This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft File: xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft (raw, json) Hash identifier: 9FH9kR0FlsqUKkr2Oi4p+wXZHrz2J9hVX4wV0gixy0w= Subject key identifier: 5D:D5:A1:6A:71:0F:52:56:4C:9B:45:43:16:B5:00:C5:F0:4A:2C:3A Authority key identifier: C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54 Certificate issuer: /CN=c500abf3ecaa0a33520c56e6aeece44beafa2754 Certificate serial: 019B38A2B2C857B12AA261C037B49945FDA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft Manifest number: 14DE Signing time: Fri 19 Dec 2025 22:02:25 +0000 Manifest this update: Fri 19 Dec 2025 22:02:25 +0000 Manifest next update: Sat 20 Dec 2025 22:02:25 +0000 Files and hashes: 1: xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl (hash: lz469yof3/E5kjeEFKZ3LarHkvsN+rF00AXM870L9ok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:b2:c8:57:b1:2a:a2:61:c0:37:b4:99:45:fd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c500abf3ecaa0a33520c56e6aeece44beafa2754 Validity Not Before: Dec 19 22:02:25 2025 GMT Not After : Dec 20 22:02:25 2025 GMT Subject: CN=5dd5a16a710f52564c9b454316b500c5f04a2c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:df:a2:fd:23:e9:8a:05:26:17:53:f1:51: 9a:74:1e:06:82:e6:ae:f4:ef:a7:dc:37:44:94:32: 8e:cc:53:cc:c5:34:3c:4c:46:b3:a1:e0:d1:26:21: f2:6f:e7:27:28:0d:8b:28:0e:e1:94:4b:b1:75:cc: 76:47:42:5b:f3:18:b3:fb:bb:9d:9e:b4:a3:dc:c0: a0:c0:88:6e:1f:11:c2:bb:3c:37:43:7d:0c:e5:b6: a0:b0:2d:99:b2:48:af:f5:5b:10:e6:ab:e9:97:20: 8f:a3:52:b2:5d:db:b9:9c:d5:62:07:bf:ee:12:f7: 84:c3:74:d5:93:28:e8:05:dc:19:1c:88:db:99:55: 36:49:76:44:67:b6:7d:8f:a7:23:a7:b9:b5:6c:38: 9f:95:82:4d:53:29:bb:3a:15:9e:8c:12:2e:3e:4b: 71:dc:7c:fe:b0:a3:e0:78:b4:9a:a8:20:e5:3a:5e: fe:32:d3:cb:4d:0c:b8:d8:4c:79:23:9c:e4:f4:63: 2a:5d:d8:a6:a6:b9:b0:fd:6a:46:1a:13:84:2b:d6: ff:b1:74:58:66:66:67:b8:5f:73:ee:32:2c:37:12: c0:d8:b3:60:97:bf:fa:e8:35:07:b5:0f:d4:44:a4: 7a:e3:28:c1:e9:79:22:d6:91:14:e5:00:ce:69:ae: 98:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:A1:6A:71:0F:52:56:4C:9B:45:43:16:B5:00:C5:F0:4A:2C:3A X509v3 Authority Key Identifier: keyid:C5:00:AB:F3:EC:AA:0A:33:52:0C:56:E6:AE:EC:E4:4B:EA:FA:27:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQCr8-yqCjNSDFbmruzkS-r6J1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/1000b6-e217-4b0c-9cb1-6d5279c2fe07/1/xQCr8-yqCjNSDFbmruzkS-r6J1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:82:e3:52:1a:5a:02:12:19:5c:90:3b:40:d6:7d:b0:59:8f: