This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json) Hash identifier: cIRS71xHChA0KRbPZs/PJlG2+cZEhGqVDzXPUUm3qjc= Subject key identifier: 35:E5:59:50:55:0E:BA:84:51:8B:74:FE:93:08:3C:A5:7B:87:0E:FE Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a Certificate serial: 019B5A51F3323FFF5A997A36BD8057AF9355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 11:01:18 +0000 Manifest this update: Fri 26 Dec 2025 11:01:18 +0000 Manifest next update: Sat 27 Dec 2025 11:01:18 +0000 Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: rS4ag40K49jnT9lf+Cn0jxsN/gL4wJINmf+accDNiVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f3:32:3f:ff:5a:99:7a:36:bd:80:57:af:93:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a Validity Not Before: Dec 26 11:01:18 2025 GMT Not After : Dec 27 11:01:18 2025 GMT Subject: CN=35e55950550eba84518b74fe93083ca57b870efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:57:92:97:96:11:f0:fb:65:a7:92:e6:cf:0b: 28:bd:17:6e:70:25:be:6a:57:ec:c0:f4:c2:38:ed: 72:d0:05:4e:2f:9d:f5:9f:87:b0:38:93:eb:4b:c9: 87:c0:01:22:9c:00:ba:f3:72:45:ce:f6:5b:a2:93: b0:e3:eb:39:e4:19:f0:bb:96:48:36:d3:0f:94:6b: 46:dd:69:26:12:5c:7e:cc:b8:20:e3:a2:8b:11:7b: d4:48:97:a1:c6:3f:1a:5f:29:59:5d:4b:34:8c:6e: 44:d2:dd:a0:87:9f:aa:9b:03:13:79:7a:e8:21:19: 39:ec:ba:49:8c:a1:43:3e:65:50:bf:d2:4b:bf:c7: a3:c8:9e:0a:98:12:5d:8d:f1:bc:60:ac:9f:d8:58: 71:7b:fc:17:c3:2f:7d:1c:58:58:05:ba:67:c3:33: dc:e6:7a:0a:4d:8d:8d:60:82:d9:b3:41:de:a0:5d: db:5c:4b:fe:c8:ee:e5:41:4a:7d:0d:45:32:7c:c1: c4:0c:62:0a:6a:3f:17:17:54:9a:00:97:53:6e:99: bf:e5:31:5e:8e:6f:cb:2f:98:fc:9a:a7:d3:ba:4f: 5f:70:d9:de:a2:38:64:0b:69:7f:7c:cb:49:c8:61: 81:f7:4a:cc:f1:07:7f:73:00:ed:1d:6a:60:6b:43: aa:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E5:59:50:55:0E:BA:84:51:8B:74:FE:93:08:3C:A5:7B:87:0E:FE X509v3 Authority Key Identifier: keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2d:1b:26:bd:86:ba:c4:a0:df:4e:e5:be:c9:8a:fb:e2:29: b8:59:cd:e0:25:c5:48:4c:b2:b1:0f:2e:3d:ad:d6:3f:24:b8: 94:17:03:57:77:c9:e8:17:e3:9a:75:6e:b1:df:89:a2:a9:ab: 77:80:45:8d:86:53:5c:12:61:dd:96:0d:94:df:56:e4:4e:64: 67:ac:40:6c:91:f0:b4:f0:01:14:a6:23:d1:97:c6:ee:d7:6d: 57:c3:b9:5c:36:fe:d0:68:52:af:5a:47:5d:07:d4:03:d9:2f: 84:bf:a5:86:9b:23:88:ef:2e:2d:17:4c:88:44:67:47:68:ac: f2:e1:c6:ad:a6:d9:e9:36:ee:7b:5b:59:b5:f9:4f:33:87:c4: 26:ff:99:78:e5:78:d3:08:2e:6b:04:43:25:ac:ff:c7:36:66: 4d:f4:d7:77:d9:b2:49:c2:88:91:06:e9:c3:a9:11:4f:d9:08: 5d:cb:a2:bd:58:cc:97:47:b7:c4:ab:b2:b1:73:cc:5a:8a:1b: ca:56:69:7c:50:ba:43:41:c5:70:fe:7b:80:c1:7f:28:f2:35: 1e:7c:49:41:5a:6e:10:7c:b9:3f:ad:ed:56:1a:cb:60:fd:35: f8:35:a0:1a:41:11:d2:45:41:d2:d9:ef:b5:2e:2a:b6:2b:a7: 2a:6d:c1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfMyP/9amXo2vYBXr5NVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4 NGM0MWEwHhcNMjUxMjI2MTEwMTE4WhcNMjUxMjI3MTEwMTE4WjAzMTEwLwYDVQQD EygzNWU1NTk1MDU1MGViYTg0NTE4Yjc0ZmU5MzA4M2NhNTdiODcwZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1eSl5YR8Ptlp5LmzwsovRducCW+ alfswPTCOO1y0AVOL531n4ewOJPrS8mHwAEinAC683JFzvZbopOw4+s55Bnwu5ZI NtMPlGtG3WkmElx+zLgg46KLEXvUSJehxj8aXylZXUs0jG5E0t2gh5+qmwMTeXro IRk57LpJjKFDPmVQv9JLv8ejyJ4KmBJdjfG8YKyf2Fhxe/wXwy99HFhYBbpnwzPc 5noKTY2NYILZs0HeoF3bXEv+yO7lQUp9DUUyfMHEDGIKaj8XF1SaAJdTbpm/5TFe jm/LL5j8mqfTuk9fcNneojhkC2l/fMtJyGGB90rM8Qd/cwDtHWpga0OqiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXlWVBVDrqEUYt0/pMIPKV7hw7+MB8GA1UdIwQY MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5 LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdi0bJr2G usSg307lvsmK++IpuFnN4CXFSEyysQ8uPa3WPyS4lBcDV3fJ6BfjmnVusd+Joqmr d4BFjYZTXBJh3ZYNlN9W5E5kZ6xAbJHwtPABFKYj0ZfG7tdtV8O5XDb+0GhSr1pH XQfUA9kvhL+lhpsjiO8uLRdMiERnR2is8uHGrabZ6Tbue1tZtflPM4fEJv+ZeOV4 0wguawRDJaz/xzZmTfTXd9myScKIkQbpw6kRT9kIXcuivVjMl0e3xKuysXPMWoob ylZpfFC6Q0HFcP57gMF/KPI1HnxJQVpuEHy5P63tVhrLYP01+DWgGkER0kVB0tnv tS4qtiunKm3Buw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:48 2025 by rpki-client