This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json) Hash identifier: K33DQK4oM3B7qX4Vjtoi5v9UkKbUtL/O6Heauq1WWmE= Subject key identifier: AD:D5:89:63:F2:FA:4A:CD:B9:3F:7A:27:AB:FA:58:65:45:9E:2A:8C Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Certificate serial: 019B3CEC574991D54D202075524E494A2113 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft Manifest number: 0F38 Signing time: Sat 20 Dec 2025 18:01:20 +0000 Manifest this update: Sat 20 Dec 2025 18:01:20 +0000 Manifest next update: Sun 21 Dec 2025 18:01:20 +0000 Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: 8IjR9T6abcobrK9ggvm0fsdok/vep9vowcL4t2mYxSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:57:49:91:d5:4d:20:20:75:52:4e:49:4a:21:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Validity Not Before: Dec 20 18:01:20 2025 GMT Not After : Dec 21 18:01:20 2025 GMT Subject: CN=add58963f2fa4acdb93f7a27abfa5865459e2a8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:ae:29:e3:3d:31:43:61:18:aa:67:9d:e6: 9c:47:74:61:7a:4f:00:54:d2:8a:29:fa:db:d1:cc: ec:d4:ed:f7:a9:6b:6c:e2:a6:bb:62:b9:2e:3d:cf: 9f:35:58:cd:7f:16:4a:7f:c3:19:a4:cb:06:29:34: 53:e1:77:f8:cd:85:f5:6c:ec:ce:51:c4:ea:86:b4: ee:07:cd:d4:8f:d2:98:f9:57:d0:1c:9d:88:d4:c8: 05:c1:1e:8a:99:9d:f1:23:68:19:a1:d8:fe:93:64: 00:93:59:b3:da:1c:c4:40:60:78:7a:8f:b6:28:f1: 08:3a:85:01:8d:e2:b0:ac:ea:37:3f:d1:0f:c9:53: 5c:eb:e9:d6:6e:b5:63:d7:52:8f:63:46:a6:0c:1c: cf:15:8f:c6:43:6e:f2:0e:51:a6:ea:a3:ab:5c:37: 1f:95:4b:24:59:b5:06:be:0a:97:c6:35:98:3b:7e: 03:be:3f:b5:59:9d:65:2d:3c:30:1b:c1:aa:8a:2f: e3:59:0a:5a:51:86:2d:9a:7f:6a:95:81:a3:a6:bc: eb:a5:53:15:2f:40:2e:37:1f:4b:5c:8f:56:de:02: 62:c6:dd:f8:73:51:76:34:eb:06:4f:4a:d3:d8:c1: 4c:2e:be:3b:4e:a3:e0:d4:97:95:48:02:5d:8b:0c: b6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D5:89:63:F2:FA:4A:CD:B9:3F:7A:27:AB:FA:58:65:45:9E:2A:8C X509v3 Authority Key Identifier: keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:24:05:17:83:2a:51:3d:fd:3f:df:11:a9:fe:6f:6e:2d:7e: 49:db:30:4f:31:32:ef:c0:1a:cd:a9:7f:3a:57:d3:1c:18:55: d6:0a:73:2a:4c:7f:f8:0e:d4:15:e3:e3:61:ca:7b:43:c5:4f: 6a:09:a2:94:e2:81:3b:53:19:9e:47:97:71:f4:61:3b:18:a7: 10:0b:4c:89:13:45:56:71:ef:55:16:30:27:7c:6d:85:ed:2d: 8f:a1:8a:9e:16:12:b9:99:33:45:6f:01:e4:f8:b1:65:78:57: 66:ff:7e:fe:bd:17:7c:38:c5:52:ba:2f:5c:65:1a:d1:77:80: ba:5b:21:f2:9f:d8:50:04:23:40:91:cf:ba:cc:19:c9:cb:da: c5:b8:b1:b0:8f:c2:0f:c1:55:8f:fd:76:06:5c:ab:00:06:48: e7:3b:ae:f2:29:83:66:2a:c0:e7:2a:51:4e:a8:86:68:78:26: e8:91:62:30:91:15:ca:ba:ff:ce:3e:3f:ce:a7:9c:c1:d6:b4: 9f:7e:f7:55:57:c5:f5:5d:55:53:b7:12:d6:6a:3a:c7:fa:e6: 14:54:72:9c:bd:63:b3:81:7e:6a:9d:c8:de:e9:81:e3:4b:59: 0f:2a:a1:fd:44:d5:c1:6f:18:e7:8c:27:95:27:51:b0:25:76: eb:64:7f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FdJkdVNICB1Uk5JSiETMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3 NzRiZjgwHhcNMjUxMjIwMTgwMTIwWhcNMjUxMjIxMTgwMTIwWjAzMTEwLwYDVQQD EyhhZGQ1ODk2M2YyZmE0YWNkYjkzZjdhMjdhYmZhNTg2NTQ1OWUyYThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3quuKeM9MUNhGKpnneacR3Rhek8A VNKKKfrb0czs1O33qWts4qa7YrkuPc+fNVjNfxZKf8MZpMsGKTRT4Xf4zYX1bOzO UcTqhrTuB83Uj9KY+VfQHJ2I1MgFwR6KmZ3xI2gZodj+k2QAk1mz2hzEQGB4eo+2 KPEIOoUBjeKwrOo3P9EPyVNc6+nWbrVj11KPY0amDBzPFY/GQ27yDlGm6qOrXDcf lUskWbUGvgqXxjWYO34Dvj+1WZ1lLTwwG8Gqii/jWQpaUYYtmn9qlYGjprzrpVMV L0AuNx9LXI9W3gJixt34c1F2NOsGT0rT2MFMLr47TqPg1JeVSAJdiwy27QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3ViWPy+krNuT96J6v6WGVFniqMMB8GA1UdIwQY MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1 LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAiQFF4Mq UT39P98Rqf5vbi1+SdswTzEy78Aazal/OlfTHBhV1gpzKkx/+A7UFePjYcp7Q8VP agmilOKBO1MZnkeXcfRhOxinEAtMiRNFVnHvVRYwJ3xthe0tj6GKnhYSuZkzRW8B 5PixZXhXZv9+/r0XfDjFUrovXGUa0XeAulsh8p/YUAQjQJHPuswZycvaxbixsI/C D8FVj/12BlyrAAZI5zuu8imDZirA5ypRTqiGaHgm6JFiMJEVyrr/zj4/zqecwda0 n373VVfF9V1VU7cS1mo6x/rmFFRynL1js4F+ap3I3umB40tZDyqh/UTVwW8Y54wn lSdRsCV262R/7A== -----END CERTIFICATE-----Generated at Sun Dec 21 00:01:43 2025 by rpki-client