This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json) Hash identifier: KsihxdVloCNgjq6QCNle/AqC0ITetj+TLAc60eAcX6I= Subject key identifier: FB:5E:98:62:88:AD:DA:70:11:0A:A5:49:56:95:F9:85:1B:CF:E8:1D Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Certificate serial: 019B53AAA76A9115621913A95C4ABBA7B8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft Manifest number: 1150 Signing time: Thu 25 Dec 2025 04:00:51 +0000 Manifest this update: Thu 25 Dec 2025 04:00:51 +0000 Manifest next update: Fri 26 Dec 2025 04:00:51 +0000 Files and hashes: 1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=) 2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: gbAlwek2CcT7gt0oWwfWcf42T2GLCibRO3yIPmy8pcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:aa:a7:6a:91:15:62:19:13:a9:5c:4a:bb:a7:b8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Validity Not Before: Dec 25 04:00:51 2025 GMT Not After : Dec 26 04:00:51 2025 GMT Subject: CN=fb5e986288adda70110aa5495695f9851bcfe81d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5b:65:4e:bd:e5:94:56:eb:10:4f:29:d6:c1: 2f:d7:bf:ac:ab:88:7c:07:bd:7e:86:1d:a2:47:96: b6:2a:37:57:ee:e6:54:f6:7f:93:fe:17:d2:99:d0: 3e:c6:ee:6e:74:a0:cb:5e:72:ba:92:a4:19:3b:ee: 4d:2f:5c:bb:95:5a:f5:cd:dd:ed:6a:5e:88:a4:cd: ef:17:92:e7:7b:bc:03:f3:d3:57:b4:85:50:f2:0d: 5c:3d:72:04:42:bf:66:16:1f:34:e3:34:b2:04:04: 21:b1:84:a0:18:af:e5:7d:43:e2:79:81:f6:65:61: b6:15:22:ee:aa:ea:7e:db:91:aa:a5:d1:75:70:41: f1:58:1b:28:c0:5a:ab:7c:29:c9:c6:83:20:1a:40: db:72:fc:93:88:08:07:73:b6:ff:07:aa:fb:ab:26: de:2c:37:06:dc:a1:3e:95:78:89:59:a5:be:13:89: 10:50:b4:6d:b8:a0:d7:7f:7b:f8:4b:16:a6:17:e0: b6:ff:fe:65:8a:66:bd:81:c7:59:5e:6b:50:2e:73: 0c:a9:13:ff:ad:86:85:a4:a3:88:37:c1:51:2f:83: 8a:8b:a5:af:75:f9:2d:3c:cd:cf:df:c0:fe:f7:02: 8e:d8:66:c0:9d:ad:37:fa:de:3e:74:bd:07:10:8b: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5E:98:62:88:AD:DA:70:11:0A:A5:49:56:95:F9:85:1B:CF:E8:1D X509v3 Authority Key Identifier: keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:09:c1:5f:9b:7e:25:28:c3:14:19:40:bd:d8:0c:b3:03:e6: eb:df:c8:4d:f8:b8:cd:dd:9f:99:49:8e:d7:9e:c1:ec:95:89: b9:67:c2:6e:4d:54:bb:0e:02:95:06:3c:ef:24:10:bb:61:24: 0b:f9:c2:47:9f:70:06:39:d9:6c:9e:e2:a2:83:cd:b1:50:70: 2c:67:59:2f:82:a7:04:6c:62:2a:2b:99:66:bf:76:91:48:a3: 43:bb:8e:cf:21:92:f4:82:8f:ae:6f:3d:43:aa:cc:bc:f0:74: d6:ca:9c:78:5a:15:30:70:d2:59:e4:87:58:f9:f2:00:63:9b: 8d:31:80:ee:21:ac:38:bf:04:05:62:1c:51:82:18:7c:d4:a9: 1b:30:b4:68:b3:2c:86:ec:be:0b:b0:7b:a9:04:8b:2b:a6:a7: b7:72:3d:8b:e4:65:83:a2:62:65:02:ee:bd:53:44:e6:fd:65: ca:ab:45:0b:78:5c:6f:06:ac:05:98:4c:8c:af:10:12:9d:7a: 38:14:d8:f4:cc:82:64:7d:ce:47:0a:1a:7c:15:d4:81:1c:9f: f1:03:a8:e4:b4:5e:88:67:40:ed:ed:51:24:f9:b1:da:f0:8a: 3d:31:1f:96:9c:67:86:3e:b0:bc:e5:19:35:60:da:b5:a4:30: 54:0d:02:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTqqdqkRViGROpXEq7p7isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2 YWYyZTgwHhcNMjUxMjI1MDQwMDUxWhcNMjUxMjI2MDQwMDUxWjAzMTEwLwYDVQQD EyhmYjVlOTg2Mjg4YWRkYTcwMTEwYWE1NDk1Njk1Zjk4NTFiY2ZlODFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFtlTr3llFbrEE8p1sEv17+sq4h8 B71+hh2iR5a2KjdX7uZU9n+T/hfSmdA+xu5udKDLXnK6kqQZO+5NL1y7lVr1zd3t al6IpM3vF5Lne7wD89NXtIVQ8g1cPXIEQr9mFh804zSyBAQhsYSgGK/lfUPieYH2 ZWG2FSLuqup+25GqpdF1cEHxWBsowFqrfCnJxoMgGkDbcvyTiAgHc7b/B6r7qybe LDcG3KE+lXiJWaW+E4kQULRtuKDXf3v4SxamF+C2//5lima9gcdZXmtQLnMMqRP/ rYaFpKOIN8FRL4OKi6WvdfktPM3P38D+9wKO2GbAna03+t4+dL0HEIvo+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtemGKIrdpwEQqlSVaV+YUbz+gdMB8GA1UdIwQY MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt ZTNkMjg2ZDIwZTUyLzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgnBX5t+ JSjDFBlAvdgMswPm69/ITfi4zd2fmUmO157B7JWJuWfCbk1Uuw4ClQY87yQQu2Ek C/nCR59wBjnZbJ7iooPNsVBwLGdZL4KnBGxiKiuZZr92kUijQ7uOzyGS9IKPrm89 Q6rMvPB01sqceFoVMHDSWeSHWPnyAGObjTGA7iGsOL8EBWIcUYIYfNSpGzC0aLMs huy+C7B7qQSLK6ant3I9i+Rlg6JiZQLuvVNE5v1lyqtFC3hcbwasBZhMjK8QEp16 OBTY9MyCZH3ORwoafBXUgRyf8QOo5LReiGdA7e1RJPmx2vCKPTEflpxnhj6wvOUZ NWDataQwVA0CIQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:57 2025 by rpki-client