This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft File: x-0gqk1F1WHiTZJvWbF1J42bAcg.mft (raw, json) Hash identifier: ZGtgKtz4PaGG+jFDefF1BcKdybHOXQ4nxUto+AUAqjQ= Subject key identifier: CB:6D:D8:24:90:53:44:7F:C9:96:7D:D3:86:D5:E4:E4:42:1F:44:C2 Authority key identifier: C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 Certificate issuer: /CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Certificate serial: 019B2E54CF87D1E08694E092E0F20BDAEB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft Manifest number: 13ED Signing time: Wed 17 Dec 2025 22:01:08 +0000 Manifest this update: Wed 17 Dec 2025 22:01:08 +0000 Manifest next update: Thu 18 Dec 2025 22:01:08 +0000 Files and hashes: 1: x-0gqk1F1WHiTZJvWbF1J42bAcg.crl (hash: rcdsQ5iCRTWFchmzAYyIMo011yV00ztHfFzvaC4QrWE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:cf:87:d1:e0:86:94:e0:92:e0:f2:0b:da:eb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ed20aa4d45d561e24d926f59b175278d9b01c8 Validity Not Before: Dec 17 22:01:08 2025 GMT Not After : Dec 18 22:01:08 2025 GMT Subject: CN=cb6dd8249053447fc9967dd386d5e4e4421f44c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:95:1f:95:8f:eb:aa:91:5e:8f:80:36:f7:fc: e9:cd:77:51:a8:64:3b:c3:00:fb:ad:30:8c:a7:be: 1a:8a:98:4c:89:13:af:1f:f0:d7:97:07:75:3f:d6: c7:e4:02:8e:e1:3a:c7:d3:ca:02:ec:9e:06:cc:5f: d2:7c:4b:fc:00:92:cf:16:73:34:12:fe:99:db:fd: 7f:92:23:9d:e5:bb:f4:f5:2f:0e:19:81:0f:d3:04: 27:12:42:8d:b5:25:19:1a:71:c8:df:b8:c8:b1:36: 15:20:fc:1a:91:db:ed:70:9f:06:ed:a9:41:f2:53: 31:bc:d9:2f:33:97:c9:f1:cb:37:36:a6:09:b9:be: 5e:b6:80:c2:26:05:cb:dd:5a:75:83:ac:56:d5:c5: 67:81:25:65:6b:5b:33:83:bd:50:54:e4:fb:2b:e9: 0c:41:2c:7b:fd:e9:7b:66:19:4b:28:5f:ac:fd:70: a0:1b:f2:b8:77:4f:3b:9a:6d:29:80:4e:fd:d5:c3: af:89:92:d6:2a:18:c3:f9:39:78:a5:df:41:0a:19: 64:2d:66:2a:5f:a1:d1:83:db:44:00:46:22:8f:9f: d9:37:2d:d9:80:5c:ef:02:26:c1:5d:91:2c:d1:96: 15:7f:ac:7f:00:79:f3:e1:36:db:5f:24:13:7a:82: aa:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6D:D8:24:90:53:44:7F:C9:96:7D:D3:86:D5:E4:E4:42:1F:44:C2 X509v3 Authority Key Identifier: keyid:C7:ED:20:AA:4D:45:D5:61:E2:4D:92:6F:59:B1:75:27:8D:9B:01:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-0gqk1F1WHiTZJvWbF1J42bAcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9efe13-8b94-4b62-87ac-6a5e8ebdfd12/1/x-0gqk1F1WHiTZJvWbF1J42bAcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b6:b3:0a:c1:96:3f:82:bd:a3:61:90:81:d9:9d:89:c0:6b: 