This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft File: X6FRijy1wnSeMNn_Icg3iJHOgSU.mft (raw, json) Hash identifier: sAqUb4fmpTL3Spbs+tQ+3v9XsSDFqOOzfOvsg26XXuw= Subject key identifier: 5F:5A:28:D2:A5:58:58:B2:62:56:08:6A:85:C0:4D:AC:D0:62:5E:65 Authority key identifier: 5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25 Certificate issuer: /CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125 Certificate serial: 019B44386498AF64CECE5281334CCB8289EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft Manifest number: 09FC Signing time: Mon 22 Dec 2025 04:01:44 +0000 Manifest this update: Mon 22 Dec 2025 04:01:44 +0000 Manifest next update: Tue 23 Dec 2025 04:01:44 +0000 Files and hashes: 1: X6FRijy1wnSeMNn_Icg3iJHOgSU.crl (hash: HlgCSx4nPcw7zT0aGcVl1UWI3SPFACoZyzxhi14K+II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:64:98:af:64:ce:ce:52:81:33:4c:cb:82:89:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa1518a3cb5c2749e30d9ff21c8378891ce8125 Validity Not Before: Dec 22 04:01:44 2025 GMT Not After : Dec 23 04:01:44 2025 GMT Subject: CN=5f5a28d2a55858b26256086a85c04dacd0625e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ae:b7:44:c6:ba:c5:d2:cf:93:80:03:91:93: b6:0e:65:a1:52:cd:30:a5:7d:e9:2a:59:f1:6d:65: df:63:f3:12:9c:e8:6a:70:d5:2b:d3:5e:85:0c:aa: b0:c9:f1:8a:aa:72:44:03:c1:3b:d5:4e:af:1a:9e: 10:6d:5b:d5:92:c1:37:13:b0:ee:f2:20:23:f5:40: 6c:2c:02:c9:47:ea:22:6e:b6:ad:40:1a:fd:02:a1: 82:26:76:5b:72:e3:23:06:58:b9:ce:5d:da:29:bd: 55:5c:b3:5d:c5:99:82:5c:a8:29:f8:7c:97:1d:c1: 7e:27:99:4f:94:e2:72:bf:26:5d:8e:31:57:ef:8c: 12:f1:a0:45:44:c6:77:16:be:60:91:1d:79:5a:4a: 62:08:42:b6:2d:28:6b:ce:7b:de:d7:a1:87:0d:19: be:68:3a:b1:33:6b:d6:2c:b1:a9:7c:3c:72:ed:0e: 74:08:4b:69:87:17:f4:9d:90:03:39:92:f6:39:6e: f6:bb:40:6c:ce:1a:25:3b:32:82:f3:cb:57:c4:d2: 57:65:82:c6:31:d3:60:07:c9:6e:4d:ad:ef:06:d8: 22:64:be:e8:3d:d0:85:84:86:cf:05:20:e6:a5:bc: 37:63:a1:7e:ba:94:20:d0:0c:1d:22:d0:17:b8:19: 29:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:28:D2:A5:58:58:B2:62:56:08:6A:85:C0:4D:AC:D0:62:5E:65 X509v3 Authority Key Identifier: keyid:5F:A1:51:8A:3C:B5:C2:74:9E:30:D9:FF:21:C8:37:88:91:CE:81:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6FRijy1wnSeMNn_Icg3iJHOgSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/931015-a80b-4844-ac37-6e8e98b90c5f/1/X6FRijy1wnSeMNn_Icg3iJHOgSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e4:26:ee:f4:4b:9e:ca:bc:dd:e5:68:c6:ab:9d:9c:f0:29: