This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft File: XjPdpt78k8-CUWSU2fNIjWxK2dw.mft (raw, json) Hash identifier: K3LjAke8rW9xtO0mM6GleWM9sqMlX9pesiEUQVH7rQk= Subject key identifier: 65:F8:EA:A1:A5:0E:B4:E8:6A:80:E7:60:3A:54:75:99:E5:B6:3B:00 Authority key identifier: 5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC Certificate issuer: /CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc Certificate serial: 019B67D65CB240249465E3709B88D3C7570A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft Manifest number: 0A05 Signing time: Mon 29 Dec 2025 02:01:00 +0000 Manifest this update: Mon 29 Dec 2025 02:01:00 +0000 Manifest next update: Tue 30 Dec 2025 02:01:00 +0000 Files and hashes: 1: XjPdpt78k8-CUWSU2fNIjWxK2dw.crl (hash: EDz0+hNIArr4CB+I/OM5oTjX2pWGLOXeEyDLHRDg/70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d6:5c:b2:40:24:94:65:e3:70:9b:88:d3:c7:57:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e33dda6defc93cf82516494d9f3488d6c4ad9dc Validity Not Before: Dec 29 02:01:00 2025 GMT Not After : Dec 30 02:01:00 2025 GMT Subject: CN=65f8eaa1a50eb4e86a80e7603a547599e5b63b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:52:46:c3:97:92:50:bd:16:09:68:ab:07:b7: d6:99:43:6e:90:98:26:98:a0:5c:8a:94:4a:12:dd: 82:5b:9c:a1:42:d2:4a:f2:1f:32:33:65:ac:31:e9: 1b:b2:4f:09:f5:ee:00:cd:fc:d2:11:98:02:24:60: ed:5c:95:a0:34:e6:de:3c:76:3f:bf:38:af:b7:c1: 2a:4c:9e:9f:56:9e:6b:87:5f:09:d4:ff:68:d6:42: 17:58:0c:fd:e5:c5:64:fa:b1:e2:08:ab:93:d9:94: 0f:12:90:88:bf:00:fd:03:e4:13:20:6b:f7:93:72: c6:e3:70:89:25:ca:34:c9:65:4d:44:cf:a5:bc:06: 41:28:b1:8b:1c:7c:b8:9a:3a:cb:e3:50:c5:b9:14: 89:91:a7:9c:36:0f:f0:16:10:06:d6:3f:fa:8c:59: 45:57:b3:5d:53:a6:d7:90:d4:32:af:f7:5f:fd:5f: e2:54:08:48:88:40:a7:d5:4f:4c:6c:d0:87:63:b3: 72:65:f7:d4:39:ee:0d:ff:aa:b2:aa:7c:72:b6:d7: 92:0e:31:32:57:22:5f:2a:0c:81:93:00:55:a9:fd: 36:11:26:c0:50:7e:b0:de:24:07:d9:26:2d:52:68: 96:2b:10:d9:c5:c9:2a:72:f1:49:c7:0c:ed:d0:63: 70:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F8:EA:A1:A5:0E:B4:E8:6A:80:E7:60:3A:54:75:99:E5:B6:3B:00 X509v3 Authority Key Identifier: keyid:5E:33:DD:A6:DE:FC:93:CF:82:51:64:94:D9:F3:48:8D:6C:4A:D9:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjPdpt78k8-CUWSU2fNIjWxK2dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/303a43-1003-42d6-96b0-66b86fc781a2/1/XjPdpt78k8-CUWSU2fNIjWxK2dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:79:43:8a:38:ad:df:d3:10:15:2e:1e:77:e5:73:1d:0c:a1: