This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json) Hash identifier: MNzLmTVf+kNY+uhynw0c9IIPGUQ7cBfOLua5jMNaeWg= Subject key identifier: B6:CB:6F:E7:79:C0:41:F7:D3:DE:19:A0:0A:DC:6A:A0:2E:E4:42:F3 Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24 Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524 Certificate serial: 019AF2096D6DB1AFE25B14C390F2A27B394B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft Manifest number: 065B Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: pqnRh5wQSKrjHSDwjJEBYe0jYhWMRQhBZrd4LEmDDfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6d:6d:b1:af:e2:5b:14:c3:90:f2:a2:7b:39:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=b6cb6fe779c041f7d3de19a00adc6aa02ee442f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:6d:99:ca:e2:c7:30:e9:f8:c5:0d:7e:03: 4e:91:a7:07:1b:55:94:56:80:c9:ca:02:e8:15:61: 8e:e3:7b:23:2f:c6:8d:e8:81:0c:72:57:f1:aa:0f: 62:d3:1f:33:a3:9f:24:a4:e3:32:c8:49:12:9d:30: a1:0b:10:06:97:ac:c7:9b:e4:9d:1a:54:70:1f:9e: ea:f9:84:aa:3d:f7:8a:af:14:21:7d:07:25:d4:e9: 5e:40:17:ab:4b:f5:57:25:32:34:dd:72:28:cb:a4: 68:53:81:0c:cb:12:e0:55:d1:53:89:72:f7:3b:9b: 39:3f:e9:ca:18:08:8c:26:e0:d1:7e:9f:c4:7a:45: e5:d4:c8:88:0c:75:e7:13:8d:cf:71:87:b7:62:ee: c9:c0:1d:b4:9c:33:35:69:ae:25:d9:34:7f:79:a0: 6e:85:e9:29:1e:2f:70:1b:b2:8b:38:73:be:ee:87: ba:c0:e3:84:c6:bc:af:85:1d:d6:ba:5f:3d:bc:74: 9f:96:64:6a:10:ae:86:ac:e6:20:53:d3:3b:e2:d6: 3c:61:95:fe:96:84:06:86:ac:1a:ac:2a:c2:e4:2a: 54:ff:40:77:9f:de:19:c5:e9:37:08:a5:77:5c:41: 18:99:91:12:66:4b:b6:29:24:dd:ea:ea:2c:d6:2d: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CB:6F:E7:79:C0:41:F7:D3:DE:19:A0:0A:DC:6A:A0:2E:E4:42:F3 X509v3 Authority Key Identifier: keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3d:35:a9:5f:a7:69:56:65:ae:34:75:95:c7:ba:12:72:37: 9a:96:99:62:82:63:be:f0:d5:2f:4c:2c:37:6a:2d:26:28:f7: 60:d4:44:f9:4e:8d:b8:7c:d6:ca:77:be:09:b1:fd:65:7b:2e: 57:69:e2:3f:f7:82:be:32:c8:62:01:44:97:bf:3a:3e:cd:3d: 0c:59:0e:65:b7:a1:e4:9e:11:16:55:8c:54:b6:dc:67:f5:70: f7:1b:e6:e0:db:cb:75:fb:cb:0b:01:1d:b2:1f:b9:9b:66:c3: df:33:82:6c:a6:cb:8f:89:09:7e:8c:47:de:e8:3b:ee:e1:36: 18:b9:ab:b5:54:52:b5:1e:45:6d:45:c8:38:02:60:8b:14:e4: 38:6f:73:4f:92:af:27:4d:de:61:52:c9:e6:8b:aa:da:e9:cb: 2e:a5:ef:4a:7f:85:a6:05:46:58:97:bb:ca:3a:75:be:37:64: 05:a9:8b:b8:3c:84:2d:47:92:aa:bf:bb:49:6b:75:3c:65:20: 5a:bc:d8:53:bf:df:94:59:c5:67:8b:6f:37:b7:93:82:5d:3d: ff:82:0d:fb:ca:4e:53:75:de:e5:dd:de:74:7a:d0:9a:55:8f: 4e:ca:d6:8e:f8:c9:3a:e6:0e:01:d1:1b:1c:92:38:c0:30:9d: a9:00:70:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW1tsa/iWxTDkPKiezlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx Mjg1MjQwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhiNmNiNmZlNzc5YzA0MWY3ZDNkZTE5YTAwYWRjNmFhMDJlZTQ0MmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBtmcrixzDp+MUNfgNOkacHG1WU VoDJygLoFWGO43sjL8aN6IEMclfxqg9i0x8zo58kpOMyyEkSnTChCxAGl6zHm+Sd GlRwH57q+YSqPfeKrxQhfQcl1OleQBerS/VXJTI03XIoy6RoU4EMyxLgVdFTiXL3 O5s5P+nKGAiMJuDRfp/EekXl1MiIDHXnE43PcYe3Yu7JwB20nDM1aa4l2TR/eaBu hekpHi9wG7KLOHO+7oe6wOOExryvhR3Wul89vHSflmRqEK6GrOYgU9M74tY8YZX+ loQGhqwarCrC5CpU/0B3n94Zxek3CKV3XEEYmZESZku2KSTd6uos1i3zvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbLb+d5wEH3094ZoArcaqAu5ELzMB8GA1UdIwQY MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiz01qV+n aVZlrjR1lce6EnI3mpaZYoJjvvDVL0wsN2otJij3YNRE+U6NuHzWyne+CbH9ZXsu V2niP/eCvjLIYgFEl786Ps09DFkOZbeh5J4RFlWMVLbcZ/Vw9xvm4NvLdfvLCwEd sh+5m2bD3zOCbKbLj4kJfoxH3ug77uE2GLmrtVRStR5FbUXIOAJgixTkOG9zT5Kv J03eYVLJ5ouq2unLLqXvSn+FpgVGWJe7yjp1vjdkBamLuDyELUeSqr+7SWt1PGUg WrzYU7/flFnFZ4tvN7eTgl09/4IN+8pOU3Xe5d3edHrQmlWPTsrWjvjJOuYOAdEb HJI4wDCdqQBwlA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:14 2025 by rpki-client