This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft File: x87XolsQkPDT8-uXyBSrL_fb_DY.mft (raw, json) Hash identifier: u93ZftnAAbQn1tB5Ze38KXfKew8k/YMLb5lhUZmeuRk= Subject key identifier: FF:6A:53:EE:B5:25:1C:82:DD:6F:D5:C5:CA:70:46:2E:20:5C:59:CB Authority key identifier: C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36 Certificate issuer: /CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36 Certificate serial: 019B6D6ACB1D8766EEBC18D8DF05D2CD5D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft Manifest number: 0B12 Signing time: Tue 30 Dec 2025 04:01:13 +0000 Manifest this update: Tue 30 Dec 2025 04:01:13 +0000 Manifest next update: Wed 31 Dec 2025 04:01:13 +0000 Files and hashes: 1: x87XolsQkPDT8-uXyBSrL_fb_DY.crl (hash: yYWjStUy+6Ygj2d4hA8BDTsBZZjr3Xpieq2jUawkCn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:cb:1d:87:66:ee:bc:18:d8:df:05:d2:cd:5d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ced7a25b1090f0d3f3eb97c814ab2ff7dbfc36 Validity Not Before: Dec 30 04:01:13 2025 GMT Not After : Dec 31 04:01:13 2025 GMT Subject: CN=ff6a53eeb5251c82dd6fd5c5ca70462e205c59cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:ce:6d:b7:ed:55:72:a8:c4:42:40:80:f1: f1:35:14:aa:1d:f4:1f:b0:18:68:26:03:0e:85:31: e8:c7:b0:ef:17:8f:86:44:71:b5:7d:ad:63:de:b7: 9a:3e:51:89:6a:61:99:92:48:ea:e7:df:76:75:88: 29:92:01:01:5a:2d:e6:28:33:03:f8:e1:ed:7b:1e: 4a:41:0a:72:7d:26:f9:3a:85:af:ef:39:39:97:44: 66:0c:4a:af:67:76:ef:26:85:b6:88:22:42:ef:fd: d4:ff:9e:c2:c4:72:91:18:88:10:a9:c1:fc:fb:6d: 5c:57:0c:86:3f:7b:c8:a3:f9:93:d5:e3:0b:73:16: 09:c6:e2:2d:1f:b2:9a:ab:ff:45:c6:4c:56:20:95: 82:74:8a:c7:10:d2:a7:8a:3c:e3:2b:b5:25:32:a0: de:d8:ed:19:6f:6d:44:ec:c4:2b:8c:3d:3c:b4:ca: 1c:34:ce:d5:7d:56:8f:09:4d:d4:71:3f:ed:dd:a7: 1b:10:99:d2:2b:4a:c7:9b:04:4f:d6:d9:17:b6:ff: 37:77:43:e0:4a:8e:33:31:b3:9a:0d:5c:5b:70:26: b3:72:98:14:06:c0:e6:a4:d3:9d:e2:12:9c:9a:e5: 74:b2:54:0c:29:85:62:dc:cd:32:f3:8e:37:89:1c: d7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:6A:53:EE:B5:25:1C:82:DD:6F:D5:C5:CA:70:46:2E:20:5C:59:CB X509v3 Authority Key Identifier: keyid:C7:CE:D7:A2:5B:10:90:F0:D3:F3:EB:97:C8:14:AB:2F:F7:DB:FC:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x87XolsQkPDT8-uXyBSrL_fb_DY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0a93a1-1229-405c-ba49-8a2b78020fee/1/x87XolsQkPDT8-uXyBSrL_fb_DY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ce:b2:39:8f:e9:10:c8:d9:47:4c:fa:60:91:64:7a:57:8a: