This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json) Hash identifier: VfVCnbZf64YLmmdbmB2o333M4oP1Bn2XgxpcgYOoN2c= Subject key identifier: 81:9C:42:13:0C:E1:B8:E7:79:21:78:79:B1:24:B8:EF:69:E0:66:89 Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b Certificate serial: 019B202B0EE3CE90228396C2536F67067F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft Manifest number: 0E59 Signing time: Mon 15 Dec 2025 04:00:51 +0000 Manifest this update: Mon 15 Dec 2025 04:00:51 +0000 Manifest next update: Tue 16 Dec 2025 04:00:51 +0000 Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: 1atCvydy3/kB9F+axv7Z1aEyu20VwN1lRscCMrYASL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:0e:e3:ce:90:22:83:96:c2:53:6f:67:06:7f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54a6558d6923be429d9389531adc1008795270b Validity Not Before: Dec 15 04:00:51 2025 GMT Not After : Dec 16 04:00:51 2025 GMT Subject: CN=819c42130ce1b8e779217879b124b8ef69e06689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:76:25:04:e5:c9:b8:40:65:c1:a5:e0:c8:98: 8c:a4:78:bd:23:96:33:2d:a3:e8:6c:e2:7c:e4:6a: d8:6a:26:dc:4b:97:6b:94:c0:ad:3c:dc:67:7a:5e: 52:42:ab:06:ad:61:1a:a5:a3:96:a7:7b:67:be:75: 5c:08:d7:c6:66:94:83:f9:c0:4c:c7:3f:fc:8a:1f: de:4f:cb:53:9b:56:60:1b:b9:d7:2b:da:2f:49:9a: c4:64:66:b3:f3:b2:ea:1d:62:49:7e:73:d3:af:a6: 6e:43:de:31:13:f9:f2:0d:f6:51:36:79:35:fc:17: f2:b1:e0:cd:31:44:38:9b:fd:b7:64:ac:d8:a0:3c: 3d:c2:9c:28:7c:26:0e:64:3b:35:db:6c:a6:ec:e0: 37:30:a4:61:05:06:7a:4a:d3:df:74:3f:cd:df:0c: 4a:d6:92:99:58:b3:64:0d:63:73:bd:27:6c:5e:fa: 89:d0:dd:7f:f0:08:64:ec:8b:06:4a:7a:25:4d:58: 51:0f:c8:a3:ae:50:93:d1:f0:6e:c8:0b:3b:fd:dd: c6:01:b3:52:f4:6d:e4:af:5c:9e:9f:48:e2:16:de: 2c:36:07:de:5b:88:2b:cf:9f:1d:12:a6:d1:67:2e: 0d:d1:da:b1:45:07:5f:d7:45:f0:e2:7a:8f:de:b8: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:9C:42:13:0C:E1:B8:E7:79:21:78:79:B1:24:B8:EF:69:E0:66:89 X509v3 Authority Key Identifier: keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b7:5b:95:15:c1:9e:d6:45:32:72:25:97:91:ef:c8:ce:b5: 51:fa:7b:d1:dd:ce:ac:c7:d9:e1:40:5b:fb:a9:d9:76:b2:14: 33:ab:64:df:e6:67:09:44:7f:7c:dc:32:c3:99:9f:85:1f:c7: ee:d7:3b:b0:d0:26:ee:08:f8:05:b6:6d:37:3d:83:72:20:17: 71:e5:b2:23:ee:f5:1a:ec:f4:4b:84:4a:c9:b4:3c:b2:95:9d: a2:a4:5c:99:78:1c:4c:ac:e1:61:2a:31:d6:99:fa:bd:7a:ce: aa:c2:cc:28:6a:f9:82:74:cc:62:ce:a3:bf:28:a2:ae:c0:21: 95:1b:de:8c:73:de:c2:77:73:ab:75:aa:3b:67:33:0d:d6:70: 10:88:df:99:cc:86:7c:2d:c7:39:77:62:85:ce:5d:a0:78:bb: 8c:f0:f3:62:55:6b:cd:36:73:f3:7a:05:6f:fd:ea:60:23:51: c8:6b:e9:2b:dd:81:2d:88:16:3c:95:8f:11:e3:87:f5:35:e6: 45:0b:f1:51:a2:da:c9:ae:ed:c2:81:a1:fa:27:1d:3c:b5:ca: 00:30:48:22:60:f6:08:16:d6:c1:4b:63:39:07:bc:ee:3f:d1: 58:5a:fd:f8:14:14:b3:1d:74:ea:9c:5f:54:9a:13:3d:c4:04: 76:18:f9:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKw7jzpAig5bCU29nBn9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGE2NTU4ZDY5MjNiZTQyOWQ5Mzg5NTMxYWRjMTAwODc5 NTI3MGIwHhcNMjUxMjE1MDQwMDUxWhcNMjUxMjE2MDQwMDUxWjAzMTEwLwYDVQQD Eyg4MTljNDIxMzBjZTFiOGU3NzkyMTc4NzliMTI0YjhlZjY5ZTA2Njg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonYlBOXJuEBlwaXgyJiMpHi9I5Yz LaPobOJ85GrYaibcS5drlMCtPNxnel5SQqsGrWEapaOWp3tnvnVcCNfGZpSD+cBM xz/8ih/eT8tTm1ZgG7nXK9ovSZrEZGaz87LqHWJJfnPTr6ZuQ94xE/nyDfZRNnk1 /BfyseDNMUQ4m/23ZKzYoDw9wpwofCYOZDs122ym7OA3MKRhBQZ6StPfdD/N3wxK 1pKZWLNkDWNzvSdsXvqJ0N1/8Ahk7IsGSnolTVhRD8ijrlCT0fBuyAs7/d3GAbNS 9G3kr1yen0jiFt4sNgfeW4grz58dEqbRZy4N0dqxRQdf10Xw4nqP3rhLTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGcQhMM4bjneSF4ebEkuO9p4GaJMB8GA1UdIwQY MBaAFMVKZVjWkjvkKdk4lTGtwQCHlScLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2Mt ZWMyZWQwYjc4MmI3LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2MtZWMyZWQwYjc4MmI3 LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7dblRXB ntZFMnIll5HvyM61Ufp70d3OrMfZ4UBb+6nZdrIUM6tk3+ZnCUR/fNwyw5mfhR/H 7tc7sNAm7gj4BbZtNz2DciAXceWyI+71Guz0S4RKybQ8spWdoqRcmXgcTKzhYSox 1pn6vXrOqsLMKGr5gnTMYs6jvyiirsAhlRvejHPewndzq3WqO2czDdZwEIjfmcyG fC3HOXdihc5doHi7jPDzYlVrzTZz83oFb/3qYCNRyGvpK92BLYgWPJWPEeOH9TXm RQvxUaLaya7twoGh+icdPLXKADBIImD2CBbWwUtjOQe87j/RWFr9+BQUsx106pxf VJoTPcQEdhj54Q== -----END CERTIFICATE-----Generated at Mon Dec 15 13:13:16 2025 by rpki-client