This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft File: CRX548KQJHXCTNRcaSmRvHH_ZkM.mft (raw, json) Hash identifier: +3/Dehwl8jAYXdSDquJZU+RJKFwCdFbJIuo1PsXCZT0= Subject key identifier: 90:93:C5:6F:60:91:0E:3B:93:D7:AF:40:B6:22:AC:45:2A:B0:EC:2E Authority key identifier: 09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 Certificate issuer: /CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Certificate serial: 019B58D1122B0739CDEA6CBD7FF07A12A427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft Manifest number: 0164 Signing time: Fri 26 Dec 2025 04:00:55 +0000 Manifest this update: Fri 26 Dec 2025 04:00:55 +0000 Manifest next update: Sat 27 Dec 2025 04:00:55 +0000 Files and hashes: 1: CRX548KQJHXCTNRcaSmRvHH_ZkM.crl (hash: 6IY0P3OJQ+libeDupDBx004g4ieKXa3KDcm8hmW7JXw=) 2: feLtnRMkzU1rqe5DPxi47-2h3dM.roa (hash: x685XsSKo/9+h/ObOY3HT9WaSelNcUDDImrGBWSa8eI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d1:12:2b:07:39:cd:ea:6c:bd:7f:f0:7a:12:a4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0915f9e3c2902475c24cd45c692991bc71ff6643 Validity Not Before: Dec 26 04:00:55 2025 GMT Not After : Dec 27 04:00:55 2025 GMT Subject: CN=9093c56f60910e3b93d7af40b622ac452ab0ec2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:f6:62:05:b5:55:37:81:8d:58:16:fa:46: 58:09:36:bb:f0:c4:47:c5:c4:3d:e5:0a:15:e9:97: 59:85:b0:57:f7:ba:38:1e:90:70:53:58:f0:20:1b: 51:3b:1e:77:ba:ea:20:e9:7c:68:b8:c2:77:55:e6: e0:13:9a:d7:f7:83:b5:f7:2d:72:e1:89:8c:64:45: 8b:d1:26:2c:4b:87:78:f0:4b:5a:cb:45:16:b1:45: 53:f3:e3:67:e1:8c:58:39:5c:84:22:c5:cc:b3:50: aa:0a:4f:df:23:75:ed:43:d8:fb:27:d4:9f:2b:0e: b1:21:18:e1:8f:02:cd:6e:cf:7a:40:e0:34:bd:bb: 03:f1:f4:56:ea:e5:6f:0c:ef:28:45:5f:38:b4:3d: de:d0:96:4c:29:81:0f:31:66:cf:d9:6d:a5:19:2c: e3:7b:cd:02:59:c2:af:43:e4:10:ac:22:43:43:74: ad:03:91:92:6a:d3:42:dd:07:93:8a:ea:9b:60:fb: f4:c7:28:84:7b:57:53:a5:bc:f7:30:c7:7b:41:10: 55:ee:ef:f4:ac:c3:53:18:ba:ed:22:16:85:17:94: a1:63:e0:2f:d3:4d:0e:90:42:dd:cd:2e:38:23:0b: 0a:dc:05:1f:8e:bd:0e:ce:52:e6:58:46:f5:45:a0: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:93:C5:6F:60:91:0E:3B:93:D7:AF:40:B6:22:AC:45:2A:B0:EC:2E X509v3 Authority Key Identifier: keyid:09:15:F9:E3:C2:90:24:75:C2:4C:D4:5C:69:29:91:BC:71:FF:66:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRX548KQJHXCTNRcaSmRvHH_ZkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a080fc-543e-4f61-8fc7-e337bfe0279b/1/CRX548KQJHXCTNRcaSmRvHH_ZkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:58:d6:ef:17:9a:c7:c7:14:aa:fd:17:1d:5f:1f:a6:ff:fa: 