This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft File: xRg7G2FacNeXwnfPyEC5CjLZaWw.mft (raw, json) Hash identifier: NYCfFIK/Krdmj94nLfCx6Q0LBYQsbx2rC/ZL+X614vI= Subject key identifier: 67:C7:CF:37:38:73:6D:BF:FC:3D:4E:CE:51:5E:E5:3F:87:B6:D7:4F Authority key identifier: C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C Certificate issuer: /CN=c5183b1b615a70d797c277cfc840b90a32d9696c Certificate serial: 019B28C0A36F0843FE94A89E656CA8D56392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft Manifest number: 0EA1 Signing time: Tue 16 Dec 2025 20:01:11 +0000 Manifest this update: Tue 16 Dec 2025 20:01:11 +0000 Manifest next update: Wed 17 Dec 2025 20:01:11 +0000 Files and hashes: 1: xRg7G2FacNeXwnfPyEC5CjLZaWw.crl (hash: vcpJ4g1QqtrWRcoHvWuPUiboIroZlPe8b0EkYw81J7w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:c0:a3:6f:08:43:fe:94:a8:9e:65:6c:a8:d5:63:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5183b1b615a70d797c277cfc840b90a32d9696c Validity Not Before: Dec 16 20:01:11 2025 GMT Not After : Dec 17 20:01:11 2025 GMT Subject: CN=67c7cf3738736dbffc3d4ece515ee53f87b6d74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:49:b4:55:f8:d6:68:32:4c:cc:ea:13:58:5b: 0b:c1:6a:cd:0e:8f:1c:51:c4:52:5f:8a:31:68:03: f8:16:4c:18:f9:fd:3f:e1:d5:c3:09:37:1e:45:d8: 07:e4:3e:21:eb:27:cb:52:5f:b8:12:4f:2d:81:fb: d0:76:38:a0:38:a1:3c:fb:5e:3e:d0:b8:25:fe:e4: 77:1d:01:52:cc:a0:54:68:e7:01:29:c9:2a:9d:60: 0b:00:d2:7e:3a:ab:6f:06:41:c4:5e:c3:66:0d:b5: 96:40:59:3d:74:a2:90:5c:50:ac:60:78:a9:5c:13: cb:80:f6:76:62:9c:26:dc:41:8a:cf:34:cb:f2:2c: 0d:f7:49:0a:de:45:13:03:90:d4:62:3e:23:8d:a9: d3:a1:7b:da:31:22:22:1d:55:37:a5:2d:5f:7f:c4: e4:e4:b4:2b:43:db:b0:31:ee:27:ff:d6:68:04:93: 8c:cc:fb:50:ba:05:2c:aa:1c:0d:6b:26:a7:74:df: 3e:dd:4e:e0:47:9d:ae:16:8a:71:a0:8b:88:d1:cf: b0:34:dd:74:1f:bd:8b:d9:31:01:43:d3:a6:f7:d7: 7d:d7:14:95:14:21:6c:71:ec:1a:69:77:96:d8:aa: a3:49:ca:a6:88:7c:56:34:85:27:13:28:9d:95:5f: df:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:C7:CF:37:38:73:6D:BF:FC:3D:4E:CE:51:5E:E5:3F:87:B6:D7:4F X509v3 Authority Key Identifier: keyid:C5:18:3B:1B:61:5A:70:D7:97:C2:77:CF:C8:40:B9:0A:32:D9:69:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRg7G2FacNeXwnfPyEC5CjLZaWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/26658b-b2e7-466f-a39c-656e2eb804c7/1/xRg7G2FacNeXwnfPyEC5CjLZaWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0c:29:a5:ce:56:1f:84:8a:b4:d1:5d:b8:8e:c0:14:e1:5d: 