This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft File: XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft (raw, json) Hash identifier: oHxuLfLzvNam8NFaRGIwRGKZOSeDK0NQJu9pLrvCFgU= Subject key identifier: EF:09:0C:0C:45:7B:E5:09:38:E5:0E:10:BC:31:C0:AD:6E:EB:ED:99 Authority key identifier: 5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 Certificate issuer: /CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Certificate serial: 019B3D22D0BC94EEB4AC5B26C0B5E51BEC12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft Manifest number: 02CB Signing time: Sat 20 Dec 2025 19:00:50 +0000 Manifest this update: Sat 20 Dec 2025 19:00:50 +0000 Manifest next update: Sun 21 Dec 2025 19:00:50 +0000 Files and hashes: 1: XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl (hash: l920FYths/V5GNtLuNOUxLeZf4X4TieXy2Re5toqit4=) 2: sHWJgB25eZ5MsxkzvHCaC9Q9eBU.roa (hash: tfZrpnb6Dc4xLEKe9XCNdEh3R+ehL6A7wZM06Ogyh8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:d0:bc:94:ee:b4:ac:5b:26:c0:b5:e5:1b:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c8eda6fea6b18f10dfd6afc0d83befbaa69c134 Validity Not Before: Dec 20 19:00:50 2025 GMT Not After : Dec 21 19:00:50 2025 GMT Subject: CN=ef090c0c457be50938e50e10bc31c0ad6eebed99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:de:0f:32:48:9c:74:c9:2a:d0:18:26:2f: 6f:9e:27:0c:5e:76:ea:b6:d2:95:20:10:ad:6c:9f: 71:8c:b2:69:7d:29:d5:c6:07:f4:88:4e:ee:c5:28: 41:d9:b8:cb:a7:94:ca:59:e8:91:8e:a6:d8:8a:c9: bf:2e:b6:79:ab:17:0f:0d:eb:e6:75:f0:7d:b5:4a: 3d:86:ee:a7:c0:36:4c:90:79:7c:35:62:0e:6e:b8: 43:03:8b:63:68:9e:f0:0d:36:7c:f8:a5:51:9b:d8: 46:01:28:b2:31:a2:99:29:67:cf:0d:ba:54:23:42: f2:35:71:1b:7a:1f:c4:cb:67:f0:d8:df:ec:93:35: 2d:dd:ba:12:dc:ee:75:f8:c2:af:bb:01:42:33:d2: d8:f7:f3:b9:0e:c1:22:63:7c:16:13:25:7e:20:20: 13:1a:2c:e4:9e:90:48:01:bf:46:96:3f:7b:f0:9c: 3a:f0:1f:b5:03:45:d2:3a:1f:f4:3f:39:70:ca:97: 3c:52:5e:48:9a:68:76:5f:67:9c:c9:53:31:87:e4: 2f:1b:af:4c:03:64:bf:91:60:23:75:b3:35:86:7a: 37:ad:6b:99:da:f6:c5:e1:de:bd:4d:da:4c:6c:bd: 34:77:c3:cc:cb:1b:a3:68:60:72:c0:dd:d9:e2:03: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:09:0C:0C:45:7B:E5:09:38:E5:0E:10:BC:31:C0:AD:6E:EB:ED:99 X509v3 Authority Key Identifier: keyid:5C:8E:DA:6F:EA:6B:18:F1:0D:FD:6A:FC:0D:83:BE:FB:AA:69:C1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XI7ab-prGPEN_Wr8DYO--6ppwTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9f6a08-40c6-4a63-b060-3111b62d2fbd/1/XI7ab-prGPEN_Wr8DYO--6ppwTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cd:c8:1c:47:56:6e:33:40:a0:4c:36:f2:8a:cc:ea:05:c2: