This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft File: xDzur3eV-33zSLBLIn5QpJoaG3w.mft (raw, json) Hash identifier: 5DqfNs90sqt9C/thpl0vEnMEEUBGPI3wjXNcGJnOyb4= Subject key identifier: 1A:27:0B:B0:58:E6:DB:18:1B:37:B0:9C:93:72:6F:EF:07:88:82:B6 Authority key identifier: C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C Certificate issuer: /CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c Certificate serial: 019B2BF8B92E7F0DCA7A4DFA3648AF4B7CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft Manifest number: 14B9 Signing time: Wed 17 Dec 2025 11:01:19 +0000 Manifest this update: Wed 17 Dec 2025 11:01:19 +0000 Manifest next update: Thu 18 Dec 2025 11:01:19 +0000 Files and hashes: 1: xDzur3eV-33zSLBLIn5QpJoaG3w.crl (hash: bOYTStLc0bdUTh3UN+ahAYVyD8Sz8pXlJ3QQUe0xOXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:b9:2e:7f:0d:ca:7a:4d:fa:36:48:af:4b:7c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c43ceeaf7795fb7df348b04b227e50a49a1a1b7c Validity Not Before: Dec 17 11:01:19 2025 GMT Not After : Dec 18 11:01:19 2025 GMT Subject: CN=1a270bb058e6db181b37b09c93726fef078882b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:ae:67:2c:cf:3e:72:fc:0e:64:f4:e7:31: 5a:9a:1d:ac:a0:31:29:67:50:fe:fa:a1:d2:3b:8e: f6:8f:42:03:53:45:ac:a1:2f:bf:a7:b3:b6:35:6b: 04:cc:14:cd:23:b3:a9:66:2b:0f:47:a5:37:ba:83: 3b:5c:be:39:a8:9b:01:40:12:84:e0:3c:5a:dd:51: ed:e0:43:eb:af:60:c0:79:25:67:8a:13:83:35:34: 2e:c6:71:4c:ea:92:a4:fb:da:b4:cd:b5:8e:65:2a: 80:f2:9e:82:50:d0:58:26:80:6b:75:2e:79:3e:13: 43:66:3f:03:cc:28:e8:8b:45:41:8d:42:3f:39:81: 80:fa:a2:51:b4:e6:ca:49:b9:2c:60:a8:65:6f:55: 0f:fb:48:ff:f2:ca:6c:f9:d6:5d:1c:a0:6b:ed:a1: bc:6c:e7:31:35:2f:27:51:1c:9b:15:b3:82:10:11: 75:45:f3:24:02:fb:8c:62:9d:dc:17:59:8e:6d:49: d3:09:14:d9:5f:b6:9b:88:89:f4:69:f6:83:1a:14: 7f:21:7b:0e:43:5f:6b:c1:b5:99:54:90:75:47:ed: e6:bf:51:3e:2c:ac:f8:52:dd:fb:4d:61:59:75:28: b8:de:9a:e8:6d:c0:fd:d5:af:7e:dd:76:ba:7d:34: 7a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:27:0B:B0:58:E6:DB:18:1B:37:B0:9C:93:72:6F:EF:07:88:82:B6 X509v3 Authority Key Identifier: keyid:C4:3C:EE:AF:77:95:FB:7D:F3:48:B0:4B:22:7E:50:A4:9A:1A:1B:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDzur3eV-33zSLBLIn5QpJoaG3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/8a8d3a-0804-44d7-8655-08bae3a54ff6/1/xDzur3eV-33zSLBLIn5QpJoaG3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:fe:e2:b3:93:eb:64:00:6f:f6:0b:34:29:19:0e:79:54: 