This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json) Hash identifier: fLiphEqWkJsldi3gXmnOULaT9dtRlKyrTE7PNHkLc0Y= Subject key identifier: 62:5A:B9:80:47:83:DB:0A:80:8B:0A:D1:2A:1A:98:9E:51:71:CE:0E Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7 Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7 Certificate serial: 019B5A515907C2BC962553326697554F03D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft Manifest number: 0A74 Signing time: Fri 26 Dec 2025 11:00:39 +0000 Manifest this update: Fri 26 Dec 2025 11:00:39 +0000 Manifest next update: Sat 27 Dec 2025 11:00:39 +0000 Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=) 2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: +k2caurutv0lUNsqld/y4RIHBmRv3wbLMdJmRVBLU/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:59:07:c2:bc:96:25:53:32:66:97:55:4f:03:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7 Validity Not Before: Dec 26 11:00:39 2025 GMT Not After : Dec 27 11:00:39 2025 GMT Subject: CN=625ab9804783db0a808b0ad12a1a989e5171ce0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:59:94:30:89:df:2d:1e:e1:83:90:05:d4:cc: 87:03:17:dd:0b:39:e1:1d:9b:02:32:c7:cc:35:7e: d4:f1:77:41:74:10:a8:13:7f:2b:3d:01:65:4c:1d: f3:af:3f:39:69:4b:39:35:e1:e4:73:7e:41:73:b1: c4:e4:e4:1d:66:2f:5e:97:84:d0:d3:48:fe:1f:0d: d5:da:cc:cb:eb:5b:75:c0:da:dc:ae:38:2c:2d:ad: 3d:6b:7b:af:5c:d4:6d:69:d9:e3:fd:3c:07:7e:0e: 57:7d:7b:0f:d3:d0:e8:96:82:e6:28:44:f8:7d:41: 46:0c:b6:a1:13:2a:6d:6c:a1:fa:02:35:7f:7c:b8: cd:1b:fd:25:bc:35:fc:ab:4d:85:4a:03:16:90:e0: 41:bd:9f:a0:18:f1:89:e6:a9:bb:77:4e:4b:02:d6: e7:9d:31:ab:86:d9:a0:64:72:28:7b:d4:61:6a:a3: b0:be:ef:14:63:50:d7:e5:f1:04:18:79:ef:e0:86: 76:a3:70:af:f3:2b:bd:5b:70:d1:f7:96:d2:79:c1: f4:65:d1:09:39:07:a3:18:36:41:3f:91:33:d2:97: 4b:07:f8:04:87:a3:ef:04:77:e1:3d:5d:01:d9:33: 41:b1:7d:bc:14:58:8f:57:df:71:f1:7b:35:94:a6: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5A:B9:80:47:83:DB:0A:80:8B:0A:D1:2A:1A:98:9E:51:71:CE:0E X509v3 Authority Key Identifier: keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:eb:3d:7c:43:a9:2c:01:9d:e2:21:45:fa:09:b3:7b:80:10: 24:29:6d:c4:c2:d7:9d:e8:03:bc:c2:37:98:8a:71:ac:55:9c: 5c:6a:74:3e:9c:82:5f:61:f2:18:ba:f5:c8:57:34:4b:ac:dd: 61:4d:0a:10:54:61:b5:3a:29:ed:9f:20:2f:3f:40:f5:64:b1: 4f:d5:ee:cd:d1:d2:6b:39:2e:d3:cf:e6:4b:74:9a:a1:77:df: e5:75:54:06:93:44:ed:30:39:f0:59:73:e8:9a:fc:28:b8:40: 10:85:5f:16:d1:91:41:2f:d0:95:37:6f:4f:7f:b5:fb:29:b6: 79:8c:b8:aa:f8:c3:74:b5:aa:89:c1:0f:21:05:6a:6b:58:d7: 51:9b:e3:7a:f1:ea:a0:73:e3:1a:b1:41:cc:0b:e0:16:d3:1c: da:0d:ce:d9:23:a0:95:1d:4a:7d:46:4e:25:cd:29:e6:fd:17: 53:1a:59:dd:ef:76:f8:16:b7:89:36:8b:c8:47:ff:bf:b2:1f: d4:f9:33:87:0b:1d:c9:2e:b4:8c:be:18:e9:21:64:5c:6f:42: 98:69:4b:19:64:d9:8d:6e:c1:f0:18:b2:29:fa:dd:46:7d:72: 6b:1f:a8:14:64:5e:b8:a8:3c:56:26:c8:30:cb:5a:c5:43:6c: cc:3f:70:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVkHwryWJVMyZpdVTwPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmIwODJmMTdjMjBiNWRiYTI0NWNlYTZlNGU2ZTljNjA5 OWNlZjcwHhcNMjUxMjI2MTEwMDM5WhcNMjUxMjI3MTEwMDM5WjAzMTEwLwYDVQQD Eyg2MjVhYjk4MDQ3ODNkYjBhODA4YjBhZDEyYTFhOTg5ZTUxNzFjZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFmUMInfLR7hg5AF1MyHAxfdCznh HZsCMsfMNX7U8XdBdBCoE38rPQFlTB3zrz85aUs5NeHkc35Bc7HE5OQdZi9el4TQ 00j+Hw3V2szL61t1wNrcrjgsLa09a3uvXNRtadnj/TwHfg5XfXsP09DoloLmKET4 fUFGDLahEyptbKH6AjV/fLjNG/0lvDX8q02FSgMWkOBBvZ+gGPGJ5qm7d05LAtbn nTGrhtmgZHIoe9RhaqOwvu8UY1DX5fEEGHnv4IZ2o3Cv8yu9W3DR95bSecH0ZdEJ OQejGDZBP5Ez0pdLB/gEh6PvBHfhPV0B2TNBsX28FFiPV99x8Xs1lKapfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJauYBHg9sKgIsK0SoamJ5Rcc4OMB8GA1UdIwQY MBaAFMdrCC8XwgtduiRc6m5Obpxgmc73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMt NmM3MjA5MmMwZjE4LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMtNmM3MjA5MmMwZjE4 LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnus9fEOp LAGd4iFF+gmze4AQJCltxMLXnegDvMI3mIpxrFWcXGp0PpyCX2HyGLr1yFc0S6zd YU0KEFRhtTop7Z8gLz9A9WSxT9XuzdHSazku08/mS3SaoXff5XVUBpNE7TA58Flz 6Jr8KLhAEIVfFtGRQS/QlTdvT3+1+ym2eYy4qvjDdLWqicEPIQVqa1jXUZvjevHq oHPjGrFBzAvgFtMc2g3O2SOglR1KfUZOJc0p5v0XUxpZ3e92+Ba3iTaLyEf/v7If 1PkzhwsdyS60jL4Y6SFkXG9CmGlLGWTZjW7B8BiyKfrdRn1yax+oFGReuKg8VibI MMtaxUNszD9wMQ== -----END CERTIFICATE-----Generated at Fri Dec 26 19:50:52 2025 by rpki-client