This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft File: Xozn6kHZTYedYkvDFUaZni23w-U.mft (raw, json) Hash identifier: aZsWB3b/lAmif7Wk8w/ELoxr5dRDSv1PeS+G63GaCOs= Subject key identifier: 02:1E:C5:C3:F1:9A:D5:BB:CF:20:96:E4:36:1E:FE:61:57:A2:9D:D8 Authority key identifier: 5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5 Certificate issuer: /CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5 Certificate serial: 019B424AACC21D38281DB7CD42EC3D7625B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft Manifest number: 038C Signing time: Sun 21 Dec 2025 19:02:28 +0000 Manifest this update: Sun 21 Dec 2025 19:02:28 +0000 Manifest next update: Mon 22 Dec 2025 19:02:28 +0000 Files and hashes: 1: Xozn6kHZTYedYkvDFUaZni23w-U.crl (hash: eSF+xAa5j/dyviit9mpRG20NH/Ula4gxVU0eoHb0lo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ac:c2:1d:38:28:1d:b7:cd:42:ec:3d:76:25:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8ce7ea41d94d879d624bc31546999e2db7c3e5 Validity Not Before: Dec 21 19:02:28 2025 GMT Not After : Dec 22 19:02:28 2025 GMT Subject: CN=021ec5c3f19ad5bbcf2096e4361efe6157a29dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:62:c6:2f:ac:da:6b:69:3e:c3:75:0c:d4: fa:65:d0:47:cf:aa:16:ab:4b:48:dd:d7:4b:d9:88: 5e:f7:2e:80:be:84:62:d0:be:98:dd:60:28:98:15: 46:02:12:81:60:65:3f:c2:73:5e:13:3b:5f:23:e8: 4b:92:55:c0:e2:9e:15:8e:7a:d1:43:4f:4a:93:e0: c7:7a:ba:7a:d9:7e:21:22:03:b4:27:04:a7:c2:d2: 78:4d:29:8c:30:46:bf:34:4f:73:bd:94:a7:30:45: c6:fa:6e:ea:ef:9e:dd:0d:ad:c7:06:f2:98:36:19: 10:14:9d:93:e4:08:54:4c:24:93:b0:33:7a:60:64: 0f:66:24:d6:d1:14:05:02:79:cd:8e:8f:68:5d:ef: 58:b6:bf:7d:e2:fe:23:02:ab:10:1b:1f:26:00:09: fb:d2:d2:58:2b:33:15:34:0b:93:9f:da:bd:99:cd: 84:45:21:83:ff:61:b6:bd:e4:23:52:bb:8a:9d:a8: ac:0d:e6:6c:be:7a:a7:55:3b:1b:c5:4b:72:a9:4e: 67:04:42:7a:57:4c:2d:e1:ec:b6:80:1a:10:eb:27: fe:33:8e:cb:42:2c:85:51:e8:ce:39:11:04:c3:35: df:bb:bc:15:40:1c:5f:4f:3d:ab:9f:de:99:47:24: 3e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1E:C5:C3:F1:9A:D5:BB:CF:20:96:E4:36:1E:FE:61:57:A2:9D:D8 X509v3 Authority Key Identifier: keyid:5E:8C:E7:EA:41:D9:4D:87:9D:62:4B:C3:15:46:99:9E:2D:B7:C3:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xozn6kHZTYedYkvDFUaZni23w-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/509710-8815-4a20-8c2e-286adbdde6d3/1/Xozn6kHZTYedYkvDFUaZni23w-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:7c:df:29:6b:62:32:69:dc:d9:05:8b:20:be:fe:9a:e8:1e: 