This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft File: X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft (raw, json) Hash identifier: v6R9WRIz+VWnJUIwseTj4S00Iquhy0CDy/glkFS2ivI= Subject key identifier: 80:B7:26:1E:42:3D:5E:8A:18:B8:DB:7E:B9:C6:6B:3F:DB:F6:E7:D6 Authority key identifier: 5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D Certificate issuer: /CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d Certificate serial: 019AF5E64DE14D7ED82944685B28B24459CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft Manifest number: 0211 Signing time: Sat 06 Dec 2025 23:01:42 +0000 Manifest this update: Sat 06 Dec 2025 23:01:42 +0000 Manifest next update: Sun 07 Dec 2025 23:01:42 +0000 Files and hashes: 1: X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl (hash: sphbK6xGgXUw6p/4Z0ROUqia/hHtHsklahYRD8mwf6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:4d:e1:4d:7e:d8:29:44:68:5b:28:b2:44:59:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d Validity Not Before: Dec 6 23:01:42 2025 GMT Not After : Dec 7 23:01:42 2025 GMT Subject: CN=80b7261e423d5e8a18b8db7eb9c66b3fdbf6e7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e5:e0:20:8b:95:a1:be:75:d1:44:9e:d2:b9: ac:06:16:38:2c:d5:d3:c7:35:c8:9a:cf:8d:2c:a4: 77:d8:88:68:c5:5e:9b:09:cc:7d:ef:20:0b:90:80: 35:5c:9d:76:2f:3e:70:ce:2a:cf:01:e7:64:57:80: d0:23:d8:3b:d5:c9:8c:a0:00:96:e9:50:c2:59:cd: ea:ea:35:72:03:ad:39:ca:b8:ab:9b:37:6f:88:f4: 0d:ac:f9:bd:a2:38:5c:eb:1f:37:54:77:93:de:58: 86:d3:3c:24:8f:6e:f1:ad:7d:f1:b8:44:6b:b4:40: 65:fe:e1:ca:93:f7:ee:2b:3f:d5:ba:1a:62:5b:e9: 31:71:1f:8f:7e:c1:ff:49:61:1a:4a:bd:0f:42:90: c7:78:a0:f5:f0:6f:e8:a2:73:53:bf:c1:71:ab:af: 30:b1:8d:6a:c9:91:d4:c7:ff:f7:5f:a5:eb:52:35: 42:6a:da:a0:14:ed:63:60:8f:d2:88:69:71:85:88: 18:1b:54:12:70:aa:76:c3:38:00:10:82:50:1b:49: 65:e7:00:b4:fa:80:26:a0:4d:8a:84:a0:e6:1c:f4: 02:98:1a:19:f5:2e:1a:ab:27:57:f8:7a:fe:62:de: 76:94:26:fc:42:3c:bd:33:12:28:7b:0c:59:a2:39: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B7:26:1E:42:3D:5E:8A:18:B8:DB:7E:B9:C6:6B:3F:DB:F6:E7:D6 X509v3 Authority Key Identifier: keyid:5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:26:0e:00:37:fc:1d:37:3d:3f:3b:10:04:d6:2f:28:ff:cc: ba:20:86:78:93:17:37:ed:4f:5b:ac:31:2c:f1:08:22:1e:d5: 61:03:bc:d0:97:ad:16:e3:b0:c1:e1:30:c8:dd:23:ce:6d:2f: 29:d3:b7:c9:18:b1:1a:f1:84:b1:ee:25:8d:e8:0e:8c:63:3f: 70:88:78:66:60:fb:62:e6:e1:6a:be:58:da:ab:ef:b4:47:b7: cd:be:67:d9:b9:85:98:2f:49:39:8c:6e:04:ef:c9:7e:df:31: 20:b8:db:cc:04:a7:98:af:ad:3e:4a:5a:4e:7a:2e:b7:5f:b5: f9:8f:c4:df:85:0d:c8:9d:cc:3d:1d:d8:0a:17:7a:56:79:04: 53:0d:59:82:cc:e7:bf:58:11:fb:e6:1b:35:d7:b1:8b:0e:a0: 09:3b:63:6c:2b:07:67:ea:ba:8c:88:a9:d2:03:92:d4:53:8b: 21:75:71:54:59:30:57:77:90:13:2e:9b:f6:c0:ec:3b:81:31: dc:03:1b:cc:c4:1f:62:a4:6c:90:0b:56:f7:49:20:2d:c8:5c: a1:52:82:fc:ce:d4:18:8c:e9:75:30:15:4b:7b:d7:65:73:30: 6c:79:51:b4:11:d9:a3:c8:b0:2c:db:7a:f2:fe:11:10:6f:a1: 56:a2:3d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15k3hTX7YKURoWyiyRFnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDA2MjgyZWMxNGZhMGJjN2Q2NTExZWZjYmM2YWU5ZjFl MDViM2QwHhcNMjUxMjA2MjMwMTQyWhcNMjUxMjA3MjMwMTQyWjAzMTEwLwYDVQQD Eyg4MGI3MjYxZTQyM2Q1ZThhMThiOGRiN2ViOWM2NmIzZmRiZjZlN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+XgIIuVob510USe0rmsBhY4LNXT xzXIms+NLKR32IhoxV6bCcx97yALkIA1XJ12Lz5wzirPAedkV4DQI9g71cmMoACW 6VDCWc3q6jVyA605yrirmzdviPQNrPm9ojhc6x83VHeT3liG0zwkj27xrX3xuERr tEBl/uHKk/fuKz/VuhpiW+kxcR+PfsH/SWEaSr0PQpDHeKD18G/oonNTv8Fxq68w sY1qyZHUx//3X6XrUjVCatqgFO1jYI/SiGlxhYgYG1QScKp2wzgAEIJQG0ll5wC0 +oAmoE2KhKDmHPQCmBoZ9S4aqydX+Hr+Yt52lCb8Qjy9MxIoewxZojnz3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIC3Jh5CPV6KGLjbfrnGaz/b9ufWMB8GA1UdIwQY MBaAFF9AYoLsFPoLx9ZRHvy8aunx4Fs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zOTViMWMtYTdkYS00NDY5LWE0YzUt ZTMwNGZhY2QxZjdhLzEvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8zOTViMWMtYTdkYS00NDY5LWE0YzUtZTMwNGZhY2QxZjdh LzEvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbSYOADf8 HTc9PzsQBNYvKP/MuiCGeJMXN+1PW6wxLPEIIh7VYQO80JetFuOwweEwyN0jzm0v KdO3yRixGvGEse4ljegOjGM/cIh4ZmD7Yubhar5Y2qvvtEe3zb5n2bmFmC9JOYxu BO/Jft8xILjbzASnmK+tPkpaTnout1+1+Y/E34UNyJ3MPR3YChd6VnkEUw1Zgszn v1gR++YbNdexiw6gCTtjbCsHZ+q6jIip0gOS1FOLIXVxVFkwV3eQEy6b9sDsO4Ex 3AMbzMQfYqRskAtW90kgLchcoVKC/M7UGIzpdTAVS3vXZXMwbHlRtBHZo8iwLNt6 8v4REG+hVqI9qw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:11 2025 by rpki-client