This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json) Hash identifier: CYtCA2/Z54yTGZ68ocWz7Y+TOkoEpXn7lLh5bE9Uc7g= Subject key identifier: 2E:D6:14:0D:17:46:57:F9:1A:4E:C3:62:73:85:F1:EE:3F:A0:0F:89 Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4 Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4 Certificate serial: 019B372183884523C3B91B84EEFE7BED55C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft Manifest number: 0859 Signing time: Fri 19 Dec 2025 15:01:41 +0000 Manifest this update: Fri 19 Dec 2025 15:01:41 +0000 Manifest next update: Sat 20 Dec 2025 15:01:41 +0000 Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=) 2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: nvP5Ew1tGoss8ls4KiRUXc03tC80MmkQRPcn2FCR2Yg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:83:88:45:23:c3:b9:1b:84:ee:fe:7b:ed:55:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4 Validity Not Before: Dec 19 15:01:41 2025 GMT Not After : Dec 20 15:01:41 2025 GMT Subject: CN=2ed6140d174657f91a4ec3627385f1ee3fa00f89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:2d:18:0a:8b:61:89:df:67:ed:f2:4b:b0: e5:67:bd:15:b7:1a:94:2c:82:c0:5a:ce:5e:d2:6a: df:7b:6c:23:f0:e3:5f:e4:6e:c8:51:fb:4c:c5:2f: 13:da:e6:45:d7:d0:fe:b3:84:2a:f8:f8:76:ce:c9: 25:d4:b2:90:a0:ce:63:fd:9c:a4:9a:a3:7d:b3:32: 0b:14:cb:65:70:03:4e:4a:f9:f1:9b:df:d7:05:25: 6c:16:29:66:53:a1:7f:fa:9f:70:e5:59:5e:ec:17: 91:f2:02:01:38:ce:88:d8:bb:7c:c7:84:e2:64:f7: 35:fb:7f:11:15:ec:94:88:d4:49:ed:c4:40:4d:b4: 9f:79:e2:71:f3:fc:d8:38:5c:13:0f:07:e7:8d:60: 79:bc:dc:33:ff:1d:56:c6:94:8c:65:4d:72:ee:8b: d0:5c:1f:28:f1:bf:4a:dc:19:c9:9e:93:2a:af:1f: b6:a3:d5:29:d4:00:8e:ba:c0:48:4c:17:a5:dc:5e: 6f:e0:4a:52:3b:33:c2:53:48:ab:c1:83:20:ed:02: d2:55:fc:b7:d0:c7:dd:0b:ea:c0:1b:7b:80:d1:3e: 46:d7:1f:09:e3:7c:45:09:b1:ee:97:f0:53:63:00: d2:c3:27:a6:dc:8d:37:db:5d:77:3a:91:a6:05:3f: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D6:14:0D:17:46:57:F9:1A:4E:C3:62:73:85:F1:EE:3F:A0:0F:89 X509v3 Authority Key Identifier: keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:15:b0:93:bc:f1:a0:da:62:63:c9:16:ca:dd:82:2a:37:4d: a9:bc:c0:20:de:c6:a8:0c:d5:e1:22:34:3e:8f:34:fe:81:17: 3e:d9:41:10:22:91:c9:81:22:64:20:c2:09:45:ad:18:74:3c: fa:2c:dc:d0:74:cb:d8:ea:cf:fe:42:9d:f6:c0:b1:dd:9e:da: 3b:45:70:20:38:4f:8e:4f:d1:da:85:5b:a9:54:a2:a6:49:e9: b8:ba:9b:46:52:3e:89:0c:cd:80:9f:19:c8:77:30:aa:1e:31: aa:95:a4:b9:1c:21:71:15:f5:69:67:3e:b5:7d:62:bd:26:94: f1:fd:51:c5:19:da:53:d9:4a:21:3f:87:67:a9:22:03:ad:24: 19:26:71:c1:3c:57:79:28:f9:da:03:67:34:48:c6:37:e3:2b: 5a:84:2e:91:ce:1a:25:9c:e3:8e:55:ca:e0:dc:82:7e:9a:e2: 79:9a:9b:0e:ae:94:2a:77:1a:39:34:e8:e1:ca:6b:61:99:e9: a4:5f:eb:1b:4c:ef:b7:8c:ed:af:e8:ca:3b:44:6b:03:41:9b: 3e:8f:89:9c:1f:09:d0:82:18:ae:7e:ae:bc:42:bf:48:37:18: 41:51:71:54:c1:be:f9:08:27:93:29:b1:3f:5b:36:e5:b7:3f: fe:d2:eb:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYOIRSPDuRuE7v577VXDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjcxMjcwYjY5Y2VjNTA0NjA2YjEyNmM0Y2E4MzM4MTZh ZjdkYTQwHhcNMjUxMjE5MTUwMTQxWhcNMjUxMjIwMTUwMTQxWjAzMTEwLwYDVQQD EygyZWQ2MTQwZDE3NDY1N2Y5MWE0ZWMzNjI3Mzg1ZjFlZTNmYTAwZjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk4tGAqLYYnfZ+3yS7DlZ70VtxqU LILAWs5e0mrfe2wj8ONf5G7IUftMxS8T2uZF19D+s4Qq+Ph2zskl1LKQoM5j/Zyk mqN9szILFMtlcANOSvnxm9/XBSVsFilmU6F/+p9w5Vle7BeR8gIBOM6I2Lt8x4Ti ZPc1+38RFeyUiNRJ7cRATbSfeeJx8/zYOFwTDwfnjWB5vNwz/x1WxpSMZU1y7ovQ XB8o8b9K3BnJnpMqrx+2o9Up1ACOusBITBel3F5v4EpSOzPCU0irwYMg7QLSVfy3 0MfdC+rAG3uA0T5G1x8J43xFCbHul/BTYwDSwyem3I032113OpGmBT+gIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7WFA0XRlf5Gk7DYnOF8e4/oA+JMB8GA1UdIwQY MBaAFMdnEnC2nOxQRgaxJsTKgzgWr32kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2Qt OTg2ZWEyMDNmOWVjLzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2QtOTg2ZWEyMDNmOWVj LzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhWwk7zx oNpiY8kWyt2CKjdNqbzAIN7GqAzV4SI0Po80/oEXPtlBECKRyYEiZCDCCUWtGHQ8 +izc0HTL2OrP/kKd9sCx3Z7aO0VwIDhPjk/R2oVbqVSipknpuLqbRlI+iQzNgJ8Z yHcwqh4xqpWkuRwhcRX1aWc+tX1ivSaU8f1RxRnaU9lKIT+HZ6kiA60kGSZxwTxX eSj52gNnNEjGN+MrWoQukc4aJZzjjlXK4NyCfprieZqbDq6UKncaOTTo4cprYZnp pF/rG0zvt4ztr+jKO0RrA0GbPo+JnB8J0IIYrn6uvEK/SDcYQVFxVMG++Qgnkymx P1s25bc//tLrLA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:01:26 2025 by rpki-client