This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft File: xGtE1wczJKsoQWNn3gQPDkYzSNE.mft (raw, json) Hash identifier: qz4W3DsUi4ZvPG83u22knMr0mtM3xSFrPJJnogtn7Ik= Subject key identifier: 5F:73:B3:9D:66:BB:8B:81:EA:55:DD:C9:0E:51:0F:8F:94:55:A3:CD Authority key identifier: C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 Certificate issuer: /CN=c46b44d7073324ab28416367de040f0e463348d1 Certificate serial: 019B4C5F9B6D09E5ABA762074C6B06EB4C3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft Manifest number: 0FBA Signing time: Tue 23 Dec 2025 18:01:32 +0000 Manifest this update: Tue 23 Dec 2025 18:01:32 +0000 Manifest next update: Wed 24 Dec 2025 18:01:32 +0000 Files and hashes: 1: xGtE1wczJKsoQWNn3gQPDkYzSNE.crl (hash: /EzmFP04mIAe4UD597A6w1LWYdMCU+y1HqxtIJZi0rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:9b:6d:09:e5:ab:a7:62:07:4c:6b:06:eb:4c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c46b44d7073324ab28416367de040f0e463348d1 Validity Not Before: Dec 23 18:01:32 2025 GMT Not After : Dec 24 18:01:32 2025 GMT Subject: CN=5f73b39d66bb8b81ea55ddc90e510f8f9455a3cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d3:70:15:f6:d9:61:4a:08:e9:5a:4a:b2:bb: 51:4a:61:03:97:a9:0a:3f:68:39:3b:34:b8:a6:89: 97:10:58:1d:9b:12:51:ed:f8:e9:3e:a6:12:28:77: a0:be:d4:32:bb:0d:90:eb:5e:38:28:bd:55:f9:2a: bf:ed:90:9e:f1:73:45:09:0d:8e:ed:5f:ab:aa:1c: da:1e:6c:6b:bd:c6:97:ff:c8:44:0e:8d:e3:b8:08: 1b:ca:08:90:d8:50:ee:70:0f:83:15:d4:6f:21:d1: ed:33:82:2a:ce:86:16:54:89:90:cf:82:84:03:36: ec:e9:72:d3:38:23:66:87:0d:ae:b1:52:c3:e4:f9: 9f:5f:5e:df:bc:19:78:d0:ca:29:b4:48:50:e3:36: 6d:3f:45:f2:3f:90:86:9d:55:65:6c:e5:c4:4a:7a: 2d:12:6b:77:9f:5f:f1:54:d3:31:b0:32:6c:8c:97: 8a:6a:b4:27:e8:0c:4b:94:72:23:98:dc:76:34:7e: c1:6a:61:7d:b3:d9:cc:73:5d:42:5f:51:44:45:6d: 33:d7:03:67:d0:c2:60:07:b6:a2:16:65:83:79:85: 34:42:43:0e:c2:29:7d:3d:de:2c:5e:03:19:e0:3e: d1:d4:c8:34:67:5b:bc:6a:4d:cb:e2:f2:38:82:27: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:73:B3:9D:66:BB:8B:81:EA:55:DD:C9:0E:51:0F:8F:94:55:A3:CD X509v3 Authority Key Identifier: keyid:C4:6B:44:D7:07:33:24:AB:28:41:63:67:DE:04:0F:0E:46:33:48:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGtE1wczJKsoQWNn3gQPDkYzSNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/549774-0b7e-4b88-8981-1f0aac1495ac/1/xGtE1wczJKsoQWNn3gQPDkYzSNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:50:2c:fc:0d:7f:72:9d:1c:5c:be:84:8a:e6:0a:a8:9b:2c: 