This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft File: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft (raw, json) Hash identifier: dD15yywbBbAR3YX2dPDP6a4r0Qazv+zZ5PWwrETMkr4= Subject key identifier: 2E:DC:91:87:F5:3D:5D:93:A7:C7:DB:9D:6C:04:64:67:A6:15:29:93 Authority key identifier: 99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8 Certificate issuer: /CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8 Certificate serial: 019AF5E620A57B45EEDCB0BAC4636CFB96C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft Manifest number: 1321 Signing time: Sat 06 Dec 2025 23:01:30 +0000 Manifest this update: Sat 06 Dec 2025 23:01:30 +0000 Manifest next update: Sun 07 Dec 2025 23:01:30 +0000 Files and hashes: 1: maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl (hash: 0Dxm2us2tnwmWBRXrhyOx4WxiORh/aZYII6ZY56/OHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:20:a5:7b:45:ee:dc:b0:ba:c4:63:6c:fb:96:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a5e4c1cde8bcb3b8420770d59a83a7917c8cc8 Validity Not Before: Dec 6 23:01:30 2025 GMT Not After : Dec 7 23:01:30 2025 GMT Subject: CN=2edc9187f53d5d93a7c7db9d6c046467a6152993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:50:fb:bf:0d:7e:03:d3:71:5c:b0:e1:f8: 33:4c:a5:2d:14:06:e6:b1:78:1c:2d:bf:f3:39:5d: bf:13:5d:8f:84:d0:4d:40:cf:4a:6e:95:5e:5a:4d: bd:2c:d6:29:93:3a:28:1c:ef:4a:5b:2f:a6:d2:41: a8:9c:57:43:d9:32:33:7a:a8:ad:e4:c1:5c:90:e9: ea:aa:21:1e:2b:ce:11:77:75:cf:28:27:2c:4e:5d: 13:e3:28:09:86:f5:2d:ef:70:cf:c0:34:ff:33:86: 2c:5a:64:e0:58:97:7c:96:09:6a:d3:47:57:1d:fe: 03:37:c6:4c:d6:88:7c:b3:b2:10:03:fe:56:9b:fc: e4:17:4b:ab:f9:02:f5:c4:ba:4a:3f:c3:cc:7b:35: 56:11:98:2e:2e:2e:4c:16:fd:b4:1e:49:4c:ec:b9: ef:b4:3e:3a:7f:e1:1e:a7:36:85:c8:ea:6e:19:cd: 58:db:8a:1b:a8:66:a7:9a:e2:6a:1f:1a:b7:6d:bb: 1b:32:bd:5d:45:c9:18:bf:e2:50:eb:42:53:f3:8a: bd:f2:82:a1:80:5d:33:cd:1f:d8:70:d8:e1:a5:a9: 2c:01:7c:b5:ec:12:5d:4c:b4:bb:e3:74:53:f7:88: 94:b9:83:1e:87:56:09:c2:70:f3:4b:7f:12:a3:9c: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DC:91:87:F5:3D:5D:93:A7:C7:DB:9D:6C:04:64:67:A6:15:29:93 X509v3 Authority Key Identifier: keyid:99:A5:E4:C1:CD:E8:BC:B3:B8:42:07:70:D5:9A:83:A7:91:7C:8C:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/55b848-0fc3-43c3-8ace-0dc3c21bd628/1/maXkwc3ovLO4Qgdw1ZqDp5F8jMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:83:b2:ab:59:b1:7e:bd:ba:ec:af:20:eb:f0:29:6e:a2:9d: 