This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft File: m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json) Hash identifier: 7C1ynpHdrK0p4IHYXviUcdTKXJ0JN2OP/nSvqeokDNU= Subject key identifier: 53:AF:4B:22:F5:D1:F6:A4:DB:0E:37:D7:34:3B:0A:05:C4:BB:C0:95 Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 Certificate issuer: /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Certificate serial: 019B0F37B13FB811AC86D99B006DA5D11F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft Manifest number: 12C3 Signing time: Thu 11 Dec 2025 21:01:06 +0000 Manifest this update: Thu 11 Dec 2025 21:01:06 +0000 Manifest next update: Fri 12 Dec 2025 21:01:06 +0000 Files and hashes: 1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=) 2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: E7zLmtxKMldWj4pNoyDOAXygWIGtuQJaBbWzKC1SObc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:b1:3f:b8:11:ac:86:d9:9b:00:6d:a5:d1:1f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5 Validity Not Before: Dec 11 21:01:06 2025 GMT Not After : Dec 12 21:01:06 2025 GMT Subject: CN=53af4b22f5d1f6a4db0e37d7343b0a05c4bbc095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6c:c2:33:ed:eb:34:3d:6f:a3:53:42:dc:cc: 81:e9:9a:8a:75:7e:29:0a:8c:bd:15:21:cc:ad:5e: dd:d6:09:9c:44:fe:67:c0:87:29:25:a9:1b:91:56: 6f:cc:83:2b:a5:cf:a1:42:5c:0d:db:fb:ac:a1:6c: 87:76:c3:65:c9:e3:7c:7e:08:97:94:29:44:a4:08: 3f:3a:6c:02:2d:3c:af:88:01:65:c5:cb:bd:82:b0: 03:7c:39:fc:42:63:20:22:3f:47:b7:36:69:f2:05: 4b:10:85:05:2f:e8:42:3b:6a:f1:32:bb:e0:d6:15: 6b:69:bf:e8:39:7d:b5:65:4d:4e:3f:ac:23:59:f7: c9:02:b9:bf:e0:58:e6:8d:6d:9a:da:48:de:58:2e: a3:01:c9:d9:b8:a5:3d:4d:8e:f1:cd:ba:36:d5:cb: 28:27:5c:0a:6d:7a:9a:eb:84:f6:3e:29:8a:22:35: 16:38:bc:ba:93:74:bb:8c:e9:19:b1:6e:d3:60:c8: 86:e8:bd:b5:29:ed:75:16:01:8d:53:a4:e3:00:0e: f6:9e:35:ce:1d:ba:56:0c:c0:a7:cd:fd:c5:d0:03: eb:15:b0:0b:b4:b3:48:3f:66:1f:91:be:2f:f3:02: 59:2a:f2:1f:0a:0c:9b:1c:ce:00:1e:30:07:6a:c5: 0b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AF:4B:22:F5:D1:F6:A4:DB:0E:37:D7:34:3B:0A:05:C4:BB:C0:95 X509v3 Authority Key Identifier: keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b9:6e:0a:25:de:e9:7e:d1:5f:92:4d:73:16:37:1c:8d:d2: 0a:45:ed:d0:04:18:6f:07:53:23:bf:4e:6f:bf:57:67:5a:8c: 39:a0:33:3e:33:74:cd:0b:9f:9f:17:26:e1:ae:fd:75:50:1b: b3:19:66:b1:06:78:c2:d4:fc:bd:23:85:8f:59:3d:d6:ca:66: 52:8f:6d:bc:cb:0f:01:d0:c5:49:46:34:f9:fc:81:6d:b4:d3: 0f:22:a5:1d:75:03:55:de:4c:e5:f6:a5:6f:a3:83:0d:ea:91: 2e:d5:71:c4:1d:52:70:ef:aa:ad:f7:af:bc:f8:7b:83:2e:82: e2:51:1c:ff:a9:a2:38:f9:d6:09:77:d6:9d:3e:36:96:dd:98: 1b:33:0a:9f:70:b9:93:00:1b:90:40:ef:e8:82:6e:4d:37:10: ef:27:b6:fc:af:e7:e3:de:12:0a:6a:f6:a8:7a:aa:61:d8:b9: 1e:42:8f:3c:11:70:04:7d:12:4f:bb:01:25:f3:80:f8:74:bf: 6d:6b:a0:f6:d4:ef:02:21:78:f4:63:de:c8:af:b8:08:3d:8d: f4:ca:da:75:c9:44:8c:b8:aa:1d:b8:c6:ca:24:be:0b:4d:07: c0:63:f7:bc:5b:f4:b3:bc:d9:78:02:49:52:90:57:85:c3:95: ed:71:dd:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN7E/uBGshtmbAG2l0R83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTQ3MTcxMTJmZWMxMTlmNmNmY2FjZTdjYzQ0MzRmYjQ3 ZGY4ZjUwHhcNMjUxMjExMjEwMTA2WhcNMjUxMjEyMjEwMTA2WjAzMTEwLwYDVQQD Eyg1M2FmNGIyMmY1ZDFmNmE0ZGIwZTM3ZDczNDNiMGEwNWM0YmJjMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GzCM+3rND1vo1NC3MyB6ZqKdX4p Coy9FSHMrV7d1gmcRP5nwIcpJakbkVZvzIMrpc+hQlwN2/usoWyHdsNlyeN8fgiX lClEpAg/OmwCLTyviAFlxcu9grADfDn8QmMgIj9HtzZp8gVLEIUFL+hCO2rxMrvg 1hVrab/oOX21ZU1OP6wjWffJArm/4FjmjW2a2kjeWC6jAcnZuKU9TY7xzbo21cso J1wKbXqa64T2PimKIjUWOLy6k3S7jOkZsW7TYMiG6L21Ke11FgGNU6TjAA72njXO HbpWDMCnzf3F0APrFbALtLNIP2Yfkb4v8wJZKvIfCgybHM4AHjAHasULBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOvSyL10fak2w431zQ7CgXEu8CVMB8GA1UdIwQY MBaAFJvkcXES/sEZ9s/KznzEQ0+0ffj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQt ZjAzYWM1OWI1YTk3LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85NjA2ZjYtZGEwMi00YmI4LWIzZTQtZjAzYWM1OWI1YTk3 LzEvbS1SeGNSTC13Um4yejhyT2ZNUkRUN1I5LVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7luCiXe 6X7RX5JNcxY3HI3SCkXt0AQYbwdTI79Ob79XZ1qMOaAzPjN0zQufnxcm4a79dVAb sxlmsQZ4wtT8vSOFj1k91spmUo9tvMsPAdDFSUY0+fyBbbTTDyKlHXUDVd5M5fal b6ODDeqRLtVxxB1ScO+qrfevvPh7gy6C4lEc/6miOPnWCXfWnT42lt2YGzMKn3C5 kwAbkEDv6IJuTTcQ7ye2/K/n494SCmr2qHqqYdi5HkKPPBFwBH0ST7sBJfOA+HS/ bWug9tTvAiF49GPeyK+4CD2N9MradclEjLiqHbjGyiS+C00HwGP3vFv0s7zZeAJJ UpBXhcOV7XHdXw== -----END CERTIFICATE-----Generated at Fri Dec 12 02:32:07 2025 by rpki-client