This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json) Hash identifier: AZzS+3Osktb7ynifW7Tn6cGRjtE+g2ayb+ng7hQsqCM= Subject key identifier: 83:78:E6:50:E4:84:05:5F:8E:9D:6F:D4:0E:88:48:60:F7:FF:8E:90 Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424 Certificate serial: 019AF0F5DA9568F5868DEEE1B6FCCACFFDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft Manifest number: 0BB1 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: JHSBIUlRSEG1nCZpuHj0Ac8gdKDLg1KYcIIxU4BcJDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:da:95:68:f5:86:8d:ee:e1:b6:fc:ca:cf:fd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=8378e650e484055f8e9d6fd40e884860f7ff8e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8a:54:04:27:d6:3b:18:ba:63:17:17:a6:51: f5:81:73:a8:3d:8f:8a:15:ee:c7:55:7e:b2:9d:a8: 21:6e:92:7a:89:3c:c7:17:08:47:cc:ab:14:58:70: 88:3b:7a:fe:b6:c1:65:90:38:f2:f5:af:c1:7f:69: f7:7b:8a:84:27:07:88:4d:33:a7:c3:ec:88:75:56: 27:08:da:ef:ae:1b:bc:1c:24:75:b2:1a:ba:35:a4: ea:81:6e:78:33:66:91:2a:2c:0c:63:58:96:29:d3: 8a:3d:5d:16:39:aa:06:a8:58:5b:b1:1f:0d:aa:82: 58:bc:10:55:da:ea:72:f2:a5:04:2c:64:ec:d1:d1: 54:32:62:ee:2f:46:4f:92:f4:99:2d:60:d4:fd:75: 75:f0:36:f1:60:06:49:cd:e6:2a:65:2c:ed:6b:b7: c0:4b:7b:79:af:75:37:35:a3:24:11:fc:40:f8:65: aa:45:35:1f:93:33:20:15:45:9a:f5:3a:a0:df:d1: 7b:f2:7a:76:82:e5:61:3a:ef:60:76:02:3b:ec:7d: 71:9c:4c:c1:26:d2:ed:b6:bc:06:2b:c9:70:26:e2: 96:ae:25:f5:0a:a2:87:0d:62:ba:65:8c:d2:fe:73: e4:76:58:b0:61:dc:71:e8:12:80:72:66:80:05:cf: dc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:78:E6:50:E4:84:05:5F:8E:9D:6F:D4:0E:88:48:60:F7:FF:8E:90 X509v3 Authority Key Identifier: keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:43:5c:f5:10:45:e1:38:25:f6:9b:da:21:b3:23:52:48:20: f9:e3:70:53:70:c7:e9:6a:5d:27:06:5e:56:91:c1:67:e3:b1: 79:20:93:06:4a:65:cd:45:86:f8:42:4a:57:99:0a:fb:9a:0c: 79:cf:2b:f7:0d:a2:c6:c5:21:d0:0a:41:1e:1b:67:7d:d0:59: a3:bd:2c:cb:83:99:ce:6a:87:1c:0b:f2:47:c9:ef:fc:fa:57: 62:ff:9d:e9:18:6d:43:a6:db:e0:0d:37:6c:09:9f:86:73:d3: 88:b2:1f:4f:a2:01:98:5a:ba:33:56:43:4b:06:44:d2:bf:eb: b3:b6:8c:f8:71:41:b3:7a:50:d9:49:ca:f1:21:a5:07:67:1a: 68:9f:ee:fe:48:56:a5:e3:91:8c:c0:80:5a:0c:ec:6b:82:44: f1:e3:bb:c9:ed:1a:00:fb:56:23:3c:aa:4e:f9:8b:96:94:ce: ea:2d:6f:93:3f:df:a3:50:6e:56:2b:02:16:cb:93:b5:89:6f: 47:8a:b7:cd:c6:79:1c:47:e6:fa:2d:ec:37:6b:5c:7b:f8:1f: 9c:01:63:cb:93:80:fc:e8:b0:ab:a1:ba:88:3b:ea:e6:4d:00: a2:73:56:c9:f3:87:d7:ec:40:0e:dd:8c:32:aa:1c:34:f9:2f: 7b:6a:74:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dqVaPWGje7htvzKz/3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm NmM0MjQwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg4Mzc4ZTY1MGU0ODQwNTVmOGU5ZDZmZDQwZTg4NDg2MGY3ZmY4ZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIpUBCfWOxi6YxcXplH1gXOoPY+K Fe7HVX6ynaghbpJ6iTzHFwhHzKsUWHCIO3r+tsFlkDjy9a/Bf2n3e4qEJweITTOn w+yIdVYnCNrvrhu8HCR1shq6NaTqgW54M2aRKiwMY1iWKdOKPV0WOaoGqFhbsR8N qoJYvBBV2upy8qUELGTs0dFUMmLuL0ZPkvSZLWDU/XV18DbxYAZJzeYqZSzta7fA S3t5r3U3NaMkEfxA+GWqRTUfkzMgFUWa9Tqg39F78np2guVhOu9gdgI77H1xnEzB JtLttrwGK8lwJuKWriX1CqKHDWK6ZYzS/nPkdliwYdxx6BKAcmaABc/cnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN45lDkhAVfjp1v1A6ISGD3/46QMB8GA1UdIwQY MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkNc9RBF 4Tgl9pvaIbMjUkgg+eNwU3DH6WpdJwZeVpHBZ+OxeSCTBkplzUWG+EJKV5kK+5oM ec8r9w2ixsUh0ApBHhtnfdBZo70sy4OZzmqHHAvyR8nv/PpXYv+d6RhtQ6bb4A03 bAmfhnPTiLIfT6IBmFq6M1ZDSwZE0r/rs7aM+HFBs3pQ2UnK8SGlB2caaJ/u/khW peORjMCAWgzsa4JE8eO7ye0aAPtWIzyqTvmLlpTO6i1vkz/fo1BuVisCFsuTtYlv R4q3zcZ5HEfm+i3sN2tce/gfnAFjy5OA/Oiwq6G6iDvq5k0AonNWyfOH1+xADt2M MqocNPkve2p0aw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:31 2025 by rpki-client