This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft File: xwy87PJahmXDWnjIIdEes6ZCNiE.mft (raw, json) Hash identifier: scrBI2aVZcQiLtB51OP7NLmCrno4nYbsLD4UXjFpIKo= Subject key identifier: 64:EF:F9:16:09:D9:31:A2:C4:C2:23:C8:53:FC:B1:7C:42:73:A1:47 Authority key identifier: C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 Certificate issuer: /CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Certificate serial: 019B58D12F99909013CA81CE4C82B4F5EA23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 04:01:02 +0000 Manifest this update: Fri 26 Dec 2025 04:01:02 +0000 Manifest next update: Sat 27 Dec 2025 04:01:02 +0000 Files and hashes: 1: xwy87PJahmXDWnjIIdEes6ZCNiE.crl (hash: Tko683Bo/GxTnFUSbAbOhIkjogcKy17J5DUhjpxiBj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:2f:99:90:90:13:ca:81:ce:4c:82:b4:f5:ea:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c70cbcecf25a8665c35a78c821d11eb3a6423621 Validity Not Before: Dec 26 04:01:02 2025 GMT Not After : Dec 27 04:01:02 2025 GMT Subject: CN=64eff91609d931a2c4c223c853fcb17c4273a147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9c:69:5a:f7:e9:73:b1:91:74:de:a1:9c:5b: 99:d0:27:02:b9:f1:f0:13:8b:db:4e:c2:79:6b:86: e9:81:72:b0:26:23:1d:dc:fa:32:9a:15:d4:2f:52: 0b:f9:49:68:f9:1b:a9:af:54:9c:d6:be:08:92:14: d2:80:85:64:84:1c:ee:5f:29:e9:89:d8:cb:5d:7c: 59:4a:aa:88:c6:47:f9:6c:1f:6a:5c:e7:f8:85:aa: 8b:d1:72:00:20:20:32:e3:63:b5:ee:b4:2d:69:0f: 5e:73:06:68:6e:cc:9e:0d:8a:48:ef:e5:90:0c:e0: f7:c5:30:e2:10:8a:65:a9:85:56:c0:67:94:b6:cc: 3e:5d:11:96:42:c6:df:58:ad:69:19:16:e7:ee:18: 47:48:d0:da:31:5f:8a:ab:d9:86:c6:ab:d4:58:dc: 67:d3:c3:af:ef:48:b9:3d:3e:d1:07:86:e2:e6:e3: 71:fa:12:1c:b9:92:5d:84:4a:0e:6c:1e:73:9a:4c: ca:b4:86:c3:53:f4:11:d9:eb:02:c0:d3:31:de:38: 48:f7:43:ba:03:dc:73:5f:34:c5:c6:af:93:cb:03: 7a:bd:8d:f5:e1:db:ad:3a:de:ee:42:97:0d:6f:42: 82:64:5f:38:51:61:ee:5c:df:d6:d8:2f:df:e2:28: 42:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:EF:F9:16:09:D9:31:A2:C4:C2:23:C8:53:FC:B1:7C:42:73:A1:47 X509v3 Authority Key Identifier: keyid:C7:0C:BC:EC:F2:5A:86:65:C3:5A:78:C8:21:D1:1E:B3:A6:42:36:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xwy87PJahmXDWnjIIdEes6ZCNiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/68e653-18c5-449e-95d8-e697bb5764c3/1/xwy87PJahmXDWnjIIdEes6ZCNiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:6d:8f:33:1e:e8:3d:65:24:77:dd:8b:fc:19:0e:0b:07:25: 3b:aa:33:4e:b7:a5:44:58:ca:04:21:4f:57:2d:20:91:4c:71: 4e:6a:43:44:15:00:41:37:5c:81:82:6f:53:a7:cc:fa:af:d5: d1:ad:ec:7c:55:d6:9e:b4:ae:a0:92:c8:92:96:56:f7:ff:79: 0c:8e:52:62:d9:59:bb:ee:72:8c:a5:0c:18:9c:5b:28:e6:5a: 32:82:8d:67:76:cc:1d:6b:58:a0:5a:e6:5f:76:c1:97:5e:bd: 4a:c7:75:df:79:c8:4f:5b:10:59:2d:01:f8:40:7b:ca:34:70: 43:88:0d:18:6e:fb:a1:6b:80:1b:dc:12:9b:c7:b7:96:ba:bf: 5d:d7:15:2d:70:1f:a6:5a:d8:ee:93:4f:1c:d5:ee:4d:37:a6: 6c:90:ae:a2:31:55:d7:9a:58:2d:57:e3:e3:26:08:50:88:80: 0a:c8:bd:bf:dc:ad:de:64:fd:e7:c2:b4:2b:b0:08:f2:3e:75: d4:1f:86:1d:0d:29:5a:15:b5:db:11:c3:3f:ae:1c:72:91:58: a5:dd:5c:05:2a:4f:bb:d5:6a:72:4a:e2:a9:f4:a0:8d:50:10: 02:03:4e:4f:8c:8c:af:c4:8a:58:ff:36:0c:6b:68:e3:1e:88: 7b:77:92:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0S+ZkJATyoHOTIK09eojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MGNiY2VjZjI1YTg2NjVjMzVhNzhjODIxZDExZWIzYTY0 MjM2MjEwHhcNMjUxMjI2MDQwMTAyWhcNMjUxMjI3MDQwMTAyWjAzMTEwLwYDVQQD Eyg2NGVmZjkxNjA5ZDkzMWEyYzRjMjIzYzg1M2ZjYjE3YzQyNzNhMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpxpWvfpc7GRdN6hnFuZ0CcCufHw E4vbTsJ5a4bpgXKwJiMd3PoymhXUL1IL+Ulo+Rupr1Sc1r4IkhTSgIVkhBzuXynp idjLXXxZSqqIxkf5bB9qXOf4haqL0XIAICAy42O17rQtaQ9ecwZobsyeDYpI7+WQ DOD3xTDiEIplqYVWwGeUtsw+XRGWQsbfWK1pGRbn7hhHSNDaMV+Kq9mGxqvUWNxn 08Ov70i5PT7RB4bi5uNx+hIcuZJdhEoObB5zmkzKtIbDU/QR2esCwNMx3jhI90O6 A9xzXzTFxq+TywN6vY314dutOt7uQpcNb0KCZF84UWHuXN/W2C/f4ihCcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTv+RYJ2TGixMIjyFP8sXxCc6FHMB8GA1UdIwQY MBaAFMcMvOzyWoZlw1p4yCHRHrOmQjYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgt ZTY5N2JiNTc2NGMzLzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy82OGU2NTMtMThjNS00NDllLTk1ZDgtZTY5N2JiNTc2NGMz LzEveHd5ODdQSmFobVhEV25qSUlkRWVzNlpDTmlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ22PMx7o PWUkd92L/BkOCwclO6ozTrelRFjKBCFPVy0gkUxxTmpDRBUAQTdcgYJvU6fM+q/V 0a3sfFXWnrSuoJLIkpZW9/95DI5SYtlZu+5yjKUMGJxbKOZaMoKNZ3bMHWtYoFrm X3bBl169Ssd133nIT1sQWS0B+EB7yjRwQ4gNGG77oWuAG9wSm8e3lrq/XdcVLXAf plrY7pNPHNXuTTembJCuojFV15pYLVfj4yYIUIiACsi9v9yt3mT958K0K7AI8j51 1B+GHQ0pWhW12xHDP64ccpFYpd1cBSpPu9VqckriqfSgjVAQAgNOT4yMr8SKWP82 DGto4x6Ie3eSsA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client