This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json) Hash identifier: xa/E4YmQy7ZvyYYuKDyaDRqXAGWnDVnmIhm38Vmp8tM= Subject key identifier: 67:50:DE:3D:94:5B:20:EC:73:33:CB:2E:E9:90:E5:D6:F8:B9:DD:57 Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Certificate serial: 019AF1D1F1845867BE09E744F1BED225756A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft Manifest number: 05BB Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: t/1SdgmdFYSsp8EISCV1zCACJgwERrA62SP5r1VvF58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f1:84:58:67:be:09:e7:44:f1:be:d2:25:75:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=6750de3d945b20ec7333cb2ee990e5d6f8b9dd57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:e5:86:2d:e5:25:42:0a:fc:23:77:fb:f4: 93:b3:55:21:62:5f:60:dc:59:7f:21:0b:67:ec:93: 6f:ff:1f:36:72:98:47:77:80:5e:30:b4:7e:bc:7a: ec:15:55:0f:71:a0:02:a2:0a:f4:bf:01:b8:5a:e3: 42:54:aa:54:08:75:c2:48:02:10:2f:8e:3e:a8:6e: 88:1b:e3:90:19:71:b9:f4:2d:2b:69:86:83:cc:d8: 44:bb:c0:c2:84:c3:19:a1:1f:c6:16:ad:23:fb:44: 42:2f:90:67:9c:df:5f:3a:81:ad:d9:a9:be:64:b4: 0e:2a:13:c3:57:a3:c5:e1:ec:de:15:a1:f8:96:34: 0b:20:7c:93:f6:17:51:bb:d7:2d:06:2e:b5:d0:ef: 87:d6:2a:9e:d4:63:8b:4b:b8:a4:d3:7e:e2:f0:58: 37:f9:35:92:ea:a6:86:02:3a:bc:26:71:66:28:41: 7c:0a:81:51:5f:6b:29:5e:7c:77:19:a6:22:be:4f: 83:02:3c:79:31:b4:f2:48:58:9c:18:0d:7c:12:a2: 8d:61:39:ce:1a:66:b9:30:1c:24:b1:e5:bb:92:15: dc:5b:bd:bf:13:37:e4:33:5a:75:86:9f:8f:64:2b: 7f:4b:bf:ec:cf:41:76:a9:5b:5a:11:22:5b:1f:31: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:DE:3D:94:5B:20:EC:73:33:CB:2E:E9:90:E5:D6:F8:B9:DD:57 X509v3 Authority Key Identifier: keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:d8:bf:68:9f:d8:55:d7:c4:57:21:db:55:22:95:37:8f:22: a2:09:f1:18:20:2f:4f:42:6b:ae:20:8e:fe:b6:de:82:de:80: 8f:a2:55:90:af:11:fe:0c:ca:d7:d8:cf:5e:32:09:68:5e:9a: 18:d3:83:2e:d8:43:93:63:ba:43:dc:25:73:bb:35:6e:b5:fd: 1c:97:14:ed:6f:29:02:c8:a7:9d:c7:ff:97:3f:1a:f1:78:4e: 1a:5b:5a:b2:f3:d1:78:33:49:65:a4:45:ec:2e:65:d6:34:76: 96:9a:c2:38:7a:3f:09:0a:e5:91:d5:e9:7f:0c:e6:9f:c2:27: 6f:68:fb:cb:15:fd:0d:4b:85:17:5f:b7:28:54:bc:12:7f:fc: 8a:8f:3f:a4:e3:68:32:ca:66:cb:a7:f6:ed:fd:fa:85:b1:c7: 57:2f:76:bc:af:fe:06:c7:3c:88:3c:d1:1f:a0:1b:ca:e5:16: 35:49:b1:63:7b:5a:f6:cc:4e:5d:8e:08:fd:81:2d:66:20:35: 63:79:2b:6d:47:46:bd:58:b3:2c:91:7f:40:62:70:4a:25:a2: c9:5e:a6:66:11:f2:da:39:dd:ca:0d:d5:e0:1d:94:47:cb:af: 3f:fa:0a:56:cd:b5:9e:22:9f:5e:7d:eb:57:57:09:7c:2e:df: fc:26:8b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fGEWGe+CedE8b7SJXVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWQ4MzMyZTExOGE5YTIxODdlYWI1ODg0Mjc5ZDY1ODBm MTE5ZjcwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg2NzUwZGUzZDk0NWIyMGVjNzMzM2NiMmVlOTkwZTVkNmY4YjlkZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3vlhi3lJUIK/CN3+/STs1UhYl9g 3Fl/IQtn7JNv/x82cphHd4BeMLR+vHrsFVUPcaACogr0vwG4WuNCVKpUCHXCSAIQ L44+qG6IG+OQGXG59C0raYaDzNhEu8DChMMZoR/GFq0j+0RCL5BnnN9fOoGt2am+ ZLQOKhPDV6PF4ezeFaH4ljQLIHyT9hdRu9ctBi610O+H1iqe1GOLS7ik037i8Fg3 +TWS6qaGAjq8JnFmKEF8CoFRX2spXnx3GaYivk+DAjx5MbTySFicGA18EqKNYTnO Gma5MBwkseW7khXcW72/EzfkM1p1hp+PZCt/S7/sz0F2qVtaESJbHzG9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdQ3j2UWyDsczPLLumQ5db4ud1XMB8GA1UdIwQY MBaAFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUt ZGVhMzBlY2I3MzZkLzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUtZGVhMzBlY2I3MzZk LzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdi/aJ/Y VdfEVyHbVSKVN48iognxGCAvT0JrriCO/rbegt6Aj6JVkK8R/gzK19jPXjIJaF6a GNODLthDk2O6Q9wlc7s1brX9HJcU7W8pAsinncf/lz8a8XhOGltasvPReDNJZaRF 7C5l1jR2lprCOHo/CQrlkdXpfwzmn8Inb2j7yxX9DUuFF1+3KFS8En/8io8/pONo Mspmy6f27f36hbHHVy92vK/+Bsc8iDzRH6AbyuUWNUmxY3ta9sxOXY4I/YEtZiA1 Y3krbUdGvVizLJF/QGJwSiWiyV6mZhHy2jndyg3V4B2UR8uvP/oKVs21niKfXn3r V1cJfC7f/CaLqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:35 2025 by rpki-client