This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft File: XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft (raw, json) Hash identifier: 74CT10m8CMKhbn5kIjNFgP1Iv5UZP3XWpHeQZps0Epw= Subject key identifier: 09:AB:57:3B:FC:1F:28:48:F5:54:06:C7:F3:78:FB:F7:E1:6A:BC:F4 Authority key identifier: 5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E Certificate issuer: /CN=5ccf12899f358d1c341a207fde21d43c70a6945e Certificate serial: 019B4B1598FB73B029D6CDDD1D290DDF9BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft Manifest number: 03D7 Signing time: Tue 23 Dec 2025 12:01:05 +0000 Manifest this update: Tue 23 Dec 2025 12:01:05 +0000 Manifest next update: Wed 24 Dec 2025 12:01:05 +0000 Files and hashes: 1: XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl (hash: 1H1DIVglnOHTV550sFeQc7L2Z0UnHRuuZifbNGbPcLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:98:fb:73:b0:29:d6:cd:dd:1d:29:0d:df:9b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccf12899f358d1c341a207fde21d43c70a6945e Validity Not Before: Dec 23 12:01:05 2025 GMT Not After : Dec 24 12:01:05 2025 GMT Subject: CN=09ab573bfc1f2848f55406c7f378fbf7e16abcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:0c:63:d5:bd:79:2a:e4:fb:ce:8f:7e:32: 3c:df:14:0f:c0:e7:b8:7d:7c:61:7b:9a:0b:32:3c: 18:81:fd:ab:7f:43:c2:07:80:a9:04:78:7a:a5:fc: f8:01:02:92:97:a1:cd:aa:22:81:19:a7:8f:fe:a9: 8d:c0:44:61:d8:6b:e3:c7:d1:76:e5:b5:f9:a3:2d: b2:5f:51:8e:ec:3d:10:74:e3:50:90:49:a3:ba:fa: 99:61:bf:b0:8a:44:df:a0:e6:01:1a:1a:9a:a0:03: a0:da:5a:c0:d9:af:4a:fb:35:8f:96:eb:be:fc:e0: 5a:6f:3e:19:51:ca:d0:cd:0f:14:6e:a0:9c:06:65: 73:6b:f3:4f:87:ec:f9:27:8f:a5:fa:63:59:46:cf: d9:50:71:63:33:5f:11:8d:9e:c0:2a:1f:0b:c6:65: d7:05:2e:d3:08:99:80:96:3b:06:05:56:8a:b1:11: 65:df:f5:b4:48:29:18:c6:15:6c:7d:7e:2b:bc:18: d7:f8:8d:69:b9:92:5e:30:c8:2a:99:6f:19:0c:67: 1c:13:32:e0:f8:6f:b5:28:aa:3d:1b:9a:cb:94:8d: 2a:3b:43:c4:e7:29:1c:55:04:73:95:e2:51:b2:c6: 0a:2d:ab:23:0a:57:b2:c9:cd:ca:13:26:45:a9:3b: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:57:3B:FC:1F:28:48:F5:54:06:C7:F3:78:FB:F7:E1:6A:BC:F4 X509v3 Authority Key Identifier: keyid:5C:CF:12:89:9F:35:8D:1C:34:1A:20:7F:DE:21:D4:3C:70:A6:94:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM8SiZ81jRw0GiB_3iHUPHCmlF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c81297-62b7-49fb-ba3f-2560f8690cd2/1/XM8SiZ81jRw0GiB_3iHUPHCmlF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:84:1d:33:63:c9:15:00:85:59:b0:4f:de:f9:18:b2:a5:02: