This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft File: XTsXLoFhyBzo6VSv01pzsvrQuzo.mft (raw, json) Hash identifier: A2daSfdFbelmT9PCBPX/ufAfLs+Y6aHG+3bVZY4HZ3Y= Subject key identifier: A1:70:8B:9E:76:C2:E9:24:C2:51:32:71:F9:85:FD:34:8D:FB:CD:4B Authority key identifier: 5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A Certificate issuer: /CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a Certificate serial: 019B292EE8E5512E6F6FB02A45480EB480D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft Manifest number: 0A0C Signing time: Tue 16 Dec 2025 22:01:38 +0000 Manifest this update: Tue 16 Dec 2025 22:01:38 +0000 Manifest next update: Wed 17 Dec 2025 22:01:38 +0000 Files and hashes: 1: XTsXLoFhyBzo6VSv01pzsvrQuzo.crl (hash: +BX1Pkq13QVcL0Zyb9Sgaox68dqtFP1N0g6o+N8/r44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 19:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2e:e8:e5:51:2e:6f:6f:b0:2a:45:48:0e:b4:80:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d3b172e8161c81ce8e954afd35a73b2fad0bb3a Validity Not Before: Dec 16 22:01:38 2025 GMT Not After : Dec 17 22:01:38 2025 GMT Subject: CN=a1708b9e76c2e924c2513271f985fd348dfbcd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d4:be:20:c8:9e:99:02:0c:fa:41:54:a2:3b: 75:f0:2e:05:7d:91:e9:a5:b6:52:35:20:80:10:bb: ef:2a:5c:ce:35:81:b5:36:eb:21:a9:85:41:43:03: 41:47:29:3c:27:3b:0d:1b:77:c9:b9:06:eb:f7:32: af:da:2a:2e:b1:0d:0d:59:78:4f:5d:c8:82:c8:fb: ce:1f:e2:38:2a:13:ea:0a:50:ea:5f:10:b5:2a:56: fe:d1:52:b1:b5:8b:90:16:9e:7e:fe:a2:21:bc:1d: 21:61:7c:7c:ac:ba:bd:2c:7a:8c:73:a5:05:a5:c7: 8c:76:bd:15:b5:dd:b8:36:46:03:8b:89:c8:4e:49: cf:f0:e7:f3:1d:ca:48:1f:24:2b:7b:72:01:03:12: b8:38:1f:b2:7e:07:ec:84:a4:c0:56:ac:c0:6d:10: 7f:64:9a:f2:3f:32:67:59:29:e8:fb:ff:6a:01:d8: 43:81:15:90:33:fd:07:1a:5b:6f:88:9e:46:8d:28: 51:d0:35:7c:bb:00:cf:2e:30:20:90:fa:89:1e:0f: e8:d3:37:ea:44:c9:4b:e2:8b:6c:a0:3e:2f:f7:f8: 71:4e:8c:40:57:53:12:d4:39:ac:fe:e0:19:a8:ed: 18:8f:3f:4a:da:41:4b:96:c6:f1:d0:bd:5c:42:48: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:70:8B:9E:76:C2:E9:24:C2:51:32:71:F9:85:FD:34:8D:FB:CD:4B X509v3 Authority Key Identifier: keyid:5D:3B:17:2E:81:61:C8:1C:E8:E9:54:AF:D3:5A:73:B2:FA:D0:BB:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTsXLoFhyBzo6VSv01pzsvrQuzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7a4396-d9c3-4fc8-88b1-32c613f73661/1/XTsXLoFhyBzo6VSv01pzsvrQuzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8a:11:0d:a5:1b:cb:c6:c1:18:0d:cd:60:79:4f:75:cd:9d: 