This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft File: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft (raw, json) Hash identifier: vgToYt5HnGUwiedrpkvFMdCgw+jUfmF9uOJQTvU6UwY= Subject key identifier: B0:05:C3:03:4F:03:68:59:3A:AB:7C:03:27:91:AF:41:FB:4A:83:04 Authority key identifier: 5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 Certificate issuer: /CN=5f5570ce3d82e295568b7417d556aa3b06129610 Certificate serial: 019B6CC5EA90EF6BF1CD777E4B5143EEE37B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft Manifest number: 0E81 Signing time: Tue 30 Dec 2025 01:01:08 +0000 Manifest this update: Tue 30 Dec 2025 01:01:08 +0000 Manifest next update: Wed 31 Dec 2025 01:01:08 +0000 Files and hashes: 1: X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl (hash: c1k3IlsyVRINLuWmboiepaiHTp9cy1zgEpOAPTLnfyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:ea:90:ef:6b:f1:cd:77:7e:4b:51:43:ee:e3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5570ce3d82e295568b7417d556aa3b06129610 Validity Not Before: Dec 30 01:01:08 2025 GMT Not After : Dec 31 01:01:08 2025 GMT Subject: CN=b005c3034f0368593aab7c032791af41fb4a8304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:80:2a:2f:dd:7a:cc:03:56:05:11:12:06: 7a:7a:76:b9:e5:55:40:5c:f3:f2:21:6f:e0:0a:6b: 87:e6:ca:83:ef:9a:f8:7f:24:03:74:c9:f0:67:1a: fe:b5:f6:46:4b:3e:40:bc:ed:11:1c:a0:db:8c:da: 37:42:90:72:eb:4f:ae:1a:86:14:fd:2b:13:0a:2e: b4:50:3e:91:02:c7:01:36:4a:0d:b6:95:e1:c3:d0: 67:3f:c5:20:ca:fb:3a:c4:21:5f:17:22:47:b0:16: 4c:8b:60:02:a2:02:aa:64:2e:55:de:0b:bf:35:c5: 2f:52:9f:53:9f:33:1c:c2:11:ae:e2:c9:e2:a5:00: 8d:2b:6f:6d:ed:b0:02:dc:33:a4:25:58:4e:1f:b7: cf:9d:fe:f4:c5:90:2e:d2:23:fa:70:9c:5f:de:f0: 39:91:e7:83:45:61:c6:e3:ff:d8:92:2d:24:7f:24: dc:61:b7:ce:d5:e9:4b:34:32:7d:8b:11:55:3d:9f: a6:a7:9a:ce:04:46:e6:a2:a3:20:bf:c5:d9:e5:a1: 8c:e5:51:78:db:3a:0a:80:9f:51:c1:50:3f:12:a3: 19:d5:41:60:cb:b3:32:5f:33:8d:bb:bf:b0:8b:76: 70:0e:a5:47:5a:d8:19:e3:e3:ae:8f:f8:bd:ce:7b: 62:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:05:C3:03:4F:03:68:59:3A:AB:7C:03:27:91:AF:41:FB:4A:83:04 X509v3 Authority Key Identifier: keyid:5F:55:70:CE:3D:82:E2:95:56:8B:74:17:D5:56:AA:3B:06:12:96:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/76c4ed-4461-4a5d-a70f-232eb451d277/1/X1Vwzj2C4pVWi3QX1VaqOwYSlhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:96:c2:e2:5a:ea:4e:45:58:9d:a1:8a:e3:cf:d8:03:8d:de: ef:e1:f0:30:10:ea:a2:d3:d4:0a:5b:28:b6:fe:cd:42:d1:26: 66:b3:a3:ef:fd:48:55:8f:ae:87:25:1a:19:24:e2:39:46:fa: 69:4b:8d:1d:e9:43:ef:94:c0:be:83:6c:9d:1f:24:76:e1:35: 6c:91:22:5c:b2:94:87:99:a4:3d:48:05:c9:e4:86:03:09:59: 23:ba:23:c9:1b:1b:ba:01:fe:99:ab:7b:a6:92:1e:80:03:51: 23:a9:97:75:4e:f8:cd:cb:c8:ad:dc:68:90:24:ec:dc:94:f3: 69:01:b3:7a:15:8b:77:ef:14:05:16:6b:d4:e3:ad:02:a1:80: 50:48:d9:eb:d5:09:f9:02:18:36:ba:75:71:8d:de:9a:75:d4: 97:71:cd:e9:e3:a9:ea:28:c0:2e:90:25:42:01:6c:17:99:65: 5b:52:6c:bc:82:94:bf:3e:f9:08:6d:ec:bb:44:92:de:b1:77: e1:2c:37:db:64:b2:04:26:96:b8:0b:01:ad:d9:a7:c4:d9:50: d0:a4:3a:ee:e0:fc:61:18:e2:be:79:8c:33:4b:13:91:42:43: 87:16:d9:60:d1:ea:c3:0a:ec:49:b2:80:5e:a0:49:fd:53:0b: 18:d7:10:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxeqQ72vxzXd+S1FD7uN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTU3MGNlM2Q4MmUyOTU1NjhiNzQxN2Q1NTZhYTNiMDYx Mjk2MTAwHhcNMjUxMjMwMDEwMTA4WhcNMjUxMjMxMDEwMTA4WjAzMTEwLwYDVQQD EyhiMDA1YzMwMzRmMDM2ODU5M2FhYjdjMDMyNzkxYWY0MWZiNGE4MzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusuAKi/deswDVgUREgZ6ena55VVA XPPyIW/gCmuH5sqD75r4fyQDdMnwZxr+tfZGSz5AvO0RHKDbjNo3QpBy60+uGoYU /SsTCi60UD6RAscBNkoNtpXhw9BnP8Ugyvs6xCFfFyJHsBZMi2ACogKqZC5V3gu/ NcUvUp9TnzMcwhGu4snipQCNK29t7bAC3DOkJVhOH7fPnf70xZAu0iP6cJxf3vA5 keeDRWHG4//Yki0kfyTcYbfO1elLNDJ9ixFVPZ+mp5rOBEbmoqMgv8XZ5aGM5VF4 2zoKgJ9RwVA/EqMZ1UFgy7MyXzONu7+wi3ZwDqVHWtgZ4+Ouj/i9zntihwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAFwwNPA2hZOqt8AyeRr0H7SoMEMB8GA1UdIwQY MBaAFF9VcM49guKVVot0F9VWqjsGEpYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYt MjMyZWI0NTFkMjc3LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83NmM0ZWQtNDQ2MS00YTVkLWE3MGYtMjMyZWI0NTFkMjc3 LzEvWDFWd3pqMkM0cFZXaTNRWDFWYXFPd1lTbGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZbC4lrq TkVYnaGK48/YA43e7+HwMBDqotPUClsotv7NQtEmZrOj7/1IVY+uhyUaGSTiOUb6 aUuNHelD75TAvoNsnR8kduE1bJEiXLKUh5mkPUgFyeSGAwlZI7ojyRsbugH+mat7 ppIegANRI6mXdU74zcvIrdxokCTs3JTzaQGzehWLd+8UBRZr1OOtAqGAUEjZ69UJ +QIYNrp1cY3emnXUl3HN6eOp6ijALpAlQgFsF5llW1JsvIKUvz75CG3su0SS3rF3 4Sw322SyBCaWuAsBrdmnxNlQ0KQ67uD8YRjivnmMM0sTkUJDhxbZYNHqwwrsSbKA XqBJ/VMLGNcQYQ== -----END CERTIFICATE-----Generated at Tue Dec 30 08:53:46 2025 by rpki-client