This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft File: xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft (raw, json) Hash identifier: wQN+OAWOk7ISWMuFXBR3d1leVzxSaehANdmN2LANFv0= Subject key identifier: 46:FD:9F:D3:00:78:05:53:75:F0:32:CD:AE:C5:AD:A9:24:F8:01:BF Authority key identifier: C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 Certificate issuer: /CN=c6999623ed0f0c49feab957fcd026148694087a8 Certificate serial: 019B4A037740ECBBE179812F35566DE82FD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft Manifest number: 1760 Signing time: Tue 23 Dec 2025 07:01:39 +0000 Manifest this update: Tue 23 Dec 2025 07:01:39 +0000 Manifest next update: Wed 24 Dec 2025 07:01:39 +0000 Files and hashes: 1: xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl (hash: hIXtetoNq9RacbLglAxaPSrnpUESzbpC9qHgaI4/glE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:77:40:ec:bb:e1:79:81:2f:35:56:6d:e8:2f:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6999623ed0f0c49feab957fcd026148694087a8 Validity Not Before: Dec 23 07:01:39 2025 GMT Not After : Dec 24 07:01:39 2025 GMT Subject: CN=46fd9fd30078055375f032cdaec5ada924f801bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:04:22:13:6b:2e:30:99:02:24:90:bf:c5: 99:79:11:88:2a:82:bb:e9:54:1d:6b:5d:2a:78:7f: 20:54:af:c0:6f:ee:d0:1d:bd:a3:a6:4c:c1:a2:48: 93:77:6c:42:06:83:15:f1:69:2f:20:41:75:eb:16: f2:b5:cc:5a:43:3d:26:48:5f:13:c6:c4:e9:b5:b8: 16:42:e2:21:ab:76:17:e4:32:ca:d8:76:c4:47:4a: 87:72:df:14:68:8b:1c:98:5f:e6:0b:17:00:46:49: 0e:b1:31:ab:be:0c:8d:45:b2:96:37:b0:65:2a:da: 96:51:49:f8:a9:3a:cd:f8:16:28:31:a2:dd:2c:ab: ef:0a:76:c8:13:d4:04:32:92:93:26:c0:b6:de:d9: 5f:94:de:4c:28:08:ae:48:26:93:80:9a:b7:bd:2a: 77:c7:7b:d8:32:83:34:24:03:8b:05:30:a1:b1:20: 48:7c:8b:e7:32:61:89:e0:d5:87:06:95:3e:e6:57: ce:2f:83:97:79:80:be:8d:05:79:62:2d:d6:35:e1: 2a:ab:5e:8a:d3:0f:b7:c0:ff:f8:7d:96:6e:b1:41: 11:dc:3d:d7:db:72:fe:e0:98:05:58:51:b7:8b:4c: 7b:4d:0f:41:df:e6:4e:96:36:1a:05:6e:c6:98:a3: 08:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FD:9F:D3:00:78:05:53:75:F0:32:CD:AE:C5:AD:A9:24:F8:01:BF X509v3 Authority Key Identifier: keyid:C6:99:96:23:ED:0F:0C:49:FE:AB:95:7F:CD:02:61:48:69:40:87:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpmWI-0PDEn-q5V_zQJhSGlAh6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f27f40-a0c1-4f0a-917e-05b57d2d576c/1/xpmWI-0PDEn-q5V_zQJhSGlAh6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8a:31:08:cc:5f:f0:d2:5d:6e:09:fb:eb:51:7d:97:72:cd: 9c:29:ba:29:15:11:f8:58:bc:8f:27:b3:3e:8e:7d:83:1b:b6: 48:54:d1:a7:18:16:08:91:05:ca:c8:df:a5:4c:fc:9a:2d:ac: d4:dd:c9:f3:ab:71:c6:84:3f:31:ec:e0:d5:49:99:70:d8:0b: d2:6c:5c:31:07:24:bf:1f:db:76:1e:77:26:79:3b:1f:48:11: 83:08:31:b3:2c:47:f9:13:2e:6f:70:a6:9f:27:6f:f2:80:3a: 40:1f:c6:fa:8a:a2:04:15:83:1e:0c:68:b2:63:e9:fa:50:77: 51:1f:bf:19:1d:34:73:ef:04:3a:29:72:33:ad:d2:f5:eb:9f: b0:f9:df:31:b2:8d:9b:c1:a7:a8:cd:8a:36:fc:22:75:e2:3b: 76:2c:c4:f7:83:4a:92:68:0c:88:5c:ad:55:92:8b:18:7b:15: 03:72:ff:72:58:8b:d6:cb:c6:5a:4f:ee:0e:8c:1c:3f:8f:65: 37:9e:59:d8:5b:eb:05:68:c8:5f:48:55:6f:40:29:fe:0f:e8: b7:e6:65:83:fc:e7:6b:df:08:6a:46:c2:df:b2:ee:1c:c7:48: 86:a5:4b:27:31:06:44:6a:59:21:0a:db:80:70:3f:f1:38:95: 7d:6f:88:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA3dA7LvheYEvNVZt6C/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTk5NjIzZWQwZjBjNDlmZWFiOTU3ZmNkMDI2MTQ4Njk0 MDg3YTgwHhcNMjUxMjIzMDcwMTM5WhcNMjUxMjI0MDcwMTM5WjAzMTEwLwYDVQQD Eyg0NmZkOWZkMzAwNzgwNTUzNzVmMDMyY2RhZWM1YWRhOTI0ZjgwMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu84EIhNrLjCZAiSQv8WZeRGIKoK7 6VQda10qeH8gVK/Ab+7QHb2jpkzBokiTd2xCBoMV8WkvIEF16xbytcxaQz0mSF8T xsTptbgWQuIhq3YX5DLK2HbER0qHct8UaIscmF/mCxcARkkOsTGrvgyNRbKWN7Bl KtqWUUn4qTrN+BYoMaLdLKvvCnbIE9QEMpKTJsC23tlflN5MKAiuSCaTgJq3vSp3 x3vYMoM0JAOLBTChsSBIfIvnMmGJ4NWHBpU+5lfOL4OXeYC+jQV5Yi3WNeEqq16K 0w+3wP/4fZZusUER3D3X23L+4JgFWFG3i0x7TQ9B3+ZOljYaBW7GmKMIcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb9n9MAeAVTdfAyza7Frakk+AG/MB8GA1UdIwQY MBaAFMaZliPtDwxJ/quVf80CYUhpQIeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2Ut MDViNTdkMmQ1NzZjLzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMjdmNDAtYTBjMS00ZjBhLTkxN2UtMDViNTdkMmQ1NzZj LzEveHBtV0ktMFBERW4tcTVWX3pRSmhTR2xBaDZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYoxCMxf 8NJdbgn761F9l3LNnCm6KRUR+Fi8jyezPo59gxu2SFTRpxgWCJEFysjfpUz8mi2s 1N3J86txxoQ/Mezg1UmZcNgL0mxcMQckvx/bdh53Jnk7H0gRgwgxsyxH+RMub3Cm nydv8oA6QB/G+oqiBBWDHgxosmPp+lB3UR+/GR00c+8EOilyM63S9eufsPnfMbKN m8GnqM2KNvwideI7dizE94NKkmgMiFytVZKLGHsVA3L/cliL1svGWk/uDowcP49l N55Z2FvrBWjIX0hVb0Ap/g/ot+Zlg/zna98IakbC37LuHMdIhqVLJzEGRGpZIQrb gHA/8TiVfW+I8w== -----END CERTIFICATE-----Generated at Tue Dec 23 09:17:15 2025 by rpki-client