This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft File: xkjL_ecaUwXKv9TnnObe5xSCgVE.mft (raw, json) Hash identifier: GYuBI7P/NgPBuewohuBd1ByU5IfuAMNKCkGpnsCsD8M= Subject key identifier: 17:D7:6D:3D:96:AC:85:59:00:4F:D3:9A:D2:3D:C6:CB:1D:22:60:24 Authority key identifier: C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 Certificate issuer: /CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Certificate serial: 019B2EFAA026945B757BD171AC6798E53E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft Manifest number: 04CD Signing time: Thu 18 Dec 2025 01:02:15 +0000 Manifest this update: Thu 18 Dec 2025 01:02:15 +0000 Manifest next update: Fri 19 Dec 2025 01:02:15 +0000 Files and hashes: 1: xkjL_ecaUwXKv9TnnObe5xSCgVE.crl (hash: SBAbefQhRaHeQoYJPANm4rZemr7O5muCD14mWXbZHnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:a0:26:94:5b:75:7b:d1:71:ac:67:98:e5:3e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c648cbfde71a5305cabfd4e79ce6dee714828151 Validity Not Before: Dec 18 01:02:15 2025 GMT Not After : Dec 19 01:02:15 2025 GMT Subject: CN=17d76d3d96ac8559004fd39ad23dc6cb1d226024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:02:f3:86:2f:3f:81:c4:29:a5:cf:8a:51:ef: 43:85:e9:43:9a:2f:04:33:f7:55:85:a0:cb:2f:45: a4:1d:b1:40:cd:37:36:2d:60:dd:be:31:72:94:9d: d5:5d:12:e1:3c:6b:9d:61:ce:6d:c9:94:14:bc:ae: 09:b9:da:01:61:4a:22:6e:58:c4:b1:2f:26:c8:de: bb:87:cb:f0:a8:66:62:7c:4e:f4:ae:0d:57:93:3c: 83:54:c3:16:45:ed:3b:b2:b0:60:4c:09:ab:4b:a9: 47:8c:20:8a:51:d3:7e:9f:4c:2e:ed:17:da:ee:86: db:f8:27:bc:7d:6d:9d:99:17:09:ce:a4:47:77:84: de:bd:fc:74:14:5a:b1:2d:40:8f:5e:c9:26:35:c5: f1:82:c9:e9:fe:ac:75:4a:bc:e8:03:28:af:5f:36: b9:6a:19:cb:8d:85:3a:58:20:26:33:34:1d:d9:d3: 7d:72:b5:32:35:e5:29:13:22:ea:4a:b2:1c:b4:b8: 51:f8:b9:76:5e:71:05:6a:4a:61:ce:ac:c0:ef:86: 45:19:fc:c4:66:6c:24:79:cd:cb:a2:08:7a:c8:28: 4c:cc:ba:23:60:04:65:77:67:99:3d:e2:db:7b:e0: 30:c8:2e:7d:e0:0c:e6:d8:1e:39:55:98:0b:34:0f: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D7:6D:3D:96:AC:85:59:00:4F:D3:9A:D2:3D:C6:CB:1D:22:60:24 X509v3 Authority Key Identifier: keyid:C6:48:CB:FD:E7:1A:53:05:CA:BF:D4:E7:9C:E6:DE:E7:14:82:81:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xkjL_ecaUwXKv9TnnObe5xSCgVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/216f0d-347b-4cd9-a09f-a9d2e6a3d0f1/1/xkjL_ecaUwXKv9TnnObe5xSCgVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8b:6f:a7:5f:57:45:cc:dd:b4:a7:cc:3c:3e:b0:0a:0a:23: 71:25:4d:d7:4e:ed:87:22:b1:ef:3e:1f:84:78:28:12:eb:ad: 93:4b:6d:68:00:ef:d4:1d:93:f4:0a:a9:1d:dd:92:8d:6c:8c: bc:61:fd:ec:a0:79:49:ce:73:b9:23:6a:9f:c2:f9:51:87:37: 68:09:26:c8:f3:39:ba:a3:43:af:4b:49:e0:0a:6b:7c:6f:f7: f3:b6:12:a7:63:22:05:2e:24:72:bb:9f:ae:0a:10:34:32:da: bf:c5:6c:42:2e:02:d1:8c:35:cc:37:77:49:a7:81:92:7a:09: cf:59:0d:ce:32:ef:84:a3:d5:2c:88:25:97:cc:98:2b:13:1d: 64:81:3e:8e:a6:a1:1e:33:bb:b2:8a:f9:06:c7:3d:95:d3:d0: 44:be:f9:1e:3e:ec:59:e7:e4:9f:3e:e2:a1:c1:79:78:a8:87: a4:6a:0e:ac:7b:23:74:e6:f3:cb:45:fb:38:57:8b:3e:5d:c3: a3:3f:7b:29:17:88:51:8e:d2:b8:39:2c:c7:cc:b3:6a:9f:10: 17:b0:82:b1:db:fd:0d:7a:21:0a:c5:cc:92:b3:96:80:5a:c0: 06:be:dc:ad:58:66:61:f7:27:ea:49:56:1f:25:22:af:46:b8: 1c:76:77:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+qAmlFt1e9FxrGeY5T4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NDhjYmZkZTcxYTUzMDVjYWJmZDRlNzljZTZkZWU3MTQ4 MjgxNTEwHhcNMjUxMjE4MDEwMjE1WhcNMjUxMjE5MDEwMjE1WjAzMTEwLwYDVQQD EygxN2Q3NmQzZDk2YWM4NTU5MDA0ZmQzOWFkMjNkYzZjYjFkMjI2MDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwLzhi8/gcQppc+KUe9DhelDmi8E M/dVhaDLL0WkHbFAzTc2LWDdvjFylJ3VXRLhPGudYc5tyZQUvK4JudoBYUoibljE sS8myN67h8vwqGZifE70rg1XkzyDVMMWRe07srBgTAmrS6lHjCCKUdN+n0wu7Rfa 7obb+Ce8fW2dmRcJzqRHd4Tevfx0FFqxLUCPXskmNcXxgsnp/qx1SrzoAyivXza5 ahnLjYU6WCAmMzQd2dN9crUyNeUpEyLqSrIctLhR+Ll2XnEFakphzqzA74ZFGfzE Zmwkec3Logh6yChMzLojYARld2eZPeLbe+AwyC594Azm2B45VZgLNA+8dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfXbT2WrIVZAE/TmtI9xssdImAkMB8GA1UdIwQY MBaAFMZIy/3nGlMFyr/U55zm3ucUgoFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYt YTlkMmU2YTNkMGYxLzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMTZmMGQtMzQ3Yi00Y2Q5LWEwOWYtYTlkMmU2YTNkMGYx LzEveGtqTF9lY2FVd1hLdjlUbm5PYmU1eFNDZ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWotvp19X RczdtKfMPD6wCgojcSVN107thyKx7z4fhHgoEuutk0ttaADv1B2T9AqpHd2SjWyM vGH97KB5Sc5zuSNqn8L5UYc3aAkmyPM5uqNDr0tJ4AprfG/387YSp2MiBS4kcruf rgoQNDLav8VsQi4C0Yw1zDd3SaeBknoJz1kNzjLvhKPVLIgll8yYKxMdZIE+jqah HjO7sor5Bsc9ldPQRL75Hj7sWefknz7iocF5eKiHpGoOrHsjdObzy0X7OFeLPl3D oz97KReIUY7SuDksx8yzap8QF7CCsdv9DXohCsXMkrOWgFrABr7crVhmYfcn6klW HyUir0a4HHZ3iw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:56 2025 by rpki-client