This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft File: XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft (raw, json) Hash identifier: UuHQ7IJ7saVfyHhDGKxroX8BA1NLbbSKOyVR7ISAiRw= Subject key identifier: CD:BF:E5:A9:7A:E6:68:B7:58:83:47:BB:65:AD:98:06:A3:81:22:0B Authority key identifier: 5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2 Certificate issuer: /CN=5ea85f1dd4d0346480f009874a8f5670e31085c2 Certificate serial: 019AF46583C635B09687E2E0B3C8644FDA8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 16:01:24 +0000 Manifest this update: Sat 06 Dec 2025 16:01:24 +0000 Manifest next update: Sun 07 Dec 2025 16:01:24 +0000 Files and hashes: 1: XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl (hash: yEf2zPvTnu4RTcHyD57frANOhSTKNgXXAkmdTI7/Ckw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:83:c6:35:b0:96:87:e2:e0:b3:c8:64:4f:da:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea85f1dd4d0346480f009874a8f5670e31085c2 Validity Not Before: Dec 6 16:01:24 2025 GMT Not After : Dec 7 16:01:24 2025 GMT Subject: CN=cdbfe5a97ae668b7588347bb65ad9806a381220b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:5c:91:1f:c5:5d:62:75:ce:0f:ca:99:fb: c9:44:c4:95:f3:96:20:27:04:21:92:56:68:df:f7: 08:dd:39:e8:2c:80:87:20:d7:93:99:8c:57:7c:24: 58:a7:68:8f:78:f3:14:7c:b2:ea:4e:ce:b7:35:23: 2f:11:4f:d1:c8:3c:8b:5e:30:e0:22:e3:eb:6b:63: 45:80:0e:20:38:f3:17:cf:0d:50:31:5e:9c:e6:94: d2:75:81:0f:78:d2:4e:bb:49:25:b8:e1:da:40:be: eb:e8:58:50:e8:0e:c8:38:6b:44:70:0d:c9:f7:39: 54:0b:a1:00:e6:ae:b1:ea:85:0d:4a:2f:a5:91:73: ff:a2:a0:22:ed:82:ae:46:11:a2:da:f4:d6:4c:66: d3:69:30:2a:e0:c4:33:86:95:a7:e9:81:76:aa:d1: e8:e2:27:e2:b0:7a:35:ac:04:e5:b5:d9:48:16:4f: 16:7d:21:40:77:5b:7e:ae:c7:de:f1:96:89:51:b5: 59:14:9f:5b:76:9a:df:11:ec:f2:5b:bc:d4:13:c1: 39:39:5e:88:97:5c:1e:9d:ad:08:7d:68:28:bc:50: 01:7f:71:f5:ae:a6:ff:4c:50:f9:21:d8:9f:3b:8c: b0:e4:c1:e3:d1:d6:8e:33:66:c8:d0:0c:fc:91:b2: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:E5:A9:7A:E6:68:B7:58:83:47:BB:65:AD:98:06:A3:81:22:0B X509v3 Authority Key Identifier: keyid:5E:A8:5F:1D:D4:D0:34:64:80:F0:09:87:4A:8F:56:70:E3:10:85:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqhfHdTQNGSA8AmHSo9WcOMQhcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ef7808-122b-4b89-9358-590c5f1b01b3/1/XqhfHdTQNGSA8AmHSo9WcOMQhcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:56:b3:22:e1:02:11:b3:a6:30:39:8a:66:fa:83:af:66: 89:d5:3e:a8:a9:5e:38:57:c5:34:94:5d:ac:b3:11:d8:f0:e2: 57:80:3d:49:96:1b:d2:97:47:f3:61:d4:eb:3f:3f:19:6a:7c: a0:a3:11:e5:81:d3:70:42:00:7f:27:15:71:e8:81:fd:92:32: b1:49:6d:e4:20:c4:97:fd:ae:e8:a5:34:f6:d1:52:d2:6d:03: 66:de:6f:59:48:18:3e:e9:6c:25:1e:b3:78:bd:6a:f9:8b:8c: a0:5e:b1:b2:25:0a:de:c8:7c:93:60:ae:9a:08:d3:b9:aa:88: 17:03:c0:f8:2d:33:bc:30:0a:a0:11:0b:df:bc:be:36:0e:f1: 6d:6b:4b:d5:43:5a:2a:12:2f:25:c0:7f:02:f4:68:63:aa:cf: 8c:a6:ca:bf:f3:00:8b:81:27:44:b7:4e:21:01:cc:91:5f:7c: 3b:f0:f6:9f:3c:0c:9f:7e:e3:97:68:77:45:70:75:50:d1:3c: 1d:11:40:ec:da:9f:61:c2:7a:af:ff:a4:ad:e8:63:ea:05:56: d2:89:63:6e:f1:b4:03:92:e9:f2:c6:cf:0e:98:ff:9b:3c:86: f3:41:bc:b3:d7:e9:41:d1:75:d1:78:b1:a7:92:90:65:53:af: 45:13:9f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYPGNbCWh+Lgs8hkT9qNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTg1ZjFkZDRkMDM0NjQ4MGYwMDk4NzRhOGY1NjcwZTMx MDg1YzIwHhcNMjUxMjA2MTYwMTI0WhcNMjUxMjA3MTYwMTI0WjAzMTEwLwYDVQQD EyhjZGJmZTVhOTdhZTY2OGI3NTg4MzQ3YmI2NWFkOTgwNmEzODEyMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIhckR/FXWJ1zg/KmfvJRMSV85Yg JwQhklZo3/cI3TnoLICHINeTmYxXfCRYp2iPePMUfLLqTs63NSMvEU/RyDyLXjDg IuPra2NFgA4gOPMXzw1QMV6c5pTSdYEPeNJOu0kluOHaQL7r6FhQ6A7IOGtEcA3J 9zlUC6EA5q6x6oUNSi+lkXP/oqAi7YKuRhGi2vTWTGbTaTAq4MQzhpWn6YF2qtHo 4ifisHo1rATltdlIFk8WfSFAd1t+rsfe8ZaJUbVZFJ9bdprfEezyW7zUE8E5OV6I l1wena0IfWgovFABf3H1rqb/TFD5IdifO4yw5MHj0daOM2bI0Az8kbLKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2/5al65mi3WINHu2WtmAajgSILMB8GA1UdIwQY MBaAFF6oXx3U0DRkgPAJh0qPVnDjEIXCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9lZjc4MDgtMTIyYi00Yjg5LTkzNTgt NTkwYzVmMWIwMWIzLzEvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9lZjc4MDgtMTIyYi00Yjg5LTkzNTgtNTkwYzVmMWIwMWIz LzEvWHFoZkhkVFFOR1NBOEFtSFNvOVdjT01RaGNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyRWsyLh AhGzpjA5imb6g69midU+qKleOFfFNJRdrLMR2PDiV4A9SZYb0pdH82HU6z8/GWp8 oKMR5YHTcEIAfycVceiB/ZIysUlt5CDEl/2u6KU09tFS0m0DZt5vWUgYPulsJR6z eL1q+YuMoF6xsiUK3sh8k2CumgjTuaqIFwPA+C0zvDAKoBEL37y+Ng7xbWtL1UNa KhIvJcB/AvRoY6rPjKbKv/MAi4EnRLdOIQHMkV98O/D2nzwMn37jl2h3RXB1UNE8 HRFA7NqfYcJ6r/+krehj6gVW0oljbvG0A5Lp8sbPDpj/mzyG80G8s9fpQdF10Xix p5KQZVOvRROfwA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:45 2025 by rpki-client