This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft File: xrjeVShQrOhfyMDhaFLMc98QFp0.mft (raw, json) Hash identifier: E2OqsrwFv7lsZ8Fxw3gRDL1/6RM/JhUgeQIIOkTzDow= Subject key identifier: 00:AF:E9:2B:6A:B7:4C:70:E2:FA:09:06:63:75:61:1C:A5:8A:D9:D7 Authority key identifier: C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D Certificate issuer: /CN=c6b8de552850ace85fc8c0e16852cc73df10169d Certificate serial: 019AF1D1C8AEF7327492BD6893C2743807B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft Manifest number: 0937 Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: xrjeVShQrOhfyMDhaFLMc98QFp0.crl (hash: uN/vjAm6Wg7voxOEr3muF6jc729M8OlHrV2zV7CvOLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c8:ae:f7:32:74:92:bd:68:93:c2:74:38:07:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6b8de552850ace85fc8c0e16852cc73df10169d Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=00afe92b6ab74c70e2fa09066375611ca58ad9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:68:a7:cc:f2:42:e4:79:b0:89:a5:51:ca:42: e6:40:4f:31:35:2e:e1:85:f2:b2:3c:56:a6:c3:39: 62:64:41:01:38:53:5f:b5:25:2c:7d:af:5e:14:4f: 5b:68:f4:3f:06:bf:5c:5c:b9:52:a2:78:5c:03:98: 1a:cc:32:54:30:19:ee:b2:de:be:63:d7:96:2d:c6: 71:6d:dc:a1:68:9a:69:6d:af:a1:1a:f7:88:c7:01: ec:c3:63:a9:52:06:d3:a2:1f:f3:37:b8:3f:24:cf: bb:6e:90:60:49:ce:7c:2c:2a:80:7f:a9:5d:73:dd: bc:78:c0:a6:a0:78:d9:42:5b:b3:3f:fb:e5:85:88: 86:18:45:47:9f:91:e2:52:41:3c:f9:e1:c3:19:ed: 5b:4e:4d:ae:71:80:e4:3d:00:06:b5:49:2f:0f:59: 46:40:87:24:19:e3:29:a7:68:56:0d:c3:31:88:52: 89:94:ba:39:0c:ce:b8:0b:a0:42:bf:8a:16:f7:79: ce:90:08:71:44:4b:ae:47:47:49:a0:89:8f:0a:02: ba:5c:3a:7c:5f:8c:f1:0a:08:d4:89:a9:fd:09:6b: 93:27:59:51:48:a9:8b:14:a5:6b:07:b2:9f:0e:9b: 05:d5:36:b5:5e:d5:e8:cc:42:2d:c8:d0:cd:71:c8: 3f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AF:E9:2B:6A:B7:4C:70:E2:FA:09:06:63:75:61:1C:A5:8A:D9:D7 X509v3 Authority Key Identifier: keyid:C6:B8:DE:55:28:50:AC:E8:5F:C8:C0:E1:68:52:CC:73:DF:10:16:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrjeVShQrOhfyMDhaFLMc98QFp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f5d91-92ba-402e-be1c-d240d3611058/1/xrjeVShQrOhfyMDhaFLMc98QFp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a8:a2:c3:a1:7b:5e:66:5e:76:94:e2:7c:7b:b0:e4:98:d8: 43:74:e1:26:d5:87:c8:96:87:1d:c8:56:6d:de:34:35:d7:dd: 3d:da:6c:2d:43:5c:1a:58:57:8f:0f:97:f8:3a:80:91:13:21: ff:5d:f8:93:60:65:4f:d8:e6:01:55:52:cc:1f:40:b3:67:73: 7e:ee:26:6e:8f:ac:45:b8:83:df:95:af:dc:44:16:9a:cc:97: 44:67:e7:09:a7:dc:1c:90:8e:84:da:00:33:b9:3b:ec:93:66: 45:40:81:b5:fd:c5:45:1e:95:59:9c:ab:66:43:50:fa:19:5b: 3a:d4:31:eb:88:87:be:25:d7:04:9e:84:4b:15:e2:42:06:59: 21:55:d6:87:31:39:cf:5a:39:cc:2f:df:b5:75:9a:7f:28:90: e0:a1:e5:b7:46:79:f2:92:f3:f1:28:27:91:88:3e:fd:27:ad: e8:88:94:97:40:6f:b2:61:ac:40:72:ff:6f:db:8d:21:7a:f6: 39:49:ea:60:a7:46:21:5b:e0:7f:8d:90:41:b9:4a:c0:35:3c: 7e:dd:89:b8:ec:2c:32:87:65:db:d8:67:55:a7:e3:85:90:02: ec:70:aa:08:dc:ff:bf:2a:a4:37:0f:3e:e2:26:b4:f4:c1:a6: e1:49:08:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ciu9zJ0kr1ok8J0OAexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YjhkZTU1Mjg1MGFjZTg1ZmM4YzBlMTY4NTJjYzczZGYx MDE2OWQwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD EygwMGFmZTkyYjZhYjc0YzcwZTJmYTA5MDY2Mzc1NjExY2E1OGFkOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGinzPJC5HmwiaVRykLmQE8xNS7h hfKyPFamwzliZEEBOFNftSUsfa9eFE9baPQ/Br9cXLlSonhcA5gazDJUMBnust6+ Y9eWLcZxbdyhaJppba+hGveIxwHsw2OpUgbToh/zN7g/JM+7bpBgSc58LCqAf6ld c928eMCmoHjZQluzP/vlhYiGGEVHn5HiUkE8+eHDGe1bTk2ucYDkPQAGtUkvD1lG QIckGeMpp2hWDcMxiFKJlLo5DM64C6BCv4oW93nOkAhxREuuR0dJoImPCgK6XDp8 X4zxCgjUian9CWuTJ1lRSKmLFKVrB7KfDpsF1Ta1XtXozEItyNDNccg/UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACv6Stqt0xw4voJBmN1YRylitnXMB8GA1UdIwQY MBaAFMa43lUoUKzoX8jA4WhSzHPfEBadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMt ZDI0MGQzNjExMDU4LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yZjVkOTEtOTJiYS00MDJlLWJlMWMtZDI0MGQzNjExMDU4 LzEveHJqZVZTaFFyT2hmeU1EaGFGTE1jOThRRnAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqiiw6F7 XmZedpTifHuw5JjYQ3ThJtWHyJaHHchWbd40NdfdPdpsLUNcGlhXjw+X+DqAkRMh /134k2BlT9jmAVVSzB9As2dzfu4mbo+sRbiD35Wv3EQWmsyXRGfnCafcHJCOhNoA M7k77JNmRUCBtf3FRR6VWZyrZkNQ+hlbOtQx64iHviXXBJ6ESxXiQgZZIVXWhzE5 z1o5zC/ftXWafyiQ4KHlt0Z58pLz8SgnkYg+/Set6IiUl0BvsmGsQHL/b9uNIXr2 OUnqYKdGIVvgf42QQblKwDU8ft2JuOwsModl29hnVafjhZAC7HCqCNz/vyqkNw8+ 4ia09MGm4UkI8w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:55 2025 by rpki-client