This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft File: X5f6xRCj4ehznjgS_ApcrgJX3yY.mft (raw, json) Hash identifier: oSNmczt/dDGt5JzDkRgCUKeP/caU7qyHGzBzMnFLE8Y= Subject key identifier: 47:36:01:66:D5:53:DC:2E:ED:A7:1D:12:E1:1D:84:93:42:42:21:84 Authority key identifier: 5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26 Certificate issuer: /CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26 Certificate serial: 019B5A88D8BD9254AFE64029DFA4677FDDD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft Manifest number: 0784 Signing time: Fri 26 Dec 2025 12:01:16 +0000 Manifest this update: Fri 26 Dec 2025 12:01:16 +0000 Manifest next update: Sat 27 Dec 2025 12:01:16 +0000 Files and hashes: 1: X5f6xRCj4ehznjgS_ApcrgJX3yY.crl (hash: 1Bv1v6/OfPqGY18rJIiPP1zNFxN4wIqeU7i61yppvik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:d8:bd:92:54:af:e6:40:29:df:a4:67:7f:dd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f97fac510a3e1e8739e3812fc0a5cae0257df26 Validity Not Before: Dec 26 12:01:16 2025 GMT Not After : Dec 27 12:01:16 2025 GMT Subject: CN=47360166d553dc2eeda71d12e11d849342422184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:95:09:7a:a8:69:6b:b7:c9:6d:c0:05:ba: 9a:ba:ce:3e:66:ff:eb:36:b5:2b:65:1b:4c:eb:d0: 55:7b:1e:2a:9b:49:69:71:b3:7f:d7:d1:e5:72:05: a8:29:99:93:01:e0:91:18:ec:a3:6f:f8:22:70:9a: af:bd:e2:21:48:d7:62:89:1a:ae:3e:90:2f:d1:e9: 8d:6a:41:eb:f1:f4:29:ba:db:d9:4b:c9:07:84:d5: 38:05:c2:fb:cd:0a:6e:08:57:eb:87:60:17:a7:82: d1:39:5c:e7:ec:26:e3:98:59:63:6a:5c:40:b7:40: fd:62:d5:f6:03:b1:aa:8f:db:56:76:b3:b5:4f:37: 13:51:da:e3:23:36:c3:56:86:f7:0d:1d:11:93:a3: 56:5c:8c:cf:aa:5a:68:fd:85:66:f4:92:7e:32:72: fb:6b:74:ae:61:3e:d8:44:67:44:6f:1b:f1:f4:ed: 3c:30:6f:d0:5b:91:fe:23:04:a6:51:e9:7c:e2:0f: 9b:21:d9:e8:06:4b:cb:1f:b8:39:d4:b2:84:e5:6f: 98:be:b6:dc:af:36:7e:b1:47:6d:3d:3a:d0:f2:19: 96:c0:f7:19:f5:e7:b8:bd:c0:0d:01:39:09:75:6d: c6:3e:b3:20:e9:a9:23:e3:94:f7:fd:38:ac:c6:9d: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:36:01:66:D5:53:DC:2E:ED:A7:1D:12:E1:1D:84:93:42:42:21:84 X509v3 Authority Key Identifier: keyid:5F:97:FA:C5:10:A3:E1:E8:73:9E:38:12:FC:0A:5C:AE:02:57:DF:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5f6xRCj4ehznjgS_ApcrgJX3yY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9ce597-c7f7-424a-97b4-71a7850585e5/1/X5f6xRCj4ehznjgS_ApcrgJX3yY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b0:2c:15:0b:7c:b2:b8:54:a2:b8:c3:a5:06:43:ee:9b:43: 