This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json) Hash identifier: 6o2yzHBnef4T8oGl2t/HCQRQ9sk39WgBlfLN77ENR7I= Subject key identifier: 58:A1:9A:92:38:A0:48:D9:73:FF:71:21:7A:EA:50:AA:3E:E0:38:AC Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6 Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6 Certificate serial: 019AF1643B4A6318D4050A2524009DA88A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft Manifest number: 0538 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: F1yLybxFuOap4T4ax4p+lIJASBM0gre8KG/+MI3x1PM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3b:4a:63:18:d4:05:0a:25:24:00:9d:a8:8a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=58a19a9238a048d973ff71217aea50aa3ee038ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:19:09:33:92:d4:57:5b:03:2b:45:7c:d7:a7: 79:85:3b:f9:16:47:74:0b:68:3a:72:79:6f:db:a8: af:10:81:41:88:ee:43:26:27:d6:5f:c3:01:b4:36: a1:b3:e3:61:7c:ae:ba:6a:06:af:51:56:8d:f3:a9: a6:7c:20:92:3d:83:84:dd:03:47:86:49:75:22:4f: 75:f7:c2:d6:f6:3f:f1:fb:d6:33:0a:f0:13:d2:68: ad:92:85:89:30:55:4d:6e:1d:67:d0:19:9c:b0:7c: cb:17:cd:48:25:84:0b:9c:86:6b:c7:85:16:ff:58: 54:d8:ca:cd:aa:a9:4f:61:2c:40:0f:e2:90:74:1e: c9:e9:9d:cb:85:b2:2c:48:0b:d3:25:22:76:f7:c5: 63:5c:55:38:ea:f8:69:67:04:7d:8f:fb:11:cb:57: 6d:21:0f:44:68:ff:9d:41:d0:1a:59:de:21:c0:01: ad:74:07:db:8f:e7:31:b0:f2:96:01:1f:db:cd:74: ee:44:43:f5:10:01:ad:28:33:35:39:99:14:81:cc: e1:7b:d8:d5:8f:33:64:f2:16:db:7c:d3:b2:03:ab: 36:fe:9a:55:59:75:e7:f0:09:36:2e:57:1c:38:f9: 57:38:33:93:0b:80:63:b7:31:fe:01:ff:a0:41:66: 89:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:9A:92:38:A0:48:D9:73:FF:71:21:7A:EA:50:AA:3E:E0:38:AC X509v3 Authority Key Identifier: keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9d:a6:11:18:72:a1:b3:89:98:57:bf:3d:6c:17:7a:7d:11: 2e:2b:69:e3:ea:6b:74:c6:3d:86:d5:3f:43:d7:54:96:86:af: 74:0e:4c:43:10:ec:45:2a:6f:e1:2a:89:cf:06:95:33:1a:db: 42:e9:7d:b3:fc:d6:5e:c5:f2:00:6c:26:01:88:28:a3:53:2a: 57:ce:84:32:a2:ac:4b:c1:28:ad:51:d1:fa:92:0e:cc:01:99: fb:35:d9:8a:de:7a:43:c6:81:09:62:bb:f6:40:a2:a5:86:4e: 75:a7:35:9e:56:86:45:2d:fd:4c:cf:4c:d9:81:f5:c5:52:a6: 9f:0b:16:01:30:cf:ca:eb:28:ed:44:d4:cb:3f:43:42:ef:51: d6:d9:d4:4e:7c:25:f8:79:2b:07:7f:42:c0:2e:d3:ad:47:c6: be:a1:75:a1:4f:65:b5:e3:fd:63:9e:dd:ce:f7:20:d1:8c:69: 94:dc:ac:e3:97:93:0c:30:8f:f6:6b:f3:0b:c6:ac:44:bb:56: 35:7a:d8:65:d4:35:b6:25:62:ca:14:59:a2:89:c7:28:c7:1e: c1:9e:b3:fb:05:90:7a:d3:7b:bf:54:36:db:ed:d8:f9:91:b1: bf:f5:01:de:cc:23:46:d6:a4:67:2b:16:99:76:a2:0f:32:0b: e5:3c:0c:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDtKYxjUBQolJACdqIqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2ExMjM1NDZmZTUxYTllNGJlZGY4M2VlZTAzNzUyYmQ5 NjM5ZDYwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD Eyg1OGExOWE5MjM4YTA0OGQ5NzNmZjcxMjE3YWVhNTBhYTNlZTAzOGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BkJM5LUV1sDK0V816d5hTv5Fkd0 C2g6cnlv26ivEIFBiO5DJifWX8MBtDahs+NhfK66agavUVaN86mmfCCSPYOE3QNH hkl1Ik9198LW9j/x+9YzCvAT0mitkoWJMFVNbh1n0BmcsHzLF81IJYQLnIZrx4UW /1hU2MrNqqlPYSxAD+KQdB7J6Z3LhbIsSAvTJSJ298VjXFU46vhpZwR9j/sRy1dt IQ9EaP+dQdAaWd4hwAGtdAfbj+cxsPKWAR/bzXTuREP1EAGtKDM1OZkUgczhe9jV jzNk8hbbfNOyA6s2/ppVWXXn8Ak2LlccOPlXODOTC4BjtzH+Af+gQWaJmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFihmpI4oEjZc/9xIXrqUKo+4DisMB8GA1UdIwQY MBaAFF96EjVG/lGp5L7fg+7gN1K9ljnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZGUyMzgtOGQwYi00MGZmLWI1Njkt YjJmZjY4MWRhNmJiLzEvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wZGUyMzgtOGQwYi00MGZmLWI1NjktYjJmZjY4MWRhNmJi LzEvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARp2mERhy obOJmFe/PWwXen0RLitp4+prdMY9htU/Q9dUloavdA5MQxDsRSpv4SqJzwaVMxrb Qul9s/zWXsXyAGwmAYgoo1MqV86EMqKsS8EorVHR+pIOzAGZ+zXZit56Q8aBCWK7 9kCipYZOdac1nlaGRS39TM9M2YH1xVKmnwsWATDPyuso7UTUyz9DQu9R1tnUTnwl +HkrB39CwC7TrUfGvqF1oU9lteP9Y57dzvcg0YxplNys45eTDDCP9mvzC8asRLtW NXrYZdQ1tiViyhRZoonHKMcewZ6z+wWQetN7v1Q22+3Y+ZGxv/UB3swjRtakZysW mXaiDzIL5TwMTA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:39 2025 by rpki-client