This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft File: X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft (raw, json) Hash identifier: PsJ8RMMRLdqNVLsZk4I/T36OCZRCxT0Iix4e5mihdvE= Subject key identifier: 7E:87:82:CB:D3:F9:84:CB:49:C3:ED:2F:35:F8:A8:B0:A5:8C:83:8F Authority key identifier: 5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6 Certificate issuer: /CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6 Certificate serial: 019B330D5E92675E973ED4B2921CC9E06E99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft Manifest number: 055A Signing time: Thu 18 Dec 2025 20:01:12 +0000 Manifest this update: Thu 18 Dec 2025 20:01:12 +0000 Manifest next update: Fri 19 Dec 2025 20:01:12 +0000 Files and hashes: 1: X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl (hash: c+zMSKq6m6Rd4orZ48s18GFQdKnoFlzPmLD/65bfBOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:5e:92:67:5e:97:3e:d4:b2:92:1c:c9:e0:6e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7a123546fe51a9e4bedf83eee03752bd9639d6 Validity Not Before: Dec 18 20:01:12 2025 GMT Not After : Dec 19 20:01:12 2025 GMT Subject: CN=7e8782cbd3f984cb49c3ed2f35f8a8b0a58c838f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b5:0f:f1:f5:6e:25:8a:ab:df:0d:5a:ea:04: 1a:6d:9b:6d:d7:7d:50:ba:8d:48:54:80:7c:e6:fd: 57:08:94:aa:c6:5d:c1:0d:67:97:23:6d:75:7d:5a: 77:84:69:a1:6e:e7:59:29:6a:f6:9d:29:e1:06:00: 11:ec:9f:57:56:ec:f6:48:fa:6c:4c:fc:09:06:bb: a0:c3:59:7a:2f:40:bb:39:f0:1e:f1:19:b7:06:21: 5d:65:36:d8:de:b0:be:93:fe:ae:fd:6e:b3:79:6c: 8e:05:a5:5e:e2:8e:2c:23:1b:84:24:12:92:1f:98: d0:e9:8c:d9:ea:38:3e:e1:67:b6:f6:e1:4a:00:ff: 46:40:de:db:56:97:3b:f2:29:6f:c3:1d:dc:a9:a5: 38:85:01:74:2d:05:89:82:a8:ce:73:5c:c1:a4:7b: e3:0b:ec:74:d2:40:37:b8:a0:8b:82:49:b8:20:49: e3:18:53:fd:a5:b6:64:da:04:2e:3d:df:b7:21:40: 1d:06:df:03:dc:0a:09:bf:4f:49:d0:46:aa:ec:f5: 05:43:5e:17:2d:83:46:c4:d9:67:ef:f6:e5:5c:fd: 03:60:70:02:4c:a2:8f:76:73:04:c0:fe:ff:97:04: 49:35:95:fd:b4:d2:fd:05:60:9c:7d:11:f1:e5:a9: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:87:82:CB:D3:F9:84:CB:49:C3:ED:2F:35:F8:A8:B0:A5:8C:83:8F X509v3 Authority Key Identifier: keyid:5F:7A:12:35:46:FE:51:A9:E4:BE:DF:83:EE:E0:37:52:BD:96:39:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3oSNUb-Uankvt-D7uA3Ur2WOdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0de238-8d0b-40ff-b569-b2ff681da6bb/1/X3oSNUb-Uankvt-D7uA3Ur2WOdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4f:dc:c0:41:e3:a1:4f:27:1d:1a:e7:93:cf:46:59:9c:6f: 