This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft File: XjQjtgOmIDy5KMje8-WM2Nqv1og.mft (raw, json) Hash identifier: SnoE9rlVu2kFo53rO001CvOZbxKV5zoevGSwVjspw04= Subject key identifier: B6:36:98:A7:F6:BE:C2:9E:95:FB:93:D8:E3:61:BC:F6:5D:D4:DB:8B Authority key identifier: 5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 Certificate issuer: /CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Certificate serial: 019AF12E34BC684EA856B7349BB2E9916B95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft Manifest number: 0B1D Signing time: Sat 06 Dec 2025 01:02:08 +0000 Manifest this update: Sat 06 Dec 2025 01:02:08 +0000 Manifest next update: Sun 07 Dec 2025 01:02:08 +0000 Files and hashes: 1: XjQjtgOmIDy5KMje8-WM2Nqv1og.crl (hash: LAoho9TsMPPpZkUg505PpEBx+SyQXz57QznLbL4eY6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:34:bc:68:4e:a8:56:b7:34:9b:b2:e9:91:6b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3423b603a6203cb928c8def3e58cd8daafd688 Validity Not Before: Dec 6 01:02:08 2025 GMT Not After : Dec 7 01:02:08 2025 GMT Subject: CN=b63698a7f6bec29e95fb93d8e361bcf65dd4db8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e8:51:a5:50:8f:73:75:fb:50:88:f9:f6:e8: ba:b7:ab:c6:8d:36:ee:7e:72:f9:e2:7e:81:1b:f0: ce:ba:f8:44:b2:fa:81:b8:22:63:f2:d2:ca:fa:19: dc:07:d8:ef:16:63:4a:ac:0b:4d:66:99:18:19:48: 02:d4:df:2f:14:63:9e:36:bf:1f:09:41:14:69:d4: 18:f7:fa:aa:2b:f5:fa:08:ea:37:39:f2:7c:5b:54: 90:4a:0c:46:2f:e7:8a:ff:41:84:89:b0:df:d0:63: 72:d1:50:0a:1e:37:89:f5:ee:d8:ff:19:28:74:fb: d8:45:74:dc:32:ba:45:71:77:d9:c3:8d:91:4a:fc: 15:16:03:16:a8:52:98:2a:27:08:49:05:2f:71:86: 28:04:56:94:c2:8d:4c:2f:e6:ff:da:0c:46:31:52: 77:84:d7:80:cd:eb:e2:1d:f7:a3:ae:43:b3:e8:77: 40:5e:44:2c:e6:3e:ae:e6:1d:5c:0d:39:9b:17:57: 15:51:d5:dd:52:6b:04:a8:e5:14:fc:2b:4b:3c:81: b2:cc:73:fb:8c:eb:70:34:95:7a:f6:a2:29:64:1e: b6:48:b8:35:b3:48:28:0a:ef:51:e5:c4:d6:2b:a7: 45:2d:44:e7:4a:ab:6b:89:67:84:5c:55:32:dc:fb: 11:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:36:98:A7:F6:BE:C2:9E:95:FB:93:D8:E3:61:BC:F6:5D:D4:DB:8B X509v3 Authority Key Identifier: keyid:5E:34:23:B6:03:A6:20:3C:B9:28:C8:DE:F3:E5:8C:D8:DA:AF:D6:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjQjtgOmIDy5KMje8-WM2Nqv1og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d0eabf-f6ae-4a83-bbfc-cdce667d3ca7/1/XjQjtgOmIDy5KMje8-WM2Nqv1og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1b:d0:78:20:11:99:f4:d6:e5:00:76:ba:5d:49:f6:ee:43: 