This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft File: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft (raw, json) Hash identifier: y6njP7If8IggfwFbW6UyEKg4V7AJnJvhutxYdW4WRXE= Subject key identifier: CD:AF:21:E0:B7:3D:1D:47:4B:EE:2C:18:A4:F5:25:57:BA:C0:E3:01 Authority key identifier: 44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE Certificate issuer: /CN=44f5c16795ed8825500baf57a7a705b51375a8be Certificate serial: 019B597595A65C4C1F3F6B4B76AFA888957A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:00:36 +0000 Manifest this update: Fri 26 Dec 2025 07:00:36 +0000 Manifest next update: Sat 27 Dec 2025 07:00:36 +0000 Files and hashes: 1: RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl (hash: xhoNwU8QjPapgYc9KnVumm5mZHtTwIuvPoHc4xmwiHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:95:a6:5c:4c:1f:3f:6b:4b:76:af:a8:88:95:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f5c16795ed8825500baf57a7a705b51375a8be Validity Not Before: Dec 26 07:00:36 2025 GMT Not After : Dec 27 07:00:36 2025 GMT Subject: CN=cdaf21e0b73d1d474bee2c18a4f52557bac0e301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d4:16:88:70:36:2f:3e:0d:b7:d3:14:91:69: ff:31:f8:e2:b2:99:7d:b6:03:01:91:4e:ff:4b:a7: dd:ee:1f:97:ca:f4:cf:02:e5:53:9f:84:12:42:45: 9d:e2:da:af:63:a3:ba:1f:5f:54:0b:41:d8:fc:71: 30:88:75:21:3f:c5:f3:52:f4:a6:4a:b2:03:66:97: ef:d9:43:67:63:d2:2b:ad:7e:9d:a3:63:0f:5f:ee: b1:e3:55:31:2d:5f:53:41:8d:27:84:09:1a:b6:09: b1:8b:8f:de:8c:75:00:67:65:d9:9a:3f:df:f8:bb: 80:c3:f6:3d:8c:0b:93:f4:27:6d:a2:f9:46:2e:c7: cd:e7:79:40:98:ae:ed:9e:10:fd:6f:aa:ba:52:47: a7:12:6d:6f:97:db:dd:9b:bc:b6:de:66:9f:d7:b3: f3:ee:36:9c:94:01:ad:84:2a:f1:9e:a2:af:20:94: 90:85:4a:19:83:e2:d2:99:51:38:10:65:1b:18:d2: 3a:5a:4b:eb:fa:36:a7:72:3e:eb:55:1d:8b:ef:75: 15:2a:3f:c2:9f:f6:14:4c:8a:a7:74:0a:06:9c:20: 57:83:d2:f3:54:89:0c:f0:cc:eb:46:76:7d:a6:4d: 3d:e4:38:42:e0:f4:18:9f:dd:e5:35:44:22:cf:4e: 7d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AF:21:E0:B7:3D:1D:47:4B:EE:2C:18:A4:F5:25:57:BA:C0:E3:01 X509v3 Authority Key Identifier: keyid:44:F5:C1:67:95:ED:88:25:50:0B:AF:57:A7:A7:05:B5:13:75:A8:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/8e4da6-ecb2-4056-8f85-4499b6072af2/1/RPXBZ5XtiCVQC69Xp6cFtRN1qL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a5:2d:96:06:a5:50:66:25:4e:d2:dc:1f:bb:e0:38:3d:da: aa:5f:4d:6b:69:38:f1:d0:b6:11:7d:bc:e9:fb:d3:17:10:d5: cc:de:32:d8:48:d6:7c:64:6b:64:b7:21:df:a9:37:4d:ef:83: c8:6c:1c:a0:0a:a2:c1:7e:7e:1d:31:6f:dc:99:f9:b7:8a:43: b3:e1:22:88:72:74:94:c6:1d:be:72:8c:4e:f4:82:12:e2:e3: 43:7e:cb:0c:99:83:3c:e5:33:8a:f2:73:10:bf:86:8f:d4:86: 04:c0:67:fe:11:7d:83:62:59:02:8e:4c:d1:8c:50:8a:60:f3: 9e:8f:34:84:eb:cd:33:25:d2:27:bf:33:19:28:1f:73:9d:68: c3:9a:68:f4:5e:c9:f1:1c:fc:a3:75:e4:5a:09:fd:0b:32:4d: d7:07:8d:2e:c8:cd:d4:29:7f:c5:ac:28:e2:ae:c4:5e:5e:42: 52:b5:25:ed:0e:1d:e5:9b:d1:f6:67:9b:1b:03:3c:a3:9e:5d: 2f:44:f6:ea:30:e4:e3:9e:47:93:a0:47:a4:67:7f:ab:14:74: 57:d1:0c:ed:0a:fa:98:10:82:4e:09:ad:eb:6c:65:3a:41:cb: f7:95:c6:06:f7:11:9c:fa:e3:09:ad:1f:0d:28:d9:f8:9b:0a: 49:88:d3:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZWmXEwfP2tLdq+oiJV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjVjMTY3OTVlZDg4MjU1MDBiYWY1N2E3YTcwNWI1MTM3 NWE4YmUwHhcNMjUxMjI2MDcwMDM2WhcNMjUxMjI3MDcwMDM2WjAzMTEwLwYDVQQD EyhjZGFmMjFlMGI3M2QxZDQ3NGJlZTJjMThhNGY1MjU1N2JhYzBlMzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdQWiHA2Lz4Nt9MUkWn/Mfjispl9 tgMBkU7/S6fd7h+XyvTPAuVTn4QSQkWd4tqvY6O6H19UC0HY/HEwiHUhP8XzUvSm SrIDZpfv2UNnY9IrrX6do2MPX+6x41UxLV9TQY0nhAkatgmxi4/ejHUAZ2XZmj/f +LuAw/Y9jAuT9CdtovlGLsfN53lAmK7tnhD9b6q6UkenEm1vl9vdm7y23maf17Pz 7jaclAGthCrxnqKvIJSQhUoZg+LSmVE4EGUbGNI6Wkvr+jancj7rVR2L73UVKj/C n/YUTIqndAoGnCBXg9LzVIkM8MzrRnZ9pk095DhC4PQYn93lNUQiz059uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2vIeC3PR1HS+4sGKT1JVe6wOMBMB8GA1UdIwQY MBaAFET1wWeV7YglUAuvV6enBbUTdai+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUt NDQ5OWI2MDcyYWYyLzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy84ZTRkYTYtZWNiMi00MDU2LThmODUtNDQ5OWI2MDcyYWYy LzEvUlBYQlo1WHRpQ1ZRQzY5WHA2Y0Z0Uk4xcUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKUtlgal UGYlTtLcH7vgOD3aql9Na2k48dC2EX286fvTFxDVzN4y2EjWfGRrZLch36k3Te+D yGwcoAqiwX5+HTFv3Jn5t4pDs+EiiHJ0lMYdvnKMTvSCEuLjQ37LDJmDPOUzivJz EL+Gj9SGBMBn/hF9g2JZAo5M0YxQimDzno80hOvNMyXSJ78zGSgfc51ow5po9F7J 8Rz8o3XkWgn9CzJN1weNLsjN1Cl/xawo4q7EXl5CUrUl7Q4d5ZvR9mebGwM8o55d L0T26jDk455Hk6BHpGd/qxR0V9EM7Qr6mBCCTgmt62xlOkHL95XGBvcRnPrjCa0f DSjZ+JsKSYjTIA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client