55:22:73:fe:4d:de:b6:1a:c4:10:55:3a:25:b6:15:bc:0d:3b: cf:e6:05:0c:f6:a1:78:73:7e:b8:34:9f:56:0d:ed:f0:b1:ee: a8:3b:14:d7:56:65:6d:c8:aa:f4:1c:eb:d7:f5:f0:bb:9c:ac: 01:5d:af:34:94:6b:91:d9:d6:57:0c:b3:df:dd:50:e6:a7:e6: 33:1c:5b:6c:30:35:0b:5a:af:8b:cd:72:e9:ef:86:bc:a3:b8: 46:d6:47:fb:fc:1e:b2:97:74:0c:f6:fc:fa:00:5d:94:ad:bf: f0:84:df:33:b5:b1:10:95:c8:52:38:1c:61:40:41:a1:47:c0: 0b:8d:be:c9:54:9b:88:63:43:fc:ba:8c:1c:6c:18:c8:39:92: 35:36:82:e2:e2:22:90:e3:eb:3a:27:16:40:07:57:1d:f0:41: 1b:d8:f7:d5:4d:6a:bb:26:d3:d4:c6:6d:8c:66:9a:63:d9:0c: 1e:be:8d:3c:65:37:b7:77:d9:83:44:62:41:fe:5e:b3:02:bf: 1a:d9:5d:b1:6b:7d:aa:71:81:7f:2c:ad:3a:70:8a:fe:b1:06: 57:5f:8f:96:97:04:23:ef:aa:a3:7e:21:0c:57:fa:18:4a:75: 3e:ff:7a:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX5ttCeWrp2IHTGsG60w7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NmI0NGQ3MDczMzI0YWIyODQxNjM2N2RlMDQwZjBlNDYz MzQ4ZDEwHhcNMjUxMjIzMTgwMTMyWhcNMjUxMjI0MTgwMTMyWjAzMTEwLwYDVQQD Eyg1ZjczYjM5ZDY2YmI4YjgxZWE1NWRkYzkwZTUxMGY4Zjk0NTVhM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNNwFfbZYUoI6VpKsrtRSmEDl6kK P2g5OzS4pomXEFgdmxJR7fjpPqYSKHegvtQyuw2Q6144KL1V+Sq/7ZCe8XNFCQ2O 7V+rqhzaHmxrvcaX/8hEDo3juAgbygiQ2FDucA+DFdRvIdHtM4IqzoYWVImQz4KE Azbs6XLTOCNmhw2usVLD5PmfX17fvBl40MoptEhQ4zZtP0XyP5CGnVVlbOXESnot Emt3n1/xVNMxsDJsjJeKarQn6AxLlHIjmNx2NH7BamF9s9nMc11CX1FERW0z1wNn 0MJgB7aiFmWDeYU0QkMOwil9Pd4sXgMZ4D7R1Mg0Z1u8ak3L4vI4gif5RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9zs51mu4uB6lXdyQ5RD4+UVaPNMB8GA1UdIwQY MBaAFMRrRNcHMySrKEFjZ94EDw5GM0jRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEt MWYwYWFjMTQ5NWFjLzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81NDk3NzQtMGI3ZS00Yjg4LTg5ODEtMWYwYWFjMTQ5NWFj LzEveEd0RTF3Y3pKS3NvUVdObjNnUVBEa1l6U05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFAs/A1/ cp0cXL6EiuYKqJssVSJz/k3ethrEEFU6JbYVvA07z+YFDPaheHN+uDSfVg3t8LHu qDsU11Zlbciq9Bzr1/Xwu5ysAV2vNJRrkdnWVwyz391Q5qfmMxxbbDA1C1qvi81y 6e+GvKO4RtZH+/wespd0DPb8+gBdlK2/8ITfM7WxEJXIUjgcYUBBoUfAC42+yVSb iGND/LqMHGwYyDmSNTaC4uIikOPrOicWQAdXHfBBG9j31U1quybT1MZtjGaaY9kM Hr6NPGU3t3fZg0RiQf5eswK/GtldsWt9qnGBfyytOnCK/rEGV1+PlpcEI++qo34h DFf6GEp1Pv96iw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:56:41 2025 by rpki-client