This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft File: xcymnU3Y7tz2A-NjKVsZtpAp71w.mft (raw, json) Hash identifier: d7h9AlECYpvat+YJB2y39dq08xZHxRpt3ReWOQJkzlA= Subject key identifier: 00:64:B2:B6:B9:AB:B0:37:B3:84:C7:83:78:F5:EA:27:86:4F:FC:BF Authority key identifier: C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C Certificate issuer: /CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Certificate serial: 019B424A0D1EF85351E88C71E5FDB42AD8D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 19:01:47 +0000 Manifest this update: Sun 21 Dec 2025 19:01:47 +0000 Manifest next update: Mon 22 Dec 2025 19:01:47 +0000 Files and hashes: 1: xcymnU3Y7tz2A-NjKVsZtpAp71w.crl (hash: iZYpwFBcJJDXEe/FqxenqaSE69vSo93ipjRi7hYxl5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:0d:1e:f8:53:51:e8:8c:71:e5:fd:b4:2a:d8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5cca69d4dd8eedcf603e363295b19b69029ef5c Validity Not Before: Dec 21 19:01:47 2025 GMT Not After : Dec 22 19:01:47 2025 GMT Subject: CN=0064b2b6b9abb037b384c78378f5ea27864ffcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:ab:e0:e5:ce:a4:d8:58:40:41:2c:13:ae: bd:2a:18:f5:01:7e:ec:53:c0:e5:83:0d:d0:ed:e1: 5b:52:cb:e0:60:1a:93:4a:2a:d1:c3:36:53:5d:67: be:75:50:0b:7f:4e:86:93:f7:f9:55:0c:51:ab:ff: 6a:12:57:dc:58:39:be:cf:90:d5:14:b0:95:4e:c1: ca:fb:f2:d8:f7:be:c7:98:c6:c3:00:cc:1d:7e:fd: bd:55:6e:ed:84:62:a0:7a:a9:46:23:e2:e4:75:1f: ae:74:24:35:98:36:9a:fb:40:23:a1:15:af:87:c5: 3a:ac:4a:fa:d3:03:99:69:53:f8:96:ba:c4:ee:be: f2:37:f1:3d:6b:8d:e5:cc:f4:1d:7a:55:94:80:2c: 7a:57:68:82:44:aa:64:e4:18:08:51:a2:80:a3:f1: f8:2d:c1:76:0d:c4:c8:e9:68:c9:04:2f:b8:a6:1e: c3:1a:f8:7f:c4:07:49:95:b2:2f:80:72:0f:1d:e3: 9c:33:a1:6d:d4:07:4a:31:ce:90:e2:c1:c6:5f:64: 9a:05:7a:80:87:9a:12:96:c3:e6:ce:46:34:45:54: 9e:1f:87:de:9e:8e:a9:46:47:9d:b8:59:b1:24:70: c6:5b:75:97:ac:50:63:5e:e8:38:49:56:79:4b:4e: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:64:B2:B6:B9:AB:B0:37:B3:84:C7:83:78:F5:EA:27:86:4F:FC:BF X509v3 Authority Key Identifier: keyid:C5:CC:A6:9D:4D:D8:EE:DC:F6:03:E3:63:29:5B:19:B6:90:29:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcymnU3Y7tz2A-NjKVsZtpAp71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/38e121-a8ee-4112-8c4a-76f70d833dd4/1/xcymnU3Y7tz2A-NjKVsZtpAp71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ee:f6:d2:78:e5:67:44:c8:d7:f9:2b:10:43:e1:6b:0f:27: 