This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft File: XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json) Hash identifier: 2CjRL9ahpsPrW2DY/la8isTcG+hUc2AKyHMw8tiql+Q= Subject key identifier: 35:62:CC:65:A4:F5:C8:7E:F8:E5:D5:F8:E5:13:81:C5:28:90:E5:9C Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3 Certificate issuer: /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3 Certificate serial: 019B2C666A3C3791BB954688A0C7F646B14A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft Manifest number: 12CD Signing time: Wed 17 Dec 2025 13:01:07 +0000 Manifest this update: Wed 17 Dec 2025 13:01:07 +0000 Manifest next update: Thu 18 Dec 2025 13:01:07 +0000 Files and hashes: 1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: fEH3rb9XWx6Yq/S+9r0g9BVftScGDmyS80B3PJXQCaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:6a:3c:37:91:bb:95:46:88:a0:c7:f6:46:b1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3 Validity Not Before: Dec 17 13:01:07 2025 GMT Not After : Dec 18 13:01:07 2025 GMT Subject: CN=3562cc65a4f5c87ef8e5d5f8e51381c52890e59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:a7:8d:9e:e1:c5:4a:39:a9:a8:26:96:a6: 68:d6:75:cd:e7:b0:27:7c:b8:2a:92:7c:26:f0:b2: 05:ec:d8:81:5a:99:9d:21:c9:6e:61:b9:cb:31:6e: cc:17:4d:83:08:52:1c:6c:96:9a:12:f9:00:d6:11: 91:00:63:71:ed:57:39:cb:85:d0:2b:8c:5d:44:49: ff:3c:bb:07:8b:81:61:74:ee:eb:5a:8f:21:ce:12: 84:be:08:73:b7:9f:33:f7:88:56:59:38:29:07:89: 90:aa:92:7e:6a:50:6c:09:4e:49:4e:0a:82:26:f1: f6:35:e6:54:b1:1b:b9:08:14:1b:ce:6b:9d:81:29: 9a:d8:ae:20:f4:52:42:43:2b:b2:4a:18:a7:55:e8: 43:4c:cd:bc:44:84:62:32:1d:55:76:49:45:62:ab: 0b:b8:18:17:9e:a1:82:98:16:9e:f8:ac:18:4d:5a: ee:92:16:58:12:58:23:02:af:2b:44:76:1f:36:dc: 6b:9c:dd:0f:ef:bf:8a:b4:c4:b7:b6:7d:21:7f:33: ca:ba:f3:86:51:df:a7:b6:ee:96:32:6c:a3:b1:0d: 2c:00:dd:d4:05:a6:bd:bb:fa:4c:9b:7f:e4:35:c2: 38:bd:df:72:1d:6b:f1:83:1a:49:8b:bc:78:cb:61: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:62:CC:65:A4:F5:C8:7E:F8:E5:D5:F8:E5:13:81:C5:28:90:E5:9C X509v3 Authority Key Identifier: keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f8:41:ea:f2:dd:f3:6e:ff:28:d4:d8:8a:dd:84:ad:d4:c4: be:c5:14:5a:10:3b:c6:ce:38:c1:5f:ef:b0:30:c9:10:87:7d: 05:a5:33:ce:b0:28:61:89:44:43:00:86:f6:b8:dd:80:69:29: 95:36:85:be:35:b7:dd:7c:1c:82:0c:51:3e:00:63:76:91:cb: 03:52:fc:bd:e2:50:ff:b5:4d:bd:b8:56:5c:2f:c6:41:34:6b: 5a:07:a8:c3:a2:8d:e8:59:b6:7a:07:42:0c:eb:8c:e2:e8:59: bb:40:e9:a0:4c:09:03:37:c1:6e:6e:a5:73:ad:11:c7:02:28: 0d:0d:f7:3a:c2:22:f8:fc:51:ff:d1:b2:c1:49:75:9f:90:e4: 46:69:e7:94:ed:2e:e1:97:0b:3e:e4:44:cc:ce:08:e2:3d:c6: ea:ec:30:95:d4:da:54:f2:7e:79:7b:2a:4e:01:83:0f:79:e9: a6:da:9d:68:9b:7a:05:d0:9f:4a:12:3a:f9:84:06:7f:2e:01: fe:eb:63:ba:cc:cf:38:bd:f0:0b:7c:74:4f:86:7e:59:c5:ce: 8a:62:8f:b2:09:b1:83:18:95:b3:b1:32:2a:82:14:2a:95:c1: 95:b2:e1:ef:05:53:63:ad:08:8c:c1:3a:f2:f5:a5:ff:a0:50: 4b:08:63:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZmo8N5G7lUaIoMf2RrFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMDM0ODc4ODMyZTkxN2ZmZjljZDNjODZjMGZhMWU1NjVm ODIxZDMwHhcNMjUxMjE3MTMwMTA3WhcNMjUxMjE4MTMwMTA3WjAzMTEwLwYDVQQD EygzNTYyY2M2NWE0ZjVjODdlZjhlNWQ1ZjhlNTEzODFjNTI4OTBlNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoWnjZ7hxUo5qagmlqZo1nXN57An fLgqknwm8LIF7NiBWpmdIcluYbnLMW7MF02DCFIcbJaaEvkA1hGRAGNx7Vc5y4XQ K4xdREn/PLsHi4FhdO7rWo8hzhKEvghzt58z94hWWTgpB4mQqpJ+alBsCU5JTgqC JvH2NeZUsRu5CBQbzmudgSma2K4g9FJCQyuyShinVehDTM28RIRiMh1VdklFYqsL uBgXnqGCmBae+KwYTVrukhZYElgjAq8rRHYfNtxrnN0P77+KtMS3tn0hfzPKuvOG Ud+ntu6WMmyjsQ0sAN3UBaa9u/pMm3/kNcI4vd9yHWvxgxpJi7x4y2HVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVizGWk9ch++OXV+OUTgcUokOWcMB8GA1UdIwQY MBaAFF8DSHiDLpF//5zTyGwPoeVl+CHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1Njkt ZGYxYzU3YzJhNzUxLzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1NjktZGYxYzU3YzJhNzUx LzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPhB6vLd 827/KNTYit2ErdTEvsUUWhA7xs44wV/vsDDJEId9BaUzzrAoYYlEQwCG9rjdgGkp lTaFvjW33XwcggxRPgBjdpHLA1L8veJQ/7VNvbhWXC/GQTRrWgeow6KN6Fm2egdC DOuM4uhZu0DpoEwJAzfBbm6lc60RxwIoDQ33OsIi+PxR/9GywUl1n5DkRmnnlO0u 4ZcLPuREzM4I4j3G6uwwldTaVPJ+eXsqTgGDD3npptqdaJt6BdCfShI6+YQGfy4B /utjuszPOL3wC3x0T4Z+WcXOimKPsgmxgxiVs7EyKoIUKpXBlbLh7wVTY60IjME6 8vWl/6BQSwhj+g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:08:52 2025 by rpki-client