This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json) Hash identifier: jOV3uM9iamAg1l3XJSt8W7wIYOnMmfZRDdubGnsgJQw= Subject key identifier: 99:36:70:06:E0:44:0F:89:E4:F3:0F:74:4D:5B:F1:74:B9:0D:92:09 Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b Certificate serial: 019AF31C028911F5BF4C23BB2CE8487DB4C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft Manifest number: 0A97 Signing time: Sat 06 Dec 2025 10:01:30 +0000 Manifest this update: Sat 06 Dec 2025 10:01:30 +0000 Manifest next update: Sun 07 Dec 2025 10:01:30 +0000 Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: bApOiebDE+KwfDBAM/S6mWoxwiPv3POgoYN8bRhCK9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:02:89:11:f5:bf:4c:23:bb:2c:e8:48:7d:b4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=471d7371241346c6ea9a476946802172ca07566b Validity Not Before: Dec 6 10:01:30 2025 GMT Not After : Dec 7 10:01:30 2025 GMT Subject: CN=99367006e0440f89e4f30f744d5bf174b90d9209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3b:26:79:80:6b:cc:0d:f4:41:85:49:45:78: f5:9b:e0:a3:6d:76:73:b9:98:b8:89:b0:1b:cb:3f: 8a:73:90:9c:5b:e9:00:63:67:e2:16:ef:a0:c6:a1: 30:4e:09:39:f6:72:b0:ea:9c:78:51:04:8b:45:7a: d6:bf:a3:83:cd:49:f9:20:8d:64:ac:ea:c6:ee:48: e2:a0:37:cc:57:60:0f:d8:e3:51:21:a5:d3:d8:f9: 16:6e:64:d6:7c:35:3c:69:d9:ba:86:a4:80:ec:7b: 43:9e:07:6d:7d:ee:85:d7:81:8e:ee:1f:db:9c:12: 31:9c:44:b5:25:8a:3d:33:e9:70:f2:01:1f:66:e9: 19:7f:c9:9c:00:bf:78:c4:12:55:bb:e7:ee:2f:7b: 77:5f:0a:e9:4c:0c:9f:bb:94:e3:e4:4a:5c:b9:18: ef:93:4e:0e:6f:b1:f7:6b:e5:c3:6e:32:2e:70:45: c1:4d:53:44:0f:8d:8a:71:ee:e5:d2:1b:d0:ff:24: 30:e2:8a:c1:bd:f4:39:22:f4:03:de:79:52:ad:64: 46:61:cb:33:17:2a:d2:dd:2f:c6:2c:e5:cb:28:78: d4:f9:99:5b:51:30:88:10:e7:1f:bf:8d:a3:7e:b5: aa:4a:e6:a8:78:37:db:a6:f2:08:33:d9:51:90:48: f5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:36:70:06:E0:44:0F:89:E4:F3:0F:74:4D:5B:F1:74:B9:0D:92:09 X509v3 Authority Key Identifier: keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b4:e8:b5:1e:e9:d9:8b:73:9f:4b:88:32:91:10:5c:eb:18: f3:35:be:7c:d1:26:1d:1b:82:38:a9:12:b0:5e:04:f1:08:7e: 25:f7:2a:2c:e9:bd:d7:4d:ea:06:25:0b:52:a9:79:a7:dc:74: 3d:3b:20:5f:86:78:7e:37:9e:53:8a:6c:10:08:1d:58:cd:e5: 8f:98:4b:18:4f:9e:ab:35:66:c9:4d:6c:3b:82:37:fd:90:e2: f9:03:d2:e0:ac:80:f3:6e:75:05:f7:ff:d0:11:d6:fe:4c:88: 8f:79:24:82:ec:d7:b4:76:55:c0:76:11:73:9c:df:5d:e3:7a: b5:77:e6:4b:57:87:d2:2b:d1:32:ae:bd:b5:4c:81:ac:33:9b: ea:8d:58:71:40:b0:71:d9:17:e2:39:cb:33:4d:55:97:1a:9b: 04:9a:81:97:d6:ec:e7:5e:5e:5e:83:21:95:8f:fa:fa:fc:ca: 91:c2:8e:c9:08:b1:86:68:34:62:dc:bd:e1:98:fc:10:5b:4c: f0:52:94:24:fe:ea:95:87:8f:7d:63:4c:de:df:90:bc:0a:c4: fd:7f:da:94:f4:05:e0:08:e1:8b:ba:d7:f8:9e:ff:25:dd:32: 37:4c:17:1e:bd:9a:78:34:d1:09:23:a9:3d:41:42:c9:3a:01: 34:54:86:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAKJEfW/TCO7LOhIfbTIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MWQ3MzcxMjQxMzQ2YzZlYTlhNDc2OTQ2ODAyMTcyY2Ew NzU2NmIwHhcNMjUxMjA2MTAwMTMwWhcNMjUxMjA3MTAwMTMwWjAzMTEwLwYDVQQD Eyg5OTM2NzAwNmUwNDQwZjg5ZTRmMzBmNzQ0ZDViZjE3NGI5MGQ5MjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjsmeYBrzA30QYVJRXj1m+CjbXZz uZi4ibAbyz+Kc5CcW+kAY2fiFu+gxqEwTgk59nKw6px4UQSLRXrWv6ODzUn5II1k rOrG7kjioDfMV2AP2ONRIaXT2PkWbmTWfDU8adm6hqSA7HtDngdtfe6F14GO7h/b nBIxnES1JYo9M+lw8gEfZukZf8mcAL94xBJVu+fuL3t3XwrpTAyfu5Tj5EpcuRjv k04Ob7H3a+XDbjIucEXBTVNED42Kce7l0hvQ/yQw4orBvfQ5IvQD3nlSrWRGYcsz FyrS3S/GLOXLKHjU+ZlbUTCIEOcfv42jfrWqSuaoeDfbpvIIM9lRkEj1DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk2cAbgRA+J5PMPdE1b8XS5DZIJMB8GA1UdIwQY MBaAFEcdc3EkE0bG6ppHaUaAIXLKB1ZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUt NTY5MWYxNzM4YWJhLzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9kMDgxNWMtNWIyNi00MzE3LThlNzUtNTY5MWYxNzM4YWJh LzEvUngxemNTUVRSc2JxbWtkcFJvQWhjc29IVm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7TotR7p 2Ytzn0uIMpEQXOsY8zW+fNEmHRuCOKkSsF4E8Qh+JfcqLOm9103qBiULUql5p9x0 PTsgX4Z4fjeeU4psEAgdWM3lj5hLGE+eqzVmyU1sO4I3/ZDi+QPS4KyA8251Bff/ 0BHW/kyIj3kkguzXtHZVwHYRc5zfXeN6tXfmS1eH0ivRMq69tUyBrDOb6o1YcUCw cdkX4jnLM01VlxqbBJqBl9bs515eXoMhlY/6+vzKkcKOyQixhmg0Yty94Zj8EFtM 8FKUJP7qlYePfWNM3t+QvArE/X/alPQF4Ajhi7rX+J7/Jd0yN0wXHr2aeDTRCSOp PUFCyToBNFSG2A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:54 2025 by rpki-client