This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json) Hash identifier: uGBjN4w6vHuhE8gwU3lQ6352G7PuWOhG7A2reJkGzzo= Subject key identifier: 73:B6:A0:D6:3B:20:5F:45:4B:FF:1E:85:43:6E:F8:0E:EF:03:F1:76 Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Certificate serial: 019AF27756455D6B30259BC0579A9821DCA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft Manifest number: 13CE Signing time: Sat 06 Dec 2025 07:01:38 +0000 Manifest this update: Sat 06 Dec 2025 07:01:38 +0000 Manifest next update: Sun 07 Dec 2025 07:01:38 +0000 Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: XCt7q9Ba+THfVnQ+FppGqPnppDWtm+klEQ2HXbdOTi8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:56:45:5d:6b:30:25:9b:c0:57:9a:98:21:dc:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Validity Not Before: Dec 6 07:01:38 2025 GMT Not After : Dec 7 07:01:38 2025 GMT Subject: CN=73b6a0d63b205f454bff1e85436ef80eef03f176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:5f:c0:cc:fc:fe:77:2c:53:f9:7e:b8:7d: ac:a7:7e:e9:d4:44:ed:59:37:70:0f:79:b6:9d:e3: a8:65:75:13:7f:f5:11:85:b9:b7:59:fa:85:d0:58: b7:a6:41:2d:25:e5:de:e2:fa:c9:5c:1e:82:cb:6d: 73:e2:41:43:c4:c9:39:a6:3a:3b:61:9b:93:0e:a8: 50:22:ab:7c:db:a2:03:88:12:2b:2c:c1:bb:2c:69: ed:ba:d6:bd:32:31:1f:05:de:8e:99:78:f7:f2:97: 85:6a:29:16:8d:92:a1:f4:a0:0d:ad:8f:37:95:09: 7c:b0:45:12:43:d9:7a:92:cc:80:bc:95:36:ca:46: 56:52:3f:3d:7f:ca:16:33:8f:08:73:c4:03:c7:5f: 65:03:ed:15:55:3f:c1:4b:be:8d:18:47:9f:6b:84: be:7a:fa:4b:82:8f:1a:52:5c:24:cd:a2:1f:d8:e6: f4:d5:3b:56:f8:25:ba:9b:38:d9:9b:fd:7d:de:de: 39:51:38:28:a6:14:41:df:8e:1a:c1:7d:47:c6:73: 90:db:dd:bf:57:29:51:a6:a3:ef:ec:82:d4:7b:f0: b5:f6:80:57:40:96:0c:ed:fa:e4:8d:cd:0b:51:45: 07:51:aa:93:fc:c3:7c:c5:a7:46:b3:97:c1:4e:48: 0c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:A0:D6:3B:20:5F:45:4B:FF:1E:85:43:6E:F8:0E:EF:03:F1:76 X509v3 Authority Key Identifier: keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:70:a7:60:76:d3:0f:f0:6d:20:01:c6:7b:5c:ab:f4:ad:7c: d7:d4:7f:f9:33:b6:b5:34:e2:b3:4f:16:f4:e4:53:1a:87:dc: e3:78:12:4f:77:57:84:7c:b0:b5:51:e7:9d:6c:00:1d:09:83: 94:bb:29:72:9f:8c:aa:e2:7b:6b:7d:69:7d:ec:94:6a:16:6f: ec:38:1b:5f:53:47:c3:52:fc:8a:69:9a:cb:21:e7:28:83:4c: d9:3e:dc:4d:89:37:9c:2b:2a:5f:21:02:86:21:a3:d8:12:41: 3e:71:8a:7a:49:78:6d:a1:64:c4:1c:79:19:74:a3:45:5f:f2: c5:6a:7e:bf:2d:18:a3:21:92:47:26:dd:95:87:49:f0:88:59: a9:42:72:bf:8d:d2:34:ef:29:0d:1a:16:67:b9:0e:b7:65:39: 26:30:26:18:bf:d9:f7:fd:3d:17:69:71:91:98:e1:b7:73:e2: 8a:07:d0:71:b7:28:fe:d9:0b:ea:7a:7f:1f:2f:4b:63:3a:a2: 6a:58:27:6c:81:c2:1b:7c:c1:5a:59:39:eb:7f:89:0f:9a:e2: ac:5a:dd:a7:11:1b:0d:7b:b6:63:2d:60:6c:a6:c4:ac:d8:d3: 9c:e2:d7:1d:1b:4e:fd:d6:21:a1:d7:f3:88:e0:45:bf:6c:0f: 14:24:e8:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryd1ZFXWswJZvAV5qYIdyoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWQyMGFhNGQ0NWQ1NjFlMjRkOTI2ZjU5YjE3NTI3OGQ5 YjAxYzgwHhcNMjUxMjA2MDcwMTM4WhcNMjUxMjA3MDcwMTM4WjAzMTEwLwYDVQQD Eyg3M2I2YTBkNjNiMjA1ZjQ1NGJmZjFlODU0MzZlZjgwZWVmMDNmMTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMlfwMz8/ncsU/l+uH2sp37p1ETt WTdwD3m2neOoZXUTf/URhbm3WfqF0Fi3pkEtJeXe4vrJXB6Cy21z4kFDxMk5pjo7 YZuTDqhQIqt826IDiBIrLMG7LGntuta9MjEfBd6OmXj38peFaikWjZKh9KANrY83 lQl8sEUSQ9l6ksyAvJU2ykZWUj89f8oWM48Ic8QDx19lA+0VVT/BS76NGEefa4S+ evpLgo8aUlwkzaIf2Ob01TtW+CW6mzjZm/193t45UTgophRB344awX1HxnOQ292/ VylRpqPv7ILUe/C19oBXQJYM7frkjc0LUUUHUaqT/MN8xadGs5fBTkgMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHO2oNY7IF9FS/8ehUNu+A7vA/F2MB8GA1UdIwQY MBaAFMftIKpNRdVh4k2Sb1mxdSeNmwHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMt NmE1ZThlYmRmZDEyLzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMtNmE1ZThlYmRmZDEy LzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqnCnYHbT D/BtIAHGe1yr9K1819R/+TO2tTTis08W9ORTGofc43gST3dXhHywtVHnnWwAHQmD lLspcp+MquJ7a31pfeyUahZv7DgbX1NHw1L8immayyHnKINM2T7cTYk3nCsqXyEC hiGj2BJBPnGKekl4baFkxBx5GXSjRV/yxWp+vy0YoyGSRybdlYdJ8IhZqUJyv43S NO8pDRoWZ7kOt2U5JjAmGL/Z9/09F2lxkZjht3PiigfQcbco/tkL6np/Hy9LYzqi algnbIHCG3zBWlk563+JD5rirFrdpxEbDXu2Yy1gbKbErNjTnOLXHRtO/dYhodfz iOBFv2wPFCTo7g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:41 2025 by rpki-client