This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json) Hash identifier: aPImy9tPrx/OaRMEE9pHRdn8npg69PZGWvQuidYOGSA= Subject key identifier: FE:6D:A9:F3:42:08:04:CA:E0:34:72:E0:F4:77:47:24:35:62:2F:EC Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a Certificate serial: 019B4EBAE58728D68DEF32920840EB01B3FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft Manifest number: 178D Signing time: Wed 24 Dec 2025 05:00:29 +0000 Manifest this update: Wed 24 Dec 2025 05:00:29 +0000 Manifest next update: Thu 25 Dec 2025 05:00:29 +0000 Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: CjS7tjHoZ2XFujKDuh8VyHQHrL973Gutu4dutbSYpaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:ba:e5:87:28:d6:8d:ef:32:92:08:40:eb:01:b3:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a Validity Not Before: Dec 24 05:00:29 2025 GMT Not After : Dec 25 05:00:29 2025 GMT Subject: CN=fe6da9f3420804cae03472e0f477472435622fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:89:d0:fc:2b:85:93:12:ba:11:a9:48:eb: a3:c9:37:a2:23:a0:93:1b:b5:e7:9a:76:b6:83:7b: e9:d1:c2:a2:a0:a0:d3:81:13:24:cd:d3:26:a3:dd: b4:1d:8b:35:09:a2:e1:e9:b0:52:be:81:14:01:ef: 34:bb:9c:2c:0a:6b:b5:f9:33:c4:e5:e0:56:ad:44: 18:83:d5:99:a0:68:88:ef:67:ff:9b:89:57:9c:fe: 30:04:87:ad:66:59:e5:d1:57:3c:8f:2e:92:79:74: 51:76:bf:a0:65:35:34:ac:47:00:3f:35:84:b1:f4: 20:98:8e:af:03:dd:b8:a6:87:9b:42:a1:e4:e6:62: 5c:92:3c:02:c7:52:bd:29:f0:fa:d3:de:ab:bb:ef: b8:2d:a1:dd:a5:11:0f:75:64:48:44:e8:20:8b:83: 01:2e:12:1a:78:d9:c6:6e:55:c0:b1:85:58:dd:85: 4b:9e:09:38:ca:ca:41:a1:3d:f2:14:05:89:1f:48: e6:3a:73:32:70:b8:cb:e2:87:ce:fc:ae:64:b4:8f: a0:be:e8:c6:77:34:eb:b7:a0:ea:01:e4:ef:ce:2e: 61:ca:01:48:dc:6a:cb:61:85:32:98:f8:47:bc:7b: 67:de:4f:26:5f:ca:87:a2:89:16:ae:7c:12:92:a6: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6D:A9:F3:42:08:04:CA:E0:34:72:E0:F4:77:47:24:35:62:2F:EC X509v3 Authority Key Identifier: keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:cb:bc:69:51:d9:cc:ee:7c:51:88:91:56:38:b1:21:0b:e8: c6:3f:a1:cf:dc:6b:91:bf:a0:5f:44:a0:4d:a1:62:76:e5:dd: 57:2d:f0:aa:49:e9:36:ee:6b:39:37:3e:4e:0b:37:d7:93:f1: 24:4d:88:6e:96:a2:c3:4b:95:e0:06:16:5c:9c:24:e2:07:63: 97:2a:e5:24:8b:b1:3d:f0:88:0f:5a:73:5e:06:8b:a7:49:18: 36:15:7b:1a:ae:0b:d7:60:c8:07:70:08:b4:9c:d8:fc:40:64: 4f:8e:5c:dc:ee:db:83:c9:a0:a8:5e:66:de:36:0c:48:df:9a: b5:c5:a8:99:83:c4:67:cf:86:c1:4d:11:6c:6c:27:47:3e:4a: c6:a6:17:e9:ca:47:20:7b:4b:fd:e9:36:73:8c:2b:bb:be:4a: 56:27:cf:07:56:1a:e5:a9:c5:2b:c8:86:cc:b3:e5:0b:2f:04: 9a:8b:a4:a5:e6:b0:35:f5:b3:92:b8:78:5f:cd:27:9a:ac:08: 11:e5:20:f3:30:1d:2d:b2:14:d6:f6:71:e1:69:40:e5:9e:34: 71:13:63:5d:ec:1d:4d:96:12:e7:86:e8:32:70:d2:ea:78:57: d3:6d:22:d9:74:a3:a8:1d:34:c6:ba:7c:94:c8:6b:c2:97:05: a2:cf:e6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOuuWHKNaN7zKSCEDrAbP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4 NGM0MWEwHhcNMjUxMjI0MDUwMDI5WhcNMjUxMjI1MDUwMDI5WjAzMTEwLwYDVQQD EyhmZTZkYTlmMzQyMDgwNGNhZTAzNDcyZTBmNDc3NDcyNDM1NjIyZmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3z+J0PwrhZMSuhGpSOujyTeiI6CT G7Xnmna2g3vp0cKioKDTgRMkzdMmo920HYs1CaLh6bBSvoEUAe80u5wsCmu1+TPE 5eBWrUQYg9WZoGiI72f/m4lXnP4wBIetZlnl0Vc8jy6SeXRRdr+gZTU0rEcAPzWE sfQgmI6vA924poebQqHk5mJckjwCx1K9KfD6096ru++4LaHdpREPdWRIROggi4MB LhIaeNnGblXAsYVY3YVLngk4yspBoT3yFAWJH0jmOnMycLjL4ofO/K5ktI+gvujG dzTrt6DqAeTvzi5hygFI3GrLYYUymPhHvHtn3k8mX8qHookWrnwSkqZFuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5tqfNCCATK4DRy4PR3RyQ1Yi/sMB8GA1UdIwQY MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5 LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsu8aVHZ zO58UYiRVjixIQvoxj+hz9xrkb+gX0SgTaFiduXdVy3wqknpNu5rOTc+Tgs315Px JE2Ibpaiw0uV4AYWXJwk4gdjlyrlJIuxPfCID1pzXgaLp0kYNhV7Gq4L12DIB3AI tJzY/EBkT45c3O7bg8mgqF5m3jYMSN+atcWomYPEZ8+GwU0RbGwnRz5KxqYX6cpH IHtL/ek2c4wru75KVifPB1Ya5anFK8iGzLPlCy8EmoukpeawNfWzkrh4X80nmqwI EeUg8zAdLbIU1vZx4WlA5Z40cRNjXewdTZYS54boMnDS6nhX020i2XSjqB00xrp8 lMhrwpcFos/mdQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:03 2025 by rpki-client