This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft File: dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json) Hash identifier: QD7SulVKkgDrHBUKMRtNH2sqk2dr49EcpYCkgTzGPZc= Subject key identifier: 8F:86:AF:9B:F5:7B:9B:D3:AA:90:ED:DD:67:42:D1:07:A9:51:2B:D7 Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD Certificate issuer: /CN=7565e124b1c41b93b14d7ede05d6b80777989afd Certificate serial: 019B52CED330787CAFD1F89179F9B235EF10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft Manifest number: 1538 Signing time: Thu 25 Dec 2025 00:00:44 +0000 Manifest this update: Thu 25 Dec 2025 00:00:44 +0000 Manifest next update: Fri 26 Dec 2025 00:00:44 +0000 Files and hashes: 1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: rJJIYj4J1rIdOzfrLi/vi5RXBA09g74smocm2wn2P94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:d3:30:78:7c:af:d1:f8:91:79:f9:b2:35:ef:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd Validity Not Before: Dec 25 00:00:44 2025 GMT Not After : Dec 26 00:00:44 2025 GMT Subject: CN=8f86af9bf57b9bd3aa90eddd6742d107a9512bd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:46:bd:1d:9f:b8:07:0d:46:bf:00:25:e0:17: 58:a2:1a:d9:8e:9d:99:3c:6b:30:d0:f9:4b:72:e3: d1:50:71:85:05:70:94:d8:90:48:ca:0d:6f:6a:00: f9:35:de:00:f2:d2:84:bd:55:d4:75:b2:21:25:30: 82:3d:4d:a6:c8:f3:72:f9:dd:21:39:d8:e4:2e:10: b5:ab:44:79:ea:60:b9:7c:52:9a:3c:18:3e:ad:57: cb:ee:0a:96:61:4d:20:fc:7b:5b:ac:eb:93:80:52: c5:fe:25:6d:77:a5:04:84:ff:07:f2:a4:d4:94:b8: 9d:8b:13:94:49:56:96:bc:8c:24:01:83:0c:ef:0d: cc:ba:54:b3:e1:77:2d:4a:9b:13:1f:8d:56:c6:26: 64:5f:b3:55:66:4a:0e:71:61:6f:49:ec:82:dd:53: cd:d4:9b:6b:7c:e2:4e:32:10:a8:f8:05:2d:8c:7b: 89:a8:fa:e6:e1:92:56:36:02:c3:9a:2d:74:6c:aa: f5:ab:dc:32:b0:10:42:3c:ef:01:d3:67:1c:ea:e2: 1b:57:95:20:c5:12:ee:e2:a0:59:4e:43:a5:5d:8a: d0:f6:c1:ab:c9:72:0a:d3:3d:69:0d:6e:af:6c:b1: 32:db:f4:ef:a2:71:04:ee:65:e7:e2:fb:37:a4:d4: 88:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:AF:9B:F5:7B:9B:D3:AA:90:ED:DD:67:42:D1:07:A9:51:2B:D7 X509v3 Authority Key Identifier: keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8c:50:ef:cd:5a:b3:de:02:ad:e3:1c:bc:8e:ac:3f:e4:a6: a8:b6:30:ac:19:40:2a:f6:8f:89:15:26:2f:1c:36:23:51:ab: 96:32:55:d6:cd:8f:1b:1f:04:91:20:31:aa:cb:06:e6:62:ff: 68:1f:a2:e7:20:d4:3d:0b:ad:b6:5f:a2:8e:8d:64:89:f8:8e: f7:af:6e:86:3c:b4:97:d5:85:37:95:27:2c:32:40:1f:7e:78: 3f:a8:06:9d:54:13:28:38:0f:67:90:de:49:26:b0:b0:e7:82: fa:0d:af:c7:f8:d5:e4:4c:33:73:56:4d:06:bd:1c:8f:af:8d: 26:fc:b8:50:6c:c6:22:61:08:0c:06:42:bb:6c:0d:ca:eb:41: 41:ac:a9:e2:aa:d6:d5:bf:39:90:c8:49:76:66:77:22:25:e5: 32:aa:21:bf:66:67:a9:79:00:67:0c:e2:fe:c2:fb:58:ab:84: ae:24:45:49:a8:fe:3d:19:3a:66:21:cd:74:59:5b:bf:35:19: b7:e2:be:7a:d3:55:21:70:da:3f:ed:82:13:40:0f:32:43:9b: 9f:0c:56:ae:11:7d:03:21:c7:3c:4a:31:98:ee:0d:52:12:28: 91:b2:92:96:bf:2a:20:82:7c:d8:ec:86:93:44:7e:1b:30:cb: 93:02:96:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSztMweHyv0fiRefmyNe8QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjVlMTI0YjFjNDFiOTNiMTRkN2VkZTA1ZDZiODA3Nzc5 ODlhZmQwHhcNMjUxMjI1MDAwMDQ0WhcNMjUxMjI2MDAwMDQ0WjAzMTEwLwYDVQQD Eyg4Zjg2YWY5YmY1N2I5YmQzYWE5MGVkZGQ2NzQyZDEwN2E5NTEyYmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEa9HZ+4Bw1GvwAl4BdYohrZjp2Z PGsw0PlLcuPRUHGFBXCU2JBIyg1vagD5Nd4A8tKEvVXUdbIhJTCCPU2myPNy+d0h OdjkLhC1q0R56mC5fFKaPBg+rVfL7gqWYU0g/HtbrOuTgFLF/iVtd6UEhP8H8qTU lLidixOUSVaWvIwkAYMM7w3MulSz4XctSpsTH41WxiZkX7NVZkoOcWFvSeyC3VPN 1JtrfOJOMhCo+AUtjHuJqPrm4ZJWNgLDmi10bKr1q9wysBBCPO8B02cc6uIbV5Ug xRLu4qBZTkOlXYrQ9sGryXIK0z1pDW6vbLEy2/TvonEE7mXn4vs3pNSIaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+Gr5v1e5vTqpDt3WdC0QepUSvXMB8GA1UdIwQY MBaAFHVl4SSxxBuTsU1+3gXWuAd3mJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi85Njk1MmItNzliOC00ZTA0LWJjNGEt MjllNDQ1ZGUyNDU5LzEvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi85Njk1MmItNzliOC00ZTA0LWJjNGEtMjllNDQ1ZGUyNDU5 LzEvZFdYaEpMSEVHNU94VFg3ZUJkYTRCM2VZbXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABYxQ781a s94CreMcvI6sP+SmqLYwrBlAKvaPiRUmLxw2I1GrljJV1s2PGx8EkSAxqssG5mL/ aB+i5yDUPQuttl+ijo1kifiO969uhjy0l9WFN5UnLDJAH354P6gGnVQTKDgPZ5De SSawsOeC+g2vx/jV5Ewzc1ZNBr0cj6+NJvy4UGzGImEIDAZCu2wNyutBQayp4qrW 1b85kMhJdmZ3IiXlMqohv2ZnqXkAZwzi/sL7WKuEriRFSaj+PRk6ZiHNdFlbvzUZ t+K+etNVIXDaP+2CE0APMkObnwxWrhF9AyHHPEoxmO4NUhIokbKSlr8qIIJ82OyG k0R+GzDLkwKW3w== -----END CERTIFICATE-----Generated at Thu Dec 25 09:05:25 2025 by rpki-client