This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft File: _x2DMuEYqaIYfqtYhCedZYDxGfc.mft (raw, json) Hash identifier: pIPFA6o7qJ4VYI65L1PoUZ07ZCe1BuSDJJdpr/Xx9D0= Subject key identifier: 0E:68:77:97:D6:80:8A:F0:F0:F9:46:EA:4C:6C:B0:C1:26:CB:0E:79 Authority key identifier: FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 Certificate issuer: /CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Certificate serial: 019B5260C03053BF56B192D4EE60458C4208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft Manifest number: 05ED Signing time: Wed 24 Dec 2025 22:00:30 +0000 Manifest this update: Wed 24 Dec 2025 22:00:30 +0000 Manifest next update: Thu 25 Dec 2025 22:00:30 +0000 Files and hashes: 1: _x2DMuEYqaIYfqtYhCedZYDxGfc.crl (hash: shhXFgE0s798HliGGEnQ/aZCeD0C5EY1fD3UDD/JDwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:60:c0:30:53:bf:56:b1:92:d4:ee:60:45:8c:42:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1d8332e118a9a2187eab5884279d6580f119f7 Validity Not Before: Dec 24 22:00:30 2025 GMT Not After : Dec 25 22:00:30 2025 GMT Subject: CN=0e687797d6808af0f0f946ea4c6cb0c126cb0e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b5:9f:1e:f1:64:09:9d:cb:59:68:7f:1a:09: fb:ce:b6:41:6c:c9:8b:9d:13:d0:f0:7e:a1:3d:f9: a3:69:c3:c6:a5:3f:70:76:4e:4c:53:05:73:41:fe: 7f:db:03:03:c9:a1:9d:f6:98:5f:69:47:49:b1:4b: 3d:d0:84:37:af:4a:21:66:3e:ba:85:ca:6d:59:ae: 5f:fd:42:4e:54:e3:60:f7:f2:3b:3f:75:ea:7f:01: 7c:ac:d0:f9:de:64:6d:1d:d8:fd:d9:77:d4:df:81: 2f:10:4f:92:0f:80:f4:15:ef:4d:8c:32:1b:27:b3: 8f:2b:b6:ef:9e:8a:3f:22:8c:14:96:ef:d9:3a:28: 52:82:17:d8:aa:2a:14:0a:93:2e:f8:c7:55:50:56: cc:b3:a0:cf:d5:c7:70:4a:44:d3:8a:02:c7:fb:b9: fa:6e:4c:d4:29:5f:92:f9:01:86:22:c5:60:c2:31: 43:b4:c4:61:91:82:e5:a7:17:79:4e:32:db:e8:19: 0c:20:36:6e:1d:1a:25:7f:8b:5c:cb:97:a9:a8:76: 84:f5:2f:2b:59:21:f8:bc:e8:e2:12:a7:b4:4e:c4: 97:49:00:c0:60:33:f2:d7:78:01:27:c5:32:a1:04: 31:23:9f:c9:a1:cf:01:89:7b:66:f7:a5:c6:e6:34: 66:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:68:77:97:D6:80:8A:F0:F0:F9:46:EA:4C:6C:B0:C1:26:CB:0E:79 X509v3 Authority Key Identifier: keyid:FF:1D:83:32:E1:18:A9:A2:18:7E:AB:58:84:27:9D:65:80:F1:19:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x2DMuEYqaIYfqtYhCedZYDxGfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/aac6be-1855-484b-8025-dea30ecb736d/1/_x2DMuEYqaIYfqtYhCedZYDxGfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:f6:13:2a:8f:9b:90:a6:70:f5:9d:fb:42:5f:54:0e:4d: 