9e:ab:e1:af:9f:4d:e1:e7:cc:f8:f4:8c:50:f0:f9:91:ee:0d: 0d:d6:3b:4b:31:c1:b0:e7:6b:60:54:7b:6d:cc:dd:1b:75:d4: cb:25:af:b1:9b:f2:00:50:1c:fd:7b:e6:7e:8d:bd:88:41:26: 61:63:aa:23:9e:40:81:f9:c3:af:21:88:e1:37:f6:92:5e:65: b8:15:e0:bf:52:64:1f:3c:32:6e:d5:c6:46:f2:5a:eb:40:33: c3:19:0e:c8:0d:2f:aa:4d:cb:e0:8d:bc:7b:db:a8:2b:87:1c: e7:72:52:76:9a:e8:d0:52:7b:fc:9a:fa:54:b7:ab:cb:e2:de: 52:4d:44:84:4a:04:64:d6:e6:86:51:58:7d:65:d0:55:e5:f2: 14:a2:51:86:5a:15:f8:fb:d6:06:5e:e2:87:40:75:7d:c2:c7: d4:07:b6:99:6d:a1:09:22:f3:4f:0f:1a:fc:c7:29:62:a6:4f: 21:a0:b1:2b:72:41:40:ac:a1:4e:0f:b4:2d:49:e5:77:60:c5: 5f:24:7a:31:bd:f8:61:34:49:a6:8b:e6:84:67:14:c7:74:02: 00:b8:f5:ff:6e:46:ee:f2:76:f6:64:a1:de:55:72:34:46:18: e0:0a:5c:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVM+H0eCGlOCS4PIL2uskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWQyMGFhNGQ0NWQ1NjFlMjRkOTI2ZjU5YjE3NTI3OGQ5 YjAxYzgwHhcNMjUxMjE3MjIwMTA4WhcNMjUxMjE4MjIwMTA4WjAzMTEwLwYDVQQD EyhjYjZkZDgyNDkwNTM0NDdmYzk5NjdkZDM4NmQ1ZTRlNDQyMWY0NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZUflY/rqpFej4A29/zpzXdRqGQ7 wwD7rTCMp74aiphMiROvH/DXlwd1P9bH5AKO4TrH08oC7J4GzF/SfEv8AJLPFnM0 Ev6Z2/1/kiOd5bv09S8OGYEP0wQnEkKNtSUZGnHI37jIsTYVIPwakdvtcJ8G7alB 8lMxvNkvM5fJ8cs3NqYJub5etoDCJgXL3Vp1g6xW1cVngSVla1szg71QVOT7K+kM QSx7/el7ZhlLKF+s/XCgG/K4d087mm0pgE791cOviZLWKhjD+Tl4pd9BChlkLWYq X6HRg9tEAEYij5/ZNy3ZgFzvAibBXZEs0ZYVf6x/AHnz4TbbXyQTeoKqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtt2CSQU0R/yZZ904bV5ORCH0TCMB8GA1UdIwQY MBaAFMftIKpNRdVh4k2Sb1mxdSeNmwHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMt NmE1ZThlYmRmZDEyLzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC85ZWZlMTMtOGI5NC00YjYyLTg3YWMtNmE1ZThlYmRmZDEy LzEveC0wZ3FrMUYxV0hpVFpKdldiRjFKNDJiQWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7azCsGW P4K9o2GQgdmdicBrnqvhr59N4efM+PSMUPD5ke4NDdY7SzHBsOdrYFR7bczdG3XU yyWvsZvyAFAc/Xvmfo29iEEmYWOqI55AgfnDryGI4Tf2kl5luBXgv1JkHzwybtXG RvJa60AzwxkOyA0vqk3L4I28e9uoK4cc53JSdpro0FJ7/Jr6VLery+LeUk1EhEoE ZNbmhlFYfWXQVeXyFKJRhloV+PvWBl7ih0B1fcLH1Ae2mW2hCSLzTw8a/McpYqZP IaCxK3JBQKyhTg+0LUnld2DFXyR6Mb34YTRJpovmhGcUx3QCALj1/25G7vJ29mSh 3lVyNEYY4Apckg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:59:56 2025 by rpki-client