This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft File: rXLWZFEKa_uW8qalwSCYfcl3S_g.mft (raw, json) Hash identifier: MaxAh1q4TZlWMQCxmSeEzqbUx960n1wQHoep5X6Zip4= Subject key identifier: 09:CD:66:02:D4:DC:84:56:4E:EC:39:C6:A1:4E:9A:6D:9B:4F:48:94 Authority key identifier: AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 Certificate issuer: /CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Certificate serial: 019B1FF48F6B9FAF82FF396120D9B7C1271E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft Manifest number: 0F29 Signing time: Mon 15 Dec 2025 03:01:19 +0000 Manifest this update: Mon 15 Dec 2025 03:01:19 +0000 Manifest next update: Tue 16 Dec 2025 03:01:19 +0000 Files and hashes: 1: rXLWZFEKa_uW8qalwSCYfcl3S_g.crl (hash: Q9LO5uGH5pUkMf5FIYBvc7HHtaxGWWws3U8HFG9ldt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:8f:6b:9f:af:82:ff:39:61:20:d9:b7:c1:27:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad72d664510a6bfb96f2a6a5c120987dc9774bf8 Validity Not Before: Dec 15 03:01:19 2025 GMT Not After : Dec 16 03:01:19 2025 GMT Subject: CN=09cd6602d4dc84564eec39c6a14e9a6d9b4f4894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:7e:dd:1c:2b:00:b7:4a:5a:e6:9d:7f:04: 7e:e9:84:bc:13:a6:15:33:8c:ac:61:50:33:f8:de: 9e:a1:ba:dd:e3:5c:c0:a6:34:ce:b2:c3:a0:ee:ae: fe:5e:a5:9e:01:5f:82:d3:d8:39:d5:e0:a5:de:32: 74:b2:83:9e:e5:46:59:b1:41:7e:ca:30:7a:6a:bc: 1a:7a:a7:77:55:26:23:9b:4f:6f:8e:39:ab:c5:96: 3c:cf:d3:45:33:29:bf:e2:51:89:8a:6f:ef:5d:df: dc:5c:6a:9e:83:db:52:05:0f:4d:b7:34:0f:39:69: da:57:83:b4:58:b4:28:a7:aa:24:ef:71:42:1b:c3: 30:54:84:5f:98:73:78:59:52:6c:63:19:18:cb:b1: c2:54:ce:3a:ce:8d:0e:f5:31:27:ad:0a:ee:51:f8: 6f:60:28:7d:38:f2:95:4a:a9:f4:5c:c3:ca:14:56: 52:1e:c6:c2:47:c3:e1:d8:ad:16:fa:62:9f:9e:72: cc:b5:9b:c0:0a:e8:d9:3b:27:19:8d:cb:0c:05:2a: 2b:7a:9c:ca:f2:7c:84:52:c3:d8:58:bd:6a:5b:18: ed:13:79:69:ee:60:8b:9a:36:0a:f3:87:23:3d:a7: ed:6a:aa:0c:55:d9:60:ed:d7:01:66:29:82:00:39: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:66:02:D4:DC:84:56:4E:EC:39:C6:A1:4E:9A:6D:9B:4F:48:94 X509v3 Authority Key Identifier: keyid:AD:72:D6:64:51:0A:6B:FB:96:F2:A6:A5:C1:20:98:7D:C9:77:4B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXLWZFEKa_uW8qalwSCYfcl3S_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/94f2b9-cff6-42d5-8fb9-770d9a389295/1/rXLWZFEKa_uW8qalwSCYfcl3S_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ec:99:9c:47:29:aa:c5:ce:4c:2c:6e:69:22:86:b9:8e:0a: 