This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft File: xVRM5A0R1h07gKfRAyMBI_t9aKU.mft (raw, json) Hash identifier: dspa8EtYUJbUb23FZDOZdqNVIyTNFbXnFxa4oLIoEHo= Subject key identifier: 8A:02:9E:27:10:71:1A:E7:95:93:29:E3:1F:C3:C5:15:4A:B9:C1:46 Authority key identifier: C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5 Certificate issuer: /CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5 Certificate serial: 019B39EAF7846D30D13227772166B70BA55F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft Manifest number: 10A6 Signing time: Sat 20 Dec 2025 04:00:58 +0000 Manifest this update: Sat 20 Dec 2025 04:00:58 +0000 Manifest next update: Sun 21 Dec 2025 04:00:58 +0000 Files and hashes: 1: xVRM5A0R1h07gKfRAyMBI_t9aKU.crl (hash: L3Jap19np2KBbcfBNumxgzr6jfVkvJhpx9oCaS0oUB4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:f7:84:6d:30:d1:32:27:77:21:66:b7:0b:a5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5544ce40d11d61d3b80a7d103230123fb7d68a5 Validity Not Before: Dec 20 04:00:58 2025 GMT Not After : Dec 21 04:00:58 2025 GMT Subject: CN=8a029e2710711ae7959329e31fc3c5154ab9c146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:56:48:85:16:01:16:38:45:0a:27:5e:5d:4a: d6:5c:75:9b:2d:44:38:5f:55:53:7c:fc:52:34:37: 50:53:59:25:d7:9c:7e:65:1f:b2:fe:6d:34:b3:3f: 22:bb:20:3c:32:cf:9c:3e:38:39:9c:65:f5:5f:17: c7:82:d9:ec:33:07:b6:be:23:c6:d1:cd:18:6d:9d: a9:b8:83:0a:eb:6b:46:f7:04:36:a2:53:1e:ee:3a: e0:72:47:94:37:d7:43:5a:dc:c5:05:94:7b:26:be: e3:69:da:50:5d:fb:dc:b8:b1:b5:a4:e0:cf:aa:d6: ba:0a:2e:e7:af:f0:7a:be:e3:21:14:69:5b:99:45: 7b:10:c3:cd:34:8b:79:33:3d:bc:e2:c1:0a:dc:8c: 27:93:ce:8c:18:f3:48:7e:4e:77:51:e2:b5:8c:54: 30:6d:4f:7b:be:cd:5c:b7:02:bc:cd:df:c6:d5:3f: 95:e4:f4:2f:0f:6b:58:ee:45:fc:ae:49:da:67:a9: 59:8d:c1:ea:e1:21:02:df:75:73:c1:5c:44:da:8e: 2b:6d:a2:d5:ab:af:15:2d:d8:75:0b:41:a3:06:7b: a0:19:e4:ce:b2:6a:eb:eb:ba:5d:d4:5d:61:42:40: 07:85:95:ea:7c:8f:2b:6d:5f:85:b9:88:c6:d1:10: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:9E:27:10:71:1A:E7:95:93:29:E3:1F:C3:C5:15:4A:B9:C1:46 X509v3 Authority Key Identifier: keyid:C5:54:4C:E4:0D:11:D6:1D:3B:80:A7:D1:03:23:01:23:FB:7D:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVRM5A0R1h07gKfRAyMBI_t9aKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/646296-e4bd-4feb-9f9d-527cb24dbd40/1/xVRM5A0R1h07gKfRAyMBI_t9aKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:bf:88:0e:3d:e5:42:40:6b:b7:eb:a6:ac:f6:91:ca:b4:7b: 