This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft File: XcN_ppoaDel5a1rNnmFg1CKLCKI.mft (raw, json) Hash identifier: zOkdTGozk+I9QuUX8sBC/MHeUW3ylAitRuDydL2emd0= Subject key identifier: 78:6D:EB:60:AD:F8:14:CC:00:AE:CF:5C:A9:26:F5:DE:85:70:23:2A Authority key identifier: 5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2 Certificate issuer: /CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2 Certificate serial: 019B6CC68D215D6249D10BBF5DAE407D7FBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 01:01:50 +0000 Manifest this update: Tue 30 Dec 2025 01:01:50 +0000 Manifest next update: Wed 31 Dec 2025 01:01:50 +0000 Files and hashes: 1: XcN_ppoaDel5a1rNnmFg1CKLCKI.crl (hash: bfE8MzEDOOG8RVTN/H2fusNoEPwT0dDnEuFIVdFEEPc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:8d:21:5d:62:49:d1:0b:bf:5d:ae:40:7d:7f:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc37fa69a1a0de9796b5acd9e6160d4228b08a2 Validity Not Before: Dec 30 01:01:50 2025 GMT Not After : Dec 31 01:01:50 2025 GMT Subject: CN=786deb60adf814cc00aecf5ca926f5de8570232a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:a4:cc:4f:16:f9:2f:1e:16:95:85:f8:8a: af:e2:58:8b:0a:f9:7f:b2:a6:89:dc:fc:1f:51:b5: 98:fa:16:23:72:f8:75:47:bc:96:92:7e:bb:0d:0a: 02:2b:6f:6d:65:87:f6:9f:23:12:15:8e:9b:d6:f0: d0:fd:f1:fc:50:99:42:0b:9f:9e:58:9e:a6:59:ce: 32:ce:28:94:7e:38:dc:1a:e9:bc:84:ef:95:fb:a0: 74:42:a0:07:8d:87:75:93:7e:0a:d3:95:2d:7b:50: 39:30:83:ce:f1:a8:94:e0:ab:37:01:af:d6:ac:11: ae:27:5c:f0:b0:fd:73:89:c6:1b:b1:e1:9e:8e:b1: ff:07:18:90:81:b6:57:86:b3:85:9c:eb:13:ba:17: 76:1b:5c:45:be:75:4d:a5:67:e2:62:23:08:13:76: a3:75:59:02:02:04:22:29:e0:44:63:f1:10:1f:1c: b3:04:64:f8:c5:aa:e6:2b:06:85:f3:0a:6e:39:7b: 26:76:3e:ed:4b:b4:26:28:9f:81:5b:3d:0b:e3:bc: 08:14:ed:cd:15:ad:fd:93:6f:7b:8b:23:eb:e8:c6: 3c:6f:88:ff:a7:e6:f2:5d:da:50:1b:16:26:1e:80: 9b:ce:63:3f:45:55:5b:a8:77:d9:3a:30:e9:71:35: 76:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6D:EB:60:AD:F8:14:CC:00:AE:CF:5C:A9:26:F5:DE:85:70:23:2A X509v3 Authority Key Identifier: keyid:5D:C3:7F:A6:9A:1A:0D:E9:79:6B:5A:CD:9E:61:60:D4:22:8B:08:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcN_ppoaDel5a1rNnmFg1CKLCKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b8c3d3-3df2-4c81-beae-59913af0ae4f/1/XcN_ppoaDel5a1rNnmFg1CKLCKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:3e:6b:8c:14:e1:bc:2c:15:9f:8d:f6:4d:59:c9:a4:eb:87: a8:2c:2d:b1:72:ab:e0:8d:50:c4:71:72:9b:a1:c9:2b:7f:83: 36:a4:89:cf:22:f9:d1:e1:24:51:cc:29:ad:6b:81:23:ae:79: 6a:96:10:e2:25:8a:48:65:f7:da:e7:aa:c5:97:6e:87:16:6f: 57:4e:ad:c6:6f:57:0a:4f:e1:2b:ea:b2:90:d4:72:67:b9:83: f8:29:50:3f:3e:4a:cd:8f:4e:0c:17:ef:94:24:03:1b:07:6f: 9a:76:96:52:47:0a:fd:3f:b1:f4:b3:36:06:fd:60:a9:6a:af: c1:fa:ca:88:85:67:b4:72:cd:38:90:ba:ee:7b:65:8e:e2:99: b0:49:40:5b:99:22:ce:6a:1c:dc:bf:ab:8b:ed:da:8b:d6:ef: 4d:53:fc:28:92:e4:15:1b:8a:7d:36:eb:2d:33:2a:56:6e:df: 62:92:ba:a9:dc:a4:28:fc:0a:58:bf:08:e3:ce:a8:82:76:e8: ff:e9:25:e9:1c:6f:6c:a1:3b:66:61:ee:0b:8f:39:11:b6:1e: a2:16:83:36:99:42:1b:20:76:e8:40:78:e2:c8:94:3a:b4:22: e6:11:04:39:f1:2e:3b:b3:4e:a0:d3:02:cc:62:cb:65:eb:73: d4:8a:52:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxo0hXWJJ0Qu/Xa5AfX++MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzM3ZmE2OWExYTBkZTk3OTZiNWFjZDllNjE2MGQ0MjI4 YjA4YTIwHhcNMjUxMjMwMDEwMTUwWhcNMjUxMjMxMDEwMTUwWjAzMTEwLwYDVQQD Eyg3ODZkZWI2MGFkZjgxNGNjMDBhZWNmNWNhOTI2ZjVkZTg1NzAyMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIakzE8W+S8eFpWF+Iqv4liLCvl/ sqaJ3PwfUbWY+hYjcvh1R7yWkn67DQoCK29tZYf2nyMSFY6b1vDQ/fH8UJlCC5+e WJ6mWc4yziiUfjjcGum8hO+V+6B0QqAHjYd1k34K05Ute1A5MIPO8aiU4Ks3Aa/W rBGuJ1zwsP1zicYbseGejrH/BxiQgbZXhrOFnOsTuhd2G1xFvnVNpWfiYiMIE3aj dVkCAgQiKeBEY/EQHxyzBGT4xarmKwaF8wpuOXsmdj7tS7QmKJ+BWz0L47wIFO3N Fa39k297iyPr6MY8b4j/p+byXdpQGxYmHoCbzmM/RVVbqHfZOjDpcTV2JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHht62Ct+BTMAK7PXKkm9d6FcCMqMB8GA1UdIwQY MBaAFF3Df6aaGg3peWtazZ5hYNQiiwiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUt NTk5MTNhZjBhZTRmLzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iOGMzZDMtM2RmMi00YzgxLWJlYWUtNTk5MTNhZjBhZTRm LzEvWGNOX3Bwb2FEZWw1YTFyTm5tRmcxQ0tMQ0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT5rjBTh vCwVn432TVnJpOuHqCwtsXKr4I1QxHFym6HJK3+DNqSJzyL50eEkUcwprWuBI655 apYQ4iWKSGX32ueqxZduhxZvV06txm9XCk/hK+qykNRyZ7mD+ClQPz5KzY9ODBfv lCQDGwdvmnaWUkcK/T+x9LM2Bv1gqWqvwfrKiIVntHLNOJC67ntljuKZsElAW5ki zmoc3L+ri+3ai9bvTVP8KJLkFRuKfTbrLTMqVm7fYpK6qdykKPwKWL8I486ognbo /+kl6RxvbKE7ZmHuC485EbYeohaDNplCGyB26EB44siUOrQi5hEEOfEuO7NOoNMC zGLLZetz1IpS7A== -----END CERTIFICATE-----Generated at Tue Dec 30 10:33:17 2025 by rpki-client