77:8e:93:ac:96:56:5e:85:09:e6:6e:9d:4d:19:4e:fb:98:bd: c0:31:5b:23:74:32:2c:8c:53:f3:78:6b:c1:c7:40:42:ed:ce: 8a:1e:e3:ac:89:33:7d:da:18:ea:0c:a7:b0:d0:ca:0b:cc:82: 86:19:0f:32:07:32:bd:97:37:34:be:ea:64:34:83:e9:29:00: 1f:f9:12:7d:c3:20:16:a4:5a:37:c9:cf:97:56:70:f0:25:d0: 76:e9:af:13:5d:d9:6f:c6:6c:87:0c:83:47:3c:1f:48:6f:4a: 40:56:ee:40:02:d2:9f:87:17:ff:50:ec:ce:84:bc:83:c3:1a: 93:a9:c4:f7:da:6b:ef:92:9f:3e:d9:e1:44:86:28:95:b7:4a: 9b:35:53:73:ea:c2:41:cc:ae:5b:fe:de:29:83:12:9e:b2:67: 4f:08:8c:70:15:92:25:1c:d4:46:a6:67:73:13:14:a9:80:76: 52:18:43:75:01:03:9b:f7:97:ab:47:f8:c2:17:a2:3f:bd:51: e1:f0:ef:2e:ac:76:ec:f0:32:6b:a6:2c:e9:84:1c:3e:85:59: d2:b7:25:68:7c:cb:10:9f:5e:34:fb:65:a5:9a:9b:55:8f:b2: 72:3a:07:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9I9rn6+C/zlhINm3wSceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNzJkNjY0NTEwYTZiZmI5NmYyYTZhNWMxMjA5ODdkYzk3 NzRiZjgwHhcNMjUxMjE1MDMwMTE5WhcNMjUxMjE2MDMwMTE5WjAzMTEwLwYDVQQD EygwOWNkNjYwMmQ0ZGM4NDU2NGVlYzM5YzZhMTRlOWE2ZDliNGY0ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk5+3RwrALdKWuadfwR+6YS8E6YV M4ysYVAz+N6eobrd41zApjTOssOg7q7+XqWeAV+C09g51eCl3jJ0soOe5UZZsUF+ yjB6arwaeqd3VSYjm09vjjmrxZY8z9NFMym/4lGJim/vXd/cXGqeg9tSBQ9NtzQP OWnaV4O0WLQop6ok73FCG8MwVIRfmHN4WVJsYxkYy7HCVM46zo0O9TEnrQruUfhv YCh9OPKVSqn0XMPKFFZSHsbCR8Ph2K0W+mKfnnLMtZvACujZOycZjcsMBSorepzK 8nyEUsPYWL1qWxjtE3lp7mCLmjYK84cjPaftaqoMVdlg7dcBZimCADnuWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnNZgLU3IRWTuw5xqFOmm2bT0iUMB8GA1UdIwQY MBaAFK1y1mRRCmv7lvKmpcEgmH3Jd0v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjkt NzcwZDlhMzg5Mjk1LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85NGYyYjktY2ZmNi00MmQ1LThmYjktNzcwZDlhMzg5Mjk1 LzEvclhMV1pGRUthX3VXOHFhbHdTQ1lmY2wzU19nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeyZnEcp qsXOTCxuaSKGuY4Kd46TrJZWXoUJ5m6dTRlO+5i9wDFbI3QyLIxT83hrwcdAQu3O ih7jrIkzfdoY6gynsNDKC8yChhkPMgcyvZc3NL7qZDSD6SkAH/kSfcMgFqRaN8nP l1Zw8CXQdumvE13Zb8ZshwyDRzwfSG9KQFbuQALSn4cX/1DszoS8g8Mak6nE99pr 75KfPtnhRIYolbdKmzVTc+rCQcyuW/7eKYMSnrJnTwiMcBWSJRzURqZncxMUqYB2 UhhDdQEDm/eXq0f4wheiP71R4fDvLqx27PAya6Ys6YQcPoVZ0rclaHzLEJ9eNPtl pZqbVY+ycjoHyQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:05:20 2025 by rpki-client