This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json) Hash identifier: +s2qkKK6kiyCA5vo50eJ0vD4WBZEgADjRPFCRwnU8VI= Subject key identifier: D4:35:B7:1B:27:5B:2D:8A:A1:82:BD:3E:8F:F5:B8:33:F1:F5:E3:D9 Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Certificate serial: 019AF23FE74A18782A44D7AB0C469239F839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft Manifest number: 12B4 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=) 2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: 5XXrQ3n/PloVpeSUI6VEVcO7mEinSlpKd8jhOOoQ7Qw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e7:4a:18:78:2a:44:d7:ab:0c:46:92:39:f8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=d435b71b275b2d8aa182bd3e8ff5b833f1f5e3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:dc:08:f2:70:71:12:8f:66:d7:28:e8:bb:57: 15:d9:42:14:de:44:df:cd:ba:b3:ed:f7:0c:5b:7a: f8:63:e5:11:70:0f:9c:fb:35:aa:1a:75:d4:81:68: 43:23:27:54:bf:da:6d:2d:c3:f6:93:91:7f:43:4b: 51:78:9b:1a:b5:a7:1b:ae:14:88:d5:52:b1:84:9d: 01:bb:4f:38:7c:46:d0:73:0a:2c:bb:30:f7:77:18: 57:bc:66:30:20:f9:a6:aa:09:93:9a:8e:c6:6c:f1: 91:b2:6e:c6:ab:7f:49:64:a9:2c:bd:6c:bd:ed:fd: 52:22:2e:62:6e:de:65:77:81:15:30:81:1b:36:28: e2:74:fd:e1:ea:7d:f9:fc:7a:d7:79:af:75:c8:0f: 47:68:e7:ce:83:58:9f:ec:5b:06:47:28:6b:15:45: 3e:46:ca:c9:ab:7e:63:6b:9c:e7:f0:cb:85:14:6d: cb:4d:83:40:4e:1a:e5:db:8c:39:e6:94:27:d5:59: 70:ec:fe:00:2b:f7:de:50:d7:1f:52:97:80:08:b4: d6:33:a4:c0:f1:f6:27:96:68:ee:f0:01:f7:fc:73: 1b:ae:a5:d0:27:e5:6a:f5:4c:a6:5c:2d:06:f9:53: a1:29:f7:2b:5a:a5:78:4b:b0:4d:46:b1:71:5b:8b: ee:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:35:B7:1B:27:5B:2D:8A:A1:82:BD:3E:8F:F5:B8:33:F1:F5:E3:D9 X509v3 Authority Key Identifier: keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3d:f9:75:32:58:16:39:f0:8b:51:7d:84:a1:03:da:9e:16: fb:41:e0:51:c3:0b:da:41:8b:04:4d:16:57:64:bd:8d:a8:19: 34:a9:50:a8:60:fa:e1:93:e5:41:c3:da:25:f6:13:07:da:5c: 3e:79:d8:41:37:7f:0c:df:92:d6:a7:99:af:e9:66:26:0d:ef: 97:27:ff:36:64:76:82:79:41:2f:a6:79:a7:c6:2f:92:04:3f: 14:40:ba:63:dc:dd:51:c5:b8:35:0f:d7:a5:0a:df:74:70:b5: a3:5e:7c:6a:3e:4b:8e:e8:19:d6:22:b6:12:4d:51:f3:c6:b1: 46:4c:36:21:b5:5d:77:87:c8:86:5b:cd:15:b0:ff:a4:95:3e: a0:02:86:8f:48:5b:67:06:46:56:08:8d:8e:fb:4c:07:ac:fb: a3:d2:ba:c8:6d:bb:92:29:9d:be:5f:a4:b4:e4:96:6e:f3:92: 7d:6d:af:7a:27:f7:76:f1:37:8e:9b:2a:75:78:9e:b8:d5:80: bb:e9:7d:15:b4:b0:47:ca:78:79:cd:b9:a8:e6:4a:54:f9:10: bd:87:2f:11:51:1e:3a:87:26:cb:12:7a:9e:5d:f1:2c:03:db: 1b:be:59:2a:f4:29:ab:6a:ae:ac:8b:bf:6d:a4:41:bc:8f:f5: 8f:8c:df:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+dKGHgqRNerDEaSOfg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3 ZGY4ZjUwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhkNDM1YjcxYjI3NWIyZDhhYTE4MmJkM2U4ZmY1YjgzM2YxZjVlM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9wI8nBxEo9m1yjou1cV2UIU3kTf zbqz7fcMW3r4Y+URcA+c+zWqGnXUgWhDIydUv9ptLcP2k5F/Q0tReJsatacbrhSI 1VKxhJ0Bu084fEbQcwosuzD3dxhXvGYwIPmmqgmTmo7GbPGRsm7Gq39JZKksvWy9 7f1SIi5ibt5ld4EVMIEbNijidP3h6n35/HrXea91yA9HaOfOg1if7FsGRyhrFUU+ RsrJq35ja5zn8MuFFG3LTYNAThrl24w55pQn1Vlw7P4AK/feUNcfUpeACLTWM6TA 8fYnlmju8AH3/HMbrqXQJ+Vq9UymXC0G+VOhKfcrWqV4S7BNRrFxW4vuRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ1txsnWy2KoYK9Po/1uDPx9ePZMB8GA1UdIwQY MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt ZjAzYWM1OWI1YTk3LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3 LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAST35dTJY Fjnwi1F9hKED2p4W+0HgUcML2kGLBE0WV2S9jagZNKlQqGD64ZPlQcPaJfYTB9pc PnnYQTd/DN+S1qeZr+lmJg3vlyf/NmR2gnlBL6Z5p8YvkgQ/FEC6Y9zdUcW4NQ/X pQrfdHC1o158aj5LjugZ1iK2Ek1R88axRkw2IbVdd4fIhlvNFbD/pJU+oAKGj0hb ZwZGVgiNjvtMB6z7o9K6yG27kimdvl+ktOSWbvOSfW2veif3dvE3jpsqdXieuNWA u+l9FbSwR8p4ec25qOZKVPkQvYcvEVEeOocmyxJ6nl3xLAPbG75ZKvQpq2qurIu/ baRBvI/1j4zfxg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:09 2025 by rpki-client