This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft File: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft (raw, json) Hash identifier: I/YkbxXwbdL6cxN1ZTaMULlxR4xE80tUASHzN28AwO4= Subject key identifier: 61:BA:FF:8D:F1:2B:D3:D8:A7:36:B3:83:AD:56:FB:FB:37:57:61:67 Authority key identifier: C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 Certificate issuer: /CN=c763195d5cfc7b95273506406fa9091c22f6c424 Certificate serial: 019B386A11B6DC86126D0247883FF6385868 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft Manifest number: 0BD6 Signing time: Fri 19 Dec 2025 21:00:33 +0000 Manifest this update: Fri 19 Dec 2025 21:00:33 +0000 Manifest next update: Sat 20 Dec 2025 21:00:33 +0000 Files and hashes: 1: x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl (hash: jujaOOWVKesn2yG6RRLcIi65olYIo/nCvECOq+WgVQo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:11:b6:dc:86:12:6d:02:47:88:3f:f6:38:58:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c763195d5cfc7b95273506406fa9091c22f6c424 Validity Not Before: Dec 19 21:00:33 2025 GMT Not After : Dec 20 21:00:33 2025 GMT Subject: CN=61baff8df12bd3d8a736b383ad56fbfb37576167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:64:e9:33:f5:48:34:75:73:2a:d9:52:b8: 6d:da:af:c3:11:7b:7b:64:97:50:fe:ea:28:11:14: 84:25:d4:cc:70:2b:05:19:f7:bb:d7:fa:c1:1c:0b: ce:c9:36:31:b4:65:d0:1c:90:17:06:be:89:7a:7a: 28:51:44:4a:c2:ca:69:2c:c7:00:7a:af:7e:f6:2f: 58:28:8c:ab:ff:8b:cb:8a:d4:8b:6b:8a:9e:b0:28: 30:21:ca:22:b3:9b:c2:87:68:0d:c5:67:42:0d:6a: 75:b6:58:a2:80:37:3c:ad:49:bc:54:3d:82:3f:42: c2:19:70:92:01:08:3e:33:ec:19:cd:ae:4f:b2:1f: e7:60:05:79:74:69:d1:96:cc:30:9e:e4:05:c1:41: 97:46:73:92:cb:fb:28:86:00:03:1b:dd:37:6b:e7: ec:7b:5a:2f:1b:31:d8:15:5d:20:d7:d9:80:82:20: cb:3a:09:72:b6:d3:0d:b1:e5:59:ef:ce:d6:b3:61: 8a:b2:99:0f:76:48:95:dc:0f:e8:77:3d:c6:90:51: 2e:f2:df:7d:22:d2:a5:68:3a:3b:6e:6e:4f:18:1f: 93:17:8a:99:24:06:66:59:03:1b:4c:0a:21:47:88: 71:8d:99:33:97:1e:6c:0a:c8:a7:e1:db:9e:5d:33: 75:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BA:FF:8D:F1:2B:D3:D8:A7:36:B3:83:AD:56:FB:FB:37:57:61:67 X509v3 Authority Key Identifier: keyid:C7:63:19:5D:5C:FC:7B:95:27:35:06:40:6F:A9:09:1C:22:F6:C4:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dfec2d-b119-46c6-b58e-349bdcff4420/1/x2MZXVz8e5UnNQZAb6kJHCL2xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:41:d4:c8:bf:79:1d:f3:07:54:a8:0b:68:c1:70:41:45:be: 3e:c9:56:06:df:61:cf:17:6f:4e:e9:37:af:fc:62:d8:74:8b: 1b:18:9b:de:e3:23:a8:de:6d:88:3d:00:d7:19:7c:2c:5f:79: 7e:21:1e:5c:c7:f3:df:57:6d:0f:f7:16:53:e6:81:55:fa:6a: 93:16:8e:37:ed:2d:92:b9:f6:ad:b4:e9:90:99:50:9f:da:d3: b2:a2:12:30:f6:ef:be:b8:68:13:d1:d2:45:fa:67:b2:87:a2: 7e:a4:a2:c6:a9:44:33:1c:9f:e9:2b:ae:43:3f:9e:29:9d:01: ba:b6:80:c1:7f:6b:56:2b:b1:84:62:48:33:6a:14:88:b3:cd: 2b:a3:6e:12:38:3e:ee:7a:b1:60:b5:f0:d3:20:c0:3f:d1:64: 18:74:15:5b:22:34:29:11:22:d7:c9:97:5c:91:4b:11:6a:2a: 0a:52:c3:92:2e:dd:5b:67:d7:85:ad:d2:b4:a2:ad:50:3e:55: b9:81:76:8d:dc:69:ba:04:dc:dc:16:24:b1:c5:30:34:6b:8b: a3:79:9b:19:29:51:70:cf:af:ba:a6:6e:68:59:ca:36:30:fc: 42:d8:30:05:ee:60:80:66:3c:6b:a2:01:9f:a7:d3:1d:dc:c1: 4e:56:79:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ahG23IYSbQJHiD/2OFhoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjMxOTVkNWNmYzdiOTUyNzM1MDY0MDZmYTkwOTFjMjJm NmM0MjQwHhcNMjUxMjE5MjEwMDMzWhcNMjUxMjIwMjEwMDMzWjAzMTEwLwYDVQQD Eyg2MWJhZmY4ZGYxMmJkM2Q4YTczNmIzODNhZDU2ZmJmYjM3NTc2MTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuRk6TP1SDR1cyrZUrht2q/DEXt7 ZJdQ/uooERSEJdTMcCsFGfe71/rBHAvOyTYxtGXQHJAXBr6JenooUURKwsppLMcA eq9+9i9YKIyr/4vLitSLa4qesCgwIcois5vCh2gNxWdCDWp1tliigDc8rUm8VD2C P0LCGXCSAQg+M+wZza5Psh/nYAV5dGnRlswwnuQFwUGXRnOSy/sohgADG903a+fs e1ovGzHYFV0g19mAgiDLOglyttMNseVZ787Ws2GKspkPdkiV3A/odz3GkFEu8t99 ItKlaDo7bm5PGB+TF4qZJAZmWQMbTAohR4hxjZkzlx5sCsin4dueXTN1jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG6/43xK9PYpzazg61W+/s3V2FnMB8GA1UdIwQY MBaAFMdjGV1c/HuVJzUGQG+pCRwi9sQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUt MzQ5YmRjZmY0NDIwLzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kZmVjMmQtYjExOS00NmM2LWI1OGUtMzQ5YmRjZmY0NDIw LzEveDJNWlhWejhlNVVuTlFaQWI2a0pIQ0wyeENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0HUyL95 HfMHVKgLaMFwQUW+PslWBt9hzxdvTuk3r/xi2HSLGxib3uMjqN5tiD0A1xl8LF95 fiEeXMfz31dtD/cWU+aBVfpqkxaON+0tkrn2rbTpkJlQn9rTsqISMPbvvrhoE9HS RfpnsoeifqSixqlEMxyf6SuuQz+eKZ0BuraAwX9rViuxhGJIM2oUiLPNK6NuEjg+ 7nqxYLXw0yDAP9FkGHQVWyI0KREi18mXXJFLEWoqClLDki7dW2fXha3StKKtUD5V uYF2jdxpugTc3BYkscUwNGuLo3mbGSlRcM+vuqZuaFnKNjD8QtgwBe5ggGY8a6IB n6fTHdzBTlZ5bg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:21 2025 by rpki-client