This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft File: mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft (raw, json) Hash identifier: 2PLWyM9VyDW+m/XPHJ/quoU3R7FgQYoVXqItvcH0ONo= Subject key identifier: FE:C3:84:D3:81:AA:9C:90:94:AF:B6:78:3E:9B:E9:8D:8F:DF:9A:2E Authority key identifier: 99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47 Certificate issuer: /CN=9972148c7362c2c9399bb3af741592c42516c547 Certificate serial: 019B4581F35DB92C8EBE1F7A13853336FDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft Manifest number: 12C8 Signing time: Mon 22 Dec 2025 10:01:42 +0000 Manifest this update: Mon 22 Dec 2025 10:01:42 +0000 Manifest next update: Tue 23 Dec 2025 10:01:42 +0000 Files and hashes: 1: mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl (hash: vlU8oEh+0Nez8XhjVTvTfd9X99WYoCJwAVEvjjTTHak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:81:f3:5d:b9:2c:8e:be:1f:7a:13:85:33:36:fd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9972148c7362c2c9399bb3af741592c42516c547 Validity Not Before: Dec 22 10:01:42 2025 GMT Not After : Dec 23 10:01:42 2025 GMT Subject: CN=fec384d381aa9c9094afb6783e9be98d8fdf9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:b2:78:17:10:24:56:f5:57:9b:5a:45:b6: 2d:ed:f3:f6:d0:61:b3:1f:6a:bd:82:70:98:3f:ad: ef:d1:4d:e5:79:8a:ae:fb:5c:b3:09:23:c8:d4:f0: ea:3b:f7:8c:7c:a4:28:ba:6e:91:90:43:f7:64:82: 01:eb:de:73:56:43:51:e8:a7:94:23:5f:52:cf:21: 03:d8:78:04:36:f1:41:fe:47:c0:e4:dd:9a:b5:a8: c8:53:40:0c:02:49:ea:ad:e0:03:b7:2e:c0:06:05: 97:f3:5b:d6:bf:d1:9c:60:6c:6c:69:75:13:17:82: 68:16:1a:a7:f2:81:11:80:ba:3f:ff:49:33:d6:12: 0a:10:b6:c7:b5:e9:2f:76:2d:ad:86:5c:4b:dc:64: d8:70:f5:5a:f8:65:b9:39:de:fe:3d:8c:49:92:3f: 5f:82:6b:44:48:5c:f7:23:fa:c9:7b:4f:52:dd:4f: b8:7a:47:54:9e:73:62:54:e1:3e:b2:87:15:d2:67: 0c:9d:9d:eb:ee:8c:d7:71:84:bd:86:2a:b7:cb:46: 0e:91:b3:01:8c:8e:a0:5f:25:a2:06:37:9e:0d:4a: ef:1c:b0:d5:64:80:56:b1:bb:a8:a9:f9:28:ad:e8: 6e:60:38:7e:e4:01:ad:99:a6:f5:4b:07:43:f6:2e: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C3:84:D3:81:AA:9C:90:94:AF:B6:78:3E:9B:E9:8D:8F:DF:9A:2E X509v3 Authority Key Identifier: keyid:99:72:14:8C:73:62:C2:C9:39:9B:B3:AF:74:15:92:C4:25:16:C5:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXIUjHNiwsk5m7OvdBWSxCUWxUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/587b7b-071c-430b-9eb2-6ec62690b19b/1/mXIUjHNiwsk5m7OvdBWSxCUWxUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:57:3a:5f:a9:6d:0a:30:27:69:84:43:b9:fc:5c:04:8d:2b: fb:84:0b:8d:d5:62:e5:0c:1b:c6:8a:88:2e:3a:05:96:4a:c1: cb:d1:9f:1b:41:8e:d2:5f:7a:fe:72:68:ef:4e:58:eb:d2:5e: 62:6c:65:1b:9e:a4:48:86:d1:26:10:af:02:21:bf:fe:32:95: 33:98:0c:37:b6:d1:66:e2:e6:ca:54:01:a9:c4:ee:04:5c:4f: 67:13:68:2f:7c:51:66:8a:01:58:fc:32:bd:df:10:c9:c7:c8: b0:da:12:9a:29:52:a7:45:a5:b8:ab:fd:43:b2:d9:e2:18:d8: 5d:37:18:d3:68:f7:bf:12:7a:14:0a:4f:b7:c0:b4:2a:8e:8d: 26:a3:4f:28:06:e4:b8:99:35:3a:8b:38:f6:d4:7d:47:13:42: f0:62:97:fb:33:02:1d:94:54:0a:f6:e1:f4:06:4e:ae:99:10: 2a:36:79:d5:72:2b:8d:67:40:aa:f7:e4:bf:32:0a:e1:7d:75: 82:b4:ba:a9:9a:6c:d0:6a:84:4e:e7:0a:81:21:e6:ba:a4:e2: d0:88:ba:d6:81:21:07:f9:d9:7b:e0:3c:ed:8d:78:98:07:96: d6:88:33:b6:81:00:cf:59:d3:e2:a5:41:f0:6b:44:fd:8c:d1: c4:97:6b:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFgfNduSyOvh96E4UzNv3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NzIxNDhjNzM2MmMyYzkzOTliYjNhZjc0MTU5MmM0MjUx NmM1NDcwHhcNMjUxMjIyMTAwMTQyWhcNMjUxMjIzMTAwMTQyWjAzMTEwLwYDVQQD EyhmZWMzODRkMzgxYWE5YzkwOTRhZmI2NzgzZTliZTk4ZDhmZGY5YTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbGyeBcQJFb1V5taRbYt7fP20GGz H2q9gnCYP63v0U3leYqu+1yzCSPI1PDqO/eMfKQoum6RkEP3ZIIB695zVkNR6KeU I19SzyED2HgENvFB/kfA5N2atajIU0AMAknqreADty7ABgWX81vWv9GcYGxsaXUT F4JoFhqn8oERgLo//0kz1hIKELbHtekvdi2thlxL3GTYcPVa+GW5Od7+PYxJkj9f gmtESFz3I/rJe09S3U+4ekdUnnNiVOE+socV0mcMnZ3r7ozXcYS9hiq3y0YOkbMB jI6gXyWiBjeeDUrvHLDVZIBWsbuoqfkorehuYDh+5AGtmab1SwdD9i6jLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7DhNOBqpyQlK+2eD6b6Y2P35ouMB8GA1UdIwQY MBaAFJlyFIxzYsLJOZuzr3QVksQlFsVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjIt NmVjNjI2OTBiMTliLzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy81ODdiN2ItMDcxYy00MzBiLTllYjItNmVjNjI2OTBiMTli LzEvbVhJVWpITml3c2s1bTdPdmRCV1N4Q1VXeFVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVc6X6lt CjAnaYRDufxcBI0r+4QLjdVi5QwbxoqILjoFlkrBy9GfG0GO0l96/nJo705Y69Je YmxlG56kSIbRJhCvAiG//jKVM5gMN7bRZuLmylQBqcTuBFxPZxNoL3xRZooBWPwy vd8QycfIsNoSmilSp0WluKv9Q7LZ4hjYXTcY02j3vxJ6FApPt8C0Ko6NJqNPKAbk uJk1Oos49tR9RxNC8GKX+zMCHZRUCvbh9AZOrpkQKjZ51XIrjWdAqvfkvzIK4X11 grS6qZps0GqETucKgSHmuqTi0Ii61oEhB/nZe+A87Y14mAeW1ogztoEAz1nT4qVB 8GtE/YzRxJdrAQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:04:44 2025 by rpki-client