28:fb:7d:c6:72:69:29:5c:b8:aa:17:ac:77:f6:3d:ac:45:ef: 22:76:14:63:8b:a4:7f:2a:dc:28:9c:ac:2c:ae:b0:95:47:7d: 4e:8f:e4:49:94:af:4a:20:0f:3a:da:db:4d:01:cb:f4:e1:83: fe:df:b7:df:2b:39:1d:90:94:1a:24:68:6c:ea:3a:00:74:d4: cc:ff:62:da:df:ea:16:4a:81:a1:0c:7a:ef:6e:6b:a4:90:81: a6:bc:2e:8c:be:67:05:19:c3:4d:73:df:31:25:83:e5:1d:ce: 13:4c:b9:4d:b2:70:84:b1:bd:dd:9f:cf:70:20:d6:df:15:e4: d0:62:8a:df:d4:98:22:00:b4:4f:d7:a2:3b:26:7a:c1:5d:6a: fb:e7:30:ab:2d:0b:5a:3f:ba:2f:8e:25:18:9d:a4:8e:b4:58: 20:dc:fb:a8:41:49:16:9d:7c:ba:35:28:fb:b2:9a:b2:ea:d3: e9:ea:19:ce:63:a9:04:b8:e6:c5:cf:c0:cc:11:ba:a5:51:b7: 9a:12:d7:5d:bc:1f:44:dd:0b:e0:72:ec:fc:70:20:6d:cf:a9: 0d:0e:4b:ce:52:6a:7d:4a:46:b6:7c:f2:10:39:b1:85:66:56: ae:5e:df:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSg0e+FNR6Ixx5f20KtjQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1Y2NhNjlkNGRkOGVlZGNmNjAzZTM2MzI5NWIxOWI2OTAy OWVmNWMwHhcNMjUxMjIxMTkwMTQ3WhcNMjUxMjIyMTkwMTQ3WjAzMTEwLwYDVQQD EygwMDY0YjJiNmI5YWJiMDM3YjM4NGM3ODM3OGY1ZWEyNzg2NGZmY2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS6r4OXOpNhYQEEsE669Khj1AX7s U8Dlgw3Q7eFbUsvgYBqTSirRwzZTXWe+dVALf06Gk/f5VQxRq/9qElfcWDm+z5DV FLCVTsHK+/LY977HmMbDAMwdfv29VW7thGKgeqlGI+LkdR+udCQ1mDaa+0AjoRWv h8U6rEr60wOZaVP4lrrE7r7yN/E9a43lzPQdelWUgCx6V2iCRKpk5BgIUaKAo/H4 LcF2DcTI6WjJBC+4ph7DGvh/xAdJlbIvgHIPHeOcM6Ft1AdKMc6Q4sHGX2SaBXqA h5oSlsPmzkY0RVSeH4feno6pRkeduFmxJHDGW3WXrFBjXug4SVZ5S05sOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABksra5q7A3s4THg3j16ieGT/y/MB8GA1UdIwQY MBaAFMXMpp1N2O7c9gPjYylbGbaQKe9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEt NzZmNzBkODMzZGQ0LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zOGUxMjEtYThlZS00MTEyLThjNGEtNzZmNzBkODMzZGQ0 LzEveGN5bW5VM1k3dHoyQS1OaktWc1p0cEFwNzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO720njl Z0TI1/krEEPhaw8nKPt9xnJpKVy4qhesd/Y9rEXvInYUY4ukfyrcKJysLK6wlUd9 To/kSZSvSiAPOtrbTQHL9OGD/t+33ys5HZCUGiRobOo6AHTUzP9i2t/qFkqBoQx6 725rpJCBprwujL5nBRnDTXPfMSWD5R3OE0y5TbJwhLG93Z/PcCDW3xXk0GKK39SY IgC0T9eiOyZ6wV1q++cwqy0LWj+6L44lGJ2kjrRYINz7qEFJFp18ujUo+7KasurT 6eoZzmOpBLjmxc/AzBG6pVG3mhLXXbwfRN0L4HLs/HAgbc+pDQ5LzlJqfUpGtnzy EDmxhWZWrl7fag== -----END CERTIFICATE-----Generated at Mon Dec 22 02:51:01 2025 by rpki-client