fa:bd:c5:6e:87:5d:4c:19:7c:fa:70:be:3c:42:b4:c9:e7:17: d9:73:72:9b:ad:c7:7a:8a:c6:e0:97:40:47:e4:aa:34:5e:eb: 2d:91:78:03:01:0e:52:a2:55:5c:77:78:d9:a2:cd:c6:98:1a: 83:b1:5f:6e:9f:3c:ba:65:3a:7f:c4:2c:88:51:ca:05:f7:ae: 6a:9b:4c:87:c0:6a:ee:55:d5:98:87:39:df:73:7f:4a:46:1f: d0:a4:45:81:36:86:5b:3c:d5:90:99:d1:75:f5:34:b7:38:b6: 33:e0:89:cf:7c:2d:c8:f7:58:2f:7a:e0:d5:bb:08:e4:6d:dd: a0:a7:7b:17:b1:e3:f8:1e:5c:7a:38:e8:f7:29:b2:8a:7a:02: 75:5c:f5:c4:5e:fe:da:2a:c9:50:36:37:5a:e3:31:74:3f:2e: a2:68:ee:1b:2f:d4:66:c4:be:65:b9:51:46:98:0e:9c:fd:7d: f9:81:23:fb:8e:a0:7e:90:b0:01:ff:f2:84:93:68:7d:37:a3: 57:68:1f:5f:db:eb:1a:48:46:aa:d0:2d:8a:14:92:37:92:e5: fa:67:22:22:87:31:89:06:da:5d:21:6c:eb:ff:8d:f4:da:33: e1:e0:78:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOGSYr2TOzlKBM0zLgonvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTE1MThhM2NiNWMyNzQ5ZTMwZDlmZjIxYzgzNzg4OTFj ZTgxMjUwHhcNMjUxMjIyMDQwMTQ0WhcNMjUxMjIzMDQwMTQ0WjAzMTEwLwYDVQQD Eyg1ZjVhMjhkMmE1NTg1OGIyNjI1NjA4NmE4NWMwNGRhY2QwNjI1ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK63RMa6xdLPk4ADkZO2DmWhUs0w pX3pKlnxbWXfY/MSnOhqcNUr016FDKqwyfGKqnJEA8E71U6vGp4QbVvVksE3E7Du 8iAj9UBsLALJR+oibratQBr9AqGCJnZbcuMjBli5zl3aKb1VXLNdxZmCXKgp+HyX HcF+J5lPlOJyvyZdjjFX74wS8aBFRMZ3Fr5gkR15WkpiCEK2LShrznve16GHDRm+ aDqxM2vWLLGpfDxy7Q50CEtphxf0nZADOZL2OW72u0BszholOzKC88tXxNJXZYLG MdNgB8luTa3vBtgiZL7oPdCFhIbPBSDmpbw3Y6F+upQg0AwdItAXuBkpiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9aKNKlWFiyYlYIaoXATazQYl5lMB8GA1UdIwQY MBaAFF+hUYo8tcJ0njDZ/yHIN4iRzoElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC85MzEwMTUtYTgwYi00ODQ0LWFjMzct NmU4ZTk4YjkwYzVmLzEvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC85MzEwMTUtYTgwYi00ODQ0LWFjMzctNmU4ZTk4YjkwYzVm LzEvWDZGUmlqeTF3blNlTU5uX0ljZzNpSkhPZ1NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOQm7vRL nsq83eVoxqudnPAp+r3FboddTBl8+nC+PEK0yecX2XNym63HeorG4JdAR+SqNF7r LZF4AwEOUqJVXHd42aLNxpgag7Ffbp88umU6f8QsiFHKBfeuaptMh8Bq7lXVmIc5 33N/SkYf0KRFgTaGWzzVkJnRdfU0tzi2M+CJz3wtyPdYL3rg1bsI5G3doKd7F7Hj +B5cejjo9ymyinoCdVz1xF7+2irJUDY3WuMxdD8uomjuGy/UZsS+ZblRRpgOnP19 +YEj+46gfpCwAf/yhJNofTejV2gfX9vrGkhGqtAtihSSN5Ll+mciIocxiQbaXSFs 6/+N9Noz4eB4Pw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:54:27 2025 by rpki-client