This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft File: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json) Hash identifier: dRRK40E4AGdPpJnBucVQz/ZLws5eCugUb3PrGvpkzAI= Subject key identifier: C0:0C:8D:5A:EA:8E:AE:C3:FC:49:6A:3A:A5:8A:F5:2B:9D:83:ED:E9 Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33 Certificate issuer: /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033 Certificate serial: 019B2F6762A7FA9CAC66AEA0F7879D474DD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft Manifest number: 1246 Signing time: Thu 18 Dec 2025 03:01:03 +0000 Manifest this update: Thu 18 Dec 2025 03:01:03 +0000 Manifest next update: Fri 19 Dec 2025 03:01:03 +0000 Files and hashes: 1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: EGX9nJ+zds4cy2yYEKuzBHh1YGoCbJsB+6o/oILeieM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:62:a7:fa:9c:ac:66:ae:a0:f7:87:9d:47:4d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033 Validity Not Before: Dec 18 03:01:03 2025 GMT Not After : Dec 19 03:01:03 2025 GMT Subject: CN=c00c8d5aea8eaec3fc496a3aa58af52b9d83ede9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:15:15:9e:39:30:42:b5:dd:22:b6:ea:bd: 35:b4:39:f1:c8:be:6a:c4:f0:63:7a:76:1b:be:3e: c0:97:0f:e6:0b:d7:46:81:fb:84:94:dc:94:95:b1: e3:56:55:b8:fe:b9:9b:e9:f4:ce:2e:3e:a0:71:9c: ce:94:45:ab:0c:8d:1d:8a:62:7c:0d:f8:cf:82:99: 22:be:5b:ac:cd:43:16:b1:05:4e:1a:ce:55:79:0b: fd:3d:57:e0:64:41:6e:1d:b7:5c:c1:f2:db:3e:28: d3:7b:27:be:6b:ae:fe:d2:fe:72:0f:ec:38:ab:de: e8:66:32:42:f5:4c:cc:89:f5:f0:13:6a:b5:71:b2: be:d4:ce:8d:d2:c0:62:5f:4e:64:8d:74:e1:ff:f4: 3b:bc:6e:cb:8f:a2:2f:c6:e7:69:0c:17:f2:08:01: f0:7a:69:09:d3:0b:e6:bb:34:74:62:41:c9:15:75: d6:75:f2:b0:79:10:b7:f4:b9:ba:e7:68:e3:39:ae: e9:83:83:fc:b9:6d:3b:c5:b1:93:a3:e4:df:f2:38: 7a:a6:14:29:87:68:e6:52:1a:39:3c:f3:46:37:10: cd:dd:a8:58:5d:07:0d:64:84:aa:f9:31:15:1a:e9: 78:ce:be:38:ab:ba:13:f1:98:d8:d6:83:d5:6e:8d: 09:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:8D:5A:EA:8E:AE:C3:FC:49:6A:3A:A5:8A:F5:2B:9D:83:ED:E9 X509v3 Authority Key Identifier: keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ba:72:d0:b0:cb:39:88:e4:2d:4a:83:e7:82:86:1a:4d:75: e2:67:00:9c:69:ff:09:1a:dc:8b:6b:03:58:e5:c8:1d:5e:2f: f2:ea:cf:76:d2:fa:42:35:07:ce:a4:f9:6b:d1:15:07:42:40: c1:6c:8d:3e:8d:c1:97:b9:10:1a:e8:5e:c2:2f:a4:d6:3a:5e: 04:3a:ae:52:19:42:e9:94:c4:e5:59:37:44:cc:ec:9d:65:f6: 3e:d5:db:4b:d8:0f:6d:28:f1:30:53:0a:18:a2:bb:58:95:ca: a7:ef:9e:47:87:e2:db:93:c0:b8:34:6c:1d:c2:02:ed:30:04: 09:d9:bf:36:30:3b:3e:e4:a7:db:a2:c2:bb:18:16:be:07:bd: 71:c8:6f:86:db:7c:ef:ac:38:c4:9f:b9:63:05:07:40:77:38: 0d:5b:84:5b:2e:ba:4b:6e:bf:55:73:03:d9:02:14:bf:16:25: 50:02:87:aa:09:29:68:9e:60:db:f1:b0:bb:e7:38:9d:a5:5f: c6:4b:05:bb:3d:ed:5d:0c:f2:ee:8b:97:3e:76:57:8b:40:4c: 47:19:a9:9e:a4:7e:06:bd:28:d2:fe:d9:e4:41:26:ba:17:8c: 23:36:e2:d7:db:fc:18:d3:d6:d6:eb:9c:a6:a6:bd:43:c4:01: b2:f5:aa:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2Kn+pysZq6g94edR03ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZmMwZjliZjdhNDRhYjM1NjdiYWNmOTI5ZWU0YzljMDU3 NTMwMzMwHhcNMjUxMjE4MDMwMTAzWhcNMjUxMjE5MDMwMTAzWjAzMTEwLwYDVQQD EyhjMDBjOGQ1YWVhOGVhZWMzZmM0OTZhM2FhNThhZjUyYjlkODNlZGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kVFZ45MEK13SK26r01tDnxyL5q xPBjenYbvj7Alw/mC9dGgfuElNyUlbHjVlW4/rmb6fTOLj6gcZzOlEWrDI0dimJ8 DfjPgpkivluszUMWsQVOGs5VeQv9PVfgZEFuHbdcwfLbPijTeye+a67+0v5yD+w4 q97oZjJC9UzMifXwE2q1cbK+1M6N0sBiX05kjXTh//Q7vG7Lj6IvxudpDBfyCAHw emkJ0wvmuzR0YkHJFXXWdfKweRC39Lm652jjOa7pg4P8uW07xbGTo+Tf8jh6phQp h2jmUho5PPNGNxDN3ahYXQcNZISq+TEVGul4zr44q7oT8ZjY1oPVbo0JWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAMjVrqjq7D/ElqOqWK9Sudg+3pMB8GA1UdIwQY MBaAFFz8D5v3pEqzVnus+SnuTJwFdTAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9lMmZhNWMtODg0Ny00NGU0LWE5NWQt NjFlOGRjMWYxNDU5LzEvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9lMmZhNWMtODg0Ny00NGU0LWE5NWQtNjFlOGRjMWYxNDU5 LzEvWFB3UG1fZWtTck5XZTZ6NUtlNU1uQVYxTURNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLpy0LDL OYjkLUqD54KGGk114mcAnGn/CRrci2sDWOXIHV4v8urPdtL6QjUHzqT5a9EVB0JA wWyNPo3Bl7kQGuhewi+k1jpeBDquUhlC6ZTE5Vk3RMzsnWX2PtXbS9gPbSjxMFMK GKK7WJXKp++eR4fi25PAuDRsHcIC7TAECdm/NjA7PuSn26LCuxgWvge9cchvhtt8 76w4xJ+5YwUHQHc4DVuEWy66S26/VXMD2QIUvxYlUAKHqgkpaJ5g2/Gwu+c4naVf xksFuz3tXQzy7ouXPnZXi0BMRxmpnqR+Br0o0v7Z5EEmuheMIzbi19v8GNPW1uuc pqa9Q8QBsvWqsA== -----END CERTIFICATE-----Generated at Thu Dec 18 10:23:31 2025 by rpki-client