This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft File: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft (raw, json) Hash identifier: 7ApnrsDfnLPq8sBAyyB+FHhvRQULqj2hwjzDVJL6yws= Subject key identifier: 71:56:91:8F:81:7F:51:4A:C8:68:E2:CC:9F:69:8E:89:ED:08:4D:BB Authority key identifier: 5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79 Certificate issuer: /CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579 Certificate serial: 019AF12E6DA48138A86EB24795587350783F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl (hash: 0s2mQgZZNv6I8x6CLQYN+62ObVRtloSiwyTfUE0SHO4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6d:a4:81:38:a8:6e:b2:47:95:58:73:50:78:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfaafb61a0c74a049d96bcde59cb942cc8d5579 Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=7156918f817f514ac868e2cc9f698e89ed084dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f7:2a:6d:95:8d:c7:95:1d:75:70:cf:b6:fc: c4:06:5c:71:b6:9f:6b:06:6b:64:50:8d:98:a0:0c: 75:b1:a7:c8:77:e4:6b:1d:cc:19:31:ec:a4:c1:d0: bd:9d:bc:25:59:69:ed:be:9b:ee:09:8a:9b:29:52: fd:85:6c:2f:15:dc:6e:6c:6b:50:d4:eb:d7:69:5a: 5b:50:a8:84:a4:8d:af:df:da:3e:ba:50:f9:fc:25: 3d:2e:9d:84:bc:3b:66:91:bb:07:de:bc:c1:40:dc: 75:4d:97:54:eb:62:76:ed:1e:a1:53:1f:94:77:2d: ff:b0:9d:46:77:46:19:37:90:ba:b3:53:d7:0a:91: dd:0a:d3:2b:a6:ef:4a:4e:a2:d0:94:51:3c:86:a6: 82:78:68:8d:e3:aa:23:19:f7:23:38:7b:30:92:ef: ce:b5:a9:f2:aa:e4:05:b5:a9:09:a6:cb:cd:c2:80: c7:79:a7:ac:30:20:6f:78:1c:bc:07:12:71:5f:68: c9:b2:f6:08:c1:08:94:5d:b2:4c:dd:bc:01:16:cd: 02:6d:e7:5c:07:d0:16:98:8a:f5:0a:a1:a5:0a:79: 91:1a:71:55:a2:8a:23:86:20:e2:b8:95:24:d2:ae: 5d:30:b1:11:b7:ea:54:e7:4a:51:a6:be:de:d0:25: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:56:91:8F:81:7F:51:4A:C8:68:E2:CC:9F:69:8E:89:ED:08:4D:BB X509v3 Authority Key Identifier: keyid:5D:FA:AF:B6:1A:0C:74:A0:49:D9:6B:CD:E5:9C:B9:42:CC:8D:55:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4942f6-f58c-4eef-918b-f2d9f0e7a697/1/XfqvthoMdKBJ2WvN5Zy5QsyNVXk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2a:8f:68:ec:81:e7:c4:75:85:84:57:32:64:af:13:bf:29: e0:70:41:74:86:86:2d:7f:4d:21:d6:6e:12:ca:2e:52:c7:ce: f9:8f:80:80:57:f2:8e:e4:a0:6e:c3:86:ba:c5:90:60:08:22: 96:a9:4f:8a:27:41:0b:54:67:bd:9b:90:30:22:85:8d:8a:d2: 58:d8:8f:a1:37:0b:f6:05:fa:fc:d4:f5:05:56:45:30:cd:78: f0:0e:0e:db:48:93:df:24:c2:d5:43:66:74:4d:dd:63:50:9e: ba:9d:0d:bb:93:ac:29:b1:17:25:38:e6:2a:e2:b5:84:f3:4f: ae:9c:75:9b:bb:c1:7b:72:73:97:de:d9:51:4c:4b:44:4c:b1: dd:e2:ba:20:54:2d:49:c5:0f:33:01:9a:cd:b2:75:8b:37:46: 18:e8:d5:5f:fd:75:14:51:e5:20:34:05:d5:45:72:4a:b4:b7: 79:cb:5f:7b:91:25:76:62:4c:7c:f4:8d:b8:82:7b:e5:99:d5: 79:db:b2:98:64:67:87:ae:48:d0:b2:40:ca:51:41:41:af:ad: a4:75:55:a6:34:77:fd:c4:fb:1c:92:93:12:e5:21:23:5f:9d: d6:d8:1d:ba:4e:a6:31:64:ea:61:c4:0b:9d:44:61:75:6b:d8: 02:44:18:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLm2kgTiobrJHlVhzUHg/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmFhZmI2MWEwYzc0YTA0OWQ5NmJjZGU1OWNiOTQyY2M4 ZDU1NzkwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD Eyg3MTU2OTE4ZjgxN2Y1MTRhYzg2OGUyY2M5ZjY5OGU4OWVkMDg0ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfcqbZWNx5UddXDPtvzEBlxxtp9r BmtkUI2YoAx1safId+RrHcwZMeykwdC9nbwlWWntvpvuCYqbKVL9hWwvFdxubGtQ 1OvXaVpbUKiEpI2v39o+ulD5/CU9Lp2EvDtmkbsH3rzBQNx1TZdU62J27R6hUx+U dy3/sJ1Gd0YZN5C6s1PXCpHdCtMrpu9KTqLQlFE8hqaCeGiN46ojGfcjOHswku/O tanyquQFtakJpsvNwoDHeaesMCBveBy8BxJxX2jJsvYIwQiUXbJM3bwBFs0Cbedc B9AWmIr1CqGlCnmRGnFVooojhiDiuJUk0q5dMLERt+pU50pRpr7e0CWr5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFWkY+Bf1FKyGjizJ9pjontCE27MB8GA1UdIwQY MBaAFF36r7YaDHSgSdlrzeWcuULMjVV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC80OTQyZjYtZjU4Yy00ZWVmLTkxOGIt ZjJkOWYwZTdhNjk3LzEvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC80OTQyZjYtZjU4Yy00ZWVmLTkxOGItZjJkOWYwZTdhNjk3 LzEvWGZxdnRob01kS0JKMld2TjVaeTVRc3lOVlhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSqPaOyB 58R1hYRXMmSvE78p4HBBdIaGLX9NIdZuEsouUsfO+Y+AgFfyjuSgbsOGusWQYAgi lqlPiidBC1RnvZuQMCKFjYrSWNiPoTcL9gX6/NT1BVZFMM148A4O20iT3yTC1UNm dE3dY1Ceup0Nu5OsKbEXJTjmKuK1hPNPrpx1m7vBe3Jzl97ZUUxLREyx3eK6IFQt ScUPMwGazbJ1izdGGOjVX/11FFHlIDQF1UVySrS3ectfe5EldmJMfPSNuIJ75ZnV eduymGRnh65I0LJAylFBQa+tpHVVpjR3/cT7HJKTEuUhI1+d1tgduk6mMWTqYcQL nURhdWvYAkQYzg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:21 2025 by rpki-client