This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft File: X5K_96iahZDmq7rsAoKw8k4K_rI.mft (raw, json) Hash identifier: yXEwTSGnDJM6sQ7lMMATmqOkN0B/VfXotlIWqVuB5hQ= Subject key identifier: 9C:76:83:17:70:D0:83:87:37:DC:2F:C9:17:CE:8F:45:BE:A7:78:FD Authority key identifier: 5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2 Certificate issuer: /CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2 Certificate serial: 019B19F1E2317099C9B5EDE75E1644EEC0C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft Manifest number: 162F Signing time: Sat 13 Dec 2025 23:00:40 +0000 Manifest this update: Sat 13 Dec 2025 23:00:40 +0000 Manifest next update: Sun 14 Dec 2025 23:00:40 +0000 Files and hashes: 1: X5K_96iahZDmq7rsAoKw8k4K_rI.crl (hash: DqQx6U9MKjs9sUavCqFr0wx2Rb2r/B2uYnlKDc2nD5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:e2:31:70:99:c9:b5:ed:e7:5e:16:44:ee:c0:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f92bff7a89a8590e6abbaec0282b0f24e0afeb2 Validity Not Before: Dec 13 23:00:40 2025 GMT Not After : Dec 14 23:00:40 2025 GMT Subject: CN=9c76831770d0838737dc2fc917ce8f45bea778fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6c:de:ac:33:c0:95:d5:77:ea:e6:b4:d9:06: e0:38:81:47:5c:e9:f2:a4:5c:2b:6a:ba:7e:12:1f: 35:e3:31:fd:43:0e:2c:ce:d9:aa:9a:fd:52:01:30: 87:83:d2:2d:dd:44:cc:54:ee:32:36:bc:09:d0:19: cc:92:94:db:ae:e7:ec:73:e9:31:0c:54:65:f5:1f: 0b:29:0b:00:96:25:60:df:47:80:b8:02:89:06:12: dd:65:8f:91:bb:15:d7:fa:c7:35:36:b1:ec:34:9d: 5e:72:85:67:26:41:4f:ba:a6:de:46:e4:3a:9b:26: e4:e5:a9:94:45:dd:e3:9b:55:d3:44:7a:c9:46:45: 3c:83:20:30:a0:31:8e:09:c6:c1:dc:70:d2:b9:48: 7d:04:9b:ff:96:c5:4b:14:f4:e2:eb:cd:44:76:ef: c9:bf:69:6a:30:26:8d:7a:c2:73:96:51:26:69:53: 7d:77:23:88:03:d9:88:5c:b5:07:0a:b0:1f:e6:b5: a1:b4:53:ba:de:e2:cb:82:0a:7a:67:e8:53:00:a5: 95:45:bc:61:f9:91:b8:65:ed:b1:1c:95:76:4d:1c: b1:cc:77:ee:6e:4c:2e:45:07:9d:e0:8f:09:6f:a5: 34:9c:ac:7e:38:29:fc:aa:66:e8:99:b9:2d:2a:09: 12:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:83:17:70:D0:83:87:37:DC:2F:C9:17:CE:8F:45:BE:A7:78:FD X509v3 Authority Key Identifier: keyid:5F:92:BF:F7:A8:9A:85:90:E6:AB:BA:EC:02:82:B0:F2:4E:0A:FE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5K_96iahZDmq7rsAoKw8k4K_rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a78ef1-c3c9-43a0-9b1c-1d9d8d004111/1/X5K_96iahZDmq7rsAoKw8k4K_rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:61:63:74:4a:aa:8f:e6:45:b1:38:a7:16:15:96:6e:e1:39: