This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft File: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft (raw, json) Hash identifier: qDu6n9hEnbTx2Q9XzjcqkqIh7NDCVfc5ZVRKMfr+0rs= Subject key identifier: 0C:5B:A5:F9:CF:35:F1:F0:5D:5D:19:7D:66:66:E7:63:01:08:9D:F1 Authority key identifier: 5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D Certificate issuer: /CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d Certificate serial: 019B35D73594902FDB90C9C0564FD4D84A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft Manifest number: 0283 Signing time: Fri 19 Dec 2025 09:00:54 +0000 Manifest this update: Fri 19 Dec 2025 09:00:54 +0000 Manifest next update: Sat 20 Dec 2025 09:00:54 +0000 Files and hashes: 1: XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl (hash: 2IfVTryKyPfyVlvuPLQ60LxWEGfIv5EGdI/Y7fN2oEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:35:94:90:2f:db:90:c9:c0:56:4f:d4:d8:4a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9f8e855bf1b04309c49c41f7f430dcc8f9458d Validity Not Before: Dec 19 09:00:54 2025 GMT Not After : Dec 20 09:00:54 2025 GMT Subject: CN=0c5ba5f9cf35f1f05d5d197d6666e76301089df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:c0:17:f7:1a:92:cc:40:84:32:35:fd:2a: 35:47:1b:38:56:85:27:5f:da:89:1f:95:8f:0d:bc: 72:97:71:a9:56:9e:f4:71:30:e6:00:8e:d4:3c:41: 03:01:99:c4:05:79:93:f6:2a:2a:d3:34:dc:34:fa: cd:6f:12:df:e7:dc:4a:c8:58:01:d2:a3:f5:a4:2d: 39:f1:b1:51:2e:6a:a6:08:df:49:78:05:7d:e3:c1: af:e3:df:0b:87:ea:f6:b1:75:ce:4b:5f:50:f8:df: 35:c5:69:59:06:19:2a:19:3f:24:b1:bc:51:cd:33: db:76:b9:d3:5b:5e:ec:22:58:e4:ec:9b:1c:79:dc: 3b:e2:63:20:e9:0f:1e:62:22:fa:69:ad:a5:5f:b3: b0:78:35:3d:26:c7:53:5b:3a:1a:d3:71:ff:58:94: 70:54:d2:e4:87:05:8a:00:46:2f:19:1e:6d:5d:a5: 00:2c:02:49:62:44:1b:6a:5c:e2:9f:d1:cd:68:11: a7:49:4d:e6:75:1b:c5:53:e4:cd:39:1f:7d:b0:64: b4:eb:07:23:5a:af:df:b2:13:c9:c2:1b:57:6e:82: 00:bf:d8:a6:6e:83:76:2a:50:bc:ac:37:8f:be:fb: ef:2b:59:4a:67:69:b6:b3:cc:bb:b0:e0:0a:23:77: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:5B:A5:F9:CF:35:F1:F0:5D:5D:19:7D:66:66:E7:63:01:08:9D:F1 X509v3 Authority Key Identifier: keyid:5D:9F:8E:85:5B:F1:B0:43:09:C4:9C:41:F7:F4:30:DC:C8:F9:45:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4fba0b-7bee-4312-ab89-b4fcefd37ce1/1/XZ-OhVvxsEMJxJxB9_Qw3Mj5RY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:13:d8:c7:af:5e:a8:c5:61:19:9b:36:a9:7f:66:eb:a2:e6: 84:ce:85:7c:0c:75:bd:bc:76:a4:56:31:4d:97:a7:f5:38:d4: 09:f5:5a:85:e3:3d:6a:ea:cf:9f:6d:4b:b1:89:c4:86:86:46: d2:e9:3c:5a:7f:59:93:1c:b4:86:68:6e:60:b1:63:52:9b:cf: 27:69:b4:ef:8f:9b:31:79:fb:e6:d4:d3:38:ad:7b:00:2b:a9: 0f:e7:24:be:7b:92:5e:85:d7:ec:e9:88:ba:c1:f7:c7:88:2d: c3:cb:9c:9c:e7:9a:ed:15:8e:94:87:53:be:71:85:e4:32:6a: 86:bb:c3:66:7c:7b:20:a2:bb:81:fa:84:19:85:b3:a7:3a:cc: 7a:78:80:a9:60:f8:ef:46:85:5a:21:f9:f0:01:e2:6f:0d:58: 37:8b:36:32:aa:a6:5f:d2:8e:cc:1e:dd:55:07:ef:95:6b:74: 87:f1:e9:53:3e:fa:2f:89:f4:e6:f9:48:bb:34:6f:37:66:6e: 9d:c8:20:97:e2:be:48:27:26:85:c3:fe:c9:37:72:3b:bf:f6: c2:36:a1:5f:bc:29:c7:f4:18:21:c1:5e:29:09:ab:73:73:ca: ce:1a:56:26:fa:1c:e3:42:62:3c:24:57:1b:79:75:a5:31:17: a5:47:d1:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11zWUkC/bkMnAVk/U2EpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWY4ZTg1NWJmMWIwNDMwOWM0OWM0MWY3ZjQzMGRjYzhm OTQ1OGQwHhcNMjUxMjE5MDkwMDU0WhcNMjUxMjIwMDkwMDU0WjAzMTEwLwYDVQQD EygwYzViYTVmOWNmMzVmMWYwNWQ1ZDE5N2Q2NjY2ZTc2MzAxMDg5ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4zAF/caksxAhDI1/So1Rxs4VoUn X9qJH5WPDbxyl3GpVp70cTDmAI7UPEEDAZnEBXmT9ioq0zTcNPrNbxLf59xKyFgB 0qP1pC058bFRLmqmCN9JeAV948Gv498Lh+r2sXXOS19Q+N81xWlZBhkqGT8ksbxR zTPbdrnTW17sIljk7Jscedw74mMg6Q8eYiL6aa2lX7OweDU9JsdTWzoa03H/WJRw VNLkhwWKAEYvGR5tXaUALAJJYkQbalzin9HNaBGnSU3mdRvFU+TNOR99sGS06wcj Wq/fshPJwhtXboIAv9imboN2KlC8rDePvvvvK1lKZ2m2s8y7sOAKI3e+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxbpfnPNfHwXV0ZfWZm52MBCJ3xMB8GA1UdIwQY MBaAFF2fjoVb8bBDCcScQff0MNzI+UWNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80ZmJhMGItN2JlZS00MzEyLWFiODkt YjRmY2VmZDM3Y2UxLzEvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS80ZmJhMGItN2JlZS00MzEyLWFiODktYjRmY2VmZDM3Y2Ux LzEvWFotT2hWdnhzRU1KeEp4QjlfUXczTWo1UlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehPYx69e qMVhGZs2qX9m66LmhM6FfAx1vbx2pFYxTZen9TjUCfVaheM9aurPn21LsYnEhoZG 0uk8Wn9Zkxy0hmhuYLFjUpvPJ2m074+bMXn75tTTOK17ACupD+ckvnuSXoXX7OmI usH3x4gtw8ucnOea7RWOlIdTvnGF5DJqhrvDZnx7IKK7gfqEGYWzpzrMeniAqWD4 70aFWiH58AHibw1YN4s2MqqmX9KOzB7dVQfvlWt0h/HpUz76L4n05vlIuzRvN2Zu ncggl+K+SCcmhcP+yTdyO7/2wjahX7wpx/QYIcFeKQmrc3PKzhpWJvoc40JiPCRX G3l1pTEXpUfR0Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:48 2025 by rpki-client