2b:b6:22:90:8b:79:ab:59:05:28:49:49:83:fe:21:d5:eb:4b: 23:e4:3b:b4:13:e3:dd:95:32:b6:a8:66:cc:7b:d1:55:3e:ba: 71:a9:32:be:1a:04:d8:07:9c:8b:f5:9a:b6:3b:c1:bd:ef:b7: 0a:7b:27:ae:f9:d9:8b:bf:87:6b:74:96:96:c0:3e:b9:9b:40: 6a:c1:2b:b6:eb:fa:59:d2:43:14:38:fc:24:2a:ec:5d:f0:2f: cd:e2:57:1a:ab:d8:fe:05:c2:f4:71:c4:50:16:03:96:c6:8a: 3d:31:68:23:3e:17:28:4f:5d:a2:bd:c0:25:ef:35:02:d2:df: 3f:ae:a0:c9:e5:8d:6c:6b:51:10:1f:60:0d:d6:fc:d5:61:68: a4:79:4d:ed:d8:67:c9:0e:a7:85:7b:da:ba:7c:ce:20:fe:81: 01:1b:84:98:03:07:ea:b4:2f:e4:b3:87:e7:b3:be:aa:fc:4c: a4:a0:27:af:6c:10:eb:90:a7:1a:ee:83:3f:e6:a4:fb:1f:7e: 3a:8e:1c:c4:d9:59:32:f9:3f:d0:79:d0:1b:28:96:6d:fd:c2: 3d:a4:5c:9d:1c:49:c4:67:b1:d1:46:34:58:8a:e7:2e:0f:c5: d4:59:6b:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0RIrBznN6my9f/B6EqQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTVmOWUzYzI5MDI0NzVjMjRjZDQ1YzY5Mjk5MWJjNzFm ZjY2NDMwHhcNMjUxMjI2MDQwMDU1WhcNMjUxMjI3MDQwMDU1WjAzMTEwLwYDVQQD Eyg5MDkzYzU2ZjYwOTEwZTNiOTNkN2FmNDBiNjIyYWM0NTJhYjBlYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fn2YgW1VTeBjVgW+kZYCTa78MRH xcQ95QoV6ZdZhbBX97o4HpBwU1jwIBtROx53uuog6XxouMJ3VebgE5rX94O19y1y 4YmMZEWL0SYsS4d48Etay0UWsUVT8+Nn4YxYOVyEIsXMs1CqCk/fI3XtQ9j7J9Sf Kw6xIRjhjwLNbs96QOA0vbsD8fRW6uVvDO8oRV84tD3e0JZMKYEPMWbP2W2lGSzj e80CWcKvQ+QQrCJDQ3StA5GSatNC3QeTiuqbYPv0xyiEe1dTpbz3MMd7QRBV7u/0 rMNTGLrtIhaFF5ShY+Av000OkELdzS44IwsK3AUfjr0OzlLmWEb1RaA4QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCTxW9gkQ47k9evQLYirEUqsOwuMB8GA1UdIwQY MBaAFAkV+ePCkCR1wkzUXGkpkbxx/2ZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzct ZTMzN2JmZTAyNzliLzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hMDgwZmMtNTQzZS00ZjYxLThmYzctZTMzN2JmZTAyNzli LzEvQ1JYNTQ4S1FKSFhDVE5SY2FTbVJ2SEhfWmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFjW7xea x8cUqv0XHV8fpv/6K7YikIt5q1kFKElJg/4h1etLI+Q7tBPj3ZUytqhmzHvRVT66 cakyvhoE2Aeci/WatjvBve+3CnsnrvnZi7+Ha3SWlsA+uZtAasErtuv6WdJDFDj8 JCrsXfAvzeJXGqvY/gXC9HHEUBYDlsaKPTFoIz4XKE9dor3AJe81AtLfP66gyeWN bGtREB9gDdb81WFopHlN7dhnyQ6nhXvaunzOIP6BARuEmAMH6rQv5LOH57O+qvxM pKAnr2wQ65CnGu6DP+ak+x9+Oo4cxNlZMvk/0HnQGyiWbf3CPaRcnRxJxGex0UY0 WIrnLg/F1FlreQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:25 2025 by rpki-client