ca:9b:d5:96:c1:31:55:2f:9e:e4:09:f7:31:ea:d4:ca:5e:83: 6b:ca:b9:7f:cf:8e:dc:0d:b0:e9:73:1f:22:82:b2:e0:52:23: c5:04:73:bd:2b:a8:a7:db:c8:8d:92:85:22:65:2b:b7:56:42: 09:2e:47:e3:3d:22:ee:5b:03:68:68:3a:0d:32:ff:91:f6:9a: fc:a0:1a:b6:ea:d4:ae:d0:6f:50:12:12:1d:bf:f1:11:d0:b9: 72:8a:24:03:4f:e4:dc:3e:e7:54:74:3f:35:fb:9d:54:c7:be: ba:d5:8b:03:4c:2b:31:ce:9f:ce:3a:8e:eb:40:ea:5b:69:56: f6:30:f9:03:a4:de:44:37:a4:94:6f:5b:51:5f:24:76:0e:ec: 9e:30:f8:c7:78:4b:41:9b:62:ec:98:4b:14:b5:96:d8:7c:94: a3:fd:e2:2d:c0:a4:ab:ed:45:9c:2b:c5:a9:2c:68:aa:3a:62: d6:d5:28:9e:fe:5c:32:5a:51:2a:9e:9f:de:aa:4b:a9:d7:41: 73:7d:3c:3d:98:6f:34:79:3f:c8:ab:a4:a2:14:b8:4b:25:8b: 3e:65:3f:cf:2c:8f:6d:2e:56:ac:55:01:01:52:39:f4:db:df: 11:98:16:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFZj7c7Ap1s3dHSkN35vWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjY2YxMjg5OWYzNThkMWMzNDFhMjA3ZmRlMjFkNDNjNzBh Njk0NWUwHhcNMjUxMjIzMTIwMTA1WhcNMjUxMjI0MTIwMTA1WjAzMTEwLwYDVQQD EygwOWFiNTczYmZjMWYyODQ4ZjU1NDA2YzdmMzc4ZmJmN2UxNmFiY2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnIMY9W9eSrk+86PfjI83xQPwOe4 fXxhe5oLMjwYgf2rf0PCB4CpBHh6pfz4AQKSl6HNqiKBGaeP/qmNwERh2Gvjx9F2 5bX5oy2yX1GO7D0QdONQkEmjuvqZYb+wikTfoOYBGhqaoAOg2lrA2a9K+zWPluu+ /OBabz4ZUcrQzQ8UbqCcBmVza/NPh+z5J4+l+mNZRs/ZUHFjM18RjZ7AKh8LxmXX BS7TCJmAljsGBVaKsRFl3/W0SCkYxhVsfX4rvBjX+I1puZJeMMgqmW8ZDGccEzLg +G+1KKo9G5rLlI0qO0PE5ykcVQRzleJRssYKLasjCleyyc3KEyZFqTv0UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmrVzv8HyhI9VQGx/N4+/fharz0MB8GA1UdIwQY MBaAFFzPEomfNY0cNBogf94h1DxwppReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2Yt MjU2MGY4NjkwY2QyLzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9jODEyOTctNjJiNy00OWZiLWJhM2YtMjU2MGY4NjkwY2Qy LzEvWE04U2laODFqUncwR2lCXzNpSFVQSENtbEY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoQdM2PJ FQCFWbBP3vkYsqUCypvVlsExVS+e5An3MerUyl6Da8q5f8+O3A2w6XMfIoKy4FIj xQRzvSuop9vIjZKFImUrt1ZCCS5H4z0i7lsDaGg6DTL/kfaa/KAaturUrtBvUBIS Hb/xEdC5cookA0/k3D7nVHQ/NfudVMe+utWLA0wrMc6fzjqO60DqW2lW9jD5A6Te RDeklG9bUV8kdg7snjD4x3hLQZti7JhLFLWW2HyUo/3iLcCkq+1FnCvFqSxoqjpi 1tUonv5cMlpRKp6f3qpLqddBc308PZhvNHk/yKukohS4SyWLPmU/zyyPbS5WrFUB AVI59NvfEZgWng== -----END CERTIFICATE-----Generated at Tue Dec 23 15:21:54 2025 by rpki-client