This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft File: dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft (raw, json) Hash identifier: 5LxTBdKtret20b++woSC6pq2p2eqjJY0zCfwYThzTAM= Subject key identifier: 93:60:3A:07:9F:1F:A3:3A:5F:25:A7:75:41:35:43:F6:C5:70:9B:26 Authority key identifier: 75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B Certificate issuer: /CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b Certificate serial: 019B41A4F9DCD957268FC55D50427264B155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft Manifest number: 1786 Signing time: Sun 21 Dec 2025 16:01:29 +0000 Manifest this update: Sun 21 Dec 2025 16:01:29 +0000 Manifest next update: Mon 22 Dec 2025 16:01:29 +0000 Files and hashes: 1: dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl (hash: r/nS2CZRdwD4T6Ye3l9OwsaPjko1dy2+qFMTDqs9mYk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:f9:dc:d9:57:26:8f:c5:5d:50:42:72:64:b1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757255ddc90a4d0f82fb26744693ed7c986d8a8b Validity Not Before: Dec 21 16:01:29 2025 GMT Not After : Dec 22 16:01:29 2025 GMT Subject: CN=93603a079f1fa33a5f25a775413543f6c5709b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:85:35:88:d9:8c:0a:e7:b8:32:64:24:d2:89: 28:cf:a7:3b:58:59:00:67:f5:70:9d:2e:2c:98:5e: 1d:f0:a8:b7:85:0f:ed:55:e5:ac:b8:0c:94:88:0c: 8f:70:67:97:ff:22:35:74:28:de:0b:88:ee:b8:cc: 15:f1:35:4a:ab:45:bb:6c:c2:49:b1:c9:18:16:f4: 65:a7:5a:d2:4a:16:ce:52:eb:32:60:fc:84:3b:06: 3f:76:9f:f6:20:5b:30:f0:0c:36:f9:db:53:20:cf: 56:5a:ec:e1:4b:bb:6d:9d:a2:31:5c:b2:b2:5a:ad: f2:bf:c0:93:42:a4:62:08:f3:be:c5:71:ef:2b:43: 55:99:33:d5:6e:bd:1f:73:9c:12:4a:23:41:b0:25: 70:aa:fd:72:25:05:b3:dc:77:37:73:ec:50:10:8a: 7e:aa:cd:03:f8:0c:3c:53:19:f4:70:e6:15:d0:37: f7:57:06:36:f8:3a:8a:b7:26:f7:45:e1:38:69:59: b2:a1:f6:99:6e:27:79:b6:13:e5:51:90:33:0d:45: d8:bc:c3:00:85:c2:1b:c9:2f:72:52:88:40:75:13: 22:ea:e0:fa:54:65:62:19:89:e4:3e:2b:2f:49:a8: c9:97:76:f1:c0:a5:86:19:0b:6b:39:b1:18:1f:9e: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:60:3A:07:9F:1F:A3:3A:5F:25:A7:75:41:35:43:F6:C5:70:9B:26 X509v3 Authority Key Identifier: keyid:75:72:55:DD:C9:0A:4D:0F:82:FB:26:74:46:93:ED:7C:98:6D:8A:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXJV3ckKTQ-C-yZ0RpPtfJhtios.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/101dba-64eb-4267-b075-c02f775fbf3f/1/dXJV3ckKTQ-C-yZ0RpPtfJhtios.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:96:ad:32:0d:8c:17:f6:31:aa:f3:2f:15:95:98:09:8d:4a: 60:a5:dc:98:5c:a4:8e:ab:f7:14:2b:8a:e9:b3:9a:6c:9f:ea: 4c:f4:2f:e0:76:ef:8c:d1:4b:8c:1e:0e:74:7a:b0:2c:82:94: c7:70:44:0a:8b:f9:f0:e3:3c:bd:d9:a0:cf:bd:09:ee:17:4b: 23:de:e4:54:b4:bb:e1:5c:ae:d7:de:89:8a:4a:ea:8e:34:dc: 67:34:0f:2a:b3:72:e6:2c:0f:24:82:9e:57:2d:3f:41:e7:46: a1:27:04:90:57:2d:18:af:4a:fe:c0:0f:5e:30:65:cf:b9:0a: d1:47:58:fc:07:f1:5f:0b:c9:cb:39:ad:8f:c2:b4:73:55:46: fb:2d:e4:bf:c9:5b:de:d5:e5:36:a7:09:a3:bf:fe:f3:5d:b4: af:93:25:bb:9a:64:41:44:1e:32:29:0c:73:5b:0a:d7:f5:0a: 0f:13:a4:b1:08:ba:a2:91:0c:07:54:08:c6:3b:57:92:e3:0a: 11:3c:72:cc:dc:da:ff:99:48:88:26:95:76:e9:5c:29:bb:5b: 91:45:6e:4a:c1:a4:62:af:93:9c:1a:38:4c:ba:3c:fa:d1:46: 0f:10:71:05:cf:e4:76:35:67:ed:60:99:08:5d:aa:f6:83:15: 55:82:fc:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpPnc2Vcmj8VdUEJyZLFVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NzI1NWRkYzkwYTRkMGY4MmZiMjY3NDQ2OTNlZDdjOTg2 ZDhhOGIwHhcNMjUxMjIxMTYwMTI5WhcNMjUxMjIyMTYwMTI5WjAzMTEwLwYDVQQD Eyg5MzYwM2EwNzlmMWZhMzNhNWYyNWE3NzU0MTM1NDNmNmM1NzA5YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84U1iNmMCue4MmQk0okoz6c7WFkA Z/VwnS4smF4d8Ki3hQ/tVeWsuAyUiAyPcGeX/yI1dCjeC4juuMwV8TVKq0W7bMJJ sckYFvRlp1rSShbOUusyYPyEOwY/dp/2IFsw8Aw2+dtTIM9WWuzhS7ttnaIxXLKy Wq3yv8CTQqRiCPO+xXHvK0NVmTPVbr0fc5wSSiNBsCVwqv1yJQWz3Hc3c+xQEIp+ qs0D+Aw8Uxn0cOYV0Df3VwY2+DqKtyb3ReE4aVmyofaZbid5thPlUZAzDUXYvMMA hcIbyS9yUohAdRMi6uD6VGViGYnkPisvSajJl3bxwKWGGQtrObEYH56WfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNgOgefH6M6XyWndUE1Q/bFcJsmMB8GA1UdIwQY MBaAFHVyVd3JCk0PgvsmdEaT7XyYbYqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUt YzAyZjc3NWZiZjNmLzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8xMDFkYmEtNjRlYi00MjY3LWIwNzUtYzAyZjc3NWZiZjNm LzEvZFhKVjNja0tUUS1DLXlaMFJwUHRmSmh0aW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5atMg2M F/YxqvMvFZWYCY1KYKXcmFykjqv3FCuK6bOabJ/qTPQv4HbvjNFLjB4OdHqwLIKU x3BECov58OM8vdmgz70J7hdLI97kVLS74Vyu196JikrqjjTcZzQPKrNy5iwPJIKe Vy0/QedGoScEkFctGK9K/sAPXjBlz7kK0UdY/AfxXwvJyzmtj8K0c1VG+y3kv8lb 3tXlNqcJo7/+8120r5Mlu5pkQUQeMikMc1sK1/UKDxOksQi6opEMB1QIxjtXkuMK ETxyzNza/5lIiCaVdulcKbtbkUVuSsGkYq+TnBo4TLo8+tFGDxBxBc/kdjVn7WCZ CF2q9oMVVYL8rA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:23 2025 by rpki-client