This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json) Hash identifier: rKOVul6P+rA7wl1pog7jd+15uzKodliJg1aIhVBW8tM= Subject key identifier: B6:AB:0C:77:A7:9D:CC:4C:3D:15:1B:C5:08:7F:A7:5B:AE:A2:EC:1D Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Certificate serial: 019AF208AE9ED532F86EAC5103A91FB6CA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: S1nXSQGoZKzIlgDC59P8HvzmF4xfbOWvOtH0As1/rHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ae:9e:d5:32:f8:6e:ac:51:03:a9:1f:b6:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=b6ab0c77a79dcc4c3d151bc5087fa75baea2ec1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:c0:ff:70:96:bf:34:0e:4a:e5:cd:8d:4a: 40:95:eb:73:d4:6d:f6:d5:c2:7e:ba:b9:09:9f:aa: 85:1e:93:07:fc:d6:6e:00:98:c5:81:f2:d2:c1:20: 3e:b4:34:42:5c:8f:5d:6d:56:ba:73:68:d9:f3:e4: 74:42:39:16:c1:be:ca:2c:ca:38:71:af:cb:23:9b: fd:80:34:ff:de:17:37:7f:c9:f7:ec:e5:5e:2e:1f: 39:9d:69:e4:1c:d7:0c:37:58:d3:11:76:70:28:87: d8:10:6e:47:dd:b1:f4:c3:13:91:5f:cd:40:14:f8: b1:7c:7f:86:fa:70:41:1f:70:ce:36:92:2e:02:ab: 9b:86:63:01:5f:04:0c:6d:85:a3:65:8a:3a:6a:5c: 48:22:5d:ac:cf:78:b6:ee:4a:cb:9f:41:56:5b:89: 30:3d:55:d2:34:f2:34:bf:bc:b3:c7:e7:d6:f5:e9: 6d:12:f9:ed:dd:b1:79:e8:18:37:15:46:87:be:f1: 4a:6a:bc:66:1b:0f:39:33:03:1d:1f:b9:4a:8e:56: 26:7e:7c:4b:b7:71:af:47:9b:ff:a7:0b:f5:42:57: 62:cb:06:11:ef:5b:03:a9:15:01:a4:8c:5f:6f:1a: 1c:6e:52:f3:7b:d8:e8:fb:5b:3b:d2:80:b6:9c:20: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AB:0C:77:A7:9D:CC:4C:3D:15:1B:C5:08:7F:A7:5B:AE:A2:EC:1D X509v3 Authority Key Identifier: keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ab:78:04:a9:be:d1:4b:b1:70:95:b1:17:aa:cc:18:05:8b: 1b:c9:a3:75:9a:3e:60:86:18:51:b0:df:d6:15:b5:98:34:41: 7e:9d:c0:de:56:15:c7:8b:cc:c6:5d:27:a1:58:2b:49:35:4c: e6:6c:93:f3:fa:4a:c9:5f:a1:38:03:22:1b:26:81:a7:fe:d1: c7:b6:5a:ec:12:a5:dd:37:4b:b1:2b:5c:19:c2:c7:a6:66:dc: 30:84:3c:dc:b0:04:24:d0:3f:6d:05:e7:75:53:19:4f:1f:58: 29:19:f1:65:b5:d8:1f:5c:65:de:0c:d0:c9:33:e6:f3:0a:bc: e6:8e:b7:f0:18:32:54:20:5f:14:b4:3e:af:98:15:a9:a4:2e: 61:25:27:a1:c5:1a:61:b5:49:26:f5:b7:dc:ec:ce:6c:ad:10: 63:8a:80:c2:15:8a:96:52:a5:f0:15:77:81:cb:f2:0b:00:cf: 31:cf:05:41:dc:ee:ee:4c:64:f5:fe:ee:41:29:e1:97:5a:79: 25:31:01:f6:3a:bc:fe:05:08:08:74:a5:e5:8c:8f:96:c8:cd: d8:da:81:4c:18:ef:52:ab:db:1a:ad:8a:c5:ab:43:ae:19:f6: 8f:33:e9:92:55:a7:83:57:00:e6:19:45:0e:6e:44:7f:28:08: 05:3e:68:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK6e1TL4bqxRA6kftsogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmYxMDBmMjBlNzllMmI4Mjc4N2ZlNjQ1YTUzZjRjMjg2 NDJhZjYwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD EyhiNmFiMGM3N2E3OWRjYzRjM2QxNTFiYzUwODdmYTc1YmFlYTJlYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlDA/3CWvzQOSuXNjUpAletz1G32 1cJ+urkJn6qFHpMH/NZuAJjFgfLSwSA+tDRCXI9dbVa6c2jZ8+R0QjkWwb7KLMo4 ca/LI5v9gDT/3hc3f8n37OVeLh85nWnkHNcMN1jTEXZwKIfYEG5H3bH0wxORX81A FPixfH+G+nBBH3DONpIuAqubhmMBXwQMbYWjZYo6alxIIl2sz3i27krLn0FWW4kw PVXSNPI0v7yzx+fW9eltEvnt3bF56Bg3FUaHvvFKarxmGw85MwMdH7lKjlYmfnxL t3GvR5v/pwv1QldiywYR71sDqRUBpIxfbxocblLze9jo+1s70oC2nCByywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLarDHenncxMPRUbxQh/p1uuouwdMB8GA1UdIwQY MBaAFF+/EA8g554rgnh/5kWlP0woZCr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEt MzNmM2M2YjM0NjAyLzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEtMzNmM2M2YjM0NjAy LzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKt4BKm+ 0UuxcJWxF6rMGAWLG8mjdZo+YIYYUbDf1hW1mDRBfp3A3lYVx4vMxl0noVgrSTVM 5myT8/pKyV+hOAMiGyaBp/7Rx7Za7BKl3TdLsStcGcLHpmbcMIQ83LAEJNA/bQXn dVMZTx9YKRnxZbXYH1xl3gzQyTPm8wq85o638BgyVCBfFLQ+r5gVqaQuYSUnocUa YbVJJvW33OzObK0QY4qAwhWKllKl8BV3gcvyCwDPMc8FQdzu7kxk9f7uQSnhl1p5 JTEB9jq8/gUICHSl5YyPlsjN2NqBTBjvUqvbGq2KxatDrhn2jzPpklWng1cA5hlF Dm5EfygIBT5osw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:51 2025 by rpki-client