5MWNiOWVjOThiLzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YWE4ODItZWUwMi00YzA1LWI3NDQtNGM5MWNiOWVjOThi LzEvWGdKR3ZfNEU0dGJ4NFpPZjVqaHFKTl9OOTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOrPZzwH pOd5qUc5voOy1/hhohdjWWWwNxdJfl8kxJre8G0xtVEQ1FzSrHew8x0JXO28UmbH PeOFF5KLFGGJK1HPpM1Fo06UXJoEJtUCbZyOmEbslZDjnkfAxm0cBFiV3zNEZv8L ywRfBgpkECyvLcd2nX4NzYoujcdFHmIpQfbBpMyA/ptqlSxsQ55KZwohRS/FYVeM ItjWBAb1e6v5U8kBDdlWnT2v9GXrdEi+JJgkjqZoVoGaqghv9BGMSH1SK9Ci9HoI vejgDxKTT6xPSwKLumc9zhKTqQBPIpVgezaia+4xkOnCwO664513UXzmkfSXG5mY lekH0i045WmKvg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:42 2025 by rpki-client