78:cc:de:b9:d8:a6:71:b2:f0:a6:10:54:f8:64:b6:f2:b8:9b: 3b:f8:01:10:6c:82:98:99:07:82:1f:18:08:68:8c:88:c9:21: e1:33:4d:1c:5e:87:fb:e6:84:83:00:43:a3:56:ee:c3:40:7c: af:e6:4e:db:a0:92:7f:9f:12:a1:25:f3:9e:7f:e7:68:97:8b: 3c:50:64:b8:05:7e:e2:ca:22:82:a5:24:4b:4e:63:8a:f6:54: b6:8f:47:16:0d:22:70:49:4f:f1:27:22:60:08:0c:76:7a:66: 9d:9c:bd:03:2c:05:8c:5b:b6:c3:8d:d6:af:f3:bf:6f:51:4f: c1:1b:87:21:cd:e7:c0:55:ad:c0:7e:98:4a:41:02:fd:8b:90: d3:2d:06:fc:8c:bc:7e:81:1d:3f:d9:c3:df:f4:ba:0b:aa:ea: 4f:dc:46:f7:18:e3:a7:bf:b3:6c:1d:8b:fb:f4:0e:a5:8b:93: d2:92:61:ea:6f:2c:1a:46:a6:17:15:41:2e:e2:a2:13:3d:b2: ec:71:d0:17:25:d6:2b:3a:6a:36:11:4c:8d:f7:0f:16:09:44: c3:e8:99:b9:db:8a:9b:24:36:2c:e8:7d:74:ca:b6:d3:b0:56: 4e:1d:dd:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56veEbTDRMid3IWa3C6VfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTQ0Y2U0MGQxMWQ2MWQzYjgwYTdkMTAzMjMwMTIzZmI3 ZDY4YTUwHhcNMjUxMjIwMDQwMDU4WhcNMjUxMjIxMDQwMDU4WjAzMTEwLwYDVQQD Eyg4YTAyOWUyNzEwNzExYWU3OTU5MzI5ZTMxZmMzYzUxNTRhYjljMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ZIhRYBFjhFCideXUrWXHWbLUQ4 X1VTfPxSNDdQU1kl15x+ZR+y/m00sz8iuyA8Ms+cPjg5nGX1XxfHgtnsMwe2viPG 0c0YbZ2puIMK62tG9wQ2olMe7jrgckeUN9dDWtzFBZR7Jr7jadpQXfvcuLG1pODP qta6Ci7nr/B6vuMhFGlbmUV7EMPNNIt5Mz284sEK3Iwnk86MGPNIfk53UeK1jFQw bU97vs1ctwK8zd/G1T+V5PQvD2tY7kX8rknaZ6lZjcHq4SEC33VzwVxE2o4rbaLV q68VLdh1C0GjBnugGeTOsmrr67pd1F1hQkAHhZXqfI8rbV+FuYjG0RAyBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoCnicQcRrnlZMp4x/DxRVKucFGMB8GA1UdIwQY MBaAFMVUTOQNEdYdO4Cn0QMjASP7fWilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQt NTI3Y2IyNGRiZDQwLzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy82NDYyOTYtZTRiZC00ZmViLTlmOWQtNTI3Y2IyNGRiZDQw LzEveFZSTTVBMFIxaDA3Z0tmUkF5TUJJX3Q5YUtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANL+IDj3l QkBrt+umrPaRyrR7eMzeudimcbLwphBU+GS28ribO/gBEGyCmJkHgh8YCGiMiMkh 4TNNHF6H++aEgwBDo1buw0B8r+ZO26CSf58SoSXznn/naJeLPFBkuAV+4soigqUk S05jivZUto9HFg0icElP8SciYAgMdnpmnZy9AywFjFu2w43Wr/O/b1FPwRuHIc3n wFWtwH6YSkEC/YuQ0y0G/Iy8foEdP9nD3/S6C6rqT9xG9xjjp7+zbB2L+/QOpYuT 0pJh6m8sGkamFxVBLuKiEz2y7HHQFyXWKzpqNhFMjfcPFglEw+iZuduKmyQ2LOh9 dMq207BWTh3dYQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:32:14 2025 by rpki-client