This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json) Hash identifier: aViXW/sXM84gGwyPYCPmeGY4mwExf99nzOPAv5mZcho= Subject key identifier: 0E:F5:8F:73:EA:87:70:5D:8A:4E:66:EC:A0:7F:F8:86:72:D9:35:BD Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Certificate serial: 019B650C6AA3F40005272295B95F6E75A514 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft Manifest number: 179E Signing time: Sun 28 Dec 2025 13:01:10 +0000 Manifest this update: Sun 28 Dec 2025 13:01:10 +0000 Manifest next update: Mon 29 Dec 2025 13:01:10 +0000 Files and hashes: 1: U9d60iaXFQDxSrHcLdT4ojLheZE.roa (hash: Gjhqz3LOzFes4JptTfh+vWteSpqEom7uInck02Q9Ins=) 2: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: +dGE4keuFnLwkCENpLn48DD5Igm/SkZ7EJKUy9K45XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:6a:a3:f4:00:05:27:22:95:b9:5f:6e:75:a5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438 Validity Not Before: Dec 28 13:01:10 2025 GMT Not After : Dec 29 13:01:10 2025 GMT Subject: CN=0ef58f73ea87705d8a4e66eca07ff88672d935bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:b1:e4:db:65:46:ea:6c:78:5c:15:9e:67: f1:47:e0:4e:1d:70:1b:c6:60:96:39:7f:f2:02:a9: d5:2a:96:20:45:dd:f6:31:62:96:70:a0:f3:4b:4a: de:5f:10:28:1b:dc:c7:57:ff:54:64:0e:46:17:75: cb:ef:df:28:8b:4a:fa:25:6a:5e:40:49:4b:cb:7f: e6:db:cc:e2:6e:91:b3:c7:ce:bc:91:8f:4b:af:ec: 3f:c3:e5:22:5c:78:af:9a:c6:90:ee:89:5c:3f:18: ad:36:3d:70:b2:89:55:08:43:4c:10:79:3b:4b:bd: 1e:d4:48:16:ee:c1:14:5d:23:94:06:66:f1:fa:c3: f0:81:9f:4c:0f:10:b2:ee:02:be:29:b6:d6:e5:1b: 8c:e8:a2:ae:24:98:a8:22:c8:ea:41:06:f4:c8:64: d4:b3:38:f5:ba:2e:f4:2c:1d:41:71:8b:c4:1b:f0: 1e:76:ad:2f:e6:fd:8b:6f:db:05:db:80:6b:ef:1c: 5a:87:24:68:1b:1c:0f:b6:38:6d:b3:74:d8:20:33: 76:c7:1f:80:f1:44:6e:85:65:09:5a:39:7f:1d:e8: 6b:f3:41:a5:98:45:4f:62:b6:a9:c8:2a:4a:26:6a: c1:2e:c8:89:d5:9e:88:1c:87:4a:54:48:72:08:f1: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:8F:73:EA:87:70:5D:8A:4E:66:EC:A0:7F:F8:86:72:D9:35:BD X509v3 Authority Key Identifier: keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b9:85:de:6c:bf:3f:2b:ae:84:0f:aa:66:30:3a:3e:44:ef: fc:64:67:dd:e8:a8:54:c5:84:64:55:46:5a:6f:be:8e:d9:59: a8:ea:c5:30:bb:8e:48:d4:e9:31:2f:27:2a:e4:3b:b1:c8:9a: fd:0a:51:d5:d2:65:37:1f:90:d8:21:25:43:9d:b3:ee:2e:d2: 3e:66:26:04:cd:14:24:4c:7d:b8:16:61:82:cd:38:ba:70:c3: 4c:6b:0a:c6:b6:48:1c:09:06:29:c0:a1:da:b5:57:b8:fa:d6: 37:80:07:df:0f:ae:27:3f:a9:8b:dc:c6:33:50:79:6e:9d:c0: 19:22:44:76:f2:58:c3:a2:02:6d:92:fa:3b:88:f3:33:93:fa: d5:70:fe:06:bf:6b:d5:9c:38:55:0e:9f:38:b0:f8:83:3c:7a: 69:8e:11:d8:8c:41:b2:c0:06:e1:26:ba:29:2b:c1:12:b4:a6: cf:1c:9d:b6:dd:34:08:c0:1f:99:be:4a:ca:b5:ba:ce:d3:8a: 1e:58:a1:9f:9b:ae:aa:fa:47:f0:3d:88:67:46:85:20:d2:81: 8f:08:ba:b3:15:df:94:47:62:b5:f1:fe:ae:fd:3b:15:56:2b: fa:db:cd:48:0f:04:e4:49:f6:c5:83:ed:64:4b:a8:ce:92:24: a0:2e:f6:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDGqj9AAFJyKVuV9udaUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTRkMmY2ODkxM2VhY2U2YzlmNTA5MmJkYzdkZDIwZjU3 NGY0MzgwHhcNMjUxMjI4MTMwMTEwWhcNMjUxMjI5MTMwMTEwWjAzMTEwLwYDVQQD EygwZWY1OGY3M2VhODc3MDVkOGE0ZTY2ZWNhMDdmZjg4NjcyZDkzNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/Kx5NtlRupseFwVnmfxR+BOHXAb xmCWOX/yAqnVKpYgRd32MWKWcKDzS0reXxAoG9zHV/9UZA5GF3XL798oi0r6JWpe QElLy3/m28zibpGzx868kY9Lr+w/w+UiXHivmsaQ7olcPxitNj1wsolVCENMEHk7 S70e1EgW7sEUXSOUBmbx+sPwgZ9MDxCy7gK+KbbW5RuM6KKuJJioIsjqQQb0yGTU szj1ui70LB1BcYvEG/Aedq0v5v2Lb9sF24Br7xxahyRoGxwPtjhts3TYIDN2xx+A 8URuhWUJWjl/Hehr80GlmEVPYrapyCpKJmrBLsiJ1Z6IHIdKVEhyCPFtaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA71j3Pqh3Bdik5m7KB/+IZy2TW9MB8GA1UdIwQY MBaAFMek0vaJE+rObJ9Qkr3H3SD1dPQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTkt ZjlhMWJiYzM2ODQ1LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9mMDNjYTEtNzI2Yi00ZGU5LWI0MTktZjlhMWJiYzM2ODQ1 LzEveDZUUzlva1Q2czVzbjFDU3ZjZmRJUFYwOURnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbmF3my/ PyuuhA+qZjA6PkTv/GRn3eioVMWEZFVGWm++jtlZqOrFMLuOSNTpMS8nKuQ7scia /QpR1dJlNx+Q2CElQ52z7i7SPmYmBM0UJEx9uBZhgs04unDDTGsKxrZIHAkGKcCh 2rVXuPrWN4AH3w+uJz+pi9zGM1B5bp3AGSJEdvJYw6ICbZL6O4jzM5P61XD+Br9r 1Zw4VQ6fOLD4gzx6aY4R2IxBssAG4Sa6KSvBErSmzxydtt00CMAfmb5KyrW6ztOK Hlihn5uuqvpH8D2IZ0aFINKBjwi6sxXflEditfH+rv07FVYr+tvNSA8E5En2xYPt ZEuozpIkoC72nA== -----END CERTIFICATE-----Generated at Sun Dec 28 18:52:55 2025 by rpki-client