This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json) Hash identifier: jmEs1C4yqBckOHehWkxP/F+KJ8kFPUWVw/6HNVK0ulk= Subject key identifier: 66:E9:FD:65:10:F6:28:1E:06:EE:A1:C9:64:60:E2:AA:E7:95:B0:A8 Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be Certificate serial: 019B6CC5C1D93C6F4FE6B47BA004D3610089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 01:00:57 +0000 Manifest this update: Tue 30 Dec 2025 01:00:57 +0000 Manifest next update: Wed 31 Dec 2025 01:00:57 +0000 Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: XHns3q6Ozp9YRyDN/6OiWqgtJwRrd5SrO65w8PugF2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:c1:d9:3c:6f:4f:e6:b4:7b:a0:04:d3:61:00:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be Validity Not Before: Dec 30 01:00:57 2025 GMT Not After : Dec 31 01:00:57 2025 GMT Subject: CN=66e9fd6510f6281e06eea1c96460e2aae795b0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:57:b8:53:9e:2b:94:7b:c4:3d:d9:0c:f8: b6:c4:fc:6b:42:66:ac:57:a4:8b:e1:3a:4d:49:90: 6d:1c:05:30:68:1a:c3:ed:53:80:bf:5a:b1:57:cc: 8d:6c:81:ba:ca:df:48:35:81:cf:f7:08:b0:3e:ad: d5:ea:9e:33:1a:96:b2:77:e2:84:47:9f:b6:7b:ae: 71:01:76:27:6b:c0:60:d6:04:fe:74:ad:7a:01:38: 08:87:99:c6:85:20:0f:8c:4d:21:ae:ce:bf:3d:28: 50:d4:e8:ee:8d:b7:48:b8:f3:e7:c2:92:e5:e1:25: 39:3b:a8:ba:c0:4d:5c:a0:13:7e:46:91:df:f4:a2: d4:2e:e0:7d:25:fa:18:8b:61:89:fc:54:ce:04:c9: ef:8b:c7:20:6b:d1:02:cc:c1:2e:d8:b9:b2:bb:25: 40:68:bf:05:ed:43:e6:d0:d3:7c:f9:6a:e8:f2:3e: 1a:a3:95:b3:fe:a8:e2:4b:f6:da:f4:a4:eb:9a:25: 7b:bc:93:13:57:b4:42:5a:ce:9c:88:1c:83:b7:25: bb:e3:8d:91:db:75:e3:ff:56:93:44:e0:6d:3b:11: d3:46:cc:8b:23:17:4d:a8:0f:e6:ee:e4:5d:dc:cf: cc:2b:64:54:e8:dd:8d:32:af:bb:90:91:03:95:82: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E9:FD:65:10:F6:28:1E:06:EE:A1:C9:64:60:E2:AA:E7:95:B0:A8 X509v3 Authority Key Identifier: keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:9d:4d:c9:9b:d6:ff:36:85:38:d2:05:b7:64:84:bf:80: bc:a0:cc:64:bd:4f:5a:da:6d:76:9c:45:22:ad:f5:06:3d:71: 72:e2:8b:fe:e5:ae:78:9d:68:ce:4e:e3:e3:b4:43:65:99:b9: 32:5f:6d:9e:7e:16:44:c9:0a:28:e8:22:f5:25:38:18:13:40: 04:60:87:fb:37:8c:f3:e5:1e:70:01:e5:49:06:56:12:96:b5: 76:43:7a:21:a4:21:d1:a5:31:e1:1e:20:3d:f0:b0:37:78:62: d3:28:85:9d:dc:b0:d7:b9:42:f8:14:69:f1:da:8b:41:0a:ad: 80:65:d7:96:36:0a:b1:b8:e4:f3:dd:78:60:37:06:66:33:01: 2d:61:6d:62:4d:53:bd:21:65:09:0d:59:71:a3:23:67:30:e1: bf:72:59:1c:60:e2:c1:04:55:ba:bd:51:94:46:41:59:f1:f1: 65:5e:5c:b5:23:a8:1e:96:a4:d8:84:23:54:84:06:de:88:06: 78:7f:3f:cc:b3:88:50:d6:63:02:d0:0f:91:1b:dd:05:01:c6: 5b:13:a1:60:c1:09:e1:88:17:22:d7:52:23:60:05:1f:60:96: dc:af:05:13:64:47:22:fd:20:a3:8b:e1:9f:7a:be:8a:df:77: 10:27:30:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxcHZPG9P5rR7oATTYQCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjVjMTY3OTVlZDg4MjU1MDBiYWY1N2E3YTcwNWI1MTM3 NWE4YmUwHhcNMjUxMjMwMDEwMDU3WhcNMjUxMjMxMDEwMDU3WjAzMTEwLwYDVQQD Eyg2NmU5ZmQ2NTEwZjYyODFlMDZlZWExYzk2NDYwZTJhYWU3OTViMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sVXuFOeK5R7xD3ZDPi2xPxrQmas V6SL4TpNSZBtHAUwaBrD7VOAv1qxV8yNbIG6yt9INYHP9wiwPq3V6p4zGpayd+KE R5+2e65xAXYna8Bg1gT+dK16ATgIh5nGhSAPjE0hrs6/PShQ1OjujbdIuPPnwpLl 4SU5O6i6wE1coBN+RpHf9KLULuB9JfoYi2GJ/FTOBMnvi8cga9ECzMEu2LmyuyVA aL8F7UPm0NN8+Wro8j4ao5Wz/qjiS/ba9KTrmiV7vJMTV7RCWs6ciByDtyW7442R 23Xj/1aTROBtOxHTRsyLIxdNqA/m7uRd3M/MK2RU6N2NMq+7kJEDlYJrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbp/WUQ9igeBu6hyWRg4qrnlbCoMB8GA1UdIwQY MBaAFET1wWeV7YglUAuvV6enBbUTdai+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUt NDQ5OWI2MDcyYWYyLzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUtNDQ5OWI2MDcyYWYy LzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXdidTcmb 1v82hTjSBbdkhL+AvKDMZL1PWtptdpxFIq31Bj1xcuKL/uWueJ1ozk7j47RDZZm5 Ml9tnn4WRMkKKOgi9SU4GBNABGCH+zeM8+UecAHlSQZWEpa1dkN6IaQh0aUx4R4g PfCwN3hi0yiFndyw17lC+BRp8dqLQQqtgGXXljYKsbjk8914YDcGZjMBLWFtYk1T vSFlCQ1ZcaMjZzDhv3JZHGDiwQRVur1RlEZBWfHxZV5ctSOoHpak2IQjVIQG3ogG eH8/zLOIUNZjAtAPkRvdBQHGWxOhYMEJ4YgXItdSI2AFH2CW3K8FE2RHIv0go4vh n3q+it93ECcwnQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:50:38 2025 by rpki-client