d7:37:eb:55:5a:08:4a:b7:78:1b:3f:86:3f:22:11:c9:83:b4: 7c:73:3b:74:5e:e9:6c:cf:90:69:a9:b1:42:61:dc:d5:74:c9: 5a:a6:04:08:c9:47:e0:16:19:47:36:55:a8:74:72:1b:c9:0d: 64:96:20:37:e7:61:a7:bd:7d:e7:84:f4:e9:3e:b2:2f:9f:38: 27:a4:cf:95:6d:b0:dc:fd:97:b7:09:cf:be:7b:b8:cf:bf:34: 3b:35:12:7e:23:d7:5a:0b:ce:75:64:71:91:72:7b:a5:10:80: 7e:9c:d3:49:ca:1d:a9:02:54:c7:55:1c:4f:7a:c7:b8:1b:00: 56:70:53:e4:ab:21:1c:78:4f:45:b1:e8:ce:d9:b4:04:8f:c0: 45:cd:44:4f:5f:97:fa:fe:63:34:d2:14:05:23:44:32:ba:00: 41:1f:b0:0a:bf:e6:13:1a:d2:65:f0:84:6e:36:4b:32:b3:88: 90:25:85:59:fb:22:0b:ce:15:1b:e5:f1:7c:89:32:e5:c8:e4: ee:21:e0:35:ae:26:68:23:b5:40:5d:fd:fc:c7:78:d7:0c:40: 47:f5:a9:53:26:4f:b1:c8:25:8c:00:cf:38:e7:a5:0f:0a:28: 90:2e:21:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8eIxcJnJte3nXhZE7sDJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTJiZmY3YTg5YTg1OTBlNmFiYmFlYzAyODJiMGYyNGUw YWZlYjIwHhcNMjUxMjEzMjMwMDQwWhcNMjUxMjE0MjMwMDQwWjAzMTEwLwYDVQQD Eyg5Yzc2ODMxNzcwZDA4Mzg3MzdkYzJmYzkxN2NlOGY0NWJlYTc3OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGzerDPAldV36ua02QbgOIFHXOny pFwrarp+Eh814zH9Qw4sztmqmv1SATCHg9It3UTMVO4yNrwJ0BnMkpTbrufsc+kx DFRl9R8LKQsAliVg30eAuAKJBhLdZY+RuxXX+sc1NrHsNJ1ecoVnJkFPuqbeRuQ6 mybk5amURd3jm1XTRHrJRkU8gyAwoDGOCcbB3HDSuUh9BJv/lsVLFPTi681Edu/J v2lqMCaNesJzllEmaVN9dyOIA9mIXLUHCrAf5rWhtFO63uLLggp6Z+hTAKWVRbxh +ZG4Ze2xHJV2TRyxzHfubkwuRQed4I8Jb6U0nKx+OCn8qmbombktKgkSVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJx2gxdw0IOHN9wvyRfOj0W+p3j9MB8GA1UdIwQY MBaAFF+Sv/eomoWQ5qu67AKCsPJOCv6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMt MWQ5ZDhkMDA0MTExLzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hNzhlZjEtYzNjOS00M2EwLTliMWMtMWQ5ZDhkMDA0MTEx LzEvWDVLXzk2aWFoWkRtcTdyc0FvS3c4azRLX3JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2FjdEqq j+ZFsTinFhWWbuE51zfrVVoISrd4Gz+GPyIRyYO0fHM7dF7pbM+QaamxQmHc1XTJ WqYECMlH4BYZRzZVqHRyG8kNZJYgN+dhp71954T06T6yL584J6TPlW2w3P2XtwnP vnu4z780OzUSfiPXWgvOdWRxkXJ7pRCAfpzTScodqQJUx1UcT3rHuBsAVnBT5Ksh HHhPRbHoztm0BI/ARc1ET1+X+v5jNNIUBSNEMroAQR+wCr/mExrSZfCEbjZLMrOI kCWFWfsiC84VG+XxfIky5cjk7iHgNa4maCO1QF39/Md41wxAR/WpUyZPscgljADP OOelDwookC4h+A== -----END CERTIFICATE-----Generated at Sun Dec 14 03:42:24 2025 by rpki-client