7d:57:6b:c1:7c:a6:f9:c6:ee:3f:7f:e4:f4:8d:92:47:15:82: 33:0a:5a:8b:88:f0:6e:94:71:9c:ee:f2:e3:57:46:a1:cc:aa: a1:52:07:60:ee:12:cf:02:01:5d:5b:c0:2e:f7:a6:8d:8e:6f: 35:d2:ad:ef:fb:bb:ea:1d:e9:86:0c:f5:81:8c:62:56:94:d1: 3b:09:8d:66:4e:47:f9:ec:fc:6c:68:fd:e2:60:ef:b5:1e:cf: f3:8f:9f:cd:79:03:13:65:cb:94:bf:5b:17:22:35:2f:56:cc: 9d:ba:9e:b7:94:1c:66:ee:d6:14:d7:6d:c8:0b:64:f5:94:fd: c0:61:41:f6:94:5b:45:75:89:4d:e6:0c:a9:e9:34:88:4b:5d: bf:77:fb:bc:0e:fc:41:0d:6a:df:ff:18:7c:73:e3:b7:ac:5c: 13:dc:f3:6a:d9:11:87:98:c4:bd:b3:7a:b9:81:34:ac:7e:fb: df:97:89:4b:bc:a0:c8:fc:f1:c7:9e:d6:83:67:b7:6f:46:48: cc:fd:fe:11:4d:4b:59:5f:13:63:41:9e:c8:37:86:c2:4f:11: 8d:22:45:23:a9:54:95:00:92:44:bb:fd:f1:07:6c:ae:34:63: 36:4e:46:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15iCle0Xu3LC6xGNs+5bDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTVlNGMxY2RlOGJjYjNiODQyMDc3MGQ1OWE4M2E3OTE3 YzhjYzgwHhcNMjUxMjA2MjMwMTMwWhcNMjUxMjA3MjMwMTMwWjAzMTEwLwYDVQQD EygyZWRjOTE4N2Y1M2Q1ZDkzYTdjN2RiOWQ2YzA0NjQ2N2E2MTUyOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkZQ+78NfgPTcVyw4fgzTKUtFAbm sXgcLb/zOV2/E12PhNBNQM9KbpVeWk29LNYpkzooHO9KWy+m0kGonFdD2TIzeqit 5MFckOnqqiEeK84Rd3XPKCcsTl0T4ygJhvUt73DPwDT/M4YsWmTgWJd8lglq00dX Hf4DN8ZM1oh8s7IQA/5Wm/zkF0ur+QL1xLpKP8PMezVWEZguLi5MFv20HklM7Lnv tD46f+EepzaFyOpuGc1Y24obqGanmuJqHxq3bbsbMr1dRckYv+JQ60JT84q98oKh gF0zzR/YcNjhpaksAXy17BJdTLS743RT94iUuYMeh1YJwnDzS38So5yzzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7ckYf1PV2Tp8fbnWwEZGemFSmTMB8GA1UdIwQY MBaAFJml5MHN6LyzuEIHcNWag6eRfIzIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81NWI4NDgtMGZjMy00M2MzLThhY2Ut MGRjM2MyMWJkNjI4LzEvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS81NWI4NDgtMGZjMy00M2MzLThhY2UtMGRjM2MyMWJkNjI4 LzEvbWFYa3djM292TE80UWdkdzFacURwNUY4ak1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIOyq1mx fr267K8g6/ApbqKdfVdrwXym+cbuP3/k9I2SRxWCMwpai4jwbpRxnO7y41dGocyq oVIHYO4SzwIBXVvALvemjY5vNdKt7/u76h3phgz1gYxiVpTROwmNZk5H+ez8bGj9 4mDvtR7P84+fzXkDE2XLlL9bFyI1L1bMnbqet5QcZu7WFNdtyAtk9ZT9wGFB9pRb RXWJTeYMqek0iEtdv3f7vA78QQ1q3/8YfHPjt6xcE9zzatkRh5jEvbN6uYE0rH77 35eJS7ygyPzxx57Wg2e3b0ZIzP3+EU1LWV8TY0GeyDeGwk8RjSJFI6lUlQCSRLv9 8QdsrjRjNk5G0g== -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:14 2025 by rpki-client