This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json) Hash identifier: qaEOW4I3xbTY2FT29XshE8TjvWnppwlX1tfJxqBm6rY= Subject key identifier: 6C:39:F2:26:05:DA:EE:BE:62:A9:51:DF:5E:98:A4:50:A9:71:B2:25 Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b Certificate serial: 019AF0886C027E409AF7760655CCAE61B238 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft Manifest number: 175C Signing time: Fri 05 Dec 2025 22:01:03 +0000 Manifest this update: Fri 05 Dec 2025 22:01:03 +0000 Manifest next update: Sat 06 Dec 2025 22:01:03 +0000 Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: pyfs2J6hbQoG0Eejl8Sf0fgK+F8c36TQvPdwV8Qe0ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6c:02:7e:40:9a:f7:76:06:55:cc:ae:61:b2:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b Validity Not Before: Dec 5 22:01:03 2025 GMT Not After : Dec 6 22:01:03 2025 GMT Subject: CN=6c39f22605daeebe62a951df5e98a450a971b225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:aa:5d:9f:ae:83:a6:8e:e3:b9:79:e6:46: ff:a9:0e:f9:16:44:c7:99:a5:9d:b6:eb:19:7f:2b: 5e:53:bb:45:90:6b:fc:ef:48:3b:cd:17:fc:31:27: a4:67:fb:8e:27:ba:14:4e:7a:27:00:fa:ab:17:4f: 8d:c4:57:64:77:51:74:77:fd:e1:0b:46:0c:af:ef: 2e:4e:60:df:cb:11:c3:e0:07:3c:72:21:91:9b:1f: cb:c9:1e:6a:aa:66:a5:b7:7f:45:18:7f:4c:db:eb: b9:89:22:9f:9f:0a:75:91:5f:60:1b:68:71:f9:aa: 3f:40:b9:fc:68:d4:30:f5:97:9b:0a:8f:91:39:67: 3e:d1:33:86:e4:d2:d6:a5:66:e9:7e:33:7b:02:6c: 5a:8e:cb:f8:96:13:0a:a0:f3:d6:2b:09:16:6d:ef: 43:8c:9f:a7:67:de:ec:7c:92:87:c1:e6:2d:3e:09: 40:33:6b:5b:75:91:b2:12:55:b1:ce:83:e0:d4:cb: f1:d0:c0:0e:31:32:2c:d9:e8:90:26:28:85:b9:4b: 92:14:7f:9b:83:6f:fa:e0:87:32:a8:4b:48:be:48: f4:75:b8:d3:9d:2c:1a:29:b6:d8:82:38:08:5b:a4: 0d:48:2e:fe:27:c7:df:0c:e6:d9:f7:3c:02:c2:15: 1f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:39:F2:26:05:DA:EE:BE:62:A9:51:DF:5E:98:A4:50:A9:71:B2:25 X509v3 Authority Key Identifier: keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:28:32:b4:88:55:33:5d:28:b8:c0:34:c8:02:8d:eb:24:44: db:6f:0b:41:10:b3:26:68:d8:6f:3a:45:f7:9e:56:13:e7:7a: 5c:39:d4:44:cf:60:ff:a8:dd:67:8f:aa:0d:a5:9d:e0:86:6a: 9a:7a:58:02:3b:e4:8f:3b:aa:5a:a0:3f:07:9a:65:a4:71:72: 12:ba:1d:5c:cc:40:ca:17:51:ca:98:0d:fe:84:7a:bb:bd:e1: bd:7f:93:c3:18:a9:1a:ed:f9:96:20:c6:e6:5f:f2:9f:e9:9f: 40:6e:9b:66:75:4b:5a:44:d6:4d:e2:f3:74:4c:09:67:29:85: ef:b5:d1:ad:9c:82:b7:05:e5:8e:81:cc:5b:6f:6f:cf:d5:9e: 0f:96:b0:dc:9d:4a:94:77:0d:17:9e:e4:8b:fd:e7:df:b8:e0: 59:d7:ee:89:17:67:4e:0b:82:ec:d9:0e:b1:38:26:ea:96:8f: ba:be:8c:4f:e7:d2:8b:81:4e:54:f6:ae:b5:fa:f8:de:a6:12: fc:98:eb:02:d6:61:ff:e8:d6:12:31:30:85:5a:da:91:6f:c2: 2c:b2:3b:89:73:68:dc:cc:3d:72:c6:71:ee:91:e6:89:75:cf: 19:5b:a3:12:94:20:3d:bb:8c:53:be:4c:61:18:ec:34:a0:1f: 33:1f:f3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGwCfkCa93YGVcyuYbI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2 ZDhhOGIwHhcNMjUxMjA1MjIwMTAzWhcNMjUxMjA2MjIwMTAzWjAzMTEwLwYDVQQD Eyg2YzM5ZjIyNjA1ZGFlZWJlNjJhOTUxZGY1ZTk4YTQ1MGE5NzFiMjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6SqXZ+ug6aO47l55kb/qQ75FkTH maWdtusZfyteU7tFkGv870g7zRf8MSekZ/uOJ7oUTnonAPqrF0+NxFdkd1F0d/3h C0YMr+8uTmDfyxHD4Ac8ciGRmx/LyR5qqmalt39FGH9M2+u5iSKfnwp1kV9gG2hx +ao/QLn8aNQw9ZebCo+ROWc+0TOG5NLWpWbpfjN7Amxajsv4lhMKoPPWKwkWbe9D jJ+nZ97sfJKHweYtPglAM2tbdZGyElWxzoPg1Mvx0MAOMTIs2eiQJiiFuUuSFH+b g2/64IcyqEtIvkj0dbjTnSwaKbbYgjgIW6QNSC7+J8ffDObZ9zwCwhUfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGw58iYF2u6+YqlR316YpFCpcbIlMB8GA1UdIwQY MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGigytIhV M10ouMA0yAKN6yRE228LQRCzJmjYbzpF955WE+d6XDnURM9g/6jdZ4+qDaWd4IZq mnpYAjvkjzuqWqA/B5plpHFyErodXMxAyhdRypgN/oR6u73hvX+TwxipGu35liDG 5l/yn+mfQG6bZnVLWkTWTeLzdEwJZymF77XRrZyCtwXljoHMW29vz9WeD5aw3J1K lHcNF57ki/3n37jgWdfuiRdnTguC7NkOsTgm6paPur6MT+fSi4FOVPautfr43qYS /JjrAtZh/+jWEjEwhVrakW/CLLI7iXNo3Mw9csZx7pHmiXXPGVujEpQgPbuMU75M YRjsNKAfMx/zZw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:38 2025 by rpki-client