This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json) Hash identifier: LwcEtXZhiOq4mvBL6bNPtLfr3t3f3E1Ub9ylJ4OZ0RU= Subject key identifier: F0:9B:84:12:77:23:3A:60:EC:EC:20:F9:A3:58:26:C2:33:96:E8:96 Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Certificate serial: 019B3DFEDBE88B9D7283899039A8FF97017D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft Manifest number: F4 Signing time: Sat 20 Dec 2025 23:01:11 +0000 Manifest this update: Sat 20 Dec 2025 23:01:11 +0000 Manifest next update: Sun 21 Dec 2025 23:01:11 +0000 Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: VOJ5vhwI0+siGvhAp8AQXuINvkpceXEXSEl7hUbudd8=) 2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:db:e8:8b:9d:72:83:89:90:39:a8:ff:97:01:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Validity Not Before: Dec 20 23:01:11 2025 GMT Not After : Dec 21 23:01:11 2025 GMT Subject: CN=f09b841277233a60ecec20f9a35826c23396e896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:82:92:bb:0f:30:61:f9:7a:83:2a:d3:a5:46: 40:31:2e:9e:08:70:4b:54:82:d2:42:70:09:dc:f0: da:a9:ef:f9:c0:39:23:41:51:bc:65:1a:81:9a:f5: de:62:41:42:b1:ce:17:6e:b3:15:0c:64:7e:04:0b: 03:fa:59:d0:ab:b6:45:85:90:5c:a6:76:77:c5:7b: 4c:64:d1:7d:ba:2b:5d:b9:7f:ad:12:3d:07:13:93: fe:1f:19:2e:16:3a:29:d2:62:65:35:25:0b:c3:a8: f4:c0:b8:13:c4:35:cc:23:4b:d1:ba:1f:da:e0:4b: 27:4e:6f:61:24:01:b7:b2:0e:f5:aa:c6:b9:22:19: 24:96:43:05:2a:1f:65:c5:98:72:62:71:d4:3a:da: a4:c2:5c:ce:18:a4:6d:37:22:d2:69:3a:2f:ca:da: c4:0a:f3:9c:ed:bf:21:9d:64:61:4a:50:50:74:b6: e9:ed:10:e6:f8:47:9b:ba:48:6b:be:ff:e0:83:92: 4a:33:02:ad:a8:dc:c2:25:4c:ba:20:57:46:57:72: 48:91:ed:9c:a6:dd:af:af:87:ba:8e:0e:69:47:c2: 0c:43:60:7f:c3:07:ab:96:9d:66:b4:49:f6:dd:9e: 0d:67:0d:37:b6:ed:bc:7b:11:f9:ac:47:76:b8:a3: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9B:84:12:77:23:3A:60:EC:EC:20:F9:A3:58:26:C2:33:96:E8:96 X509v3 Authority Key Identifier: keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:64:3c:58:f5:ff:40:33:b3:20:b7:45:9a:8c:3d:7a:bf:55: ee:d9:25:6f:8a:dc:91:f9:cc:6e:5c:e1:cb:90:2b:8b:5a:82: b7:bb:ab:0e:06:1f:b9:06:22:9a:dd:0b:00:1c:33:1e:39:33: 73:14:5d:59:5f:de:4c:2d:c2:18:7f:22:7a:00:38:1c:12:a8: bf:c7:42:4b:50:ea:a5:90:95:0a:5e:1b:ed:6e:4c:51:d7:2f: 94:fe:78:8d:20:67:0f:06:54:68:9d:77:34:96:9a:f8:37:b6: 01:fd:cd:b0:38:61:74:09:dc:67:cd:3d:12:51:b9:c0:15:c3: 66:d6:4e:3e:94:9a:6a:12:1b:2c:6d:33:84:cd:6e:48:72:a0: fd:67:b1:18:34:04:6c:05:a7:f4:eb:6d:fb:f7:fa:dd:4e:ed: 17:85:16:b3:50:0c:fa:79:e9:a7:cc:6f:ac:11:be:f9:d7:6b: 26:da:8d:59:af:4d:df:51:61:6a:74:ca:c2:ee:58:13:00:31: 3f:98:c2:1c:01:b6:0f:a5:30:75:63:e4:2e:4b:2f:ea:10:e0: 4b:65:61:5a:04:82:8a:b7:f7:76:37:c8:d6:b8:09:43:e9:3a: f4:f5:2b:fa:47:74:63:88:78:e3:71:82:ce:2c:ae:60:8f:a6: 4d:25:64:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tvoi51yg4mQOaj/lwF9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNmI5MDAxOWQ0ZDJiNTJhYjRjYWY2NzFjMzdlOWM0ZDAz YWRhNzMwHhcNMjUxMjIwMjMwMTExWhcNMjUxMjIxMjMwMTExWjAzMTEwLwYDVQQD EyhmMDliODQxMjc3MjMzYTYwZWNlYzIwZjlhMzU4MjZjMjMzOTZlODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4KSuw8wYfl6gyrTpUZAMS6eCHBL VILSQnAJ3PDaqe/5wDkjQVG8ZRqBmvXeYkFCsc4XbrMVDGR+BAsD+lnQq7ZFhZBc pnZ3xXtMZNF9uitduX+tEj0HE5P+HxkuFjop0mJlNSULw6j0wLgTxDXMI0vRuh/a 4EsnTm9hJAG3sg71qsa5IhkklkMFKh9lxZhyYnHUOtqkwlzOGKRtNyLSaTovytrE CvOc7b8hnWRhSlBQdLbp7RDm+Eebukhrvv/gg5JKMwKtqNzCJUy6IFdGV3JIke2c pt2vr4e6jg5pR8IMQ2B/wwerlp1mtEn23Z4NZw03tu28exH5rEd2uKMf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCbhBJ3Izpg7Owg+aNYJsIzluiWMB8GA1UdIwQY MBaAFF9rkAGdTStSq0yvZxw36cTQOtpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEt N2NmMDMxZmE3NWNlLzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEtN2NmMDMxZmE3NWNl LzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAomQ8WPX/ QDOzILdFmow9er9V7tklb4rckfnMblzhy5Ari1qCt7urDgYfuQYimt0LABwzHjkz cxRdWV/eTC3CGH8iegA4HBKov8dCS1DqpZCVCl4b7W5MUdcvlP54jSBnDwZUaJ13 NJaa+De2Af3NsDhhdAncZ809ElG5wBXDZtZOPpSaahIbLG0zhM1uSHKg/WexGDQE bAWn9Ott+/f63U7tF4UWs1AM+nnpp8xvrBG++ddrJtqNWa9N31FhanTKwu5YEwAx P5jCHAG2D6UwdWPkLksv6hDgS2VhWgSCirf3djfI1rgJQ+k69PUr+kd0Y4h443GC ziyuYI+mTSVkNg== -----END CERTIFICATE-----Generated at Sun Dec 21 05:39:05 2025 by rpki-client