This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft File: x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft (raw, json) Hash identifier: +0L1ds8WJraV3lAmBrJWxszIvv0vEnAewRBxjBTaHnc= Subject key identifier: 02:C0:4C:61:C8:CC:81:43:6B:98:26:D2:67:17:FD:90:24:F3:2A:CC Authority key identifier: C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C Certificate issuer: /CN=c752ad4613eef41cdb8124f27dcf9bf8724d1c0c Certificate serial: 019AF209C7571DA588C8066C2F0660D71A4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft Manifest number: 2B Signing time: Sat 06 Dec 2025 05:01:58 +0000 Manifest this update: Sat 06 Dec 2025 05:01:58 +0000 Manifest next update: Sun 07 Dec 2025 05:01:58 +0000 Files and hashes: 1: x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl (hash: 6ZFkq6mvInc8NGo/MX+OWND474JD51T30FbStkvsNP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c7:57:1d:a5:88:c8:06:6c:2f:06:60:d7:1a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c752ad4613eef41cdb8124f27dcf9bf8724d1c0c Validity Not Before: Dec 6 05:01:58 2025 GMT Not After : Dec 7 05:01:58 2025 GMT Subject: CN=02c04c61c8cc81436b9826d26717fd9024f32acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:f1:28:d5:d9:e8:d9:61:81:58:d5:f7:4d: f6:76:6e:6d:bd:dd:1c:75:be:be:77:4e:b0:80:5d: 62:64:34:99:96:89:f9:e6:08:5f:48:a3:8b:be:3d: 13:32:ee:ab:80:d0:0d:c3:65:d4:ad:6e:5d:0d:5f: 80:c0:11:a9:7e:a9:5c:51:10:72:06:ad:8c:7d:f0: 63:ca:3e:bb:77:7f:48:0d:1e:ad:d7:35:ab:15:8b: af:90:3b:94:3d:f2:59:07:a3:eb:30:8c:47:af:0b: dd:6a:53:e5:0e:04:e8:5e:01:2f:f0:4b:69:68:74: c4:c0:88:c7:b4:4e:53:c0:d9:7a:a3:70:c7:79:42: 11:bf:9b:57:72:a9:4a:6d:16:54:e3:59:e6:c6:01: f8:77:8c:36:3b:3c:f3:e9:e1:8a:de:fa:5f:79:11: c4:c5:79:b2:a7:66:45:49:45:9c:33:36:64:c7:8e: 59:28:46:92:21:64:a1:13:24:49:6c:03:83:2b:92: 51:b8:db:3b:a3:c2:7e:c3:72:2b:f9:3d:cd:c8:0f: eb:1c:51:dd:3f:0f:4c:e4:eb:0a:60:20:7e:29:87: 39:0a:45:84:ec:fb:92:ca:94:dc:be:09:36:da:53: 9f:7a:d5:e8:ec:73:a4:8d:7b:b2:7d:af:68:0f:6a: c0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C0:4C:61:C8:CC:81:43:6B:98:26:D2:67:17:FD:90:24:F3:2A:CC X509v3 Authority Key Identifier: keyid:C7:52:AD:46:13:EE:F4:1C:DB:81:24:F2:7D:CF:9B:F8:72:4D:1C:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1KtRhPu9BzbgSTyfc-b-HJNHAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fd617b-b1ce-4993-a73a-15369cce5df5/1/x1KtRhPu9BzbgSTyfc-b-HJNHAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:99:2a:f7:b7:7d:9e:f0:b8:23:5a:ca:3a:e4:44:b9:b6:b1: