This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft File: a1xW3Y1JexBoE6IloYFxST7jKoU.mft (raw, json) Hash identifier: l5V5B78YZKgdt4TKpgfMxyIEc3fz8LEmPwi4JvgX1vc= Subject key identifier: 24:28:F0:9F:7F:B0:81:1F:0B:B5:71:A3:50:9F:20:62:99:C8:45:26 Authority key identifier: 6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85 Certificate issuer: /CN=6b5c56dd8d497b106813a225a18171493ee32a85 Certificate serial: 019B5A88DBA14A91EED56D3D9029E17CB6F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft Manifest number: 01D8 Signing time: Fri 26 Dec 2025 12:01:17 +0000 Manifest this update: Fri 26 Dec 2025 12:01:17 +0000 Manifest next update: Sat 27 Dec 2025 12:01:17 +0000 Files and hashes: 1: a1xW3Y1JexBoE6IloYFxST7jKoU.crl (hash: clLrjBVuEaZyIwgLq0f4BeJU/NWCSeDa8LHz0sHgfXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:db:a1:4a:91:ee:d5:6d:3d:90:29:e1:7c:b6:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5c56dd8d497b106813a225a18171493ee32a85 Validity Not Before: Dec 26 12:01:17 2025 GMT Not After : Dec 27 12:01:17 2025 GMT Subject: CN=2428f09f7fb0811f0bb571a3509f206299c84526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:36:ff:7d:11:06:23:70:1f:e8:83:4a:61:a8: 8a:2b:7e:03:25:d1:5a:59:05:78:34:b4:4a:a2:37: 61:c0:c7:f9:2c:27:42:a7:25:78:2a:68:cf:41:d5: a8:f9:28:30:d9:fc:8b:a1:5f:09:05:5c:0b:83:06: 17:71:b0:a7:54:5f:67:49:64:c8:09:ba:1c:1f:09: b9:82:ba:2b:41:9a:c1:03:37:32:e0:1e:37:66:14: 46:58:b5:5c:83:7c:61:4d:eb:5e:6e:2c:75:a9:fc: cd:de:85:4d:34:75:56:44:a0:bd:3a:43:d2:47:bd: 05:54:d8:cb:31:2d:51:af:07:e4:3a:24:82:51:22: 8c:96:c5:e5:73:5e:8f:4e:fb:e9:c3:75:a9:2d:d1: 81:78:53:48:7b:f6:30:c9:1f:23:10:e8:c6:15:f6: 6e:60:11:ff:31:a1:37:25:09:02:78:73:67:51:64: 53:27:3c:71:e0:bb:ba:3b:eb:bd:07:95:89:9b:ce: 53:3f:83:50:04:c4:dd:d2:6a:94:8f:72:20:b5:7f: 28:cc:74:2d:7a:8b:45:92:44:6e:bc:9c:fc:50:e9: 46:bf:ff:d6:38:05:06:d7:9e:c4:68:0e:85:81:44: c8:e6:c7:0f:56:5c:1a:d4:47:a7:18:1b:86:82:a7: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:F0:9F:7F:B0:81:1F:0B:B5:71:A3:50:9F:20:62:99:C8:45:26 X509v3 Authority Key Identifier: keyid:6B:5C:56:DD:8D:49:7B:10:68:13:A2:25:A1:81:71:49:3E:E3:2A:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1xW3Y1JexBoE6IloYFxST7jKoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1a530f-efe3-4d8b-903a-a7136a145f1c/1/a1xW3Y1JexBoE6IloYFxST7jKoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:9f:c8:de:db:af:17:54:a4:68:26:df:80:04:47:46:32:f2: