This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft File: Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft (raw, json) Hash identifier: sywvhL5acx5yZ5HcsdukKIhVP+kBGFfG6UcwgWccMLc= Subject key identifier: 25:1E:F5:14:4F:1C:B5:F7:93:61:30:53:AB:AD:B4:B1:AA:F7:A5:96 Authority key identifier: 33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79 Certificate issuer: /CN=3318f57af07c4df5985e4a720b80c89b97e90a79 Certificate serial: 019AF08850BD3FF75269AAC095C249D869A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft Manifest number: 0182 Signing time: Fri 05 Dec 2025 22:00:56 +0000 Manifest this update: Fri 05 Dec 2025 22:00:56 +0000 Manifest next update: Sat 06 Dec 2025 22:00:56 +0000 Files and hashes: 1: Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl (hash: Gn6Ihm0uQbc8SVt6JocE1rYc3cH0jdSz5T8NumN16rY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:50:bd:3f:f7:52:69:aa:c0:95:c2:49:d8:69:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3318f57af07c4df5985e4a720b80c89b97e90a79 Validity Not Before: Dec 5 22:00:56 2025 GMT Not After : Dec 6 22:00:56 2025 GMT Subject: CN=251ef5144f1cb5f793613053abadb4b1aaf7a596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a5:d3:b5:0e:97:26:a8:96:2d:00:58:cd:d1: 38:3a:29:44:db:94:68:33:b4:83:50:a5:b0:55:1f: ae:6b:3b:b2:9c:97:e4:dd:e9:16:00:e0:fa:05:35: 93:f8:b6:26:46:2a:61:04:bb:8f:e0:0d:55:aa:a7: 5c:89:8b:1e:00:b9:5c:4d:e9:92:b8:07:a4:83:43: 88:07:ef:06:e2:e3:de:ab:d2:3f:47:38:fb:db:0e: 4e:83:24:f3:7d:b6:df:f7:ef:5a:04:91:25:e8:52: 87:f0:b6:49:09:28:6a:10:78:6f:7c:57:76:ae:ad: f7:4f:fe:d3:0c:11:8c:38:c1:c3:bd:8e:c0:07:5e: 05:37:8d:45:dd:0f:e5:bf:61:0a:84:44:a3:5d:b9: b2:f2:d4:fe:5b:1e:dd:95:c8:be:b3:ad:f9:24:6d: 92:dc:98:a3:07:ee:b5:48:20:ea:ff:56:88:aa:af: a7:65:79:8e:b6:a8:7f:2b:f8:9b:8e:fd:9b:a9:43: 81:54:67:9b:e1:50:d0:ea:84:47:29:0d:de:58:0c: 72:b4:75:1e:20:25:13:18:da:73:3a:f8:46:f7:0c: c5:d2:4d:1a:f5:6f:84:a8:35:06:df:8c:54:0a:d3: e4:4e:79:be:d2:fa:f5:af:0c:b1:4b:f8:02:f3:f4: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1E:F5:14:4F:1C:B5:F7:93:61:30:53:AB:AD:B4:B1:AA:F7:A5:96 X509v3 Authority Key Identifier: keyid:33:18:F5:7A:F0:7C:4D:F5:98:5E:4A:72:0B:80:C8:9B:97:E9:0A:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mxj1evB8TfWYXkpyC4DIm5fpCnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/73c43f-be48-4957-ad38-cd2887b42667/1/Mxj1evB8TfWYXkpyC4DIm5fpCnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:b5:b2:2e:72:c7:40:7d:8d:c4:d9:f0:a7:3d:13:98:32: 8f:cc:14:35:b0:e1:51:f1:1f:56:60:a4:15:cf:9b:0a:3f:f4: 20:67:3a:d8:cf:d0:45:b3:f8:6f:f3:a9:01:f2:1f:ef:23:20: 57:a0:c7:df:57:53:2d:e5:b4:67:fe:46:a3:64:da:ea:3f:96: 8b:8d:fd:3e:ac:e8:2b:bb:cc:2c:20:9e:e7:6f:be:9e:cf:ae: e6:59:3b:87:bc:ad:e8:63:1b:b0:4c:12:e4:3c:97:48:e1:33: a4:61:86:8c:aa:5f:4d:53:ed:26:b9:99:1e:c2:35:08:00:fe: 45:a5:cd:6d:8d:eb:76:c6:08:47:06:93:38:52:ad:16:18:a7: 40:c3:90:03:a8:4d:5e:16:ea:e5:bf:fd:c8:d6:99:75:43:53: aa:d6:e4:fb:dc:c7:6f:a2:97:68:b4:70:b7:53:fd:ed:53:ed: 8b:ed:7f:1a:af:1b:2e:61:aa:01:b0:bb:9b:8b:72:db:29:05: e1:5e:16:fb:55:dd:cd:e1:91:b6:28:f3:80:7c:dd:b7:b4:db: 3d:f2:07:53:e2:fd:c5:bb:60:84:2a:e8:4a:e6:be:2a:63:c7: b3:c2:1f:5f:ea:0a:5e:17:ad:38:4f:df:7e:96:cb:64:af:8c: b0:33:f4:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFC9P/dSaarAlcJJ2GmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMThmNTdhZjA3YzRkZjU5ODVlNGE3MjBiODBjODliOTdl OTBhNzkwHhcNMjUxMjA1MjIwMDU2WhcNMjUxMjA2MjIwMDU2WjAzMTEwLwYDVQQD EygyNTFlZjUxNDRmMWNiNWY3OTM2MTMwNTNhYmFkYjRiMWFhZjdhNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaXTtQ6XJqiWLQBYzdE4OilE25Ro M7SDUKWwVR+uazuynJfk3ekWAOD6BTWT+LYmRiphBLuP4A1VqqdciYseALlcTemS uAekg0OIB+8G4uPeq9I/Rzj72w5OgyTzfbbf9+9aBJEl6FKH8LZJCShqEHhvfFd2 rq33T/7TDBGMOMHDvY7AB14FN41F3Q/lv2EKhESjXbmy8tT+Wx7dlci+s635JG2S 3JijB+61SCDq/1aIqq+nZXmOtqh/K/ibjv2bqUOBVGeb4VDQ6oRHKQ3eWAxytHUe ICUTGNpzOvhG9wzF0k0a9W+EqDUG34xUCtPkTnm+0vr1rwyxS/gC8/RjrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUe9RRPHLX3k2EwU6uttLGq96WWMB8GA1UdIwQY MBaAFDMY9XrwfE31mF5KcguAyJuX6Qp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgt Y2QyODg3YjQyNjY3LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi83M2M0M2YtYmU0OC00OTU3LWFkMzgtY2QyODg3YjQyNjY3 LzEvTXhqMWV2QjhUZldZWGtweUM0REltNWZwQ25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGS1si5y x0B9jcTZ8Kc9E5gyj8wUNbDhUfEfVmCkFc+bCj/0IGc62M/QRbP4b/OpAfIf7yMg V6DH31dTLeW0Z/5Go2Ta6j+Wi439PqzoK7vMLCCe52++ns+u5lk7h7yt6GMbsEwS 5DyXSOEzpGGGjKpfTVPtJrmZHsI1CAD+RaXNbY3rdsYIRwaTOFKtFhinQMOQA6hN Xhbq5b/9yNaZdUNTqtbk+9zHb6KXaLRwt1P97VPti+1/Gq8bLmGqAbC7m4ty2ykF 4V4W+1XdzeGRtijzgHzdt7TbPfIHU+L9xbtghCroSua+KmPHs8IfX+oKXhetOE/f fpbLZK+MsDP0aA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:12 2025 by rpki-client