92:ff:ae:54:3a:d7:10:b3:b7:ed:50:6c:75:fd:d0:a9:a3:3e: 44:ca:83:58:fc:0f:2a:f2:6c:8b:23:fa:46:46:59:1d:94:52: 4a:09:a4:06:98:9e:b4:ee:14:43:c7:14:06:83:73:7d:18:34: d1:de:67:7f:30:a1:6c:df:dc:8b:2d:37:96:83:d4:10:d1:1b: 74:25:67:91:cd:cb:ca:10:5e:07:53:94:7f:bc:e7:43:41:1a: b6:63:1b:5f:ec:35:74:a6:9d:ec:89:a9:4e:00:22:e1:10:4b: 58:e6:77:c1:67:82:05:99:2b:de:68:3e:49:68:59:19:4b:b6: 73:4b:09:73:d3:38:d3:e6:da:3f:fa:64:3b:db:66:a0:f7:8a: fd:71:64:4b:d9:e2:90:29:15:8e:94:e1:ad:50:42:45:1d:b7: 89:27:bb:18:e0:f2:cc:0e:25:63:65:22:49:85:9f:b8:fa:48: ff:b0:b8:74:8d:67:7e:7d:58:fc:91:c6:58:9a:d2:93:23:f1: 04:1c:f8:cc:a4:fc:bd:29:18:31:f1:74:dc:51:0a:43:49:f4: fb:c3:22:31:79:48:b2:b9:c5:5f:78:28:f8:65:3d:44:45:87: 2a:02:39:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYMAwU79WsZLU7mBFjEIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWQ4MzMyZTExOGE5YTIxODdlYWI1ODg0Mjc5ZDY1ODBm MTE5ZjcwHhcNMjUxMjI0MjIwMDMwWhcNMjUxMjI1MjIwMDMwWjAzMTEwLwYDVQQD EygwZTY4Nzc5N2Q2ODA4YWYwZjBmOTQ2ZWE0YzZjYjBjMTI2Y2IwZTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27WfHvFkCZ3LWWh/Ggn7zrZBbMmL nRPQ8H6hPfmjacPGpT9wdk5MUwVzQf5/2wMDyaGd9phfaUdJsUs90IQ3r0ohZj66 hcptWa5f/UJOVONg9/I7P3XqfwF8rND53mRtHdj92XfU34EvEE+SD4D0Fe9NjDIb J7OPK7bvnoo/IowUlu/ZOihSghfYqioUCpMu+MdVUFbMs6DP1cdwSkTTigLH+7n6 bkzUKV+S+QGGIsVgwjFDtMRhkYLlpxd5TjLb6BkMIDZuHRolf4tcy5epqHaE9S8r WSH4vOjiEqe0TsSXSQDAYDPy13gBJ8UyoQQxI5/Joc8BiXtm96XG5jRmCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5od5fWgIrw8PlG6kxssMEmyw55MB8GA1UdIwQY MBaAFP8dgzLhGKmiGH6rWIQnnWWA8Rn3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUt ZGVhMzBlY2I3MzZkLzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hYWM2YmUtMTg1NS00ODRiLTgwMjUtZGVhMzBlY2I3MzZk LzEvX3gyRE11RVlxYUlZZnF0WWhDZWRaWUR4R2ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhj2EyqP m5CmcPWd+0JfVA5Nkv+uVDrXELO37VBsdf3QqaM+RMqDWPwPKvJsiyP6RkZZHZRS SgmkBpietO4UQ8cUBoNzfRg00d5nfzChbN/ciy03loPUENEbdCVnkc3LyhBeB1OU f7znQ0EatmMbX+w1dKad7ImpTgAi4RBLWOZ3wWeCBZkr3mg+SWhZGUu2c0sJc9M4 0+baP/pkO9tmoPeK/XFkS9nikCkVjpThrVBCRR23iSe7GODyzA4lY2UiSYWfuPpI /7C4dI1nfn1Y/JHGWJrSkyPxBBz4zKT8vSkYMfF03FEKQ0n0+8MiMXlIsrnFX3go +GU9REWHKgI5yw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:30 2025 by rpki-client