e1:a4:30:39:b6:2c:e6:67:4e:5f:f7:e8:79:b7:4c:4b:24:c9: 7e:59:de:2c:60:65:2f:67:ea:98:7d:16:13:12:7f:1f:22:51: b3:3c:5e:e6:d3:b5:cf:bb:29:c3:aa:35:66:3b:9c:61:9f:26: 35:e3:20:63:cc:18:f9:48:c4:a8:8d:0d:76:b0:10:51:1c:6b: ae:c0:40:13:87:74:fe:3d:af:02:6b:53:90:3a:ba:32:70:f2: bc:6d:a4:5b:9a:cb:df:8d:3f:5f:ad:1d:98:cb:f4:03:9c:54: 92:dd:a7:38:93:54:1c:32:d6:45:3c:85:5c:89:04:61:66:27: cb:23:84:47:91:43:dc:21:af:c9:36:7c:dd:8f:67:7c:8d:01: b4:0a:ef:1c:e5:61:b0:75:df:48:92:88:d8:c0:c9:83:f2:bf: b7:95:a7:1d:30:b4:84:1a:7d:ca:21:49:ea:e4:35:14:25:af: 4d:66:f9:56:0d:c8:73:5a:7e:58:0c:bb:1e:4c:b1:0e:e0:10: 9c:cf:ef:14:2a:f7:95:1f:8a:f2:7c:e3:83:a0:31:a6:34:58: f6:54:b6:aa:27:23:31:59:08:8c:9b:d3:da:af:61:4d:0d:26: ff:e2:b7:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9ItC8lO60rFsmwLXlG+wSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjOGVkYTZmZWE2YjE4ZjEwZGZkNmFmYzBkODNiZWZiYWE2 OWMxMzQwHhcNMjUxMjIwMTkwMDUwWhcNMjUxMjIxMTkwMDUwWjAzMTEwLwYDVQQD EyhlZjA5MGMwYzQ1N2JlNTA5MzhlNTBlMTBiYzMxYzBhZDZlZWJlZDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1reDzJInHTJKtAYJi9vnicMXnbq ttKVIBCtbJ9xjLJpfSnVxgf0iE7uxShB2bjLp5TKWeiRjqbYism/LrZ5qxcPDevm dfB9tUo9hu6nwDZMkHl8NWIObrhDA4tjaJ7wDTZ8+KVRm9hGASiyMaKZKWfPDbpU I0LyNXEbeh/Ey2fw2N/skzUt3boS3O51+MKvuwFCM9LY9/O5DsEiY3wWEyV+ICAT GizknpBIAb9Glj978Jw68B+1A0XSOh/0Pzlwypc8Ul5Immh2X2ecyVMxh+QvG69M A2S/kWAjdbM1hno3rWuZ2vbF4d69TdpMbL00d8PMyxujaGBywN3Z4gPX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8JDAxFe+UJOOUOELwxwK1u6+2ZMB8GA1UdIwQY MBaAFFyO2m/qaxjxDf1q/A2DvvuqacE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAt MzExMWI2MmQyZmJkLzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85ZjZhMDgtNDBjNi00YTYzLWIwNjAtMzExMWI2MmQyZmJk LzEvWEk3YWItcHJHUEVOX1dyOERZTy0tNnBwd1RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdM3IHEdW bjNAoEw28orM6gXC4aQwObYs5mdOX/foebdMSyTJflneLGBlL2fqmH0WExJ/HyJR szxe5tO1z7spw6o1ZjucYZ8mNeMgY8wY+UjEqI0NdrAQURxrrsBAE4d0/j2vAmtT kDq6MnDyvG2kW5rL340/X60dmMv0A5xUkt2nOJNUHDLWRTyFXIkEYWYnyyOER5FD 3CGvyTZ83Y9nfI0BtArvHOVhsHXfSJKI2MDJg/K/t5WnHTC0hBp9yiFJ6uQ1FCWv TWb5Vg3Ic1p+WAy7HkyxDuAQnM/vFCr3lR+K8nzjg6AxpjRY9lS2qicjMVkIjJvT 2q9hTQ0m/+K3Zg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:18 2025 by rpki-client