This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json) Hash identifier: 8YEvZH/2hZ/UD+XWb6Vu7Nqwkc3OW2Zm5E4QcUM1RMo= Subject key identifier: D9:78:07:97:38:09:CF:A8:FB:24:AB:76:3D:D6:DB:59:1C:1C:20:87 Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Certificate serial: 019AF19AE0179E717461D35F12C68FC1FB88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft Manifest number: 0F11 Signing time: Sat 06 Dec 2025 03:00:50 +0000 Manifest this update: Sat 06 Dec 2025 03:00:50 +0000 Manifest next update: Sun 07 Dec 2025 03:00:50 +0000 Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: p5giJC0dC3qIoULSSy6ME/KJucc3vk87yY33V1zThU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e0:17:9e:71:74:61:d3:5f:12:c6:8f:c1:fb:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Validity Not Before: Dec 6 03:00:50 2025 GMT Not After : Dec 7 03:00:50 2025 GMT Subject: CN=d97807973809cfa8fb24ab763dd6db591c1c2087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:10:54:0e:b0:94:0e:b4:d2:c5:70:f0:68: a8:68:21:27:95:2d:e4:ba:1c:1e:ca:b2:d3:82:a2: f5:7e:79:e6:4c:87:2b:14:41:98:ed:b5:43:7b:41: 5f:6b:d8:ff:fd:37:e3:f5:e6:ed:f4:b3:ee:46:bb: 72:e7:66:fb:25:76:aa:cb:54:68:7c:11:31:9d:ba: 90:3d:b9:49:4e:e2:25:ae:63:92:cd:36:89:86:67: 2b:5b:a3:23:bc:4f:e7:2f:6f:6d:f3:cd:8d:2f:d6: 10:66:7e:58:11:c3:bb:bc:46:ce:c3:32:c0:88:4e: da:c6:96:54:53:18:42:d8:49:4e:51:da:4f:45:84: b6:dd:b7:a9:01:20:c9:85:6d:63:2f:ae:6e:4e:09: 6d:73:95:9e:b7:95:24:17:26:b8:4d:19:45:d1:5f: 16:10:7b:bf:00:b1:eb:2d:91:f1:ff:53:f6:00:7c: 0b:de:33:4d:a2:be:d1:d3:63:76:30:18:0f:b4:28: be:60:de:2c:f1:0c:0c:f5:3c:bd:3b:f7:f9:a3:53: 16:c1:49:b5:50:85:e4:09:09:3d:92:c5:30:c5:9b: 25:15:96:d3:e8:de:9e:a1:78:25:0a:53:a6:c7:22: a7:06:88:96:5f:45:7d:3b:08:85:a6:9e:4f:89:32: 15:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:07:97:38:09:CF:A8:FB:24:AB:76:3D:D6:DB:59:1C:1C:20:87 X509v3 Authority Key Identifier: keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:2d:72:f1:6f:b8:e2:e1:a5:97:c5:4c:6e:3d:8d:c8:6c:b4: 26:b3:42:94:a0:b5:f1:76:80:05:a4:0d:5f:4b:0d:f0:e3:91: 70:24:dd:9b:c6:25:d0:9d:48:3c:b2:c6:ca:d6:9b:b5:aa:37: d0:01:e2:7d:09:63:93:99:70:0a:32:72:c6:77:44:79:4b:12: e3:2a:12:30:53:43:51:24:b9:90:29:25:3c:2f:d0:b9:91:86: e1:fe:ca:86:b1:a5:95:3c:e1:22:cf:1a:97:75:f9:92:7d:ad: f6:65:5e:b2:42:21:1a:19:c5:78:53:97:ec:bb:ac:37:9e:71: 64:09:7d:c7:8d:b9:0f:ff:a4:70:92:b1:41:14:eb:35:fc:7e: 4a:63:86:2a:d9:4b:40:3e:ff:84:6d:48:e3:bb:1a:df:ca:71: f5:de:df:60:9e:4c:eb:89:5b:87:a4:36:15:6f:c7:9e:0c:e0: 9f:5b:fd:a8:7f:7d:b4:02:3d:d3:c0:b1:27:99:fe:bb:cd:60: e0:f3:d3:c2:8e:58:5d:d1:97:ed:50:94:c6:a7:ad:47:26:a9: 58:9b:97:b2:63:6f:86:00:0c:82:0a:94:64:ef:0e:64:bf:aa: ba:0c:a6:58:7b:25:03:12:fa:2a:1b:13:b9:7d:04:cd:29:18: 19:01:e1:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuAXnnF0YdNfEsaPwfuIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3 NzRiZjgwHhcNMjUxMjA2MDMwMDUwWhcNMjUxMjA3MDMwMDUwWjAzMTEwLwYDVQQD EyhkOTc4MDc5NzM4MDljZmE4ZmIyNGFiNzYzZGQ2ZGI1OTFjMWMyMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2oQVA6wlA600sVw8GioaCEnlS3k uhweyrLTgqL1fnnmTIcrFEGY7bVDe0Ffa9j//Tfj9ebt9LPuRrty52b7JXaqy1Ro fBExnbqQPblJTuIlrmOSzTaJhmcrW6MjvE/nL29t882NL9YQZn5YEcO7vEbOwzLA iE7axpZUUxhC2ElOUdpPRYS23bepASDJhW1jL65uTgltc5Wet5UkFya4TRlF0V8W EHu/ALHrLZHx/1P2AHwL3jNNor7R02N2MBgPtCi+YN4s8QwM9Ty9O/f5o1MWwUm1 UIXkCQk9ksUwxZslFZbT6N6eoXglClOmxyKnBoiWX0V9OwiFpp5PiTIVLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl4B5c4Cc+o+ySrdj3W21kcHCCHMB8GA1UdIwQY MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1 LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACi1y8W+4 4uGll8VMbj2NyGy0JrNClKC18XaABaQNX0sN8OORcCTdm8Yl0J1IPLLGytabtao3 0AHifQljk5lwCjJyxndEeUsS4yoSMFNDUSS5kCklPC/QuZGG4f7KhrGllTzhIs8a l3X5kn2t9mVeskIhGhnFeFOX7LusN55xZAl9x425D/+kcJKxQRTrNfx+SmOGKtlL QD7/hG1I47sa38px9d7fYJ5M64lbh6Q2FW/Hngzgn1v9qH99tAI908CxJ5n+u81g 4PPTwo5YXdGX7VCUxqetRyapWJuXsmNvhgAMggqUZO8OZL+qugymWHslAxL6KhsT uX0EzSkYGQHh9w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:26 2025 by rpki-client