This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft File: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft (raw, json) Hash identifier: nEzkAXBy2T5ty7XjJYXeXAW14sOuTQkpL1vZz6YrVeU= Subject key identifier: 76:9A:4B:04:2B:47:AA:DA:3B:51:1D:28:D9:61:A6:25:68:75:AA:74 Authority key identifier: C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64 Certificate issuer: /CN=c618f03f9874370653aa3a026f6707c2e0e74764 Certificate serial: 019B33B1C975E589F443DAB79B8283D9CE5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft Manifest number: 0868 Signing time: Thu 18 Dec 2025 23:00:47 +0000 Manifest this update: Thu 18 Dec 2025 23:00:47 +0000 Manifest next update: Fri 19 Dec 2025 23:00:47 +0000 Files and hashes: 1: xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl (hash: o9mMVS5PAvgf5oGQAvZzW2aqsXMKx1gLG0OPvQmGuCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:c9:75:e5:89:f4:43:da:b7:9b:82:83:d9:ce:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c618f03f9874370653aa3a026f6707c2e0e74764 Validity Not Before: Dec 18 23:00:47 2025 GMT Not After : Dec 19 23:00:47 2025 GMT Subject: CN=769a4b042b47aada3b511d28d961a6256875aa74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2b:79:d7:64:1a:b8:cf:84:da:c3:6a:c7:e4: 0c:f0:20:d0:23:e9:09:af:8d:d2:32:2c:87:e1:82: 62:b0:b4:31:fa:f2:cb:54:c8:04:91:9a:22:e0:85: af:06:6f:1e:d6:d0:17:68:3e:7d:63:74:fa:84:13: 2a:e2:78:c3:20:0e:8b:2c:58:b7:d1:f0:31:fd:f1: a7:3c:a0:d4:23:27:e2:aa:b3:1b:67:5b:cc:d1:05: 5b:59:78:7e:1b:bd:3b:64:af:61:63:e4:ee:b6:7d: 96:40:40:5d:f0:56:3a:82:b0:a7:60:74:21:13:0c: e5:ac:e0:91:7e:11:6d:da:39:9e:db:1c:af:63:5f: 6c:26:23:41:4f:d7:c6:93:d3:17:b5:ba:84:30:31: 4d:a5:45:82:46:10:10:d9:31:40:f0:84:b4:11:9e: 37:e1:fc:a8:e9:a3:e1:a2:15:fb:e9:01:49:b8:76: 2a:a3:ed:f3:9a:f0:78:25:54:23:37:20:1c:90:f6: 64:85:f9:fc:01:ab:02:0b:14:23:32:be:04:de:7e: 28:cf:74:93:e6:d8:86:c7:67:15:d1:8d:5e:24:6d: 2a:01:bf:cb:e8:af:7e:c1:64:d8:aa:30:f1:f4:b9: 21:33:bf:00:b1:f4:df:38:ee:8a:04:b7:b5:f5:08: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9A:4B:04:2B:47:AA:DA:3B:51:1D:28:D9:61:A6:25:68:75:AA:74 X509v3 Authority Key Identifier: keyid:C6:18:F0:3F:98:74:37:06:53:AA:3A:02:6F:67:07:C2:E0:E7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/16fdee-d397-41fd-888f-51de4964a913/1/xhjwP5h0NwZTqjoCb2cHwuDnR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:40:79:d7:04:f2:e4:35:60:8a:7d:e4:7d:48:e5:47:7d:e7: 9f:ff:72:f3:90:0e:bb:6d:78:0c:fa:a5:f0:a0:d9:c2:b8:85: 58:b8:0a:e3:61:f0:af:db:27:7a:8c:4b:2c:7b:b7:c3:0d:c4: 40:f2:c3:19:09:ca:c0:d0:ff:50:06:46:50:9d:c5:5a:7f:53: 37:7c:8d:fb:3b:64:29:b0:2e:2d:c3:57:2d:db:d4:db:3e:84: 59:65:c7:06:e5:0e:f1:ce:92:a2:b3:86:87:bb:e7:6e:d7:45: c0:33:83:81:de:08:42:db:88:9d:dd:d4:47:86:dc:45:3f:53: ae:62:f4:32:84:f4:40:a8:40:55:c6:60:42:7e:31:bf:78:9e: 7e:c9:d8:a7:26:ff:37:66:5b:30:c4:81:56:53:52:c4:bf:8a: 64:b6:20:1d:96:fc:f6:83:e9:db:54:cc:c3:81:8c:bd:e2:51: ad:e3:28:31:02:ee:f8:9c:ef:ff:8f:f1:3a:60:53:0d:be:b5: f1:4b:29:bd:14:95:ab:5a:00:ae:9f:84:52:bc:03:0b:ef:84: f2:c3:a3:40:0d:70:eb:ba:f1:2a:7c:b4:2d:d4:35:e1:00:e8: 54:c0:a4:d6:c7:79:ce:2f:50:09:f8:47:ba:d2:dd:4d:1e:3b: 5c:00:f3:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscl15Yn0Q9q3m4KD2c5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MThmMDNmOTg3NDM3MDY1M2FhM2EwMjZmNjcwN2MyZTBl NzQ3NjQwHhcNMjUxMjE4MjMwMDQ3WhcNMjUxMjE5MjMwMDQ3WjAzMTEwLwYDVQQD Eyg3NjlhNGIwNDJiNDdhYWRhM2I1MTFkMjhkOTYxYTYyNTY4NzVhYTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ct512QauM+E2sNqx+QM8CDQI+kJ r43SMiyH4YJisLQx+vLLVMgEkZoi4IWvBm8e1tAXaD59Y3T6hBMq4njDIA6LLFi3 0fAx/fGnPKDUIyfiqrMbZ1vM0QVbWXh+G707ZK9hY+Tutn2WQEBd8FY6grCnYHQh EwzlrOCRfhFt2jme2xyvY19sJiNBT9fGk9MXtbqEMDFNpUWCRhAQ2TFA8IS0EZ43 4fyo6aPhohX76QFJuHYqo+3zmvB4JVQjNyAckPZkhfn8AasCCxQjMr4E3n4oz3ST 5tiGx2cV0Y1eJG0qAb/L6K9+wWTYqjDx9LkhM78AsfTfOO6KBLe19QgIOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaaSwQrR6raO1EdKNlhpiVodap0MB8GA1UdIwQY MBaAFMYY8D+YdDcGU6o6Am9nB8Lg50dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYt NTFkZTQ5NjRhOTEzLzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xNmZkZWUtZDM5Ny00MWZkLTg4OGYtNTFkZTQ5NjRhOTEz LzEveGhqd1A1aDBOd1pUcWpvQ2IyY0h3dURuUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0B51wTy 5DVgin3kfUjlR33nn/9y85AOu214DPql8KDZwriFWLgK42Hwr9sneoxLLHu3ww3E QPLDGQnKwND/UAZGUJ3FWn9TN3yN+ztkKbAuLcNXLdvU2z6EWWXHBuUO8c6SorOG h7vnbtdFwDODgd4IQtuInd3UR4bcRT9TrmL0MoT0QKhAVcZgQn4xv3iefsnYpyb/ N2ZbMMSBVlNSxL+KZLYgHZb89oPp21TMw4GMveJRreMoMQLu+Jzv/4/xOmBTDb61 8UspvRSVq1oArp+EUrwDC++E8sOjQA1w67rxKny0LdQ14QDoVMCk1sd5zi9QCfhH utLdTR47XADzyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 06:23:18 2025 by rpki-client