This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft File: X78QDyDnniuCeH_mRaU_TChkKvY.mft (raw, json) Hash identifier: U+kFhEdXawnBr3ALwKHXc+eVFqYzn9uekfoNVu8Zqko= Subject key identifier: 31:2E:5A:C2:58:EA:3F:E1:D2:ED:46:12:70:07:F6:E9:BE:A2:8F:F9 Authority key identifier: 5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 Certificate issuer: /CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Certificate serial: 019B33B193460F1A58E549292D59A3DE48D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 23:00:34 +0000 Manifest this update: Thu 18 Dec 2025 23:00:34 +0000 Manifest next update: Fri 19 Dec 2025 23:00:34 +0000 Files and hashes: 1: X78QDyDnniuCeH_mRaU_TChkKvY.crl (hash: 9vyQVv56b4Tsv+jp437SXG4CkFPNL3NRh4nhzOdnMpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:93:46:0f:1a:58:e5:49:29:2d:59:a3:de:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fbf100f20e79e2b82787fe645a53f4c28642af6 Validity Not Before: Dec 18 23:00:34 2025 GMT Not After : Dec 19 23:00:34 2025 GMT Subject: CN=312e5ac258ea3fe1d2ed46127007f6e9bea28ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:2d:74:4b:f4:f0:26:d6:b3:3f:32:02:09: 90:3d:aa:24:84:07:62:ef:cc:01:28:06:97:c1:58: 2e:4e:73:6b:e6:08:2f:18:38:38:99:71:c1:13:40: 06:02:a8:ef:29:1c:bc:a6:8f:ee:52:71:5a:f7:4b: 3a:88:65:dd:70:00:05:a6:54:5d:22:2e:ae:0b:95: 87:23:e0:c9:9d:56:11:62:ca:e5:e4:7d:c2:01:8e: 68:9a:8a:38:dd:a0:b7:28:c8:2d:79:18:3b:1e:38: 6b:27:d1:1c:5f:0b:e1:37:8e:ac:05:1e:bd:e1:ce: 6f:3c:b2:c8:65:4f:c0:81:49:e1:78:d6:6f:96:1a: c2:a5:c4:fe:65:15:de:f2:32:24:7f:0b:08:3c:b0: 5c:10:00:c4:0b:6d:b7:a3:06:a7:d2:1a:0a:e2:0b: f3:ca:c8:21:f0:63:d5:b5:b3:8a:cd:c4:d7:84:57: 08:d1:ec:60:50:69:fa:6a:8a:05:83:84:88:bc:94: 0b:bf:fd:44:dd:01:82:e8:a4:5d:44:d3:70:0e:7f: 7f:fb:64:cc:75:0f:0e:b3:2c:d2:24:e2:02:de:09: 62:29:c6:16:10:ce:ea:71:63:09:10:5a:dc:ae:0b: 14:03:6c:d5:4f:e6:b5:3c:30:85:56:a9:8f:53:da: ac:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2E:5A:C2:58:EA:3F:E1:D2:ED:46:12:70:07:F6:E9:BE:A2:8F:F9 X509v3 Authority Key Identifier: keyid:5F:BF:10:0F:20:E7:9E:2B:82:78:7F:E6:45:A5:3F:4C:28:64:2A:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X78QDyDnniuCeH_mRaU_TChkKvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/33044c-3be5-4d17-a721-33f3c6b34602/1/X78QDyDnniuCeH_mRaU_TChkKvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:d6:7b:26:97:55:d9:8d:97:fe:ed:88:b6:4b:2e:98:82: 6f:fc:9f:9f:ce:9c:f0:80:73:90:49:13:79:87:a4:57:92:d5: 84:cc:e2:a7:82:39:58:45:0e:29:56:5d:7e:2e:6b:dc:05:1f: 5c:f2:dc:6b:5a:59:78:64:44:b6:2a:50:0e:0e:fc:92:48:92: 2d:36:12:21:d8:e6:5f:20:49:57:c1:6e:c1:78:17:05:8f:4f: b8:55:4f:21:45:8a:3d:d1:ee:67:4a:07:2a:a5:e3:65:9e:24: cf:f0:8e:85:d0:e8:65:6f:91:c7:a6:73:19:53:b6:b1:5d:52: 31:72:5a:4b:e4:c5:e0:18:f7:b9:f4:fc:9e:28:6e:6b:33:78: 08:0f:d2:f3:53:86:b1:38:ad:13:aa:2a:f8:ec:c8:8d:b1:de: cb:dd:6a:d2:77:04:20:10:ca:e8:08:9d:48:74:4b:fa:8d:ed: dc:f8:95:cb:66:6d:a9:0e:0b:d9:42:b2:bb:2a:e7:84:5f:da: 7c:c7:8f:18:8a:9e:2c:33:ac:86:99:5d:61:da:78:1b:9b:8a: 0d:87:cd:8f:56:89:7e:d3:f9:61:09:9f:0a:43:f4:c2:ae:5e: 09:b0:a2:15:28:a1:2c:06:e6:27:b6:01:1e:73:72:6e:a0:b8: 54:82:fd:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZNGDxpY5UkpLVmj3kjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYmYxMDBmMjBlNzllMmI4Mjc4N2ZlNjQ1YTUzZjRjMjg2 NDJhZjYwHhcNMjUxMjE4MjMwMDM0WhcNMjUxMjE5MjMwMDM0WjAzMTEwLwYDVQQD EygzMTJlNWFjMjU4ZWEzZmUxZDJlZDQ2MTI3MDA3ZjZlOWJlYTI4ZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE8tdEv08CbWsz8yAgmQPaokhAdi 78wBKAaXwVguTnNr5ggvGDg4mXHBE0AGAqjvKRy8po/uUnFa90s6iGXdcAAFplRd Ii6uC5WHI+DJnVYRYsrl5H3CAY5omoo43aC3KMgteRg7HjhrJ9EcXwvhN46sBR69 4c5vPLLIZU/AgUnheNZvlhrCpcT+ZRXe8jIkfwsIPLBcEADEC223owan0hoK4gvz ysgh8GPVtbOKzcTXhFcI0exgUGn6aooFg4SIvJQLv/1E3QGC6KRdRNNwDn9/+2TM dQ8OsyzSJOIC3gliKcYWEM7qcWMJEFrcrgsUA2zVT+a1PDCFVqmPU9qsswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEuWsJY6j/h0u1GEnAH9um+oo/5MB8GA1UdIwQY MBaAFF+/EA8g554rgnh/5kWlP0woZCr2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEt MzNmM2M2YjM0NjAyLzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMzA0NGMtM2JlNS00ZDE3LWE3MjEtMzNmM2M2YjM0NjAy LzEvWDc4UUR5RG5uaXVDZUhfbVJhVV9UQ2hrS3ZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsTWeyaX VdmNl/7tiLZLLpiCb/yfn86c8IBzkEkTeYekV5LVhMzip4I5WEUOKVZdfi5r3AUf XPLca1pZeGREtipQDg78kkiSLTYSIdjmXyBJV8FuwXgXBY9PuFVPIUWKPdHuZ0oH KqXjZZ4kz/COhdDoZW+Rx6ZzGVO2sV1SMXJaS+TF4Bj3ufT8nihuazN4CA/S81OG sTitE6oq+OzIjbHey91q0ncEIBDK6AidSHRL+o3t3PiVy2ZtqQ4L2UKyuyrnhF/a fMePGIqeLDOshpldYdp4G5uKDYfNj1aJftP5YQmfCkP0wq5eCbCiFSihLAbmJ7YB HnNybqC4VIL9tA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:22:18 2025 by rpki-client