This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json) Hash identifier: gflb6c1FT44T3C6kOPBCHWcs65IWldo8qLSszLdIDl4= Subject key identifier: B7:94:93:74:E3:13:B8:CB:94:65:B8:59:48:52:A8:3A:06:AA:1C:CD Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Certificate serial: 019B61D3D5FB7B841579796EDB9363E7D99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft Manifest number: 05F5 Signing time: Sat 27 Dec 2025 22:00:31 +0000 Manifest this update: Sat 27 Dec 2025 22:00:31 +0000 Manifest next update: Sun 28 Dec 2025 22:00:31 +0000 Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: +Co4CN9fkKl8ScyqjTTqyd6FWCNsUDy5A5FgaeIGPXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:d3:d5:fb:7b:84:15:79:79:6e:db:93:63:e7:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Validity Not Before: Dec 27 22:00:31 2025 GMT Not After : Dec 28 22:00:31 2025 GMT Subject: CN=b7949374e313b8cb9465b8594852a83a06aa1ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:44:3d:5b:91:5e:aa:07:e3:bd:08:95:b5:9f: 2d:5d:e4:43:05:0f:00:3a:03:90:79:98:91:26:d2: 23:20:89:87:19:24:96:53:df:b0:64:dd:f6:17:81: c5:2b:e5:bf:d6:75:56:d3:dd:c8:de:9f:86:8a:60: dc:36:9a:ee:6d:04:d2:af:c6:8a:b9:5c:18:7c:65: a1:07:9b:c6:db:6c:38:1b:8a:2b:65:dc:4a:e3:7b: 68:be:5e:a6:62:15:6c:73:4e:59:3f:cb:fc:0c:3d: f8:43:dc:a2:54:56:f8:9c:b6:6e:c1:b1:6e:5b:63: a9:55:bb:c6:8d:82:b0:ac:20:8c:dd:4a:e6:c8:c2: 72:82:44:b9:67:aa:2d:7a:e4:ad:79:ad:d0:2c:8e: f4:4b:34:52:7e:d9:90:28:a5:fc:64:92:22:5e:af: 6c:35:23:cd:a9:6a:38:be:35:11:4e:1f:f5:c4:e7: 4f:7f:50:04:8f:19:14:33:3d:ba:4f:81:c7:45:bd: 6c:0d:24:03:95:54:ac:5d:d3:4f:2d:38:05:4d:eb: 04:67:03:e1:e9:02:12:d8:49:03:34:75:32:9e:dd: c9:ea:19:bb:1b:46:38:91:f6:5e:f5:75:38:52:59: 03:7e:d2:60:5e:69:07:1e:53:77:ed:6c:c8:3f:3f: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:94:93:74:E3:13:B8:CB:94:65:B8:59:48:52:A8:3A:06:AA:1C:CD X509v3 Authority Key Identifier: keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:07:90:68:ec:b6:e3:13:ad:0a:10:c2:81:08:67:31:f4:84: 08:ef:75:06:2c:b1:d5:a5:90:e1:56:4c:93:7f:d8:a5:8a:59: 1d:59:fc:4c:75:e4:1c:39:3c:dd:ed:22:9b:4b:09:5b:79:5c: 70:16:5f:8b:5f:80:2b:b1:0e:7f:2f:d7:ab:d8:5b:81:f9:fc: 41:e0:24:af:2e:8d:34:94:54:24:91:ec:dd:30:d3:b2:67:5d: c7:e3:49:1c:c1:68:a9:31:54:b5:4a:d3:72:36:03:01:fb:b9: e1:14:4d:ec:50:7f:27:2d:3a:8a:36:4c:b1:be:e9:93:99:d1: ee:a6:be:33:52:0e:d6:1f:1f:13:7c:11:83:f3:5e:8a:2f:0d: f2:c4:12:fe:d2:e4:a9:93:91:4f:cd:50:ce:7f:ce:97:7e:d0: ed:b4:c4:e6:86:c8:07:a1:f8:d7:fc:cb:e8:5a:24:61:94:a8: 15:0a:c1:df:02:bc:59:0d:58:ab:86:5e:1b:78:3f:3c:53:cd: 7e:30:bd:8d:52:ff:92:8f:9f:19:d5:0a:00:f5:e5:ed:3b:f8: 57:e3:43:18:1e:e3:c3:ca:dd:19:da:2a:53:c7:d6:fb:af:3d: 9d:f4:72:eb:15:0b:b1:be:9b:46:07:11:c6:0e:0c:03:ae:5c: 2b:ac:94:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZth09X7e4QVeXlu25Nj59mcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWQ4MzMyZTExOGE5YTIxODdlYWI1ODg0Mjc5ZDY1ODBm MTE5ZjcwHhcNMjUxMjI3MjIwMDMxWhcNMjUxMjI4MjIwMDMxWjAzMTEwLwYDVQQD EyhiNzk0OTM3NGUzMTNiOGNiOTQ2NWI4NTk0ODUyYTgzYTA2YWExY2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEQ9W5FeqgfjvQiVtZ8tXeRDBQ8A OgOQeZiRJtIjIImHGSSWU9+wZN32F4HFK+W/1nVW093I3p+GimDcNprubQTSr8aK uVwYfGWhB5vG22w4G4orZdxK43tovl6mYhVsc05ZP8v8DD34Q9yiVFb4nLZuwbFu W2OpVbvGjYKwrCCM3UrmyMJygkS5Z6oteuStea3QLI70SzRSftmQKKX8ZJIiXq9s NSPNqWo4vjURTh/1xOdPf1AEjxkUMz26T4HHRb1sDSQDlVSsXdNPLTgFTesEZwPh 6QIS2EkDNHUynt3J6hm7G0Y4kfZe9XU4UlkDftJgXmkHHlN37WzIPz+ouQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeUk3TjE7jLlGW4WUhSqDoGqhzNMB8GA1UdIwQY MBaAFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUt ZGVhMzBlY2I3MzZkLzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUtZGVhMzBlY2I3MzZk LzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAeQaOy2 4xOtChDCgQhnMfSECO91Biyx1aWQ4VZMk3/YpYpZHVn8THXkHDk83e0im0sJW3lc cBZfi1+AK7EOfy/Xq9hbgfn8QeAkry6NNJRUJJHs3TDTsmddx+NJHMFoqTFUtUrT cjYDAfu54RRN7FB/Jy06ijZMsb7pk5nR7qa+M1IO1h8fE3wRg/Neii8N8sQS/tLk qZORT81Qzn/Ol37Q7bTE5obIB6H41/zL6FokYZSoFQrB3wK8WQ1Yq4ZeG3g/PFPN fjC9jVL/ko+fGdUKAPXl7Tv4V+NDGB7jw8rdGdoqU8fW+689nfRy6xULsb6bRgcR xg4MA65cK6yU3g== -----END CERTIFICATE-----Generated at Sun Dec 28 03:11:13 2025 by rpki-client