d2:f5:db:bf:90:c6:46:88:40:c5:51:ec:6f:e4:c8:f1:87:42: 74:71:5e:7b:f0:49:9d:66:b6:68:23:06:bb:fc:42:d0:d8:8a: c7:e0:bf:2b:17:03:33:22:af:bf:c7:02:5b:ad:3b:36:a1:2f: cf:01:e7:b4:34:23:71:24:f2:ff:53:e3:56:56:fb:61:30:a3: 4f:ba:2d:e6:f4:13:a1:91:4b:12:39:fe:00:85:b5:39:fd:d4: 33:03:d9:e2:7d:c4:a9:9d:0e:da:ba:27:0c:6c:a1:40:ce:9f: f2:14:e7:60:37:73:08:64:0b:1e:84:c3:9a:19:6d:39:14:3f: 9d:a6:10:09:6f:52:b1:97:12:74:10:c7:7b:a2:81:d5:ac:e9: 78:bc:89:b1:f0:3b:4e:bf:11:e6:08:6c:a0:b5:9b:6e:00:df: 6b:ed:6c:74:99:11:24:52:a6:9d:7a:60:19:47:f5:99:58:d5: f8:06:bb:c9:b3:20:e4:90:d9:f8:a8:13:f9:bf:dc:e3:09:45: ea:9e:38:cd:51:10:56:e8:68:c0:04:dd:cc:f0:b9:ca:12:18: f1:60:84:0c:17:25:11:59:c6:bb:de:e2:44:1e:54:40:ec:bb: ca:72:fe:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcdXHaWIyAZsLwZg1xpNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NTJhZDQ2MTNlZWY0MWNkYjgxMjRmMjdkY2Y5YmY4NzI0 ZDFjMGMwHhcNMjUxMjA2MDUwMTU4WhcNMjUxMjA3MDUwMTU4WjAzMTEwLwYDVQQD EygwMmMwNGM2MWM4Y2M4MTQzNmI5ODI2ZDI2NzE3ZmQ5MDI0ZjMyYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupnxKNXZ6NlhgVjV9032dm5tvd0c db6+d06wgF1iZDSZlon55ghfSKOLvj0TMu6rgNANw2XUrW5dDV+AwBGpfqlcURBy Bq2MffBjyj67d39IDR6t1zWrFYuvkDuUPfJZB6PrMIxHrwvdalPlDgToXgEv8Etp aHTEwIjHtE5TwNl6o3DHeUIRv5tXcqlKbRZU41nmxgH4d4w2Ozzz6eGK3vpfeRHE xXmyp2ZFSUWcMzZkx45ZKEaSIWShEyRJbAODK5JRuNs7o8J+w3Ir+T3NyA/rHFHd Pw9M5OsKYCB+KYc5CkWE7PuSypTcvgk22lOfetXo7HOkjXuyfa9oD2rAoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALATGHIzIFDa5gm0mcX/ZAk8yrMMB8GA1UdIwQY MBaAFMdSrUYT7vQc24Ek8n3Pm/hyTRwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDFLdFJoUHU5QnpiZ1NUeWZjLWItSEpOSEF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9mZDYxN2ItYjFjZS00OTkzLWE3M2Et MTUzNjljY2U1ZGY1LzEveDFLdFJoUHU5QnpiZ1NUeWZjLWItSEpOSEF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9mZDYxN2ItYjFjZS00OTkzLWE3M2EtMTUzNjljY2U1ZGY1 LzEveDFLdFJoUHU5QnpiZ1NUeWZjLWItSEpOSEF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5kq97d9 nvC4I1rKOuREubax0vXbv5DGRohAxVHsb+TI8YdCdHFee/BJnWa2aCMGu/xC0NiK x+C/KxcDMyKvv8cCW607NqEvzwHntDQjcSTy/1PjVlb7YTCjT7ot5vQToZFLEjn+ AIW1Of3UMwPZ4n3EqZ0O2ronDGyhQM6f8hTnYDdzCGQLHoTDmhltORQ/naYQCW9S sZcSdBDHe6KB1azpeLyJsfA7Tr8R5ghsoLWbbgDfa+1sdJkRJFKmnXpgGUf1mVjV +Aa7ybMg5JDZ+KgT+b/c4wlF6p44zVEQVuhowATdzPC5yhIY8WCEDBclEVnGu97i RB5UQOy7ynL+qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:21 2025 by rpki-client