This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft File: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft (raw, json) Hash identifier: CQ6NnxRT5LacGDN8TvYQDpUtLY8+riOhsEqLZRfHn1w= Subject key identifier: 6C:97:21:28:4B:D3:93:48:62:11:7E:36:79:06:CD:B0:64:9D:9A:CF Authority key identifier: 53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 Certificate issuer: /CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Certificate serial: 019B3A8FC5879E2E8C880DB7B5D3F26C301F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft Manifest number: 0C93 Signing time: Sat 20 Dec 2025 07:00:59 +0000 Manifest this update: Sat 20 Dec 2025 07:00:59 +0000 Manifest next update: Sun 21 Dec 2025 07:00:59 +0000 Files and hashes: 1: Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl (hash: hJBUy2X2GBEQ33mUt08cHnJXzM7DgQJ7gd4pW7FC6WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:c5:87:9e:2e:8c:88:0d:b7:b5:d3:f2:6c:30:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=531edb2554d25d1c10d8714e81d36cc295d96bf9 Validity Not Before: Dec 20 07:00:59 2025 GMT Not After : Dec 21 07:00:59 2025 GMT Subject: CN=6c9721284bd3934862117e367906cdb0649d9acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:51:dc:f5:2a:32:75:79:a5:71:82:4a:ea:b0: 8d:13:b1:ae:b6:6f:75:13:a8:b4:55:58:83:41:f2: ad:a1:b2:5f:0d:f3:6e:a1:37:e3:02:4c:fa:6c:0b: 2a:90:c4:67:c8:2c:98:ca:45:34:7d:e0:83:6d:6c: 83:e2:05:bb:00:1c:67:de:9d:87:59:23:29:a6:2e: 17:ab:ab:bf:78:63:31:be:1b:e3:27:ac:30:07:b5: cb:46:eb:a3:16:06:ab:4c:4e:10:eb:d3:70:36:31: 11:26:cb:e9:3b:57:7e:8a:66:c8:52:57:50:48:2f: 26:ac:c4:41:33:96:a3:08:21:e4:7d:b9:2f:99:30: 66:7d:15:f4:50:f9:4d:b2:5d:5f:35:51:8f:a9:a7: 32:82:1e:e1:15:4d:60:71:9f:ac:d6:a3:93:85:ab: 7b:d5:30:71:3a:bb:51:a6:92:34:e6:75:1a:06:91: 7c:5f:a2:a2:31:1e:7c:a6:b7:31:80:30:d0:d3:24: 22:7b:b1:4f:58:31:13:00:26:7d:17:8a:ce:38:87: b0:c2:f9:c6:44:6a:41:6c:e7:9f:1c:2b:ae:e9:67: d0:03:39:5a:82:2f:3a:3f:3a:0c:b3:d5:d8:b9:a2: 4c:4c:42:0d:cc:04:d8:67:7c:d3:01:41:e5:bc:9b: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:97:21:28:4B:D3:93:48:62:11:7E:36:79:06:CD:B0:64:9D:9A:CF X509v3 Authority Key Identifier: keyid:53:1E:DB:25:54:D2:5D:1C:10:D8:71:4E:81:D3:6C:C2:95:D9:6B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c7368-4acc-4a23-80a9-ca3ca3d99e6b/1/Ux7bJVTSXRwQ2HFOgdNswpXZa_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ca:b2:1e:c1:e8:20:de:e2:83:15:a5:87:60:41:1d:4d:89: 1f:56:cc:ca:21:5d:4a:b7:61:60:94:ac:0d:6e:93:93:8a:4c: 85:b2:46:42:96:c3:9a:cb:2f:a4:54:b3:08:2a:25:4f:71:c5: 23:85:73:0e:68:6d:f0:e9:53:60:cd:97:fe:42:06:e9:d3:2e: 13:72:26:14:27:59:2c:d8:eb:f8:c2:7d:3e:fd:28:27:40:df: d6:a7:fa:d7:f6:62:14:c5:74:42:d3:22:0d:60:2c:0d:89:ec: 9e:1d:a4:7b:b8:2e:ad:39:0f:34:0c:1f:0e:96:4f:d0:ad:2c: 5b:84:c1:67:7f:02:c8:8d:9f:c8:a3:45:ad:63:f4:9e:a9:ab: cf:5b:58:c1:e2:ee:d8:fa:4d:bd:e0:49:93:1d:2d:c8:fd:b9: f8:74:ba:2e:d0:73:7e:12:b6:d5:a7:e3:ee:f6:61:c5:b5:47: c8:00:83:68:c0:f6:87:96:ac:38:65:dc:30:db:38:30:87:59: 1d:3a:16:99:6f:24:9b:27:b5:3d:99:15:cc:4a:f9:49:ed:f5: c4:fe:b1:bb:85:ab:64:e4:b8:6e:ba:45:c3:a3:ff:0e:d9:30: 6f:b0:99:17:52:e2:8c:9d:d0:ff:3e:37:aa:10:fc:e3:c4:81: 92:69:be:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j8WHni6MiA23tdPybDAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMWVkYjI1NTRkMjVkMWMxMGQ4NzE0ZTgxZDM2Y2MyOTVk OTZiZjkwHhcNMjUxMjIwMDcwMDU5WhcNMjUxMjIxMDcwMDU5WjAzMTEwLwYDVQQD Eyg2Yzk3MjEyODRiZDM5MzQ4NjIxMTdlMzY3OTA2Y2RiMDY0OWQ5YWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Hc9SoydXmlcYJK6rCNE7Gutm91 E6i0VViDQfKtobJfDfNuoTfjAkz6bAsqkMRnyCyYykU0feCDbWyD4gW7ABxn3p2H WSMppi4Xq6u/eGMxvhvjJ6wwB7XLRuujFgarTE4Q69NwNjERJsvpO1d+imbIUldQ SC8mrMRBM5ajCCHkfbkvmTBmfRX0UPlNsl1fNVGPqacygh7hFU1gcZ+s1qOThat7 1TBxOrtRppI05nUaBpF8X6KiMR58prcxgDDQ0yQie7FPWDETACZ9F4rOOIewwvnG RGpBbOefHCuu6WfQAzlagi86PzoMs9XYuaJMTEINzATYZ3zTAUHlvJumqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyXIShL05NIYhF+NnkGzbBknZrPMB8GA1UdIwQY MBaAFFMe2yVU0l0cENhxToHTbMKV2Wv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTkt Y2EzY2EzZDk5ZTZiLzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82YzczNjgtNGFjYy00YTIzLTgwYTktY2EzY2EzZDk5ZTZi LzEvVXg3YkpWVFNYUndRMkhGT2dkTnN3cFhaYV9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsqyHsHo IN7igxWlh2BBHU2JH1bMyiFdSrdhYJSsDW6Tk4pMhbJGQpbDmssvpFSzCColT3HF I4VzDmht8OlTYM2X/kIG6dMuE3ImFCdZLNjr+MJ9Pv0oJ0Df1qf61/ZiFMV0QtMi DWAsDYnsnh2ke7gurTkPNAwfDpZP0K0sW4TBZ38CyI2fyKNFrWP0nqmrz1tYweLu 2PpNveBJkx0tyP25+HS6LtBzfhK21afj7vZhxbVHyACDaMD2h5asOGXcMNs4MIdZ HToWmW8kmye1PZkVzEr5Se31xP6xu4WrZOS4brpFw6P/Dtkwb7CZF1LijJ3Q/z43 qhD848SBkmm+YQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:00 2025 by rpki-client