09:bd:ef:4e:ea:ac:99:2a:39:88:9a:59:70:12:01:b8:18:b5: 52:9e:29:3d:59:d1:30:aa:88:69:dd:45:28:81:53:42:49:5c: 10:22:15:c0:03:6a:61:f6:06:b1:99:99:62:88:ff:c5:3f:05: b3:3e:c2:a9:5a:92:1d:17:2b:bf:ca:60:eb:98:fc:5c:98:11: f0:77:c1:1c:3f:c6:6d:f3:fe:74:a0:a7:13:01:61:a7:1d:0a: 30:e2:a4:e2:e1:92:0f:ff:85:b8:d3:5f:08:bf:33:0f:9e:52: 3a:9a:18:80:79:fe:0e:b5:6d:b3:47:65:61:97:b4:a6:c1:42: c7:43:81:29:d5:2f:1c:1a:a1:aa:df:d6:57:5c:69:14:a2:98: 49:12:09:d5:2f:0f:ef:79:5c:f3:ea:bc:0c:72:8e:31:5b:cf: f7:c6:67:ef:a5:de:1b:c3:4d:97:16:1d:f4:ef:0c:a3:e2:44: 96:4a:ea:d5:1a:7a:cd:f1:32:2f:8e:80:e2:75:e1:9a:a1:50: 2c:fc:1b:22:ca:8e:81:28:75:d1:a3:b6:cf:59:ae:84:4a:d4: 27:33:6a:47:6e:2f:36:be:15:31:c8:0c:35:c5:32:9f:6b:d1: 81:19:14:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjS8aE6oVrc0m7LpkWuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzQyM2I2MDNhNjIwM2NiOTI4YzhkZWYzZTU4Y2Q4ZGFh ZmQ2ODgwHhcNMjUxMjA2MDEwMjA4WhcNMjUxMjA3MDEwMjA4WjAzMTEwLwYDVQQD EyhiNjM2OThhN2Y2YmVjMjllOTVmYjkzZDhlMzYxYmNmNjVkZDRkYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuhRpVCPc3X7UIj59ui6t6vGjTbu fnL54n6BG/DOuvhEsvqBuCJj8tLK+hncB9jvFmNKrAtNZpkYGUgC1N8vFGOeNr8f CUEUadQY9/qqK/X6COo3OfJ8W1SQSgxGL+eK/0GEibDf0GNy0VAKHjeJ9e7Y/xko dPvYRXTcMrpFcXfZw42RSvwVFgMWqFKYKicISQUvcYYoBFaUwo1ML+b/2gxGMVJ3 hNeAzeviHfejrkOz6HdAXkQs5j6u5h1cDTmbF1cVUdXdUmsEqOUU/CtLPIGyzHP7 jOtwNJV69qIpZB62SLg1s0goCu9R5cTWK6dFLUTnSqtriWeEXFUy3PsRJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY2mKf2vsKelfuT2ONhvPZd1NuLMB8GA1UdIwQY MBaAFF40I7YDpiA8uSjI3vPljNjar9aIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMt Y2RjZTY2N2QzY2E3LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMGVhYmYtZjZhZS00YTgzLWJiZmMtY2RjZTY2N2QzY2E3 LzEvWGpRanRnT21JRHk1S01qZTgtV00yTnF2MW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhvQeCAR mfTW5QB2ul1J9u5DCb3vTuqsmSo5iJpZcBIBuBi1Up4pPVnRMKqIad1FKIFTQklc ECIVwANqYfYGsZmZYoj/xT8Fsz7CqVqSHRcrv8pg65j8XJgR8HfBHD/GbfP+dKCn EwFhpx0KMOKk4uGSD/+FuNNfCL8zD55SOpoYgHn+DrVts0dlYZe0psFCx0OBKdUv HBqhqt/WV1xpFKKYSRIJ1S8P73lc8+q8DHKOMVvP98Zn76XeG8NNlxYd9O8Mo+JE lkrq1Rp6zfEyL46A4nXhmqFQLPwbIsqOgSh10aO2z1muhErUJzNqR24vNr4VMcgM NcUyn2vRgRkURQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:45 2025 by rpki-client