This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json) Hash identifier: OHgYLyd+t2phFDxy+TbxxFkesVzfyM4eB+RipneqfuM= Subject key identifier: C6:27:B0:4B:FC:D5:A8:AE:19:F1:BD:BA:93:D0:BB:C0:F8:9F:8F:BE Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be Certificate serial: 019AF12CBA6EFBAA8B5726F670995A47EC8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:31 +0000 Manifest this update: Sat 06 Dec 2025 01:00:31 +0000 Manifest next update: Sun 07 Dec 2025 01:00:31 +0000 Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: tA9Ntu+Bk6UKQpTA9vdnBBEIhULTs6v9tIzx++R/3GE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ba:6e:fb:aa:8b:57:26:f6:70:99:5a:47:ec:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be Validity Not Before: Dec 6 01:00:31 2025 GMT Not After : Dec 7 01:00:31 2025 GMT Subject: CN=c627b04bfcd5a8ae19f1bdba93d0bbc0f89f8fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:38:42:f4:bf:03:d1:61:7b:10:1e:a5:49: d3:b6:08:3f:cb:bf:a8:53:aa:3f:73:35:83:af:74: c4:b1:d2:53:ee:8d:5e:85:22:71:bb:28:52:6c:30: 36:42:43:2e:96:f2:28:e9:55:fb:ab:9b:11:32:67: 12:36:ca:85:2e:73:2c:dc:93:58:57:dc:16:be:94: 1f:79:be:23:14:75:b8:f6:bb:b5:a3:0d:2e:66:78: 64:a9:2c:fb:08:55:3a:2a:24:15:92:f7:39:67:17: c3:cc:44:ca:49:cf:61:eb:c0:10:a5:a1:4c:59:56: c6:fa:3f:cd:72:c9:ad:03:7c:09:b6:1d:13:a0:45: ac:19:c2:3b:bc:a5:37:e7:da:98:71:93:9d:3e:29: f7:47:d9:01:12:8c:d4:cc:44:88:a2:f8:b1:4e:8e: c3:6a:11:df:bc:b9:75:37:0f:41:78:59:86:fd:e9: e3:53:e2:a1:3f:b0:f0:47:c0:43:ca:d9:cc:d9:b5: 93:5c:b4:3f:5d:93:ea:08:4c:63:2c:1e:a0:f9:55: 28:d0:ec:f5:ad:fe:04:3b:b5:2b:ef:ee:d9:23:05: 7d:23:20:99:0c:e8:b1:94:b5:09:54:98:99:88:1e: 5e:f8:f6:b2:fa:d4:9c:08:f4:8c:65:f4:a9:cf:09: 76:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:B0:4B:FC:D5:A8:AE:19:F1:BD:BA:93:D0:BB:C0:F8:9F:8F:BE X509v3 Authority Key Identifier: keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1d:3b:48:d1:fc:94:f9:38:ca:cb:b1:9b:cc:e2:35:b4:73: b3:c3:62:61:06:66:2c:00:76:d7:b5:78:f9:41:ea:a0:64:a5: 2f:01:ce:0b:bc:85:84:f8:e6:ca:a7:25:76:3f:db:3f:ed:10: 30:46:ff:02:ca:9c:ff:94:20:b5:c8:57:f5:e9:ec:cc:0d:9d: d3:9b:6b:32:4d:35:e9:95:6e:db:21:cd:77:7e:63:6b:bb:a8: e0:d3:9d:ed:21:ff:8a:ff:42:81:d2:9a:e1:01:c0:e1:34:42: be:83:b6:db:ab:df:52:ef:70:58:a1:1e:d3:3e:f7:5c:0e:2b: cb:af:be:31:12:9e:b0:9a:f0:63:d0:fc:d6:92:ca:ae:d3:f2: 8f:33:40:c5:00:49:bc:72:3a:e1:0f:f6:4f:1a:a9:4b:45:c1: fd:e0:3d:d4:34:1c:1f:f5:e0:58:01:c2:e0:b1:56:54:5b:5d: 49:3f:f9:48:5c:e1:39:09:54:cd:fc:f6:cd:1d:aa:66:9f:d8: 29:b3:98:15:2d:5f:78:de:88:81:f1:d4:22:06:7b:72:62:72: 25:c7:d0:62:00:59:c7:2e:07:8a:e6:f5:b0:f6:62:65:dc:fa: 87:a8:c3:c6:ca:e7:38:54:e7:9a:ef:5f:2f:b0:7c:13:5d:e6: e0:31:87:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLpu+6qLVyb2cJlaR+yOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjVjMTY3OTVlZDg4MjU1MDBiYWY1N2E3YTcwNWI1MTM3 NWE4YmUwHhcNMjUxMjA2MDEwMDMxWhcNMjUxMjA3MDEwMDMxWjAzMTEwLwYDVQQD EyhjNjI3YjA0YmZjZDVhOGFlMTlmMWJkYmE5M2QwYmJjMGY4OWY4ZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtA4QvS/A9FhexAepUnTtgg/y7+o U6o/czWDr3TEsdJT7o1ehSJxuyhSbDA2QkMulvIo6VX7q5sRMmcSNsqFLnMs3JNY V9wWvpQfeb4jFHW49ru1ow0uZnhkqSz7CFU6KiQVkvc5ZxfDzETKSc9h68AQpaFM WVbG+j/NcsmtA3wJth0ToEWsGcI7vKU359qYcZOdPin3R9kBEozUzESIovixTo7D ahHfvLl1Nw9BeFmG/enjU+KhP7DwR8BDytnM2bWTXLQ/XZPqCExjLB6g+VUo0Oz1 rf4EO7Ur7+7ZIwV9IyCZDOixlLUJVJiZiB5e+Pay+tScCPSMZfSpzwl2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYnsEv81aiuGfG9upPQu8D4n4++MB8GA1UdIwQY MBaAFET1wWeV7YglUAuvV6enBbUTdai+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUt NDQ5OWI2MDcyYWYyLzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUtNDQ5OWI2MDcyYWYy LzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHR07SNH8 lPk4ysuxm8ziNbRzs8NiYQZmLAB217V4+UHqoGSlLwHOC7yFhPjmyqcldj/bP+0Q MEb/Asqc/5QgtchX9enszA2d05trMk016ZVu2yHNd35ja7uo4NOd7SH/iv9CgdKa 4QHA4TRCvoO226vfUu9wWKEe0z73XA4ry6++MRKesJrwY9D81pLKrtPyjzNAxQBJ vHI64Q/2TxqpS0XB/eA91DQcH/XgWAHC4LFWVFtdST/5SFzhOQlUzfz2zR2qZp/Y KbOYFS1feN6IgfHUIgZ7cmJyJcfQYgBZxy4Hiub1sPZiZdz6h6jDxsrnOFTnmu9f L7B8E13m4DGH4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:33 2025 by rpki-client