a9:69:50:20:7f:a5:f9:26:e6:21:09:50:c0:57:48:02:66:11: 85:d5:9e:85:df:7c:78:34:8e:ce:57:08:21:13:e1:14:77:f8: c0:39:8b:38:e0:86:24:9e:02:3f:43:22:d5:0d:1e:b4:6a:db: 70:10:b8:de:9e:c2:0f:7f:81:c8:32:f1:d1:24:15:bc:64:39: ca:a8:29:e0:e8:2b:73:c6:4a:2a:11:fd:f0:79:22:53:24:5f: 91:55:3d:ab:b3:54:2d:b6:be:b3:06:5a:98:61:22:6b:a2:e0: bd:f3:c7:eb:84:f1:53:3e:f0:3c:f5:c5:0b:27:34:1c:57:63: 04:25:b1:98:93:4c:27:7a:72:a8:4e:8f:35:27:ee:6f:09:3e: ec:f9:b0:cc:60:c8:17:b3:dd:65:55:87:aa:b5:6f:3e:67:79: 94:81:8e:5c:7b:47:23:0c:a4:97:90:47:12:0d:fd:51:d7:0d: 9f:95:a5:1f:e7:0e:45:ce:b0:33:ec:93:cd:e9:de:5e:98:8b: 92:e3:0c:3f:d7:a4:04:c5:07:c1:d4:7d:e2:26:b8:a1:04:92: 75:6c:b8:2e:14:40:bc:0d:b6:e7:73:3f:19:83:35:7d:f1:35: 38:d6:7a:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNuhSpHu1W09kCnhfLb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWM1NmRkOGQ0OTdiMTA2ODEzYTIyNWExODE3MTQ5M2Vl MzJhODUwHhcNMjUxMjI2MTIwMTE3WhcNMjUxMjI3MTIwMTE3WjAzMTEwLwYDVQQD EygyNDI4ZjA5ZjdmYjA4MTFmMGJiNTcxYTM1MDlmMjA2Mjk5Yzg0NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjb/fREGI3Af6INKYaiKK34DJdFa WQV4NLRKojdhwMf5LCdCpyV4KmjPQdWo+Sgw2fyLoV8JBVwLgwYXcbCnVF9nSWTI CbocHwm5grorQZrBAzcy4B43ZhRGWLVcg3xhTetebix1qfzN3oVNNHVWRKC9OkPS R70FVNjLMS1RrwfkOiSCUSKMlsXlc16PTvvpw3WpLdGBeFNIe/YwyR8jEOjGFfZu YBH/MaE3JQkCeHNnUWRTJzxx4Lu6O+u9B5WJm85TP4NQBMTd0mqUj3IgtX8ozHQt eotFkkRuvJz8UOlGv//WOAUG157EaA6FgUTI5scPVlwa1EenGBuGgqd87wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQo8J9/sIEfC7Vxo1CfIGKZyEUmMB8GA1UdIwQY MBaAFGtcVt2NSXsQaBOiJaGBcUk+4yqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2Et YTcxMzZhMTQ1ZjFjLzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xYTUzMGYtZWZlMy00ZDhiLTkwM2EtYTcxMzZhMTQ1ZjFj LzEvYTF4VzNZMUpleEJvRTZJbG9ZRnhTVDdqS29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcZ/I3tuv F1SkaCbfgARHRjLyqWlQIH+l+SbmIQlQwFdIAmYRhdWehd98eDSOzlcIIRPhFHf4 wDmLOOCGJJ4CP0Mi1Q0etGrbcBC43p7CD3+ByDLx0SQVvGQ5yqgp4Ogrc8ZKKhH9 8HkiUyRfkVU9q7NULba+swZamGEia6LgvfPH64TxUz7wPPXFCyc0HFdjBCWxmJNM J3pyqE6PNSfubwk+7PmwzGDIF7PdZVWHqrVvPmd5lIGOXHtHIwykl5BHEg39UdcN n5WlH+cORc6wM+yTzeneXpiLkuMMP9ekBMUHwdR94ia4oQSSdWy4LhRAvA2253M/ GYM1ffE1ONZ6Fw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client