20:5a:37:f9:1d:47:ba:a0:74:47:37:1e:76:7d:e3:03:51:ef: a5:ea:85:73:be:be:f7:0a:78:12:4b:82:58:0a:df:8a:96:de: 4f:49:53:db:de:38:05:d5:8f:ba:bf:d3:5d:62:70:77:9e:c7: b0:31:6b:88:67:1f:1b:bc:85:01:13:b4:e2:9b:8b:e4:78:1d: d5:eb:1b:01:b4:c2:b5:6a:0f:31:46:79:8e:a1:d7:09:ee:d3: 48:53:29:c5:c4:da:fd:0c:c9:34:fc:01:a4:04:5f:f6:e5:36: f1:dc:97:7e:6c:10:62:15:e0:f5:95:ec:d1:8e:64:1a:c4:e9: 6a:a7:1e:15:c7:37:be:a4:d3:9b:7a:3f:40:77:ec:14:66:6b: 5f:54:de:99:fc:4b:56:91:48:5e:cb:d6:e0:8b:b6:37:08:3b: b6:8b:ec:f8:c3:bc:c2:23:13:e1:95:3c:b2:25:a9:cd:39:40: 90:44:63:82:65:f5:46:59:a9:87:44:d3:b1:38:66:95:26:20: 84:a5:82:a0:3f:a3:6f:c2:ff:fc:db:6b:44:4a:e4:ea:c0:01: 84:07:0f:e4:a0:79:ae:f6:90:37:c2:c1:d1:32:6e:b7:de:43: 16:61:3c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+Lkufw3Kek36NkivS3zbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0M2NlZWFmNzc5NWZiN2RmMzQ4YjA0YjIyN2U1MGE0OWEx YTFiN2MwHhcNMjUxMjE3MTEwMTE5WhcNMjUxMjE4MTEwMTE5WjAzMTEwLwYDVQQD EygxYTI3MGJiMDU4ZTZkYjE4MWIzN2IwOWM5MzcyNmZlZjA3ODg4MmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEmuZyzPPnL8DmT05zFamh2soDEp Z1D++qHSO472j0IDU0WsoS+/p7O2NWsEzBTNI7OpZisPR6U3uoM7XL45qJsBQBKE 4Dxa3VHt4EPrr2DAeSVnihODNTQuxnFM6pKk+9q0zbWOZSqA8p6CUNBYJoBrdS55 PhNDZj8DzCjoi0VBjUI/OYGA+qJRtObKSbksYKhlb1UP+0j/8sps+dZdHKBr7aG8 bOcxNS8nURybFbOCEBF1RfMkAvuMYp3cF1mObUnTCRTZX7abiIn0afaDGhR/IXsO Q19rwbWZVJB1R+3mv1E+LKz4Ut37TWFZdSi43probcD91a9+3Xa6fTR6oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBonC7BY5tsYGzewnJNyb+8HiIK2MB8GA1UdIwQY MBaAFMQ87q93lft980iwSyJ+UKSaGht8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS84YThkM2EtMDgwNC00NGQ3LTg2NTUt MDhiYWUzYTU0ZmY2LzEveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS84YThkM2EtMDgwNC00NGQ3LTg2NTUtMDhiYWUzYTU0ZmY2 LzEveER6dXIzZVYtMzN6U0xCTEluNVFwSm9hRzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhP+4rOT 62QAb/YLNCkZDnlUIFo3+R1HuqB0Rzcedn3jA1HvpeqFc76+9wp4EkuCWArfipbe T0lT2944BdWPur/TXWJwd57HsDFriGcfG7yFARO04puL5Hgd1esbAbTCtWoPMUZ5 jqHXCe7TSFMpxcTa/QzJNPwBpARf9uU28dyXfmwQYhXg9ZXs0Y5kGsTpaqceFcc3 vqTTm3o/QHfsFGZrX1TemfxLVpFIXsvW4Iu2Nwg7tovs+MO8wiMT4ZU8siWpzTlA kERjgmX1Rlmph0TTsThmlSYghKWCoD+jb8L//NtrRErk6sABhAcP5KB5rvaQN8LB 0TJut95DFmE8xw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:50:39 2025 by rpki-client