This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft File: Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft (raw, json) Hash identifier: B9D5yQFNc9tD36xIPzS6LWbMgOARC3MUsqo8hnEoFk8= Subject key identifier: 01:44:A1:C7:D1:B9:BA:CA:E4:29:D8:FE:61:50:65:DF:7E:D0:97:8B Authority key identifier: 5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E Certificate issuer: /CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e Certificate serial: 019B59E43974BC5D956A345F909F9F19800B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft Manifest number: 0AF6 Signing time: Fri 26 Dec 2025 09:01:27 +0000 Manifest this update: Fri 26 Dec 2025 09:01:27 +0000 Manifest next update: Sat 27 Dec 2025 09:01:27 +0000 Files and hashes: 1: Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl (hash: Xdf4bzAYJfxL2QVcKtqboBxCSfsrGjQq3j4PvxCu184=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:39:74:bc:5d:95:6a:34:5f:90:9f:9f:19:80:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5edfbedeac06b01c5a3f784cea046e5a2c95ca5e Validity Not Before: Dec 26 09:01:27 2025 GMT Not After : Dec 27 09:01:27 2025 GMT Subject: CN=0144a1c7d1b9bacae429d8fe615065df7ed0978b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:77:dd:7f:13:28:0a:2c:f1:94:a7:34:f5: 28:65:0b:80:c8:75:a7:7d:31:3d:09:fa:6b:c1:1c: 5c:92:fe:29:95:44:b1:f9:1a:0c:0b:38:36:1e:b5: d8:a5:a5:fb:c8:ca:96:c8:7b:c0:08:70:84:8f:e0: 7f:ad:df:d6:86:fc:91:29:6d:b8:36:14:dd:4b:1e: 7d:4f:c2:97:8b:6d:cc:e9:91:62:cf:87:b3:e8:a5: 3e:a9:f1:d0:ad:fe:4f:64:7c:0f:7d:20:0b:68:de: 83:ab:39:24:25:49:47:bf:e5:e8:60:0c:ad:ef:fe: 1c:f5:5f:c5:ef:a7:dc:83:57:c4:4c:30:b7:f0:23: 4e:2c:4d:46:86:76:36:27:35:6b:a6:ee:5d:68:50: 53:c0:92:1a:da:55:ec:57:c5:b3:c0:47:f2:b0:c1: d9:9a:48:9a:8d:ea:b4:71:a2:cd:12:f2:bd:b4:16: 50:b4:cb:6b:51:16:76:c4:28:4a:5e:d2:26:4f:8e: 96:63:fd:93:93:d5:9a:a5:15:aa:dc:12:c4:f5:d3: 60:c0:aa:a2:37:49:b3:77:06:2b:09:ac:e8:e8:f5: 82:da:55:44:64:9d:f5:8f:ef:2f:02:0e:83:09:21: 38:20:5c:88:2f:3e:16:25:ff:6f:88:76:3c:d1:09: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:44:A1:C7:D1:B9:BA:CA:E4:29:D8:FE:61:50:65:DF:7E:D0:97:8B X509v3 Authority Key Identifier: keyid:5E:DF:BE:DE:AC:06:B0:1C:5A:3F:78:4C:EA:04:6E:5A:2C:95:CA:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xt--3qwGsBxaP3hM6gRuWiyVyl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/28343c-a4e4-4db0-92be-b58617e1888b/1/Xt--3qwGsBxaP3hM6gRuWiyVyl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c2:9a:65:78:6e:db:b2:aa:42:4b:a0:6a:8a:66:f2:b6:9f: 7a:95:11:4c:57:7d:b6:4f:0c:60:fe:06:95:32:28:08:12:5b: bb:84:d5:68:1f:bf:4b:24:87:e7:6a:f1:78:3d:a2:dd:53:08: 59:35:9a:44:76:32:95:6b:75:c7:ce:bc:ca:35:78:a3:3b:7e: c7:ee:99:08:ea:61:ef:f6:a3:28:51:4f:2e:7b:ff:3b:df:3a: ad:56:b1:a3:d6:c8:80:3a:af:04:65:a8:a1:a8:37:ef:2a:da: e3:6f:0a:be:5f:6e:a8:b3:c1:6d:a1:7e:17:45:6f:52:ac:16: e4:8d:89:62:9f:c3:4b:36:7e:aa:23:6b:08:21:11:d5:ee:f1: 6c:6a:47:0e:b1:67:0f:15:f6:91:e0:15:28:0c:73:37:55:44: 4f:91:8a:f2:a9:d3:42:ff:3b:0b:02:5d:89:ea:eb:33:92:67: e0:aa:db:c2:04:aa:a5:40:e7:ab:78:98:3a:4c:db:92:40:8b: 38:d4:1f:0c:13:c9:3b:37:61:d5:df:42:c2:5a:9f:45:a5:08: bf:60:ef:20:d5:a2:9d:05:04:0a:f5:a5:9a:5f:6a:58:c5:60: 53:fd:5c:0f:94:0c:ad:61:04:28:4f:5a:1d:a2:e0:fd:f3:ef: ab:95:68:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Dl0vF2VajRfkJ+fGYALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZGZiZWRlYWMwNmIwMWM1YTNmNzg0Y2VhMDQ2ZTVhMmM5 NWNhNWUwHhcNMjUxMjI2MDkwMTI3WhcNMjUxMjI3MDkwMTI3WjAzMTEwLwYDVQQD EygwMTQ0YTFjN2QxYjliYWNhZTQyOWQ4ZmU2MTUwNjVkZjdlZDA5NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSd33X8TKAos8ZSnNPUoZQuAyHWn fTE9CfprwRxckv4plUSx+RoMCzg2HrXYpaX7yMqWyHvACHCEj+B/rd/WhvyRKW24 NhTdSx59T8KXi23M6ZFiz4ez6KU+qfHQrf5PZHwPfSALaN6DqzkkJUlHv+XoYAyt 7/4c9V/F76fcg1fETDC38CNOLE1GhnY2JzVrpu5daFBTwJIa2lXsV8WzwEfysMHZ mkiajeq0caLNEvK9tBZQtMtrURZ2xChKXtImT46WY/2Tk9WapRWq3BLE9dNgwKqi N0mzdwYrCazo6PWC2lVEZJ31j+8vAg6DCSE4IFyILz4WJf9viHY80QmdEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFEocfRubrK5CnY/mFQZd9+0JeLMB8GA1UdIwQY MBaAFF7fvt6sBrAcWj94TOoEbloslcpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUt YjU4NjE3ZTE4ODhiLzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yODM0M2MtYTRlNC00ZGIwLTkyYmUtYjU4NjE3ZTE4ODhi LzEvWHQtLTNxd0dzQnhhUDNoTTZnUnVXaXlWeWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasKaZXhu 27KqQkugaopm8rafepURTFd9tk8MYP4GlTIoCBJbu4TVaB+/SySH52rxeD2i3VMI WTWaRHYylWt1x868yjV4ozt+x+6ZCOph7/ajKFFPLnv/O986rVaxo9bIgDqvBGWo oag37yra428Kvl9uqLPBbaF+F0VvUqwW5I2JYp/DSzZ+qiNrCCER1e7xbGpHDrFn DxX2keAVKAxzN1VET5GK8qnTQv87CwJdierrM5Jn4KrbwgSqpUDnq3iYOkzbkkCL ONQfDBPJOzdh1d9CwlqfRaUIv2DvINWinQUECvWlml9qWMVgU/1cD5QMrWEEKE9a HaLg/fPvq5Vo7A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:29 2025 by rpki-client