This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json) Hash identifier: KA9Q7b8NQnsw+4S//YDMjPKK+NLoKWQQUqHhy8JYw3o= Subject key identifier: 49:E4:B6:07:3F:95:BB:5D:23:75:A6:62:BE:B9:23:07:27:4D:45:90 Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Certificate serial: 019B3DC7B5548B4406B17711C96F8A97F298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft Manifest number: 119D Signing time: Sat 20 Dec 2025 22:00:56 +0000 Manifest this update: Sat 20 Dec 2025 22:00:56 +0000 Manifest next update: Sun 21 Dec 2025 22:00:56 +0000 Files and hashes: 1: PnVATVHozDfPNeX2JOaIkRbv6D8.roa (hash: 4Aq3QEbr9dXg3c82vnEqBRKtSSDl04fMwo+ZjR3NIuA=) 2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: wkrhtc/bl1/MkD+kfikv+PK97F8WE+al+ITPyvOypXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:b5:54:8b:44:06:b1:77:11:c9:6f:8a:97:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Validity Not Before: Dec 20 22:00:56 2025 GMT Not After : Dec 21 22:00:56 2025 GMT Subject: CN=49e4b6073f95bb5d2375a662beb92307274d4590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:7b:4a:bb:d5:bd:33:07:ba:55:fc:52:83: d2:b8:de:e7:fe:82:2c:31:2e:d7:07:fe:26:b3:d4: bd:d0:97:31:9e:1c:f0:29:05:86:90:74:72:6e:e0: c7:ca:fd:67:81:d5:55:5b:3e:5e:f6:60:fd:f8:60: 8c:a7:2c:ed:ca:96:8c:b2:99:9e:00:ab:d6:83:7d: 86:41:c9:d3:19:dc:00:df:7b:26:56:a6:18:36:26: 6e:9c:f8:0f:0a:50:da:24:4f:17:d1:59:6a:aa:85: 82:49:92:83:77:3d:5a:96:1c:5a:a8:bd:63:27:8d: 43:23:49:84:1e:74:8b:a5:39:6c:0f:ad:25:c0:8d: b7:cf:2a:36:96:82:24:c9:72:d9:a9:8e:df:40:2a: c3:69:58:1b:30:55:12:c8:ad:06:79:33:69:38:92: 81:7b:b3:3e:73:8c:9e:bd:8e:fa:fa:c2:5c:96:31: 50:34:61:2e:07:5f:bb:ee:35:8d:44:f4:92:2f:82: 07:e0:23:c0:f3:cb:4b:36:27:eb:cc:32:f1:cd:65: 21:fa:6a:19:d3:40:4c:20:ef:da:4d:b6:e6:c8:50: 27:ef:d7:21:9e:99:e9:57:e7:6f:7f:c8:cd:8e:92: 8a:10:7e:ac:37:35:c1:9d:74:49:00:c6:83:b3:9a: 26:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:B6:07:3F:95:BB:5D:23:75:A6:62:BE:B9:23:07:27:4D:45:90 X509v3 Authority Key Identifier: keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:96:2d:48:39:65:df:f8:cc:8f:50:5c:8c:c1:e8:78:b5:c9: b2:be:bc:4a:59:42:d8:bd:a1:60:cf:d5:36:78:e6:29:b0:63: 7c:af:f8:97:b0:a1:d9:e4:57:01:e1:5b:b2:de:55:71:02:a0: 0a:90:c3:47:b4:7f:1c:aa:07:3b:58:fb:38:83:95:ee:76:42: 0d:ef:e9:79:d2:a7:f9:d7:3c:ed:70:08:f3:17:35:c6:f9:45: 5a:7d:c2:ad:cc:0d:16:c5:d9:d0:7e:8f:c9:37:e0:ec:21:e5: 8b:37:10:27:32:84:81:c7:b9:fd:0e:e0:fc:ba:5c:3f:46:dd: 90:43:8a:00:2c:3c:b2:36:76:47:70:25:fa:0e:fa:ef:bb:2b: d7:74:00:ba:c6:5d:63:de:ad:c0:e7:09:e0:1a:0d:d8:3c:04: a4:33:2e:86:f5:5e:ef:ba:4f:88:41:ff:17:10:0f:6b:03:c7: 45:eb:09:14:38:76:74:e3:28:66:c8:3a:8c:3d:9d:fc:6f:94: df:89:9e:7b:02:08:77:a9:44:af:13:3c:7a:eb:48:14:12:94: 98:6b:67:f7:58:fb:7a:9c:bd:d2:f0:64:78:2d:e3:00:8e:79: bd:ba:64:a4:11:c2:58:60:4f:8c:7f:a9:7c:dd:c0:e3:4c:c4: 81:16:18:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7VUi0QGsXcRyW+Kl/KYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm NzJkOTMwHhcNMjUxMjIwMjIwMDU2WhcNMjUxMjIxMjIwMDU2WjAzMTEwLwYDVQQD Eyg0OWU0YjYwNzNmOTViYjVkMjM3NWE2NjJiZWI5MjMwNzI3NGQ0NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuil7SrvVvTMHulX8UoPSuN7n/oIs MS7XB/4ms9S90JcxnhzwKQWGkHRybuDHyv1ngdVVWz5e9mD9+GCMpyztypaMspme AKvWg32GQcnTGdwA33smVqYYNiZunPgPClDaJE8X0VlqqoWCSZKDdz1alhxaqL1j J41DI0mEHnSLpTlsD60lwI23zyo2loIkyXLZqY7fQCrDaVgbMFUSyK0GeTNpOJKB e7M+c4yevY76+sJcljFQNGEuB1+77jWNRPSSL4IH4CPA88tLNifrzDLxzWUh+moZ 00BMIO/aTbbmyFAn79chnpnpV+dvf8jNjpKKEH6sNzXBnXRJAMaDs5omAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnktgc/lbtdI3WmYr65IwcnTUWQMB8GA1UdIwQY MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5YtSDll 3/jMj1BcjMHoeLXJsr68SllC2L2hYM/VNnjmKbBjfK/4l7Ch2eRXAeFbst5VcQKg CpDDR7R/HKoHO1j7OIOV7nZCDe/pedKn+dc87XAI8xc1xvlFWn3CrcwNFsXZ0H6P yTfg7CHlizcQJzKEgce5/Q7g/LpcP0bdkEOKACw8sjZ2R3Al+g7677sr13QAusZd Y96twOcJ4BoN2DwEpDMuhvVe77pPiEH/FxAPawPHResJFDh2dOMoZsg6jD2d/G+U 34meewIId6lErxM8eutIFBKUmGtn91j7epy90vBkeC3jAI55vbpkpBHCWGBPjH+p fN3A40zEgRYYFw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:20 2025 by rpki-client