This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json) Hash identifier: PaUB8fYOmflM+WkVWaH6moN96wp/DK8MRHd5A+v3TGU= Subject key identifier: 99:45:29:07:E1:5D:D6:32:6A:E3:62:19:C5:56:78:37:DC:5D:50:EF Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610 Certificate serial: 019AF31D032889085D1889FC1D45CD304BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: xMTP/eCoW/v8Knz7K5HaCTazhhsaDGWGcLNmwEN7YFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:03:28:89:08:5d:18:89:fc:1d:45:cd:30:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610 Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=99452907e15dd6326ae36219c5567837dc5d50ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b1:27:ed:da:bc:49:b4:3e:50:28:1c:32:dd: a6:41:68:fd:cd:bd:f4:57:c0:a1:1b:96:a0:5e:6e: ae:b1:fb:2a:17:e6:90:35:9e:7a:2f:f6:1c:c2:0f: 78:ec:10:e9:1a:87:c8:58:e3:21:5a:a2:a2:38:25: 8e:bc:40:bd:e5:e3:b7:fe:7e:6d:27:92:4c:cd:a3: 0e:42:08:73:58:59:49:61:df:64:78:46:3b:24:76: 1b:74:7e:8e:40:19:0f:e9:20:14:89:5c:fd:91:85: fe:95:f5:c3:7d:b5:0f:da:c3:18:6f:4c:65:43:c1: 94:2f:1f:4b:e0:40:f7:ca:73:55:0e:e0:5c:3b:1c: eb:2a:b7:d5:70:36:91:55:6d:47:1c:1b:55:12:da: 92:0f:0a:e1:09:3d:86:d8:9b:48:a0:48:ea:06:d7: a3:b9:d9:58:79:e0:cf:94:25:21:8e:4e:da:59:ec: cf:6e:15:9c:60:fc:3e:93:aa:71:2f:09:bd:c3:4c: 95:a3:78:e9:01:b3:c5:07:00:12:b5:df:b9:16:e5: 6f:ae:9b:ed:c9:aa:f9:42:c9:2e:f0:26:e7:8c:91: 0c:b9:04:7f:eb:9d:80:68:33:bf:af:92:55:b6:a9: 31:05:24:25:f8:c5:8b:22:5c:84:a3:2d:d2:a3:96: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:45:29:07:E1:5D:D6:32:6A:E3:62:19:C5:56:78:37:DC:5D:50:EF X509v3 Authority Key Identifier: keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:c9:dc:50:a1:b7:dd:3a:ec:d9:a4:9d:1b:24:36:cb:62:91: d0:66:1f:75:f6:88:62:36:17:01:9f:56:cf:67:2f:52:66:08: 54:d4:be:9c:85:fe:fb:a9:f7:10:79:0d:75:76:0f:cf:43:ea: 90:d0:f5:cf:9b:ff:64:f1:d7:35:5f:d3:f6:0a:b7:b2:22:08: 95:b4:8f:ea:50:0d:86:26:91:07:20:17:82:77:b4:97:49:68: 8f:a4:be:64:d3:f0:ec:c5:6a:9f:70:fa:67:5b:83:2e:31:85: 83:bf:0d:00:4e:1e:99:68:54:1d:cb:40:e7:fa:b9:dc:ce:83: 4b:72:a8:6d:2e:eb:36:6e:e0:38:63:db:68:e7:01:af:66:63: 2a:7e:c3:d0:75:1f:2b:e0:49:bc:64:95:23:c3:15:a8:72:b9: 1d:0b:49:47:47:e6:9b:b9:93:31:49:f6:5a:2f:c7:08:6b:08: 76:34:73:b8:2a:ea:13:94:a0:48:29:72:92:c2:b9:54:78:68: 80:2e:43:4e:d2:d6:06:ee:3e:69:c8:60:55:57:ac:36:4e:a9: 06:36:ec:5b:13:a5:1c:20:3d:1b:6d:72:a7:ee:43:70:bf:61: 93:22:64:76:19:87:ad:d5:b7:af:d7:9e:2e:79:11:3e:16:08: 5c:19:7a:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQMoiQhdGIn8HUXNMEu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx Mjk2MTAwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD Eyg5OTQ1MjkwN2UxNWRkNjMyNmFlMzYyMTljNTU2NzgzN2RjNWQ1MGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7En7dq8SbQ+UCgcMt2mQWj9zb30 V8ChG5agXm6usfsqF+aQNZ56L/Ycwg947BDpGofIWOMhWqKiOCWOvEC95eO3/n5t J5JMzaMOQghzWFlJYd9keEY7JHYbdH6OQBkP6SAUiVz9kYX+lfXDfbUP2sMYb0xl Q8GULx9L4ED3ynNVDuBcOxzrKrfVcDaRVW1HHBtVEtqSDwrhCT2G2JtIoEjqBtej udlYeeDPlCUhjk7aWezPbhWcYPw+k6pxLwm9w0yVo3jpAbPFBwAStd+5FuVvrpvt yar5Qsku8CbnjJEMuQR/652AaDO/r5JVtqkxBSQl+MWLIlyEoy3So5YRfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlFKQfhXdYyauNiGcVWeDfcXVDvMB8GA1UdIwQY MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3 LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY8ncUKG3 3Trs2aSdGyQ2y2KR0GYfdfaIYjYXAZ9Wz2cvUmYIVNS+nIX++6n3EHkNdXYPz0Pq kND1z5v/ZPHXNV/T9gq3siIIlbSP6lANhiaRByAXgne0l0loj6S+ZNPw7MVqn3D6 Z1uDLjGFg78NAE4emWhUHctA5/q53M6DS3KobS7rNm7gOGPbaOcBr2ZjKn7D0HUf K+BJvGSVI8MVqHK5HQtJR0fmm7mTMUn2Wi/HCGsIdjRzuCrqE5SgSClyksK5VHho gC5DTtLWBu4+achgVVesNk6pBjbsWxOlHCA9G21yp+5DcL9hkyJkdhmHrdW3r9ee LnkRPhYIXBl6oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:37 2025 by rpki-client