This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json) Hash identifier: dkum/CwBEhoctp2L6hSaU11hPn3hgqVL/wT3wNkGKpQ= Subject key identifier: F8:17:2D:2B:D7:B0:DA:23:4C:C4:F9:38:87:32:00:27:B0:58:2E:1F Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Certificate serial: 019B476FFB5C455346DBAC922C84FDFEFE3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft Manifest number: 13FA Signing time: Mon 22 Dec 2025 19:01:19 +0000 Manifest this update: Mon 22 Dec 2025 19:01:19 +0000 Manifest next update: Tue 23 Dec 2025 19:01:19 +0000 Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: TlqRHTD9/cT5StGWmMjfstmjsKN5gw6CBu30ZRhzmoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:6f:fb:5c:45:53:46:db:ac:92:2c:84:fd:fe:fe:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Validity Not Before: Dec 22 19:01:19 2025 GMT Not After : Dec 23 19:01:19 2025 GMT Subject: CN=f8172d2bd7b0da234cc4f93887320027b0582e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:01:8c:6c:d4:54:04:6a:9b:a8:4b:74:75: 06:71:4f:df:16:e3:0d:65:fb:8b:38:db:9e:2f:2c: 6b:aa:c3:b7:6a:40:2d:40:9f:67:f1:e7:a7:97:8d: 18:86:b8:0e:95:52:3e:32:f0:6f:20:6e:c0:4a:33: 55:2c:e3:f3:80:32:40:e1:df:99:7f:60:55:0e:e2: 5b:ff:b9:18:5a:40:f8:c7:6c:eb:9f:43:ec:a8:d6: 96:78:c0:32:01:c8:21:e2:a3:ef:26:8c:41:cc:99: 2b:0f:a7:9a:d8:d8:30:1d:cc:ff:c6:5c:87:a6:fd: fb:d1:7c:f1:c4:9d:e7:ec:1f:53:2f:c0:16:81:21: ad:93:c2:e1:99:80:a2:2e:32:57:9a:43:e2:10:70: df:9e:9a:3d:db:b0:36:f0:ad:a9:86:f0:84:ee:8a: 9e:e8:af:3b:1b:dd:c3:8c:62:7e:8f:9e:29:86:71: 2d:c6:a1:11:1d:32:d5:6f:1d:df:cd:42:df:c0:d3: 17:7a:5f:70:b7:d6:89:54:66:cd:4a:50:9f:87:7f: 0e:dc:df:27:5d:8f:48:b6:79:a6:76:d9:40:9f:24: 96:03:2f:1d:2a:1c:5a:5b:bb:60:85:e8:1c:2f:b0: 6d:78:7b:9d:26:9b:2d:f9:d1:47:9e:38:3d:17:37: a8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:17:2D:2B:D7:B0:DA:23:4C:C4:F9:38:87:32:00:27:B0:58:2E:1F X509v3 Authority Key Identifier: keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fe:90:a7:e4:1f:94:cc:07:92:68:a1:6a:03:bd:0a:21:3c: 7a:a7:87:78:95:85:19:04:b6:83:5a:56:3b:17:4a:2a:37:95: 39:86:4b:2c:f0:fe:47:8e:00:76:ca:28:f7:73:ef:10:5c:60: 0b:76:8c:96:c3:bc:73:a0:2c:4e:3a:b5:40:b5:78:8f:00:34: 85:e7:f1:ff:7d:b7:41:32:7d:a6:9a:6f:63:fc:59:22:ad:b8: 2f:f0:c9:38:8d:7b:43:f7:6c:8c:be:72:41:13:5a:9a:d6:1f: ff:9a:80:3d:21:da:58:c3:68:3d:ef:6d:cf:fa:55:d0:3c:02: d5:47:19:44:4c:ef:04:a9:e4:7b:89:a4:7c:43:a0:a3:62:ed: b1:07:68:5a:11:7e:1b:eb:bb:9e:a9:a4:c1:f5:83:40:72:6a: 26:32:51:57:98:1f:c6:16:70:f1:37:db:e0:7a:f2:b3:d7:61: c4:fb:b4:d2:f8:0d:2a:c6:3d:42:d1:13:87:2a:27:4a:12:13: 0e:85:dc:62:10:71:bf:c0:13:bd:5f:2e:6f:6b:87:b7:af:e6: 2a:3b:23:5c:10:c3:39:a8:6a:a6:53:fb:b1:fd:f2:12:b7:27: 38:b7:6f:13:ac:6a:4f:ec:fe:d0:6e:14:c7:03:fd:27:de:93: 41:c3:c0:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHb/tcRVNG26ySLIT9/v4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWQyMGFhNGQ0NWQ1NjFlMjRkOTI2ZjU5YjE3NTI3OGQ5 YjAxYzgwHhcNMjUxMjIyMTkwMTE5WhcNMjUxMjIzMTkwMTE5WjAzMTEwLwYDVQQD EyhmODE3MmQyYmQ3YjBkYTIzNGNjNGY5Mzg4NzMyMDAyN2IwNTgyZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lkBjGzUVARqm6hLdHUGcU/fFuMN ZfuLONueLyxrqsO3akAtQJ9n8eenl40YhrgOlVI+MvBvIG7ASjNVLOPzgDJA4d+Z f2BVDuJb/7kYWkD4x2zrn0PsqNaWeMAyAcgh4qPvJoxBzJkrD6ea2NgwHcz/xlyH pv370XzxxJ3n7B9TL8AWgSGtk8LhmYCiLjJXmkPiEHDfnpo927A28K2phvCE7oqe 6K87G93DjGJ+j54phnEtxqERHTLVbx3fzULfwNMXel9wt9aJVGbNSlCfh38O3N8n XY9ItnmmdtlAnySWAy8dKhxaW7tghegcL7BteHudJpst+dFHnjg9FzeozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgXLSvXsNojTMT5OIcyACewWC4fMB8GA1UdIwQY MBaAFMftIKpNRdVh4k2Sb1mxdSeNmwHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMt NmE1ZThlYmRmZDEyLzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMtNmE1ZThlYmRmZDEy LzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf6Qp+Qf lMwHkmihagO9CiE8eqeHeJWFGQS2g1pWOxdKKjeVOYZLLPD+R44Adsoo93PvEFxg C3aMlsO8c6AsTjq1QLV4jwA0hefx/323QTJ9pppvY/xZIq24L/DJOI17Q/dsjL5y QRNamtYf/5qAPSHaWMNoPe9tz/pV0DwC1UcZREzvBKnke4mkfEOgo2LtsQdoWhF+ G+u7nqmkwfWDQHJqJjJRV5gfxhZw8Tfb4Hrys9dhxPu00vgNKsY9QtEThyonShIT DoXcYhBxv8ATvV8ub2uHt6/mKjsjXBDDOahqplP7sf3yErcnOLdvE6xqT+z+0G4U xwP9J96TQcPAMQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:45:49 2025 by rpki-client