6d:b6:da:ed:a9:5c:49:6e:4f:dc:6b:17:6a:5c:50:5e:94:26: 20:3d:cf:8b:43:03:39:5c:67:7e:af:2c:c8:8b:bb:fd:47:0a: ca:d5:bf:25:b2:aa:d9:66:aa:27:c9:32:c9:4b:98:7a:45:97: 11:26:90:27:60:86:c2:d1:07:ec:97:00:10:87:26:86:f9:a6: 56:aa:85:fe:de:54:4c:79:0a:d6:a3:1e:20:89:3c:90:10:07: 62:a3:cb:11:6b:55:59:46:93:e6:8e:dc:90:1c:ed:54:0c:aa: c8:b9:32:5c:a6:7c:27:f1:b7:39:8c:ac:1c:b8:19:42:63:7a: dd:6b:5c:67:50:f5:fb:7a:a8:fd:69:6b:fe:dd:86:df:57:f2: 0b:c4:72:e5:ff:8d:41:fa:dd:8b:76:d8:74:ee:6b:97:8f:45: 37:80:42:a4:5f:4d:fd:a2:86:0c:c3:ae:6a:72:f7:a0:d3:c7: 88:97:85:29:ba:40:bf:fa:92:0f:67:b5:f6:46:41:15:ad:13: 1c:58:b7:11:01:2e:ae:10:28:56:79:01:55:1c:17:dc:23:3f: 5a:10:6d:02:56:59:51:6f:72:0f:7c:18:ff:93:b2:79:5a:eb: c5:a8:b8:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLujlUS5vb7AqRUgOtIDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkM2IxNzJlODE2MWM4MWNlOGU5NTRhZmQzNWE3M2IyZmFk MGJiM2EwHhcNMjUxMjE2MjIwMTM4WhcNMjUxMjE3MjIwMTM4WjAzMTEwLwYDVQQD EyhhMTcwOGI5ZTc2YzJlOTI0YzI1MTMyNzFmOTg1ZmQzNDhkZmJjZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdS+IMiemQIM+kFUojt18C4FfZHp pbZSNSCAELvvKlzONYG1NushqYVBQwNBRyk8JzsNG3fJuQbr9zKv2iousQ0NWXhP XciCyPvOH+I4KhPqClDqXxC1Klb+0VKxtYuQFp5+/qIhvB0hYXx8rLq9LHqMc6UF pceMdr0Vtd24NkYDi4nITknP8OfzHcpIHyQre3IBAxK4OB+yfgfshKTAVqzAbRB/ ZJryPzJnWSno+/9qAdhDgRWQM/0HGltviJ5GjShR0DV8uwDPLjAgkPqJHg/o0zfq RMlL4otsoD4v9/hxToxAV1MS1Dms/uAZqO0Yjz9K2kFLlsbx0L1cQkjDaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFwi552wukkwlEycfmF/TSN+81LMB8GA1UdIwQY MBaAFF07Fy6BYcgc6OlUr9Nac7L60Ls6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEt MzJjNjEzZjczNjYxLzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS83YTQzOTYtZDljMy00ZmM4LTg4YjEtMzJjNjEzZjczNjYx LzEvWFRzWExvRmh5QnpvNlZTdjAxcHpzdnJRdXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4oRDaUb y8bBGA3NYHlPdc2dbbba7alcSW5P3GsXalxQXpQmID3Pi0MDOVxnfq8syIu7/UcK ytW/JbKq2WaqJ8kyyUuYekWXESaQJ2CGwtEH7JcAEIcmhvmmVqqF/t5UTHkK1qMe IIk8kBAHYqPLEWtVWUaT5o7ckBztVAyqyLkyXKZ8J/G3OYysHLgZQmN63WtcZ1D1 +3qo/Wlr/t2G31fyC8Ry5f+NQfrdi3bYdO5rl49FN4BCpF9N/aKGDMOuanL3oNPH iJeFKbpAv/qSD2e19kZBFa0THFi3EQEurhAoVnkBVRwX3CM/WhBtAlZZUW9yD3wY /5OyeVrrxai4zg== -----END CERTIFICATE-----Generated at Wed Dec 17 04:17:16 2025 by rpki-client