This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json) Hash identifier: Oe330XT+mdg9tCnXdj9onBA/zPYdWNhv/nIGCufigg0= Subject key identifier: 46:72:0F:7A:10:D2:21:9C:14:92:5D:4E:D4:51:A8:9A:D8:26:74:3E Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Certificate serial: 019B3C7E080ED36B439975E54D68B4C9582E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft Manifest number: 1144 Signing time: Sat 20 Dec 2025 16:00:51 +0000 Manifest this update: Sat 20 Dec 2025 16:00:51 +0000 Manifest next update: Sun 21 Dec 2025 16:00:51 +0000 Files and hashes: 1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=) 2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: QmA5zA9zWIe/g6hJytWbAODoGTGenIqzxlNBfRMqVM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:08:0e:d3:6b:43:99:75:e5:4d:68:b4:c9:58:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Validity Not Before: Dec 20 16:00:51 2025 GMT Not After : Dec 21 16:00:51 2025 GMT Subject: CN=46720f7a10d2219c14925d4ed451a89ad826743e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:8f:7a:aa:26:52:7c:6b:3a:ac:70:e7:f2: e8:95:bc:d6:08:db:09:a9:55:4f:44:89:c2:1f:20: 6b:83:20:50:d0:e0:b2:42:2c:c4:dc:22:91:d9:47: 07:db:e8:7f:fd:14:51:ac:78:e7:88:94:0b:b5:5e: b6:b0:70:ed:b4:26:dc:c5:4f:5b:1e:3b:a8:b9:69: ff:64:41:9d:80:7d:72:7b:41:9d:17:ed:b7:09:55: 6f:02:38:65:57:f4:31:f3:00:6e:cf:67:93:db:15: 18:0e:0d:89:ac:20:25:39:3c:d1:b3:dd:26:5e:b3: 5e:37:c1:be:98:bf:43:26:1d:d0:59:47:ce:ba:d3: e2:8a:d5:70:0b:ca:9a:f8:41:6c:e8:2c:12:63:b8: 1b:d7:5c:d9:1e:7e:32:7f:41:7f:46:77:91:ab:d7: ea:38:cc:31:e8:d7:a8:ec:a2:7a:ce:e3:85:8c:3a: 31:85:82:7d:d6:a0:4d:b7:b1:97:ff:5f:8d:ce:ff: b8:7c:cd:2f:fe:3b:3b:84:4e:77:ba:89:59:3c:aa: 40:fe:95:ef:58:47:a4:d0:f8:53:dd:9a:1d:af:53: 0a:dc:06:99:8b:b3:0e:03:43:e7:8e:2b:ef:93:a6: 71:cc:36:0b:35:9c:3b:7a:03:7a:d3:7d:63:96:71: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:0F:7A:10:D2:21:9C:14:92:5D:4E:D4:51:A8:9A:D8:26:74:3E X509v3 Authority Key Identifier: keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9b:ce:78:3d:61:45:71:7e:32:95:a7:b0:11:c0:2f:d4:2f: d8:c1:52:d4:60:22:c6:72:ac:97:af:ff:a6:6d:51:e7:ad:1d: 06:71:18:cc:63:ff:31:89:65:8f:96:cd:62:55:78:73:27:fa: 42:3e:d3:46:61:da:68:38:25:be:a9:7f:a3:6a:92:b5:59:d9: a0:44:2c:36:40:f9:c2:e3:b9:67:8e:03:e2:97:11:4b:10:32: 6b:51:97:dd:af:d0:2a:a9:0d:da:70:2a:b2:6c:b2:73:37:d8: b3:09:7c:50:d5:b4:30:3c:d0:07:3c:42:f2:0c:31:32:21:3c: ee:0d:5f:95:47:e7:2e:9c:eb:84:15:30:01:4c:f8:a8:cc:c0: 7e:a7:8e:ea:ca:30:be:ea:3e:f9:8c:31:1c:cb:3e:16:6a:27: c0:67:c8:e8:92:c0:af:39:ce:92:3c:d2:ad:2e:a1:53:9b:50: 64:d1:13:d7:1d:1b:0b:eb:65:ca:67:61:85:76:94:e8:29:53: d9:c2:bf:0d:a9:06:6e:e4:20:b9:27:65:38:d9:bc:68:d7:73: 7c:24:79:8e:d6:39:3f:79:49:d7:14:62:aa:d2:d2:24:02:fb: 55:70:c8:92:fb:a0:dd:40:dd:ac:ac:09:69:67:d3:43:58:3b: 4d:93:7d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fggO02tDmXXlTWi0yVguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2 YWYyZTgwHhcNMjUxMjIwMTYwMDUxWhcNMjUxMjIxMTYwMDUxWjAzMTEwLwYDVQQD Eyg0NjcyMGY3YTEwZDIyMTljMTQ5MjVkNGVkNDUxYTg5YWQ4MjY3NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtiPeqomUnxrOqxw5/LolbzWCNsJ qVVPRInCHyBrgyBQ0OCyQizE3CKR2UcH2+h//RRRrHjniJQLtV62sHDttCbcxU9b HjuouWn/ZEGdgH1ye0GdF+23CVVvAjhlV/Qx8wBuz2eT2xUYDg2JrCAlOTzRs90m XrNeN8G+mL9DJh3QWUfOutPiitVwC8qa+EFs6CwSY7gb11zZHn4yf0F/RneRq9fq OMwx6Neo7KJ6zuOFjDoxhYJ91qBNt7GX/1+Nzv+4fM0v/js7hE53uolZPKpA/pXv WEek0PhT3Zodr1MK3AaZi7MOA0Pnjivvk6ZxzDYLNZw7egN6031jlnFuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZyD3oQ0iGcFJJdTtRRqJrYJnQ+MB8GA1UdIwQY MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt ZTNkMjg2ZDIwZTUyLzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5vOeD1h RXF+MpWnsBHAL9Qv2MFS1GAixnKsl6//pm1R560dBnEYzGP/MYllj5bNYlV4cyf6 Qj7TRmHaaDglvql/o2qStVnZoEQsNkD5wuO5Z44D4pcRSxAya1GX3a/QKqkN2nAq smyyczfYswl8UNW0MDzQBzxC8gwxMiE87g1flUfnLpzrhBUwAUz4qMzAfqeO6sow vuo++YwxHMs+FmonwGfI6JLArznOkjzSrS6hU5tQZNET1x0bC+tlymdhhXaU6ClT 2cK/DakGbuQguSdlONm8aNdzfCR5jtY5P3lJ1xRiqtLSJAL7VXDIkvug3UDdrKwJ aWfTQ1g7TZN9+g== -----END CERTIFICATE-----Generated at Sat Dec 20 21:17:55 2025 by rpki-client