a7:ae:b8:e9:ca:e1:9e:96:91:81:5f:3f:87:92:c1:30:ff:6a: d5:40:ae:6c:a1:1e:73:57:df:1f:95:29:2e:32:89:1c:ff:13: 79:83:08:d7:51:09:f6:c8:d9:a7:29:f0:f4:90:cb:72:24:90: f8:85:02:76:9c:34:ce:14:64:63:d1:83:81:0b:04:37:c6:13: 37:d5:a0:32:b6:7d:19:c2:36:50:b1:9f:66:5f:94:b8:80:f8: 81:30:24:6f:62:4f:67:06:9c:c1:62:95:87:85:37:8b:03:4e: 66:d2:5b:4b:d4:bd:6a:81:fc:9b:8c:bf:5b:cd:79:ce:e4:8b: e6:2d:ae:29:c5:e8:e9:96:c3:3e:34:20:8d:37:f1:64:4d:75: 41:f4:21:d7:64:23:b8:09:d5:f0:37:c8:8a:bd:63:e9:70:0d: 1b:6d:d4:67:22:d8:fc:9b:71:85:b9:20:ec:30:2c:54:b3:53: 05:b5:33:8a:e7:21:51:c5:61:8d:86:9e:24:da:12:50:d1:20: b6:1a:b9:3c:8f:46:95:ca:51:e4:41:b1:da:0e:15:b3:80:b3: 0e:40:40:cd:0a:53:c3:bd:66:e3:b3:af:ef:61:75:cf:63:80: 6c:f0:ec:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttassdh2buvBjY3wXSzV0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Y2VkN2EyNWIxMDkwZjBkM2YzZWI5N2M4MTRhYjJmZjdk YmZjMzYwHhcNMjUxMjMwMDQwMTEzWhcNMjUxMjMxMDQwMTEzWjAzMTEwLwYDVQQD EyhmZjZhNTNlZWI1MjUxYzgyZGQ2ZmQ1YzVjYTcwNDYyZTIwNWM1OWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+XObbftVXKoxEJAgPHxNRSqHfQf sBhoJgMOhTHox7DvF4+GRHG1fa1j3reaPlGJamGZkkjq5992dYgpkgEBWi3mKDMD +OHtex5KQQpyfSb5OoWv7zk5l0RmDEqvZ3bvJoW2iCJC7/3U/57CxHKRGIgQqcH8 +21cVwyGP3vIo/mT1eMLcxYJxuItH7Kaq/9FxkxWIJWCdIrHENKnijzjK7UlMqDe 2O0Zb21E7MQrjD08tMocNM7VfVaPCU3UcT/t3acbEJnSK0rHmwRP1tkXtv83d0Pg So4zMbOaDVxbcCazcpgUBsDmpNOd4hKcmuV0slQMKYVi3M0y8443iRzXXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9qU+61JRyC3W/VxcpwRi4gXFnLMB8GA1UdIwQY MBaAFMfO16JbEJDw0/Prl8gUqy/32/w2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDkt OGEyYjc4MDIwZmVlLzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wYTkzYTEtMTIyOS00MDVjLWJhNDktOGEyYjc4MDIwZmVl LzEveDg3WG9sc1FrUERUOC11WHlCU3JMX2ZiX0RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFc6yOY/p EMjZR0z6YJFkeleKp6646crhnpaRgV8/h5LBMP9q1UCubKEec1ffH5UpLjKJHP8T eYMI11EJ9sjZpynw9JDLciSQ+IUCdpw0zhRkY9GDgQsEN8YTN9WgMrZ9GcI2ULGf Zl+UuID4gTAkb2JPZwacwWKVh4U3iwNOZtJbS9S9aoH8m4y/W815zuSL5i2uKcXo 6ZbDPjQgjTfxZE11QfQh12QjuAnV8DfIir1j6XANG23UZyLY/Jtxhbkg7DAsVLNT BbUziuchUcVhjYaeJNoSUNEgthq5PI9GlcpR5EGx2g4Vs4CzDkBAzQpTw71m47Ov 72F1z2OAbPDsNg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:13:25 2025 by rpki-client