f6:1d:53:66:96:8a:c9:ce:4c:f6:71:00:63:7e:53:94:2b:93: 61:00:94:79:87:5b:23:bd:14:d7:92:02:09:34:69:11:02:d3: 84:f3:38:0e:46:95:d3:d4:d8:c3:77:c0:2d:e1:f2:15:52:6d: 78:e7:e6:45:ad:57:14:ce:9b:1e:dd:a3:17:7f:9a:a3:fe:b2: 55:b0:67:38:87:31:bc:a4:27:bd:3e:9c:ee:4a:02:7d:4d:a9: ef:66:b3:60:29:35:40:18:55:3e:87:cf:2b:f6:3f:04:e2:a7: f1:ae:ac:9e:75:4a:bd:e3:e2:83:03:76:a0:b8:b5:3c:ee:4e: f9:93:84:c4:c6:94:12:65:c3:77:fd:74:0a:bf:96:c3:0f:bb: c3:d3:42:4a:a1:3f:f2:25:88:2b:d1:2f:94:5d:02:f4:66:31: 19:a9:ad:6a:65:73:b8:e4:cc:cc:33:2b:8c:18:aa:d6:52:c8: 41:ea:70:2a:9a:bb:85:c2:db:e1:de:92:66:5b:7a:da:41:1d: da:9e:b3:74:b2:eb:82:3f:af:d7:0c:d6:85:f7:08:a2:97:7a: ac:17:01:22:02:94:b3:d1:ca:32:11:3b:96:bc:ff:51:0a:96: 7c:fe:38:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4orLIV7EqomHAN7SZRf2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MDBhYmYzZWNhYTBhMzM1MjBjNTZlNmFlZWNlNDRiZWFm YTI3NTQwHhcNMjUxMjE5MjIwMjI1WhcNMjUxMjIwMjIwMjI1WjAzMTEwLwYDVQQD Eyg1ZGQ1YTE2YTcxMGY1MjU2NGM5YjQ1NDMxNmI1MDBjNWYwNGEyYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaXfov0j6YoFJhdT8VGadB4Gguau 9O+n3DdElDKOzFPMxTQ8TEazoeDRJiHyb+cnKA2LKA7hlEuxdcx2R0Jb8xiz+7ud nrSj3MCgwIhuHxHCuzw3Q30M5bagsC2Zskiv9VsQ5qvplyCPo1KyXdu5nNViB7/u EveEw3TVkyjoBdwZHIjbmVU2SXZEZ7Z9j6cjp7m1bDiflYJNUym7OhWejBIuPktx 3Hz+sKPgeLSaqCDlOl7+MtPLTQy42Ex5I5zk9GMqXdimprmw/WpGGhOEK9b/sXRY ZmZnuF9z7jIsNxLA2LNgl7/66DUHtQ/URKR64yjB6Xki1pEU5QDOaa6YCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3VoWpxD1JWTJtFQxa1AMXwSiw6MB8GA1UdIwQY MBaAFMUAq/PsqgozUgxW5q7s5Evq+idUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEt NmQ1Mjc5YzJmZTA3LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMDAwYjYtZTIxNy00YjBjLTljYjEtNmQ1Mjc5YzJmZTA3 LzEveFFDcjgteXFDak5TREZibXJ1emtTLXI2SjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4LjUhpa AhIZXJA7QNZ9sFmP9h1TZpaKyc5M9nEAY35TlCuTYQCUeYdbI70U15ICCTRpEQLT hPM4DkaV09TYw3fALeHyFVJteOfmRa1XFM6bHt2jF3+ao/6yVbBnOIcxvKQnvT6c 7koCfU2p72azYCk1QBhVPofPK/Y/BOKn8a6snnVKvePigwN2oLi1PO5O+ZOExMaU EmXDd/10Cr+Www+7w9NCSqE/8iWIK9EvlF0C9GYxGamtamVzuOTMzDMrjBiq1lLI QepwKpq7hcLb4d6SZlt62kEd2p6zdLLrgj+v1wzWhfcIopd6rBcBIgKUs9HKMhE7 lrz/UQqWfP44cg== -----END CERTIFICATE-----Generated at Sat Dec 20 01:47:12 2025 by rpki-client