This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft File: rx1xu1v1LBNf8HCGaq1M25U6iZA.mft (raw, json) Hash identifier: /wPcDgGuZdKVnTVCuxH2xeNQEQaNwJ3CcVBR4OG+J7U= Subject key identifier: 8C:2A:92:AB:85:6B:FF:8C:5B:D9:87:57:8B:9E:87:58:EC:2A:3D:C0 Authority key identifier: AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90 Certificate issuer: /CN=af1d71bb5bf52c135ff070866aad4cdb953a8990 Certificate serial: 019AF16429C28D3CAA8A5351326AA62E7BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: rx1xu1v1LBNf8HCGaq1M25U6iZA.crl (hash: A2sX3pAKpV8Zq9qWx/0SLtOYi/fNKEUokiMsFSJHwMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:c2:8d:3c:aa:8a:53:51:32:6a:a6:2e:7b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af1d71bb5bf52c135ff070866aad4cdb953a8990 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=8c2a92ab856bff8c5bd987578b9e8758ec2a3dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:40:d2:95:94:70:b3:0a:8a:2d:a0:4e:5e: 43:09:8d:f2:32:d4:fc:b9:f5:88:84:bd:e9:d9:99: e6:20:42:38:a8:02:7e:81:95:2c:4a:36:f6:b2:a5: 5d:f3:d2:82:48:f1:b4:b4:1e:56:e0:5d:f0:2d:50: ed:b8:2d:c5:b5:da:49:ef:74:d3:72:25:ee:f4:98: 19:6d:d2:e7:1d:51:b9:80:4b:2f:37:74:c6:05:b3: bd:d7:83:21:48:2d:12:8a:ea:34:e0:c9:35:0b:d6: 9a:a5:ec:c2:04:58:ff:89:5a:19:23:b5:0e:8c:ef: bc:52:ba:01:e2:00:99:e0:37:68:2d:85:7c:2f:47: de:18:a1:09:75:6b:e6:66:97:be:1f:fe:17:ee:65: 28:5f:24:4d:03:64:f9:be:8a:15:d5:20:c6:55:a8: 25:cd:2b:1d:45:79:2c:e7:ef:ca:b1:3b:ae:36:38: 55:1b:d2:0c:51:0b:37:b5:3a:a8:f1:b6:f1:a5:1a: ab:ec:07:8f:2e:ab:46:0a:d5:7b:50:d1:f0:54:de: 5b:c9:af:86:76:45:5c:46:5e:eb:c3:5c:b7:29:d1: c2:1e:79:04:dc:70:4a:7c:3f:e8:3a:06:28:74:00: 86:4d:b8:b7:d3:4e:b7:eb:f2:15:d4:66:83:47:da: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2A:92:AB:85:6B:FF:8C:5B:D9:87:57:8B:9E:87:58:EC:2A:3D:C0 X509v3 Authority Key Identifier: keyid:AF:1D:71:BB:5B:F5:2C:13:5F:F0:70:86:6A:AD:4C:DB:95:3A:89:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx1xu1v1LBNf8HCGaq1M25U6iZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4b2617-a926-4a3b-9b80-025896223d97/1/rx1xu1v1LBNf8HCGaq1M25U6iZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:8c:6b:b6:d7:c4:06:04:31:fb:8f:45:cc:f4:02:be:cf:e6: 5e:75:66:bb:f2:2f:c4:1b:25:65:62:56:80:f8:ca:de:88:d9: 36:42:94:b9:c2:c7:da:95:52:59:c0:86:2d:a4:3e:31:92:ec: 51:5b:34:61:f5:80:35:61:87:ab:c3:ec:47:a2:f0:29:a2:89: 44:29:c3:22:d3:6d:d7:13:3b:ac:c4:ac:d5:c1:24:06:a4:55: 2d:06:dd:94:c9:d4:91:de:d5:81:eb:60:85:2a:6f:bc:e1:52: b7:66:2e:38:cf:be:f4:b6:20:e7:85:5e:bd:d2:54:52:a9:76: fd:b7:7d:24:1d:20:1c:97:6c:ee:7a:96:f3:e3:e5:2e:93:32: da:c4:87:4d:e3:e4:32:3e:fa:52:99:62:2b:e2:0f:f7:8d:14: 46:6d:24:90:e0:0c:15:6f:ef:c6:32:c0:4b:94:55:31:d3:cb: 04:11:43:7f:94:25:69:ff:38:f4:1a:a7:f0:b7:e7:92:da:27: b9:87:6a:22:87:d0:49:4d:f4:59:c5:8e:ff:2e:e5:85:a1:3b: a7:0e:fb:72:21:95:cb:88:89:0f:23:bf:cf:0f:ea:94:b5:78: ab:ae:d6:0b:63:2a:21:69:ba:b0:07:ff:6f:cd:19:ec:7e:1b: 9d:2a:a1:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCnCjTyqilNRMmqmLnvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMWQ3MWJiNWJmNTJjMTM1ZmYwNzA4NjZhYWQ0Y2RiOTUz YTg5OTAwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg4YzJhOTJhYjg1NmJmZjhjNWJkOTg3NTc4YjllODc1OGVjMmEzZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY1A0pWUcLMKii2gTl5DCY3yMtT8 ufWIhL3p2ZnmIEI4qAJ+gZUsSjb2sqVd89KCSPG0tB5W4F3wLVDtuC3FtdpJ73TT ciXu9JgZbdLnHVG5gEsvN3TGBbO914MhSC0Siuo04Mk1C9aapezCBFj/iVoZI7UO jO+8UroB4gCZ4DdoLYV8L0feGKEJdWvmZpe+H/4X7mUoXyRNA2T5vooV1SDGVagl zSsdRXks5+/KsTuuNjhVG9IMUQs3tTqo8bbxpRqr7AePLqtGCtV7UNHwVN5bya+G dkVcRl7rw1y3KdHCHnkE3HBKfD/oOgYodACGTbi300636/IV1GaDR9opIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwqkquFa/+MW9mHV4ueh1jsKj3AMB8GA1UdIwQY MBaAFK8dcbtb9SwTX/BwhmqtTNuVOomQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny80YjI2MTctYTkyNi00YTNiLTliODAt MDI1ODk2MjIzZDk3LzEvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny80YjI2MTctYTkyNi00YTNiLTliODAtMDI1ODk2MjIzZDk3 LzEvcngxeHUxdjFMQk5mOEhDR2FxMU0yNVU2aVpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4xrttfE BgQx+49FzPQCvs/mXnVmu/IvxBslZWJWgPjK3ojZNkKUucLH2pVSWcCGLaQ+MZLs UVs0YfWANWGHq8PsR6LwKaKJRCnDItNt1xM7rMSs1cEkBqRVLQbdlMnUkd7Vgetg hSpvvOFSt2YuOM++9LYg54VevdJUUql2/bd9JB0gHJds7nqW8+PlLpMy2sSHTePk Mj76UpliK+IP940URm0kkOAMFW/vxjLAS5RVMdPLBBFDf5Qlaf849Bqn8Lfnkton uYdqIofQSU30WcWO/y7lhaE7pw77ciGVy4iJDyO/zw/qlLV4q67WC2MqIWm6sAf/ b80Z7H4bnSqhvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:49 2025 by rpki-client