This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft File: xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json) Hash identifier: O/8ynUkY4n16mgZY/hV1cD2CKkFKfwx+FVWUUUn1+0M= Subject key identifier: 60:32:F2:D8:85:AB:FF:F5:02:46:E2:05:A6:E6:97:AB:91:51:95:79 Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B Certificate issuer: /CN=c54a6558d6923be429d9389531adc1008795270b Certificate serial: 019B5072CD552BFE6760800734C69705DC8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft Manifest number: 0E72 Signing time: Wed 24 Dec 2025 13:00:59 +0000 Manifest this update: Wed 24 Dec 2025 13:00:59 +0000 Manifest next update: Thu 25 Dec 2025 13:00:59 +0000 Files and hashes: 1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: Fu4/GXQQ51mlK1RFmZZFbMhuG/K9pDNOoXu3Ys31trE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:72:cd:55:2b:fe:67:60:80:07:34:c6:97:05:dc:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c54a6558d6923be429d9389531adc1008795270b Validity Not Before: Dec 24 13:00:59 2025 GMT Not After : Dec 25 13:00:59 2025 GMT Subject: CN=6032f2d885abfff50246e205a6e697ab91519579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:2f:4f:1f:4e:c1:1e:95:68:ad:38:f1:f9: 31:58:7f:f2:f8:31:d0:b6:8e:a4:30:be:a4:df:3a: fd:6b:7e:70:43:0d:b6:d9:9b:03:ba:9c:c5:90:6e: ae:e4:13:ca:60:12:f7:d0:a2:3c:d4:22:60:81:9a: 0c:99:50:e5:43:a7:66:29:3f:f6:e0:08:06:ec:14: 76:a6:fb:08:8a:0e:1a:cd:db:d8:bc:86:c0:a8:2e: 69:40:c3:ef:12:74:a8:06:8b:ed:8f:1e:68:fd:cd: d8:6a:bb:85:19:b3:0b:d2:84:72:6c:6d:68:73:39: f9:2c:01:31:f8:12:16:1a:55:10:3b:ec:2c:92:70: 1f:9b:e3:c5:3d:bd:5f:0e:a8:5d:10:29:52:15:c1: e3:96:f7:b5:0f:5f:a3:5b:ef:4f:41:4e:f3:43:c0: b1:32:28:61:d1:74:cb:5d:95:c8:ef:30:8a:41:17: 51:f4:0f:54:b2:97:0f:d9:ad:04:a2:30:5c:2c:0e: 94:ae:7e:5b:83:83:d4:f3:53:ed:7e:4e:83:0b:8c: 72:84:3d:e5:e7:2f:32:fa:98:51:2c:51:53:31:82: 63:c0:7c:2c:22:3c:fb:36:f6:49:1e:81:8b:02:b0: 96:25:10:5f:f7:2a:35:d4:75:9d:5c:7c:01:9f:4f: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:32:F2:D8:85:AB:FF:F5:02:46:E2:05:A6:E6:97:AB:91:51:95:79 X509v3 Authority Key Identifier: keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:3b:02:38:cb:1e:3e:71:75:4e:94:80:8b:a4:9b:94:db:79: 75:d2:1f:d7:65:6b:09:7d:94:af:26:29:36:33:1c:ee:e9:f7: dc:3a:ef:e0:57:9f:85:78:fd:3b:5f:e9:fb:43:d9:71:08:e8: c9:17:43:52:76:29:51:24:8b:59:4a:dc:cb:bc:70:c6:ec:b8: 8e:96:4c:3a:de:a2:57:e0:66:a5:f4:8c:3c:1f:81:5b:cd:6f: 20:22:92:3d:9d:47:0c:1b:05:7f:42:05:d0:5e:92:34:1e:98: 57:2a:9c:cc:26:95:e9:ae:8e:8b:58:82:fe:54:34:19:83:f0: 4d:9b:67:c6:88:11:85:49:c1:a3:eb:f3:c9:3b:9d:4d:61:dc: 1d:22:c4:f5:8a:a2:db:a4:6b:f8:58:b6:a7:03:e3:1e:4b:99: 65:c0:d8:5f:ac:83:f7:38:0f:38:cd:d4:66:54:00:9d:35:1e: 77:e6:80:54:52:03:52:1b:69:51:97:a7:33:ea:7e:28:99:01: a7:8c:83:88:6c:38:7e:8d:81:35:dc:d0:50:4c:97:27:fd:b1: df:8d:2d:43:c8:ab:cc:b0:da:84:89:41:41:c3:a0:61:d2:e7: 2d:73:92:50:ed:43:ec:a5:14:fc:07:7f:86:1c:a9:7a:7e:6c: c5:59:27:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcs1VK/5nYIAHNMaXBdyNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NGE2NTU4ZDY5MjNiZTQyOWQ5Mzg5NTMxYWRjMTAwODc5 NTI3MGIwHhcNMjUxMjI0MTMwMDU5WhcNMjUxMjI1MTMwMDU5WjAzMTEwLwYDVQQD Eyg2MDMyZjJkODg1YWJmZmY1MDI0NmUyMDVhNmU2OTdhYjkxNTE5NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCUvTx9OwR6VaK048fkxWH/y+DHQ to6kML6k3zr9a35wQw222ZsDupzFkG6u5BPKYBL30KI81CJggZoMmVDlQ6dmKT/2 4AgG7BR2pvsIig4azdvYvIbAqC5pQMPvEnSoBovtjx5o/c3YaruFGbML0oRybG1o czn5LAEx+BIWGlUQO+wsknAfm+PFPb1fDqhdEClSFcHjlve1D1+jW+9PQU7zQ8Cx Mihh0XTLXZXI7zCKQRdR9A9UspcP2a0EojBcLA6Urn5bg4PU81Ptfk6DC4xyhD3l 5y8y+phRLFFTMYJjwHwsIjz7NvZJHoGLArCWJRBf9yo11HWdXHwBn0/DvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAy8tiFq//1AkbiBabml6uRUZV5MB8GA1UdIwQY MBaAFMVKZVjWkjvkKdk4lTGtwQCHlScLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2Mt ZWMyZWQwYjc4MmI3LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82NTg2NjUtZGUzZS00Yzc3LThiY2MtZWMyZWQwYjc4MmI3 LzEveFVwbFdOYVNPLVFwMlRpVk1hM0JBSWVWSndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKTsCOMse PnF1TpSAi6SblNt5ddIf12VrCX2UryYpNjMc7un33Drv4FefhXj9O1/p+0PZcQjo yRdDUnYpUSSLWUrcy7xwxuy4jpZMOt6iV+BmpfSMPB+BW81vICKSPZ1HDBsFf0IF 0F6SNB6YVyqczCaV6a6Oi1iC/lQ0GYPwTZtnxogRhUnBo+vzyTudTWHcHSLE9Yqi 26Rr+Fi2pwPjHkuZZcDYX6yD9zgPOM3UZlQAnTUed+aAVFIDUhtpUZenM+p+KJkB p4yDiGw4fo2BNdzQUEyXJ/2x340tQ8irzLDahIlBQcOgYdLnLXOSUO1D7KUU/Ad/ hhypen5sxVknTg== -----END CERTIFICATE-----Generated at Wed Dec 24 22:04:58 2025 by rpki-client