33:0c:26:5b:40:19:e4:5c:f0:3a:bc:05:1d:3b:0e:58:c7:f7: 09:67:9c:d3:ce:80:08:26:a3:90:ff:88:04:57:1d:3e:b6:48: c0:ab:6c:4b:ed:44:6a:a1:71:43:e3:1e:e7:44:29:ea:01:aa: b3:20:ba:45:71:fe:fc:33:9e:d6:a3:77:0c:c8:9d:3a:0f:96: 94:85:0d:3c:63:31:0c:a9:4b:06:d3:02:7c:46:94:ae:d6:11: fc:3d:90:e0:0c:ea:3f:6b:db:3f:6c:da:29:00:e1:26:b6:ff: 98:17:f3:7b:d5:ff:5b:b5:e9:94:c6:6a:f1:74:d3:e3:33:3b: 62:e3:2a:03:f0:b2:6a:12:48:67:15:ac:e2:fa:ff:ee:70:24: 10:e1:dd:9f:b1:12:36:aa:84:81:b8:28:82:3b:87:72:f3:31: 87:78:99:78:de:4e:cd:81:0f:ad:29:e2:9f:d7:1d:aa:43:2a: d9:ee:b6:a4:fb:5f:2b:e9:21:48:bb:99:ec:67:33:6e:c6:19: d4:84:a7:df:8f:22:9b:58:08:6c:a9:93:28:07:a2:3e:e6:f1: 96:1d:c8:7c:c4:f7:39:2d:72:10:5c:d2:ec:61:e3:60:cc:d4: 75:94:74:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSqzCHTgoHbfNQuw9diW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGNlN2VhNDFkOTRkODc5ZDYyNGJjMzE1NDY5OTllMmRi N2MzZTUwHhcNMjUxMjIxMTkwMjI4WhcNMjUxMjIyMTkwMjI4WjAzMTEwLwYDVQQD EygwMjFlYzVjM2YxOWFkNWJiY2YyMDk2ZTQzNjFlZmU2MTU3YTI5ZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRdixi+s2mtpPsN1DNT6ZdBHz6oW q0tI3ddL2Yhe9y6AvoRi0L6Y3WAomBVGAhKBYGU/wnNeEztfI+hLklXA4p4VjnrR Q09Kk+DHerp62X4hIgO0JwSnwtJ4TSmMMEa/NE9zvZSnMEXG+m7q757dDa3HBvKY NhkQFJ2T5AhUTCSTsDN6YGQPZiTW0RQFAnnNjo9oXe9Ytr994v4jAqsQGx8mAAn7 0tJYKzMVNAuTn9q9mc2ERSGD/2G2veQjUruKnaisDeZsvnqnVTsbxUtyqU5nBEJ6 V0wt4ey2gBoQ6yf+M47LQiyFUejOOREEwzXfu7wVQBxfTz2rn96ZRyQ+TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIexcPxmtW7zyCW5DYe/mFXop3YMB8GA1UdIwQY MBaAFF6M5+pB2U2HnWJLwxVGmZ4tt8PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUt Mjg2YWRiZGRlNmQzLzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81MDk3MTAtODgxNS00YTIwLThjMmUtMjg2YWRiZGRlNmQz LzEvWG96bjZrSFpUWWVkWWt2REZVYVpuaTIzdy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3zfKWti Mmnc2QWLIL7+mugeMwwmW0AZ5FzwOrwFHTsOWMf3CWec086ACCajkP+IBFcdPrZI wKtsS+1EaqFxQ+Me50Qp6gGqsyC6RXH+/DOe1qN3DMidOg+WlIUNPGMxDKlLBtMC fEaUrtYR/D2Q4AzqP2vbP2zaKQDhJrb/mBfze9X/W7XplMZq8XTT4zM7YuMqA/Cy ahJIZxWs4vr/7nAkEOHdn7ESNqqEgbgogjuHcvMxh3iZeN5OzYEPrSnin9cdqkMq 2e62pPtfK+khSLuZ7GczbsYZ1ISn348im1gIbKmTKAeiPubxlh3IfMT3OS1yEFzS 7GHjYMzUdZR0fA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:19:45 2025 by rpki-client