92:5b:67:6b:69:ae:7f:70:dd:e0:a7:ce:50:af:c1:89:8f:f4: 06:ad:fa:ba:4e:ae:ee:9a:55:ee:c6:0d:f7:9e:34:5f:b5:24: 6e:67:99:71:53:f7:b3:25:53:95:d9:6c:28:a9:32:b0:de:24: 67:93:75:7f:01:87:eb:a8:d8:bb:50:93:70:2b:39:6a:52:da: 15:94:dd:59:f9:c1:69:4d:8a:a7:c6:93:03:ce:0a:14:97:c2: 3c:0e:f9:36:a7:29:29:49:ff:89:00:8e:6b:77:70:f3:25:eb: f2:77:29:41:66:de:f4:27:f5:5d:35:a1:2c:ed:3e:60:c9:20: 8b:c5:a4:23:88:52:e9:9d:82:7e:b2:00:27:fc:49:84:bd:d4: 40:ad:cc:c6:6d:39:85:4c:4a:35:1e:fa:43:54:c6:a5:8d:ec: 37:14:27:d4:a3:d5:fc:4f:ed:7e:f5:6a:7a:a6:5d:08:19:de: 71:ef:4a:5e:fe:e5:9f:36:1c:94:3a:d5:c8:eb:6e:f6:3b:91: 02:fb:78:80:3e:12:c8:b4:88:09:2c:82:84:59:88:c7:a4:83: 7d:af:51:0d:00:9a:b1:84:8a:43:ba:94:32:90:5c:49:70:79: 80:15:0d:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDV6SZ16XPtSykhzJ4G6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2ExMjM1NDZmZTUxYTllNGJlZGY4M2VlZTAzNzUyYmQ5 NjM5ZDYwHhcNMjUxMjE4MjAwMTEyWhcNMjUxMjE5MjAwMTEyWjAzMTEwLwYDVQQD Eyg3ZTg3ODJjYmQzZjk4NGNiNDljM2VkMmYzNWY4YThiMGE1OGM4MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprUP8fVuJYqr3w1a6gQabZtt131Q uo1IVIB85v1XCJSqxl3BDWeXI211fVp3hGmhbudZKWr2nSnhBgAR7J9XVuz2SPps TPwJBrugw1l6L0C7OfAe8Rm3BiFdZTbY3rC+k/6u/W6zeWyOBaVe4o4sIxuEJBKS H5jQ6YzZ6jg+4We29uFKAP9GQN7bVpc78ilvwx3cqaU4hQF0LQWJgqjOc1zBpHvj C+x00kA3uKCLgkm4IEnjGFP9pbZk2gQuPd+3IUAdBt8D3AoJv09J0Eaq7PUFQ14X LYNGxNln7/blXP0DYHACTKKPdnMEwP7/lwRJNZX9tNL9BWCcfRHx5alViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6HgsvT+YTLScPtLzX4qLCljIOPMB8GA1UdIwQY MBaAFF96EjVG/lGp5L7fg+7gN1K9ljnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8wZGUyMzgtOGQwYi00MGZmLWI1Njkt YjJmZjY4MWRhNmJiLzEvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8wZGUyMzgtOGQwYi00MGZmLWI1NjktYjJmZjY4MWRhNmJi LzEvWDNvU05VYi1VYW5rdnQtRDd1QTNVcjJXT2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk/cwEHj oU8nHRrnk89GWZxvkltna2muf3Dd4KfOUK/BiY/0Bq36uk6u7ppV7sYN9540X7Uk bmeZcVP3syVTldlsKKkysN4kZ5N1fwGH66jYu1CTcCs5alLaFZTdWfnBaU2Kp8aT A84KFJfCPA75NqcpKUn/iQCOa3dw8yXr8ncpQWbe9Cf1XTWhLO0+YMkgi8WkI4hS 6Z2CfrIAJ/xJhL3UQK3Mxm05hUxKNR76Q1TGpY3sNxQn1KPV/E/tfvVqeqZdCBne ce9KXv7lnzYclDrVyOtu9juRAvt4gD4SyLSICSyChFmIx6SDfa9RDQCasYSKQ7qU MpBcSXB5gBUNCA== -----END CERTIFICATE-----Generated at Fri Dec 19 05:46:45 2025 by rpki-client