This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft File: xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft (raw, json) Hash identifier: JqM5cZtSl3g6iBzrMailITIKk46/kZ47b6oCjqa8+sE= Subject key identifier: 2F:8C:33:38:18:66:2D:02:B6:D9:E6:E7:E3:A7:AC:78:D7:05:4A:CB Authority key identifier: C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A Certificate issuer: /CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a Certificate serial: 019B4DE134D00016621436C7D109D544AFBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft Manifest number: 0EEF Signing time: Wed 24 Dec 2025 01:02:43 +0000 Manifest this update: Wed 24 Dec 2025 01:02:43 +0000 Manifest next update: Thu 25 Dec 2025 01:02:43 +0000 Files and hashes: 1: xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl (hash: 6foldriAcdOL6pThg1CXD1u8fIxyDueXeS2gE9SWNjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e1:34:d0:00:16:62:14:36:c7:d1:09:d5:44:af:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ccf9ce97d1232e0162fccd43f60c4e79831e1a Validity Not Before: Dec 24 01:02:43 2025 GMT Not After : Dec 25 01:02:43 2025 GMT Subject: CN=2f8c333818662d02b6d9e6e7e3a7ac78d7054acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:ce:51:2e:85:53:83:4d:0b:ff:10:01:46: 41:04:6f:f7:cf:f4:62:5a:d6:3f:1d:06:fd:41:01: 97:95:ed:e3:d7:48:57:64:68:72:87:42:da:01:5b: 2e:c5:a7:77:e8:40:ee:17:ec:4a:9e:5b:b2:5e:69: ee:27:f6:f4:07:67:fd:e8:28:16:61:46:61:52:14: 3b:62:bf:1d:78:27:4f:ee:b6:d0:7f:51:c2:b2:0a: 59:fb:2f:a4:eb:aa:26:db:89:e2:74:ef:fb:74:d5: 6e:c2:4b:c7:78:af:79:2f:6a:54:4f:11:7f:5c:e5: 32:1f:58:63:c5:aa:7b:ba:54:37:c0:6e:3d:5f:a7: f7:c9:7e:96:d7:6a:19:38:a3:11:13:27:e0:3b:29: 05:15:a1:4a:14:53:44:f7:9c:3f:05:a8:f6:c8:cc: f3:da:6b:ce:8e:21:51:3a:ad:50:fd:5e:63:89:f0: d3:63:65:ec:3e:c4:97:9a:1a:a7:21:38:e8:07:6f: 91:c0:7a:c0:fe:77:60:31:1e:84:0a:21:10:63:6c: d7:7f:89:35:44:8c:07:7a:a8:4f:53:c5:54:0f:da: d1:40:c6:5f:76:46:d6:a3:5f:d0:07:2e:33:54:4d: c1:d6:c7:c6:d9:ff:30:c6:70:64:2c:61:b4:9a:c3: d3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:8C:33:38:18:66:2D:02:B6:D9:E6:E7:E3:A7:AC:78:D7:05:4A:CB X509v3 Authority Key Identifier: keyid:C6:CC:F9:CE:97:D1:23:2E:01:62:FC:CD:43:F6:0C:4E:79:83:1E:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsz5zpfRIy4BYvzNQ_YMTnmDHho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/186bf2-fb88-4728-bf67-5a1e5fa73e4d/1/xsz5zpfRIy4BYvzNQ_YMTnmDHho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:84:38:00:88:c8:05:44:4c:f0:2d:b7:39:07:a2:e5:c9:e2: 1b:d0:85:61:ce:65:16:b9:88:d7:84:9c:d4:db:81:6d:02:d8: 16:09:55:43:bf:ad:5d:5d:68:39:aa:04:f0:91:e6:2b:21:13: 91:55:f4:1b:ba:d6:5b:24:e0:de:7e:b4:2a:ca:84:a7:f3:23: cc:9a:09:5f:69:c1:b0:7a:ce:ef:fa:f5:cf:29:7f:b3:10:ba: b9:38:3c:b9:fd:21:cf:ce:6a:88:fc:2a:69:02:bc:b2:39:7e: 59:e5:f8:98:c3:8d:63:af:01:3f:e6:37:29:c2:8d:95:f2:95: 38:77:66:17:41:ba:18:e4:31:9c:58:4c:6a:7c:9e:ba:82:2e: ca:05:0f:2b:8e:13:bf:6a:28:6d:6d:0b:4d:87:71:87:7a:85: c3:2f:3e:36:29:f9:f2:98:c7:38:ba:e5:36:82:5b:64:2d:41: 7f:df:ff:c0:6f:9b:d1:e8:80:ca:54:3e:d0:c9:23:61:fa:2e: 29:f7:4a:bc:7a:03:c6:02:14:38:aa:23:9f:00:26:55:b7:b1: f2:bd:02:79:c8:8e:e8:2b:93:86:f0:24:af:94:80:a9:a9:ff: a6:49:73:ee:4c:83:b5:75:70:15:c9:66:31:43:af:e4:6c:68: 74:85:78:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4TTQABZiFDbH0QnVRK+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2NmOWNlOTdkMTIzMmUwMTYyZmNjZDQzZjYwYzRlNzk4 MzFlMWEwHhcNMjUxMjI0MDEwMjQzWhcNMjUxMjI1MDEwMjQzWjAzMTEwLwYDVQQD EygyZjhjMzMzODE4NjYyZDAyYjZkOWU2ZTdlM2E3YWM3OGQ3MDU0YWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3jOUS6FU4NNC/8QAUZBBG/3z/Ri WtY/HQb9QQGXle3j10hXZGhyh0LaAVsuxad36EDuF+xKnluyXmnuJ/b0B2f96CgW YUZhUhQ7Yr8deCdP7rbQf1HCsgpZ+y+k66om24nidO/7dNVuwkvHeK95L2pUTxF/ XOUyH1hjxap7ulQ3wG49X6f3yX6W12oZOKMREyfgOykFFaFKFFNE95w/Baj2yMzz 2mvOjiFROq1Q/V5jifDTY2XsPsSXmhqnITjoB2+RwHrA/ndgMR6ECiEQY2zXf4k1 RIwHeqhPU8VUD9rRQMZfdkbWo1/QBy4zVE3B1sfG2f8wxnBkLGG0msPT4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+MMzgYZi0Cttnm5+OnrHjXBUrLMB8GA1UdIwQY MBaAFMbM+c6X0SMuAWL8zUP2DE55gx4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjct NWExZTVmYTczZTRkLzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8xODZiZjItZmI4OC00NzI4LWJmNjctNWExZTVmYTczZTRk LzEveHN6NXpwZlJJeTRCWXZ6TlFfWU1Ubm1ESGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToQ4AIjI BURM8C23OQei5cniG9CFYc5lFrmI14Sc1NuBbQLYFglVQ7+tXV1oOaoE8JHmKyET kVX0G7rWWyTg3n60KsqEp/MjzJoJX2nBsHrO7/r1zyl/sxC6uTg8uf0hz85qiPwq aQK8sjl+WeX4mMONY68BP+Y3KcKNlfKVOHdmF0G6GOQxnFhManyeuoIuygUPK44T v2oobW0LTYdxh3qFwy8+Nin58pjHOLrlNoJbZC1Bf9//wG+b0eiAylQ+0MkjYfou KfdKvHoDxgIUOKojnwAmVbex8r0CeciO6CuThvAkr5SAqan/pklz7kyDtXVwFclm MUOv5GxodIV4YA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:50:14 2025 by rpki-client