This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft File: xBHDOVke38lmej55EY3SPEAr6H8.mft (raw, json) Hash identifier: jCNog0OSULG+Z/nmO5G+RIgCqWifjNPvoS4Hf0Gcelc= Subject key identifier: D7:74:E4:53:68:E0:EA:8B:0F:0D:F3:85:59:62:CD:BA:65:A9:16:C9 Authority key identifier: C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F Certificate issuer: /CN=c411c339591edfc9667a3e79118dd23c402be87f Certificate serial: 019AF1D24B925527F78FA8EE1A08ECF242BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft Manifest number: 075B Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: xBHDOVke38lmej55EY3SPEAr6H8.crl (hash: QjQq8EGPZDx4kB5m9oso7ZLDZWSvBQlIoom5HxarccA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4b:92:55:27:f7:8f:a8:ee:1a:08:ec:f2:42:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c411c339591edfc9667a3e79118dd23c402be87f Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=d774e45368e0ea8b0f0df3855962cdba65a916c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:cb:46:13:80:41:a1:96:f1:af:16:89:b0: d6:a6:f9:03:33:87:51:d9:92:00:39:36:92:79:88: 59:a8:a3:c8:56:7e:84:30:33:a8:0c:35:2b:b9:b6: 55:fd:42:f7:f4:a1:57:e4:76:f1:56:e4:7d:49:e4: df:68:8c:99:4a:9f:08:de:48:01:72:3a:6e:5c:a4: 08:85:31:91:8e:91:12:cd:7c:6e:4b:06:c7:fd:05: 79:71:84:29:63:09:e5:3a:0f:de:15:de:7d:db:f1: 87:95:9b:be:b3:a2:e3:c3:a4:79:99:cf:14:10:01: 84:26:a6:7a:5e:2a:77:1f:5f:d5:a1:5e:23:b9:f6: 01:44:61:2b:b4:e9:c9:e4:5f:45:0f:bf:6a:53:bd: 7d:ef:e4:58:10:98:09:12:ce:7e:0e:22:01:05:fe: c5:d2:aa:c9:07:91:66:9a:66:95:3c:dc:fe:1f:17: 35:bc:dd:51:57:ab:b4:b8:5d:11:26:f2:48:57:97: 20:93:6c:d6:10:ef:44:ee:4f:99:53:70:c7:2c:30: 86:c4:09:32:cc:02:fe:17:f2:49:45:0a:2c:a6:d5: eb:1f:78:1a:fb:04:02:4f:95:5b:c4:82:02:78:81: d7:36:0a:46:8d:f6:36:1f:b9:b4:56:09:5b:31:97: 96:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:E4:53:68:E0:EA:8B:0F:0D:F3:85:59:62:CD:BA:65:A9:16:C9 X509v3 Authority Key Identifier: keyid:C4:11:C3:39:59:1E:DF:C9:66:7A:3E:79:11:8D:D2:3C:40:2B:E8:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBHDOVke38lmej55EY3SPEAr6H8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d23344-b281-42d2-bc33-ecbf7f17f604/1/xBHDOVke38lmej55EY3SPEAr6H8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:7b:9b:9d:19:d5:5c:40:1e:0c:ed:7b:4f:f7:0f:39:5b:b9: 7f:34:9a:32:9c:a1:70:de:29:7a:28:57:bc:e5:12:0a:03:7f: 9c:8b:39:a2:ef:7e:ff:e1:46:48:34:54:5e:d1:24:ea:40:8f: 90:c2:d4:c1:ba:dc:94:d3:e8:b3:47:3f:0d:cd:9d:cc:22:49: ab:2f:b6:01:8a:96:07:99:0a:be:56:dd:d1:57:98:ce:df:35: a7:7e:7d:f6:58:91:d6:1b:43:49:fe:1c:6c:af:3a:fd:17:3c: e6:59:59:79:f9:a9:d0:e8:ae:99:0d:32:e5:6c:cf:2a:91:5a: b8:ef:4f:a7:f5:52:6d:9b:67:60:88:fe:53:3d:b0:8d:03:2c: e2:00:50:a1:f4:f2:f3:97:2d:13:0a:1c:76:c6:be:c6:ff:69: f7:60:07:fb:76:0a:0d:d5:6c:f5:c9:d0:c1:36:54:cc:26:5a: 3a:ba:6f:3e:10:72:0f:8a:71:a3:d5:a5:ad:12:d6:8d:fd:ae: e0:02:15:ba:2c:18:1e:ca:5d:5a:37:f3:20:5f:76:91:4c:ad: 74:34:93:e9:9d:02:78:f7:83:f8:22:fd:81:7b:c4:0e:d1:57: 98:6f:a7:07:81:ab:69:39:66:74:8f:33:c4:4f:3e:de:bc:8c: a8:d8:ef:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kuSVSf3j6juGgjs8kK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTFjMzM5NTkxZWRmYzk2NjdhM2U3OTExOGRkMjNjNDAy YmU4N2YwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD EyhkNzc0ZTQ1MzY4ZTBlYThiMGYwZGYzODU1OTYyY2RiYTY1YTkxNmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1HLRhOAQaGW8a8WibDWpvkDM4dR 2ZIAOTaSeYhZqKPIVn6EMDOoDDUrubZV/UL39KFX5HbxVuR9SeTfaIyZSp8I3kgB cjpuXKQIhTGRjpESzXxuSwbH/QV5cYQpYwnlOg/eFd592/GHlZu+s6Ljw6R5mc8U EAGEJqZ6Xip3H1/VoV4jufYBRGErtOnJ5F9FD79qU7197+RYEJgJEs5+DiIBBf7F 0qrJB5FmmmaVPNz+Hxc1vN1RV6u0uF0RJvJIV5cgk2zWEO9E7k+ZU3DHLDCGxAky zAL+F/JJRQosptXrH3ga+wQCT5VbxIICeIHXNgpGjfY2H7m0VglbMZeW7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd05FNo4OqLDw3zhVlizbplqRbJMB8GA1UdIwQY MBaAFMQRwzlZHt/JZno+eRGN0jxAK+h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMt ZWNiZjdmMTdmNjA0LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kMjMzNDQtYjI4MS00MmQyLWJjMzMtZWNiZjdmMTdmNjA0 LzEveEJIRE9Wa2UzOGxtZWo1NUVZM1NQRUFyNkg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXnubnRnV XEAeDO17T/cPOVu5fzSaMpyhcN4peihXvOUSCgN/nIs5ou9+/+FGSDRUXtEk6kCP kMLUwbrclNPos0c/Dc2dzCJJqy+2AYqWB5kKvlbd0VeYzt81p3599liR1htDSf4c bK86/Rc85llZefmp0OiumQ0y5WzPKpFauO9Pp/VSbZtnYIj+Uz2wjQMs4gBQofTy 85ctEwocdsa+xv9p92AH+3YKDdVs9cnQwTZUzCZaOrpvPhByD4pxo9WlrRLWjf2u 4AIVuiwYHspdWjfzIF92kUytdDST6Z0CePeD+CL9gXvEDtFXmG+nB4GraTlmdI8z xE8+3ryMqNjvUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:29 2025 by rpki-client