64:53:8d:ee:9e:12:ed:2c:92:e9:fa:16:c2:f5:3c:24:cb:f6: c1:b6:2a:5b:60:cb:99:45:fa:64:02:44:19:15:bf:05:79:d0: a3:bd:53:67:f9:f3:e1:2e:df:73:c2:50:d1:98:d9:bd:18:97: f0:8e:3a:9e:07:36:26:0f:a4:72:a7:c8:cf:b2:0d:d1:40:7f: c4:d0:7a:c8:fc:28:bc:28:76:da:6f:9e:d5:bb:37:dc:e9:55: 8f:3f:1b:4a:c0:f9:a0:3c:d2:ab:f1:d4:25:41:eb:7f:8c:98: 51:ad:6d:48:b6:a1:ed:af:c7:1a:3d:8d:6b:be:d1:ec:a2:10: 6d:de:fd:4f:1b:2f:e2:db:8b:a4:5d:3d:65:50:c3:fb:85:8b: ef:ac:bd:e8:ad:49:4c:78:c5:01:c9:93:5b:6c:94:cf:26:56: cd:b1:b1:42:8c:14:ae:d1:ab:f0:d7:f4:9f:f3:31:6e:d1:a7: 11:82:ff:1c:df:c7:c2:26:d9:7b:a7:fb:2f:a0:2c:ae:88:f5: 4e:ef:a6:54:7e:25:a2:bc:80:ea:1d:fa:4b:0d:83:eb:56:3a: bc:0b:ad:6a:18:db:a6:95:0d:a6:5a:eb:a1:69:ec:7f:5f:0e: 63:4c:58:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsowKNvCEP+lKieZWyo1WOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MTgzYjFiNjE1YTcwZDc5N2MyNzdjZmM4NDBiOTBhMzJk OTY5NmMwHhcNMjUxMjE2MjAwMTExWhcNMjUxMjE3MjAwMTExWjAzMTEwLwYDVQQD Eyg2N2M3Y2YzNzM4NzM2ZGJmZmMzZDRlY2U1MTVlZTUzZjg3YjZkNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkm0VfjWaDJMzOoTWFsLwWrNDo8c UcRSX4oxaAP4FkwY+f0/4dXDCTceRdgH5D4h6yfLUl+4Ek8tgfvQdjigOKE8+14+ 0Lgl/uR3HQFSzKBUaOcBKckqnWALANJ+OqtvBkHEXsNmDbWWQFk9dKKQXFCsYHip XBPLgPZ2Ypwm3EGKzzTL8iwN90kK3kUTA5DUYj4jjanToXvaMSIiHVU3pS1ff8Tk 5LQrQ9uwMe4n/9ZoBJOMzPtQugUsqhwNayandN8+3U7gR52uFopxoIuI0c+wNN10 H72L2TEBQ9Om99d91xSVFCFscewaaXeW2KqjScqmiHxWNIUnEyidlV/ftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGfHzzc4c22//D1OzlFe5T+HttdPMB8GA1UdIwQY MBaAFMUYOxthWnDXl8J3z8hAuQoy2WlsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMt NjU2ZTJlYjgwNGM3LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yNjY1OGItYjJlNy00NjZmLWEzOWMtNjU2ZTJlYjgwNGM3 LzEveFJnN0cyRmFjTmVYd25mUHlFQzVDakxaYVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowwppc5W H4SKtNFduI7AFOFdZFON7p4S7SyS6foWwvU8JMv2wbYqW2DLmUX6ZAJEGRW/BXnQ o71TZ/nz4S7fc8JQ0ZjZvRiX8I46ngc2Jg+kcqfIz7IN0UB/xNB6yPwovCh22m+e 1bs33OlVjz8bSsD5oDzSq/HUJUHrf4yYUa1tSLah7a/HGj2Na77R7KIQbd79Txsv 4tuLpF09ZVDD+4WL76y96K1JTHjFAcmTW2yUzyZWzbGxQowUrtGr8Nf0n/MxbtGn EYL/HN/HwibZe6f7L6Asroj1Tu+mVH4loryA6h36Sw2D61Y6vAutahjbppUNplrr oWnsf18OY0xY+w== -----END CERTIFICATE-----Generated at Tue Dec 16 22:34:44 2025 by rpki-client