This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json) Hash identifier: WJKSkFe7vEwlh+LBxXhgpx0i14jS56hVkKUdrHU53nA= Subject key identifier: 26:EA:A1:4C:75:C4:6D:4C:83:6A:CC:F5:08:46:4B:2B:84:E8:B2:48 Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Certificate serial: 019B3F7EF83998A720EE9A1781EB28B4183B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft Manifest number: 12DC Signing time: Sun 21 Dec 2025 06:00:44 +0000 Manifest this update: Sun 21 Dec 2025 06:00:44 +0000 Manifest next update: Mon 22 Dec 2025 06:00:44 +0000 Files and hashes: 1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=) 2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: SfuCueshI2TmIhqdSpxKsCGePDROwCm4rz+9cvtfjsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:f8:39:98:a7:20:ee:9a:17:81:eb:28:b4:18:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Validity Not Before: Dec 21 06:00:44 2025 GMT Not After : Dec 22 06:00:44 2025 GMT Subject: CN=26eaa14c75c46d4c836accf508464b2b84e8b248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:eb:52:8d:8d:2b:21:ea:a5:43:bf:1a:ff: f1:92:bf:95:6e:d1:28:80:f5:a9:70:42:71:fb:15: 22:e7:7b:6a:21:04:46:db:1b:fd:ba:dc:95:81:85: 48:f8:10:90:a6:2e:06:c0:0c:b0:4b:14:b7:3f:6a: 29:5b:34:3c:cb:f4:f8:73:61:24:c8:d1:f2:1c:37: 7e:84:38:c7:c0:1d:0b:6f:3c:03:5a:45:dc:50:21: 01:b9:c8:ac:5c:ba:bc:7b:52:b8:15:e4:0b:e0:86: a6:fb:90:5a:ea:c9:8d:e4:b7:51:ef:c0:43:76:f2: 08:7a:d4:8a:86:8d:1a:2e:5f:22:5f:15:f5:b5:0e: ca:e9:53:af:8e:5b:80:46:bc:85:b7:46:e9:c3:c2: 85:2c:c5:dc:7e:de:48:36:72:a5:df:3d:83:4d:5f: a5:11:5d:3e:c0:8a:a1:c8:c1:dc:12:7b:f1:4e:47: 9f:11:72:a9:d0:10:28:bf:d8:e4:90:d2:62:46:50: f2:91:03:38:88:41:df:df:1a:25:c8:98:f8:0b:14: e6:81:3a:6d:09:bf:0c:0d:bd:f3:9c:61:d4:bb:1c: 89:ee:3d:94:96:77:3e:aa:bf:9b:5c:05:dd:94:a6: ce:2f:2d:9c:1a:7c:99:58:4f:ba:a6:4b:51:6f:f8: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EA:A1:4C:75:C4:6D:4C:83:6A:CC:F5:08:46:4B:2B:84:E8:B2:48 X509v3 Authority Key Identifier: keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b6:11:e0:f0:66:11:8f:07:d3:da:ad:e8:bd:e4:7b:36:53: 26:21:94:7c:5b:2c:b1:b2:70:c2:f9:e8:b6:c3:4e:72:a1:89: f5:7b:67:22:5a:32:2e:b3:bc:47:92:25:e6:ee:af:31:34:1f: 46:34:b7:98:30:7c:e8:f8:47:99:49:ed:3f:36:4d:75:88:f2: 43:e0:62:f4:79:92:10:50:8f:f2:ac:3e:94:6b:c6:d4:29:1c: 89:ad:6c:0f:60:c4:f2:79:ef:53:9f:67:56:a7:2e:6f:f7:a0: 54:6a:40:8b:6f:5d:82:b5:88:ac:bf:62:8e:cc:7c:93:da:52: 8d:4a:a1:e2:4d:64:e6:bb:38:2b:91:bb:0e:20:e1:42:2a:e0: 38:40:6d:0a:29:b1:02:5f:20:3d:ac:4e:65:aa:fc:87:90:d3: 9d:93:e1:99:53:56:85:9a:1d:95:bc:40:46:e7:c9:17:66:aa: d5:e5:26:0f:ca:f0:f9:1c:e7:5d:e0:6c:3d:dc:7b:4c:6d:66: 67:f9:36:3a:89:c4:fe:46:c5:53:16:b2:ed:d4:f5:81:9d:12: d8:ee:61:44:82:43:77:b0:36:2f:11:8f:71:69:df:bd:94:93: 1d:df:38:b5:64:e3:f2:ab:fe:0a:11:fd:7c:d7:00:3f:67:1c: 3e:d4:ea:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fvg5mKcg7poXgesotBg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3 ZGY4ZjUwHhcNMjUxMjIxMDYwMDQ0WhcNMjUxMjIyMDYwMDQ0WjAzMTEwLwYDVQQD EygyNmVhYTE0Yzc1YzQ2ZDRjODM2YWNjZjUwODQ2NGIyYjg0ZThiMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfTrUo2NKyHqpUO/Gv/xkr+VbtEo gPWpcEJx+xUi53tqIQRG2xv9utyVgYVI+BCQpi4GwAywSxS3P2opWzQ8y/T4c2Ek yNHyHDd+hDjHwB0LbzwDWkXcUCEBucisXLq8e1K4FeQL4Iam+5Ba6smN5LdR78BD dvIIetSKho0aLl8iXxX1tQ7K6VOvjluARryFt0bpw8KFLMXcft5INnKl3z2DTV+l EV0+wIqhyMHcEnvxTkefEXKp0BAov9jkkNJiRlDykQM4iEHf3xolyJj4CxTmgTpt Cb8MDb3znGHUuxyJ7j2Ulnc+qr+bXAXdlKbOLy2cGnyZWE+6pktRb/hH3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbqoUx1xG1Mg2rM9QhGSyuE6LJIMB8GA1UdIwQY MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt ZjAzYWM1OWI1YTk3LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3 LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhLYR4PBm EY8H09qt6L3kezZTJiGUfFsssbJwwvnotsNOcqGJ9XtnIloyLrO8R5Il5u6vMTQf RjS3mDB86PhHmUntPzZNdYjyQ+Bi9HmSEFCP8qw+lGvG1Ckcia1sD2DE8nnvU59n Vqcub/egVGpAi29dgrWIrL9ijsx8k9pSjUqh4k1k5rs4K5G7DiDhQirgOEBtCimx Al8gPaxOZar8h5DTnZPhmVNWhZodlbxARufJF2aq1eUmD8rw+RznXeBsPdx7TG1m Z/k2OonE/kbFUxay7dT1gZ0S2O5hRIJDd7A2LxGPcWnfvZSTHd84tWTj8qv+ChH9 fNcAP2ccPtTqgw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:34 2025 by rpki-client