This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json) Hash identifier: pUDBhgAUL2+3vPA185mIbHr/UAdm+B1d6rkdzgHU3+s= Subject key identifier: 2B:7D:E8:2F:85:2F:12:88:B0:57:A7:9B:4D:BC:5A:B0:C3:36:FD:97 Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Certificate serial: 019B2B1CDD45EF8033F6E750B9E29135FAD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft Manifest number: 04CB Signing time: Wed 17 Dec 2025 07:01:10 +0000 Manifest this update: Wed 17 Dec 2025 07:01:10 +0000 Manifest next update: Thu 18 Dec 2025 07:01:10 +0000 Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: Vc12TqHQLYB/GrHcFBIvN2gDlVl+6IvZk2ZtH7mQDl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:dd:45:ef:80:33:f6:e7:50:b9:e2:91:35:fa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Validity Not Before: Dec 17 07:01:10 2025 GMT Not After : Dec 18 07:01:10 2025 GMT Subject: CN=2b7de82f852f1288b057a79b4dbc5ab0c336fd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:62:b7:c8:6f:51:73:c3:00:3a:57:23:fc:b4: 2b:91:25:c3:70:4b:64:7f:38:59:92:2c:e4:37:5c: 2f:74:49:eb:63:77:90:13:2e:d5:3c:79:e8:24:d7: f3:35:e2:ec:47:fb:39:10:05:4b:1e:51:d8:4a:f1: ee:c2:80:f7:e5:04:e8:81:e7:87:48:8a:d1:e7:90: d5:45:b1:37:5d:19:f3:f5:75:da:d2:9a:c4:3c:62: 9b:ef:c8:92:42:2c:d5:6e:18:17:fc:c5:b0:71:23: ec:81:bf:0c:bb:70:55:69:cd:35:b9:c2:c8:64:17: 35:d9:04:ca:63:f3:6f:12:4c:df:bf:ae:1e:65:4c: 2d:04:59:06:14:32:ea:ea:be:a1:3b:9c:8e:33:24: ff:05:ad:26:0a:22:87:29:f7:be:91:f3:5e:2a:5b: d6:3c:88:2b:ca:2c:a6:85:67:8d:83:71:9b:35:7d: 97:81:22:96:19:4a:6c:09:2b:78:83:2b:08:d6:7d: ee:e7:a7:5c:26:31:78:9a:dd:c1:a4:85:ff:76:48: 82:e7:0b:55:c0:03:2a:eb:c2:35:ad:39:bd:41:41: 8a:5e:7e:66:37:ef:3d:57:be:64:9a:08:84:e2:dd: 3d:78:9b:b3:b9:33:35:ad:13:a8:e5:b6:bc:52:fb: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7D:E8:2F:85:2F:12:88:B0:57:A7:9B:4D:BC:5A:B0:C3:36:FD:97 X509v3 Authority Key Identifier: keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:53:d8:32:ac:46:98:5b:f9:90:37:5f:7a:10:98:a4:d2:42: d4:57:0f:1b:85:36:c8:2a:24:24:52:07:77:71:ea:6f:54:a9: 0d:93:13:6a:ea:65:7e:2a:f6:da:85:6d:8d:88:14:fd:f5:c9: 49:60:76:9c:1c:4b:18:86:e1:32:8a:43:c5:d5:e1:65:1c:ea: 9b:88:c5:2b:ad:45:f1:1e:25:37:e8:8b:60:fe:5c:94:2c:0f: aa:7c:a6:19:70:2b:e4:70:01:c7:19:b8:de:40:05:b2:2a:32: 63:c4:22:4f:1e:1f:5f:8b:be:1c:ba:4b:0e:9e:0e:72:b6:c8: db:b6:27:af:05:a6:e9:8a:57:f5:e2:87:20:c7:8b:11:6a:e3: 0d:7d:67:f4:8f:5a:ea:50:8f:95:81:c1:78:f0:fa:1e:22:98: 9a:96:d8:29:64:65:1f:42:ce:d9:d5:ae:06:b8:4a:cd:54:30: b9:81:5b:0d:c0:df:9d:de:f4:4f:6c:50:99:75:11:83:ee:81: 55:75:65:2d:fd:0f:58:62:a3:75:3c:16:76:1e:81:37:92:06: 16:1f:63:25:33:18:dc:53:8d:83:5e:d5:0b:79:7a:39:70:a6: b4:49:01:5b:60:c7:70:d2:8a:8e:4c:81:13:b3:f9:61:c1:f8: a9:54:98:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHN1F74Az9udQueKRNfrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NDhjYmZkZTcxYTUzMDVjYWJmZDRlNzljZTZkZWU3MTQ4 MjgxNTEwHhcNMjUxMjE3MDcwMTEwWhcNMjUxMjE4MDcwMTEwWjAzMTEwLwYDVQQD EygyYjdkZTgyZjg1MmYxMjg4YjA1N2E3OWI0ZGJjNWFiMGMzMzZmZDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmK3yG9Rc8MAOlcj/LQrkSXDcEtk fzhZkizkN1wvdEnrY3eQEy7VPHnoJNfzNeLsR/s5EAVLHlHYSvHuwoD35QTogeeH SIrR55DVRbE3XRnz9XXa0prEPGKb78iSQizVbhgX/MWwcSPsgb8Mu3BVac01ucLI ZBc12QTKY/NvEkzfv64eZUwtBFkGFDLq6r6hO5yOMyT/Ba0mCiKHKfe+kfNeKlvW PIgryiymhWeNg3GbNX2XgSKWGUpsCSt4gysI1n3u56dcJjF4mt3BpIX/dkiC5wtV wAMq68I1rTm9QUGKXn5mN+89V75kmgiE4t09eJuzuTM1rROo5ba8UvumvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt96C+FLxKIsFenm028WrDDNv2XMB8GA1UdIwQY MBaAFMZIy/3nGlMFyr/U55zm3ucUgoFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYt YTlkMmU2YTNkMGYxLzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYtYTlkMmU2YTNkMGYx LzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVPYMqxG mFv5kDdfehCYpNJC1FcPG4U2yCokJFIHd3Hqb1SpDZMTauplfir22oVtjYgU/fXJ SWB2nBxLGIbhMopDxdXhZRzqm4jFK61F8R4lN+iLYP5clCwPqnymGXAr5HABxxm4 3kAFsioyY8QiTx4fX4u+HLpLDp4OcrbI27YnrwWm6YpX9eKHIMeLEWrjDX1n9I9a 6lCPlYHBePD6HiKYmpbYKWRlH0LO2dWuBrhKzVQwuYFbDcDfnd70T2xQmXURg+6B VXVlLf0PWGKjdTwWdh6BN5IGFh9jJTMY3FONg17VC3l6OXCmtEkBW2DHcNKKjkyB E7P5YcH4qVSYRA== -----END CERTIFICATE-----Generated at Wed Dec 17 16:50:43 2025 by rpki-client