This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft File: xf9_LizUq2EooxIgpTBBqUmlbDk.mft (raw, json) Hash identifier: 25lgZMe5xMfFZnpFlpwq405awIf9M0JoaSET0N3Vr0E= Subject key identifier: C7:85:7C:1A:54:CF:60:0C:F4:3B:D8:0F:68:A4:FA:E0:FA:B9:31:4C Authority key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39 Certificate issuer: /CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39 Certificate serial: 019AF3896BBC6D749D89EE462E6126CAEE44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft Manifest number: FB Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: xf9_LizUq2EooxIgpTBBqUmlbDk.crl (hash: r362fTT5VhBl7cxDzgytrcuQ2vcwO/mfrSu4xgPFulU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:6b:bc:6d:74:9d:89:ee:46:2e:61:26:ca:ee:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39 Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=c7857c1a54cf600cf43bd80f68a4fae0fab9314c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:f6:1a:d9:77:4c:57:de:da:c1:29:41:f4:23: c1:63:10:51:9f:2d:9f:e9:96:ec:bf:f9:64:2a:f1: c5:15:77:09:59:d1:f3:c8:f4:98:3b:1d:23:c6:41: b9:b1:95:64:57:f9:90:be:5c:1f:6b:9e:5d:4f:10: d6:61:51:1b:d3:8a:e3:48:8d:38:08:1d:0f:73:76: 07:06:ff:76:84:90:40:e9:96:70:1e:eb:7c:ae:9a: af:31:2e:c8:74:92:07:7d:08:f3:83:bf:f7:0e:e1: 84:e5:36:68:a1:75:ae:ec:e1:28:5c:d5:36:54:ce: 18:a4:fb:ea:6a:e7:ea:29:88:47:4c:a0:8a:22:82: ee:52:24:d2:78:ca:2a:98:a9:e7:e4:5e:16:cb:c8: e0:25:65:d2:e7:c1:9c:d3:02:be:5e:3d:13:2f:48: 18:5d:3b:5c:5e:40:31:9e:70:cf:e0:6b:49:d4:70: 54:df:0a:72:5b:69:6a:50:69:e8:cd:d2:2a:72:6f: dd:45:03:06:32:2c:50:d0:48:e0:43:bb:bf:f3:1e: 03:bd:50:e0:59:01:19:d7:a4:f4:91:b1:f3:37:4d: 81:37:c3:11:59:c1:22:cb:5a:6e:dd:b8:a7:b0:db: 07:21:15:0b:01:92:53:4f:cf:e9:83:9e:76:15:f0: 25:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:85:7C:1A:54:CF:60:0C:F4:3B:D8:0F:68:A4:FA:E0:FA:B9:31:4C X509v3 Authority Key Identifier: keyid:C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0b:c1:a6:20:f8:54:20:05:fe:3d:b5:44:7f:b4:2f:7a:b6: 3c:63:6e:95:ce:30:cb:f4:de:01:d7:88:f7:f7:21:da:1a:70: db:c2:82:ef:6e:6d:ac:43:f1:cb:4f:72:df:bf:b3:5d:e8:02: 4c:4f:8e:36:9d:09:6d:5f:fe:6e:b7:ce:8f:65:85:5a:2a:bd: 40:c5:16:ca:e9:c5:8a:97:56:2e:96:ab:3b:3d:e7:8a:cb:1a: f5:45:dd:61:16:9c:47:c6:00:16:ad:66:65:4b:2d:e6:73:44: 92:df:77:ce:1a:43:d9:1e:77:6d:dc:09:4a:39:95:fd:21:29: 15:57:89:62:67:23:31:dd:b6:a0:8c:c5:28:f6:0d:b4:8d:e0: 28:31:b0:50:b6:8e:df:fe:2b:38:e6:db:58:e8:d9:71:53:f9: 82:2d:ff:05:6c:e4:25:bd:7f:29:60:da:55:6d:e7:a9:84:2b: 29:80:02:c2:2d:d1:d5:af:03:b6:68:9c:46:f6:92:f0:85:8a: 1c:23:3c:6f:d4:6a:d6:41:cf:40:58:26:b4:b4:0b:e4:0f:f8: eb:01:11:84:93:a4:61:52:e8:d7:20:ad:72:ac:b3:e0:2a:91: ac:10:4c:0e:7d:3c:07:4c:b4:44:24:63:07:2c:ce:e7:e7:63: ec:73:17:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWu8bXSdie5GLmEmyu5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZmY3ZjJlMmNkNGFiNjEyOGEzMTIyMGE1MzA0MWE5NDlh NTZjMzkwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD EyhjNzg1N2MxYTU0Y2Y2MDBjZjQzYmQ4MGY2OGE0ZmFlMGZhYjkzMTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vYa2XdMV97awSlB9CPBYxBRny2f 6Zbsv/lkKvHFFXcJWdHzyPSYOx0jxkG5sZVkV/mQvlwfa55dTxDWYVEb04rjSI04 CB0Pc3YHBv92hJBA6ZZwHut8rpqvMS7IdJIHfQjzg7/3DuGE5TZooXWu7OEoXNU2 VM4YpPvqaufqKYhHTKCKIoLuUiTSeMoqmKnn5F4Wy8jgJWXS58Gc0wK+Xj0TL0gY XTtcXkAxnnDP4GtJ1HBU3wpyW2lqUGnozdIqcm/dRQMGMixQ0EjgQ7u/8x4DvVDg WQEZ16T0kbHzN02BN8MRWcEiy1pu3binsNsHIRULAZJTT8/pg552FfAlnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeFfBpUz2AM9DvYD2ik+uD6uTFMMB8GA1UdIwQY MBaAFMX/fy4s1KthKKMSIKUwQalJpWw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOGEzZTEtZjgxOC00NmZhLThlZWIt ZDFkMzkxZDZmY2M1LzEveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zOGEzZTEtZjgxOC00NmZhLThlZWItZDFkMzkxZDZmY2M1 LzEveGY5X0xpelVxMkVvb3hJZ3BUQkJxVW1sYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgvBpiD4 VCAF/j21RH+0L3q2PGNulc4wy/TeAdeI9/ch2hpw28KC725trEPxy09y37+zXegC TE+ONp0JbV/+brfOj2WFWiq9QMUWyunFipdWLparOz3nissa9UXdYRacR8YAFq1m ZUst5nNEkt93zhpD2R53bdwJSjmV/SEpFVeJYmcjMd22oIzFKPYNtI3gKDGwULaO 3/4rOObbWOjZcVP5gi3/BWzkJb1/KWDaVW3nqYQrKYACwi3R1a8DtmicRvaS8IWK HCM8b9Rq1kHPQFgmtLQL5A/46wERhJOkYVLo1yCtcqyz4CqRrBBMDn08B0y0RCRj ByzO5+dj7HMXOw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:11:59 2025 by rpki-client