This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft File: X9-gmGf3f6_At75-PE3iDirEN3A.mft (raw, json) Hash identifier: DGJcB9+JV0A4V/LWDQJC8+xpUIfJe6gc6iB3A5jDuQU= Subject key identifier: 58:2B:00:18:3F:B4:D8:8F:BE:9A:6B:09:AA:E5:B8:D2:2E:A0:97:6B Authority key identifier: 5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70 Certificate issuer: /CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770 Certificate serial: 019AF1D1C68CB06BD729192027198C91A141 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft Manifest number: 7A Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: X9-gmGf3f6_At75-PE3iDirEN3A.crl (hash: xClxQ5gIUEFoTWEtzySqdEXxCcImf9vVet3YNbJre1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c6:8c:b0:6b:d7:29:19:20:27:19:8c:91:a1:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fdfa09867f77fafc0b7be7e3c4de20e2ac43770 Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=582b00183fb4d88fbe9a6b09aae5b8d22ea0976b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:fa:78:b9:94:e3:6f:a5:a0:0d:b6:14:23:b0: 0d:7d:49:e8:6b:90:84:37:42:5b:1b:7f:7f:af:66: e5:c8:61:09:c7:53:14:4f:0a:7c:90:7e:86:39:13: d8:97:55:68:06:1d:f2:69:8f:d8:5e:be:3a:6f:ce: cf:3a:6a:41:87:40:21:34:a0:5c:0b:09:03:e1:12: c4:0c:97:76:b4:42:f4:9b:83:fb:8e:13:bf:ec:a2: f5:39:b5:21:86:21:88:9e:23:26:31:48:68:0e:8e: d7:27:76:08:5b:f1:29:76:c1:5e:dd:be:da:c8:a4: 36:fe:69:49:91:0d:ed:33:5c:e2:2f:f6:bd:ae:b6: 91:68:f6:57:54:aa:6b:0a:a5:18:25:e0:f8:aa:06: 69:95:00:60:aa:0c:3e:6f:e6:83:95:aa:55:2a:5f: 31:cd:c1:dc:4e:7e:8c:4c:03:cb:19:1c:a3:cf:5c: 2d:0f:63:e7:b6:1c:e0:a4:c5:cc:0d:69:b1:aa:cd: 82:ff:77:35:bb:0e:f1:bf:58:63:1f:36:1e:91:36: 9b:30:14:81:ea:42:37:3b:b4:75:ed:aa:e7:00:0e: 16:b1:6a:00:bc:07:91:76:02:04:34:57:97:2d:47: ef:6c:8f:e0:64:4f:28:7c:0c:1d:1d:14:90:2d:90: 3b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2B:00:18:3F:B4:D8:8F:BE:9A:6B:09:AA:E5:B8:D2:2E:A0:97:6B X509v3 Authority Key Identifier: keyid:5F:DF:A0:98:67:F7:7F:AF:C0:B7:BE:7E:3C:4D:E2:0E:2A:C4:37:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X9-gmGf3f6_At75-PE3iDirEN3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/0e363b-ae79-4b0f-94e1-036119348bf1/1/X9-gmGf3f6_At75-PE3iDirEN3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8e:bf:fd:00:4a:01:a9:fe:08:a4:d6:8c:cf:12:7c:03:67: 19:d1:95:45:56:0c:7f:cb:d9:4e:06:3f:49:05:59:b3:44:86: 50:4c:6d:3a:30:f0:5a:86:42:6f:03:ab:39:c1:ee:27:75:54: 7e:45:47:46:cf:d1:69:60:d4:42:c0:bd:3b:46:bd:79:52:a3: 95:bf:9a:1c:2c:27:9b:24:b0:28:8c:c0:db:9a:e7:f7:20:91: 07:62:57:92:34:0b:98:84:dc:3f:e7:f4:56:00:41:29:57:4a: 74:a9:ec:77:92:43:1a:b1:bd:7f:e7:6a:13:c1:15:f1:56:61: 9d:f6:b5:b5:db:38:03:94:54:f4:b4:19:03:46:fa:df:60:53: 89:36:ba:7c:d8:d8:7e:0a:15:c4:bf:ee:94:17:28:6b:f0:5a: de:4d:75:08:af:12:1e:09:00:9c:71:7f:11:80:41:cc:90:95: 2a:c8:45:63:a0:a9:72:c5:a2:7b:40:53:9f:c8:04:cf:9c:f4: f8:f0:47:b4:7b:52:d7:f5:7a:7b:e8:d3:77:4f:4a:cb:55:ed: 54:1a:cb:e9:7b:e2:ef:8a:0d:1b:09:87:58:92:90:b1:63:41: b4:16:38:29:03:23:b4:2f:90:2d:43:7e:05:72:42:05:7b:a3: 8d:8c:89:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0caMsGvXKRkgJxmMkaFBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZGZhMDk4NjdmNzdmYWZjMGI3YmU3ZTNjNGRlMjBlMmFj NDM3NzAwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD Eyg1ODJiMDAxODNmYjRkODhmYmU5YTZiMDlhYWU1YjhkMjJlYTA5NzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Pp4uZTjb6WgDbYUI7ANfUnoa5CE N0JbG39/r2blyGEJx1MUTwp8kH6GORPYl1VoBh3yaY/YXr46b87POmpBh0AhNKBc CwkD4RLEDJd2tEL0m4P7jhO/7KL1ObUhhiGIniMmMUhoDo7XJ3YIW/EpdsFe3b7a yKQ2/mlJkQ3tM1ziL/a9rraRaPZXVKprCqUYJeD4qgZplQBgqgw+b+aDlapVKl8x zcHcTn6MTAPLGRyjz1wtD2PnthzgpMXMDWmxqs2C/3c1uw7xv1hjHzYekTabMBSB 6kI3O7R17arnAA4WsWoAvAeRdgIENFeXLUfvbI/gZE8ofAwdHRSQLZA7nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgrABg/tNiPvpprCarluNIuoJdrMB8GA1UdIwQY MBaAFF/foJhn93+vwLe+fjxN4g4qxDdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDktZ21HZjNmNl9BdDc1LVBFM2lEaXJFTjNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8wZTM2M2ItYWU3OS00YjBmLTk0ZTEt MDM2MTE5MzQ4YmYxLzEvWDktZ21HZjNmNl9BdDc1LVBFM2lEaXJFTjNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8wZTM2M2ItYWU3OS00YjBmLTk0ZTEtMDM2MTE5MzQ4YmYx LzEvWDktZ21HZjNmNl9BdDc1LVBFM2lEaXJFTjNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF46//QBK Aan+CKTWjM8SfANnGdGVRVYMf8vZTgY/SQVZs0SGUExtOjDwWoZCbwOrOcHuJ3VU fkVHRs/RaWDUQsC9O0a9eVKjlb+aHCwnmySwKIzA25rn9yCRB2JXkjQLmITcP+f0 VgBBKVdKdKnsd5JDGrG9f+dqE8EV8VZhnfa1tds4A5RU9LQZA0b632BTiTa6fNjY fgoVxL/ulBcoa/Ba3k11CK8SHgkAnHF/EYBBzJCVKshFY6CpcsWie0BTn8gEz5z0 +PBHtHtS1/V6e+jTd09Ky1XtVBrL6Xvi74oNGwmHWJKQsWNBtBY4KQMjtC+QLUN+ BXJCBXujjYyJBg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:44 2025 by rpki-client