This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft File: fXrxi3mJleFLOBNhoGu2aEm36Fo.mft (raw, json) Hash identifier: UagViWlV3pg26f0lQxUL9361nBlAWcWG5HbuZAPMUjE= Subject key identifier: 57:1E:8B:98:D6:2E:32:96:26:A3:21:E9:E6:1A:9A:42:B2:C9:D6:F4 Authority key identifier: 7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A Certificate issuer: /CN=7d7af18b798995e14b381361a06bb66849b7e85a Certificate serial: 019AF1D1A30F1F86D3D05BB43F0154E82AD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft Manifest number: 088C Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: fXrxi3mJleFLOBNhoGu2aEm36Fo.crl (hash: eEq1aAd2kJmjn4HEnqJBcjK41TtyGaKGlFfYwfjq4Ng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a3:0f:1f:86:d3:d0:5b:b4:3f:01:54:e8:2a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d7af18b798995e14b381361a06bb66849b7e85a Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=571e8b98d62e329626a321e9e61a9a42b2c9d6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:27:4a:e8:13:61:ea:46:76:25:b0:4f:77: 21:18:04:7e:65:4b:ce:05:d2:73:27:5e:be:18:4e: 28:83:0b:93:07:a9:1f:da:26:da:66:b2:eb:cd:ba: 52:b1:39:14:c4:e6:bc:72:6c:9b:bf:f9:4b:23:d7: 20:c5:d1:12:28:b1:c7:76:f7:ca:b9:87:42:ad:90: 3a:6a:e3:53:d3:58:28:1c:5f:69:2c:c2:00:3f:e3: 55:b4:ad:1e:fe:f5:ca:02:06:91:df:e5:60:02:7e: f0:28:7a:fe:f3:b6:8c:a3:2c:23:7e:64:ec:5e:18: 99:51:4a:65:d9:c8:63:03:00:39:76:d9:b6:85:cc: f7:33:0d:46:b7:bf:56:5f:d7:53:e0:a2:f9:63:c0: bd:d0:8b:78:51:bf:a1:c0:7b:c0:4c:81:03:e6:2b: 3e:86:ee:f4:41:3a:5a:07:2a:f7:d2:71:70:1c:19: 2a:c4:7a:75:d5:d7:1e:11:4b:1f:fc:4b:cf:5d:f3: 49:a7:d7:d1:ef:c9:bc:a0:34:fd:27:ea:24:6a:e9: 86:9e:31:c4:83:41:85:b9:61:d0:e9:68:e1:d6:4e: 2e:ad:04:af:1e:d2:43:69:2c:0f:2a:7d:16:0a:27: 25:fd:0b:e6:ae:62:a0:8a:51:7b:a5:b6:af:b4:7c: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1E:8B:98:D6:2E:32:96:26:A3:21:E9:E6:1A:9A:42:B2:C9:D6:F4 X509v3 Authority Key Identifier: keyid:7D:7A:F1:8B:79:89:95:E1:4B:38:13:61:A0:6B:B6:68:49:B7:E8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXrxi3mJleFLOBNhoGu2aEm36Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/78697d-b54e-4d7b-a8e0-7c6252c5f45d/1/fXrxi3mJleFLOBNhoGu2aEm36Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:1a:84:0c:5e:ad:0d:58:d3:ab:47:15:24:08:0c:a9:b6:89: 66:3e:50:ff:16:e7:24:ef:2d:73:5d:11:93:d9:ee:5a:fc:f2: 70:e8:51:02:4e:8d:2c:2c:94:ba:3f:4b:7f:93:d3:40:40:8f: 0e:e0:bd:c9:36:5c:66:18:fc:bf:6f:4b:9d:1c:37:5b:87:51: 11:f4:e5:68:2e:4a:ef:8c:e5:d5:f1:8c:ee:66:08:3c:df:16: f7:97:66:cf:7e:03:ec:9c:2d:f2:8d:77:1f:c1:4f:da:d1:e0: 37:2d:b0:b8:3c:df:10:f9:ac:67:4b:f1:95:74:a8:81:f1:07: e7:eb:ac:90:01:b3:db:4f:fd:05:0f:42:e9:aa:ba:fb:a8:12: 9f:bd:02:45:60:be:ea:60:9f:3a:82:c7:a8:af:41:cd:4d:87: 1e:36:bd:43:16:99:d7:84:3a:68:61:d6:85:ee:e0:9d:e4:ce: 9e:68:5e:05:8c:df:30:08:8c:af:8e:06:70:4e:5e:5a:dd:36: a9:7d:42:72:d1:55:e3:1b:6b:fb:08:21:65:12:f6:f2:71:b6: 35:af:47:43:a2:91:3e:a7:ef:5b:ec:30:c4:ca:73:c8:66:52: 65:af:19:d3:0f:0d:d3:84:88:c6:85:de:85:c1:59:06:f8:db: 86:53:a0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aMPH4bT0Fu0PwFU6CrVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkN2FmMThiNzk4OTk1ZTE0YjM4MTM2MWEwNmJiNjY4NDli N2U4NWEwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD Eyg1NzFlOGI5OGQ2MmUzMjk2MjZhMzIxZTllNjFhOWE0MmIyYzlkNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02cnSugTYepGdiWwT3chGAR+ZUvO BdJzJ16+GE4ogwuTB6kf2ibaZrLrzbpSsTkUxOa8cmybv/lLI9cgxdESKLHHdvfK uYdCrZA6auNT01goHF9pLMIAP+NVtK0e/vXKAgaR3+VgAn7wKHr+87aMoywjfmTs XhiZUUpl2chjAwA5dtm2hcz3Mw1Gt79WX9dT4KL5Y8C90It4Ub+hwHvATIED5is+ hu70QTpaByr30nFwHBkqxHp11dceEUsf/EvPXfNJp9fR78m8oDT9J+okaumGnjHE g0GFuWHQ6Wjh1k4urQSvHtJDaSwPKn0WCicl/QvmrmKgilF7pbavtHy7LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcei5jWLjKWJqMh6eYamkKyydb0MB8GA1UdIwQY MBaAFH168Yt5iZXhSzgTYaBrtmhJt+haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83ODY5N2QtYjU0ZS00ZDdiLWE4ZTAt N2M2MjUyYzVmNDVkLzEvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83ODY5N2QtYjU0ZS00ZDdiLWE4ZTAtN2M2MjUyYzVmNDVk LzEvZlhyeGkzbUpsZUZMT0JOaG9HdTJhRW0zNkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxqEDF6t DVjTq0cVJAgMqbaJZj5Q/xbnJO8tc10Rk9nuWvzycOhRAk6NLCyUuj9Lf5PTQECP DuC9yTZcZhj8v29LnRw3W4dREfTlaC5K74zl1fGM7mYIPN8W95dmz34D7Jwt8o13 H8FP2tHgNy2wuDzfEPmsZ0vxlXSogfEH5+uskAGz20/9BQ9C6aq6+6gSn70CRWC+ 6mCfOoLHqK9BzU2HHja9QxaZ14Q6aGHWhe7gneTOnmheBYzfMAiMr44GcE5eWt02 qX1CctFV4xtr+wghZRL28nG2Na9HQ6KRPqfvW+wwxMpzyGZSZa8Z0w8N04SIxoXe hcFZBvjbhlOgZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:33 2025 by rpki-client