36:57:04:47:f9:56:da:95:53:b8:c8:5b:47:c5:97:e9:14:9c: 5e:87:82:47:9f:dd:83:3c:65:44:18:50:ad:4a:04:1c:ea:92: e2:1d:1b:92:b5:d1:31:22:0f:9e:ba:3e:fe:9d:55:22:f4:01: d6:0d:c6:5c:2e:97:b1:7e:c5:6a:f1:02:07:66:63:dc:b0:7c: 06:44:12:54:71:69:3e:9e:88:7e:a8:00:19:f5:dc:fc:7e:5d: 99:41:05:2f:6e:89:31:26:02:7d:78:4a:bd:15:fd:97:b9:08: 78:8c:04:34:91:6f:ab:29:70:f6:20:9c:dc:dd:3f:34:35:80: fd:b7:36:b7:33:ae:c6:02:c0:e1:bc:2d:d7:d6:59:3c:9f:23: cd:58:10:3f:ad:72:b2:0f:f2:fb:03:9b:98:f0:d0:4c:1a:f2: 0d:71:44:e9:72:ee:d3:3a:49:ef:6d:49:20:70:71:18:e4:fb: 95:b3:8f:98:cd:2a:e0:ff:2a:77:29:ad:6b:15:46:b9:42:37: 26:40:39:ea:8f:5d:c2:ea:0e:49:44:38:5d:bf:23:75:ce:f6: 08:ca:d6:a6:00:2a:d7:eb:8b:7a:55:17:c0:47:68:0b:34:96: 47:36:a3:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiNi9klSv5kAp36Rnf93YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmOTdmYWM1MTBhM2UxZTg3MzllMzgxMmZjMGE1Y2FlMDI1 N2RmMjYwHhcNMjUxMjI2MTIwMTE2WhcNMjUxMjI3MTIwMTE2WjAzMTEwLwYDVQQD Eyg0NzM2MDE2NmQ1NTNkYzJlZWRhNzFkMTJlMTFkODQ5MzQyNDIyMTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuOVCXqoaWu3yW3ABbqaus4+Zv/r NrUrZRtM69BVex4qm0lpcbN/19HlcgWoKZmTAeCRGOyjb/gicJqvveIhSNdiiRqu PpAv0emNakHr8fQputvZS8kHhNU4BcL7zQpuCFfrh2AXp4LROVzn7CbjmFljalxA t0D9YtX2A7Gqj9tWdrO1TzcTUdrjIzbDVob3DR0Rk6NWXIzPqlpo/YVm9JJ+MnL7 a3SuYT7YRGdEbxvx9O08MG/QW5H+IwSmUel84g+bIdnoBkvLH7g51LKE5W+Yvrbc rzZ+sUdtPTrQ8hmWwPcZ9ee4vcANATkJdW3GPrMg6akj45T3/Tisxp2afQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc2AWbVU9wu7acdEuEdhJNCQiGEMB8GA1UdIwQY MBaAFF+X+sUQo+Hoc544EvwKXK4CV98mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQt NzFhNzg1MDU4NWU1LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85Y2U1OTctYzdmNy00MjRhLTk3YjQtNzFhNzg1MDU4NWU1 LzEvWDVmNnhSQ2o0ZWh6bmpnU19BcGNyZ0pYM3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7AsFQt8 srhUorjDpQZD7ptDNlcER/lW2pVTuMhbR8WX6RScXoeCR5/dgzxlRBhQrUoEHOqS 4h0bkrXRMSIPnro+/p1VIvQB1g3GXC6XsX7FavECB2Zj3LB8BkQSVHFpPp6IfqgA GfXc/H5dmUEFL26JMSYCfXhKvRX9l7kIeIwENJFvqylw9iCc3N0/NDWA/bc2tzOu xgLA4bwt19ZZPJ8jzVgQP61ysg/y+wObmPDQTBryDXFE6XLu0zpJ721JIHBxGOT7 lbOPmM0q4P8qdymtaxVGuUI3JkA56o9dwuoOSUQ4Xb8jdc72CMrWpgAq1+uLelUX wEdoCzSWRzajaA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:25 2025 by rpki-client