c6:5d:61:3b:74:34:03:80:e5:a7:e3:f8:0d:40:53:3c:c7:ed: ae:ad:0e:bf:7e:11:ce:39:8f:11:90:e4:79:76:45:98:ae:73: 11:65:cc:00:91:8b:6e:af:31:4a:3c:3a:7a:8d:b8:61:30:3e: b5:3f:a6:61:49:eb:9f:63:f2:5e:61:e3:b4:94:74:32:3d:e3: f3:9b:e4:33:d4:98:dd:59:a4:1a:78:5f:2e:96:cd:4c:d0:cd: 29:3a:6c:31:61:fe:eb:f9:84:7d:8e:70:bf:1d:92:c2:ac:a6: 40:06:2d:8d:ee:1e:38:a3:63:45:41:1e:01:fe:84:07:53:98: ce:d5:c2:08:df:cd:1b:54:b9:39:71:82:57:7e:37:90:fb:4c: 0b:ff:d7:a6:61:81:29:be:62:29:0b:b6:b5:a0:f1:df:f2:0d: 17:6f:97:ce:4f:57:0a:e8:ed:ab:d4:40:aa:2a:5f:8f:4d:4a: c1:2e:0f:cf:4c:68:47:05:d0:d9:b8:10:f5:ea:2c:d0:75:69: 36:fe:ba:33:bc:c0:01:ac:c6:79:ee:32:0b:02:61:1e:e5:15: b8:d4:8b:5d:68:61:86:70:83:97:96:9a:2b:e8:0d:2c:93:a6: 9b:6c:70:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1lyyQCSUZeNwm4jTx1cKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzNkZGE2ZGVmYzkzY2Y4MjUxNjQ5NGQ5ZjM0ODhkNmM0 YWQ5ZGMwHhcNMjUxMjI5MDIwMTAwWhcNMjUxMjMwMDIwMTAwWjAzMTEwLwYDVQQD Eyg2NWY4ZWFhMWE1MGViNGU4NmE4MGU3NjAzYTU0NzU5OWU1YjYzYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFJGw5eSUL0WCWirB7fWmUNukJgm mKBcipRKEt2CW5yhQtJK8h8yM2WsMekbsk8J9e4AzfzSEZgCJGDtXJWgNObePHY/ vzivt8EqTJ6fVp5rh18J1P9o1kIXWAz95cVk+rHiCKuT2ZQPEpCIvwD9A+QTIGv3 k3LG43CJJco0yWVNRM+lvAZBKLGLHHy4mjrL41DFuRSJkaecNg/wFhAG1j/6jFlF V7NdU6bXkNQyr/df/V/iVAhIiECn1U9MbNCHY7NyZffUOe4N/6qyqnxytteSDjEy VyJfKgyBkwBVqf02ESbAUH6w3iQH2SYtUmiWKxDZxckqcvFJxwzt0GNwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGX46qGlDrToaoDnYDpUdZnltjsAMB8GA1UdIwQY MBaAFF4z3abe/JPPglFklNnzSI1sStncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAt NjZiODZmYzc4MWEyLzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8zMDNhNDMtMTAwMy00MmQ2LTk2YjAtNjZiODZmYzc4MWEy LzEvWGpQZHB0NzhrOC1DVVdTVTJmTklqV3hLMmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnlDijit 39MQFS4ed+VzHQyhxl1hO3Q0A4Dlp+P4DUBTPMftrq0Ov34RzjmPEZDkeXZFmK5z EWXMAJGLbq8xSjw6eo24YTA+tT+mYUnrn2PyXmHjtJR0Mj3j85vkM9SY3VmkGnhf LpbNTNDNKTpsMWH+6/mEfY5wvx2SwqymQAYtje4eOKNjRUEeAf6EB1OYztXCCN/N G1S5OXGCV343kPtMC//XpmGBKb5iKQu2taDx3/INF2+Xzk9XCujtq9RAqipfj01K wS4Pz0xoRwXQ2bgQ9eos0HVpNv66M7zAAazGee4yCwJhHuUVuNSLXWhhhnCDl5aa K+gNLJOmm2xwFQ== -----END CERTIFICATE-----Generated at Mon Dec 29 07:06:52 2025 by rpki-client