This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft File: X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft (raw, json) Hash identifier: gpDjoanOdzQZTwEtVTqFfi0tBgFDTsa8mPeJ2PNmmNw= Subject key identifier: 1E:6B:08:87:50:33:E5:26:A4:4B:12:3A:56:D9:D4:94:2A:0C:2E:50 Authority key identifier: 5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93 Certificate issuer: /CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893 Certificate serial: 019B32D65BAAD29A3EA0EE8AA50E19684C0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 19:01:07 +0000 Manifest this update: Thu 18 Dec 2025 19:01:07 +0000 Manifest next update: Fri 19 Dec 2025 19:01:07 +0000 Files and hashes: 1: X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl (hash: ZAfb0y89VbldUBkq5B2D2jdRGhp5RtNt7ZQ3f3NwXFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:5b:aa:d2:9a:3e:a0:ee:8a:a5:0e:19:68:4c:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f628f05cca8c87d593e71e9dd21b0e7f89d5893 Validity Not Before: Dec 18 19:01:07 2025 GMT Not After : Dec 19 19:01:07 2025 GMT Subject: CN=1e6b08875033e526a44b123a56d9d4942a0c2e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:19:24:6b:bc:3d:74:9a:0a:e4:de:97:e0: c2:37:05:b7:2a:8f:76:ba:c7:9a:c0:b7:44:17:73: 90:8e:49:7a:76:02:29:85:58:18:73:69:b2:91:c1: dc:d1:78:fe:36:68:8a:a0:65:e4:62:01:d8:22:b0: 8a:4c:e2:82:7e:6f:42:4f:da:db:dd:f1:9d:49:e8: b1:5b:04:1a:56:1c:7a:1b:e0:dd:3b:42:2a:b0:d4: 72:e7:c1:fa:b4:f2:c8:fd:8a:01:fe:f9:57:6b:01: 63:65:cd:86:4a:16:6a:57:92:67:d2:90:e2:51:b6: 6c:d1:ae:40:af:3f:85:ef:98:f1:17:7d:1e:3b:f3: 79:60:5c:40:ed:30:94:29:af:0f:64:52:c8:87:65: 31:fe:de:dc:95:78:53:88:22:84:93:e7:e6:49:75: aa:10:e9:92:6a:95:54:ad:2b:14:74:a5:67:d1:74: d5:d6:83:12:11:f1:b9:42:bb:c5:16:5b:85:9d:cf: 9b:ed:cd:59:da:5f:50:04:c7:b2:4e:e9:b8:4a:dc: e1:df:30:bc:39:12:5d:0d:ec:46:36:06:f0:c7:80: dd:51:49:eb:9f:9c:36:48:a3:7b:f6:90:ff:42:4d: 08:29:87:b7:30:1a:80:59:b5:37:5b:9e:1f:1d:78: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6B:08:87:50:33:E5:26:A4:4B:12:3A:56:D9:D4:94:2A:0C:2E:50 X509v3 Authority Key Identifier: keyid:5F:62:8F:05:CC:A8:C8:7D:59:3E:71:E9:DD:21:B0:E7:F8:9D:58:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2KPBcyoyH1ZPnHp3SGw5_idWJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/522cf1-0b5c-4d62-b36c-9fbe8919db90/1/X2KPBcyoyH1ZPnHp3SGw5_idWJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fb:04:74:d7:b0:76:c1:27:8f:c9:32:c8:2c:0f:75:b3:2e: 66:65:b5:5f:0b:80:d3:33:ef:26:bf:26:b8:02:c4:ba:9a:fa: 8b:94:c8:24:07:29:c9:83:31:43:1a:94:fa:ae:39:d5:da:35: 93:3a:45:31:a6:c4:0d:4a:74:c8:d0:ff:ad:f4:2e:29:c5:5f: 76:b4:ca:10:d2:d5:c9:0c:ca:fa:a4:3e:76:d2:5e:3e:b7:45: 47:7d:30:eb:8c:32:da:f1:69:7b:b3:fc:31:b3:e7:35:16:ce: f8:2f:32:e2:d4:5f:ea:7c:68:f6:ad:0d:b1:8f:7c:73:b3:18: 66:34:aa:0e:39:b9:b0:ec:3a:b2:b2:e8:40:32:e1:06:33:f2: a4:5d:bd:30:3d:cb:a1:f0:2a:c1:e4:77:cc:55:ed:9b:ca:a0: 35:6c:57:c8:02:96:69:cf:53:ed:e6:21:fe:f7:5f:b0:fd:69: e9:99:df:24:00:f4:34:23:59:72:96:e3:a4:8a:3c:86:9c:03: 87:ba:2d:0c:77:6e:a1:05:09:53:ec:e9:4b:7e:11:c8:5a:78: 8f:07:6a:8f:5f:eb:b9:a1:92:f6:62:55:99:81:22:62:75:f9: 33:dc:47:90:a5:dd:5f:97:9e:95:cd:5b:3b:3d:c0:21:18:9b: 0c:94:f7:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1luq0po+oO6KpQ4ZaEwPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjI4ZjA1Y2NhOGM4N2Q1OTNlNzFlOWRkMjFiMGU3Zjg5 ZDU4OTMwHhcNMjUxMjE4MTkwMTA3WhcNMjUxMjE5MTkwMTA3WjAzMTEwLwYDVQQD EygxZTZiMDg4NzUwMzNlNTI2YTQ0YjEyM2E1NmQ5ZDQ5NDJhMGMyZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5gZJGu8PXSaCuTel+DCNwW3Ko92 useawLdEF3OQjkl6dgIphVgYc2mykcHc0Xj+NmiKoGXkYgHYIrCKTOKCfm9CT9rb 3fGdSeixWwQaVhx6G+DdO0IqsNRy58H6tPLI/YoB/vlXawFjZc2GShZqV5Jn0pDi UbZs0a5Arz+F75jxF30eO/N5YFxA7TCUKa8PZFLIh2Ux/t7clXhTiCKEk+fmSXWq EOmSapVUrSsUdKVn0XTV1oMSEfG5QrvFFluFnc+b7c1Z2l9QBMeyTum4Stzh3zC8 ORJdDexGNgbwx4DdUUnrn5w2SKN79pD/Qk0IKYe3MBqAWbU3W54fHXh1GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5rCIdQM+UmpEsSOlbZ1JQqDC5QMB8GA1UdIwQY MBaAFF9ijwXMqMh9WT5x6d0hsOf4nViTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMt OWZiZTg5MTlkYjkwLzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81MjJjZjEtMGI1Yy00ZDYyLWIzNmMtOWZiZTg5MTlkYjkw LzEvWDJLUEJjeW95SDFaUG5IcDNTR3c1X2lkV0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArfsEdNew dsEnj8kyyCwPdbMuZmW1XwuA0zPvJr8muALEupr6i5TIJAcpyYMxQxqU+q451do1 kzpFMabEDUp0yND/rfQuKcVfdrTKENLVyQzK+qQ+dtJePrdFR30w64wy2vFpe7P8 MbPnNRbO+C8y4tRf6nxo9q0NsY98c7MYZjSqDjm5sOw6srLoQDLhBjPypF29MD3L ofAqweR3zFXtm8qgNWxXyAKWac9T7eYh/vdfsP1p6ZnfJAD0NCNZcpbjpIo8hpwD h7otDHduoQUJU+zpS34RyFp4jwdqj1/ruaGS9mJVmYEiYnX5M9xHkKXdX5eelc1b Oz3AIRibDJT3sg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:30:46 2025 by rpki-client