This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json) Hash identifier: tn0RyDik5prhloepX/ivj+5eRn4neXT7Z+QVx55KODo= Subject key identifier: D9:07:B1:11:70:D2:23:B5:B2:C5:32:97:10:C6:66:4A:B4:20:01:2D Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050 Certificate serial: 019B4FCE53F49E41221F7A378CC5E05156D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft Manifest number: 0807 Signing time: Wed 24 Dec 2025 10:01:20 +0000 Manifest this update: Wed 24 Dec 2025 10:01:20 +0000 Manifest next update: Thu 25 Dec 2025 10:01:20 +0000 Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=) 2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: WWq6CHj+Ye+5foWCiwYITtoh0iS8DOXcsEuP5iBsJPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:53:f4:9e:41:22:1f:7a:37:8c:c5:e0:51:56:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050 Validity Not Before: Dec 24 10:01:20 2025 GMT Not After : Dec 25 10:01:20 2025 GMT Subject: CN=d907b11170d223b5b2c5329710c6664ab420012d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:96:6b:cd:9d:7d:9f:88:39:25:b8:c8:cb: 81:d9:13:ec:0a:ff:21:1c:6b:61:ca:c2:41:08:14: ad:53:f0:9c:c7:91:c9:1d:63:04:bf:00:13:50:a1: e0:35:c0:f8:eb:48:0b:f0:14:f8:60:1a:19:66:16: ba:a3:a1:48:f2:ee:89:90:15:13:28:9b:21:8b:c2: 37:58:59:fb:83:26:4a:c6:1b:f7:2c:2f:1f:cc:c1: d6:01:71:b6:22:c1:a8:e6:93:96:89:20:07:7e:44: 9c:4c:6f:9d:5f:d8:00:a6:bd:8c:81:0a:0d:0d:af: 13:24:c8:98:2f:3d:5b:3d:7e:c8:af:df:c4:e0:4b: de:7f:e5:21:d9:bf:0e:c7:5a:63:b3:15:be:10:85: a3:e6:96:5c:54:f2:25:25:ec:e4:a9:f5:4c:44:29: f5:0b:d7:a5:05:38:98:13:d2:14:57:17:d2:c5:e8: 9b:a2:5a:e6:08:25:dd:6b:3b:fe:e9:25:9b:0e:3f: ee:2d:2c:0f:09:8f:c1:81:9a:18:dd:4e:7b:a8:02: c7:8f:2e:f8:c0:60:01:89:e2:1e:b2:2f:5b:95:82: a5:59:4d:e6:37:69:bd:e8:0d:e9:37:91:9a:c8:cb: f9:21:06:ab:f0:0a:05:e4:7a:dd:e4:d5:56:05:2e: 41:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:07:B1:11:70:D2:23:B5:B2:C5:32:97:10:C6:66:4A:B4:20:01:2D X509v3 Authority Key Identifier: keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:b0:86:c7:9a:31:95:cf:5c:f7:b7:fb:36:88:9a:5d:fd:f0: 3a:43:4a:e6:b5:15:7d:a6:7d:55:18:cd:77:e9:39:d9:05:80: f3:a4:6c:3c:2f:ca:e7:56:85:98:06:19:96:b2:f0:04:5b:27: 20:56:09:5c:32:3f:fa:4b:68:86:f4:cc:10:e3:7a:63:eb:d4: 31:eb:6e:81:b3:29:22:3c:02:79:a2:17:14:9c:99:7b:3c:dd: e6:e1:e6:ed:fe:a4:10:8c:f1:45:b9:7f:1b:67:9b:7c:39:78: 11:6c:9a:64:14:62:21:1f:f6:54:11:4a:72:36:f6:b6:1c:cd: 3b:8f:ae:ef:ab:03:a5:74:3f:6c:fd:d1:08:24:5f:1e:6b:a8: 05:7a:30:40:96:d2:09:af:d6:bf:a4:91:f7:b5:44:64:09:0a: cc:44:4e:89:d6:ba:ea:97:ff:cf:c9:ef:73:53:06:14:57:d5: b4:86:76:5d:21:5f:00:29:88:ee:e4:a1:55:29:6d:39:e6:19: 0a:bd:0b:70:35:36:88:74:45:aa:5a:25:e8:40:cf:9c:53:d0: b2:7f:b9:45:fa:2d:63:e8:ba:43:70:f8:8a:1e:48:73:93:0f: 39:46:dd:59:39:48:e8:9a:67:ec:81:36:40:cc:b2:4d:2e:eb: f4:06:b1:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzlP0nkEiH3o3jMXgUVbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjczZDJmNjIxYWUzMTQwNzAwMTc0OGJiZGU2MzhhY2Jk ODYwNTAwHhcNMjUxMjI0MTAwMTIwWhcNMjUxMjI1MTAwMTIwWjAzMTEwLwYDVQQD EyhkOTA3YjExMTcwZDIyM2I1YjJjNTMyOTcxMGM2NjY0YWI0MjAwMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB2Wa82dfZ+IOSW4yMuB2RPsCv8h HGthysJBCBStU/Ccx5HJHWMEvwATUKHgNcD460gL8BT4YBoZZha6o6FI8u6JkBUT KJshi8I3WFn7gyZKxhv3LC8fzMHWAXG2IsGo5pOWiSAHfkScTG+dX9gApr2MgQoN Da8TJMiYLz1bPX7Ir9/E4Evef+Uh2b8Ox1pjsxW+EIWj5pZcVPIlJezkqfVMRCn1 C9elBTiYE9IUVxfSxeibolrmCCXdazv+6SWbDj/uLSwPCY/BgZoY3U57qALHjy74 wGABieIesi9blYKlWU3mN2m96A3pN5GayMv5IQar8AoF5Hrd5NVWBS5BvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkHsRFw0iO1ssUylxDGZkq0IAEtMB8GA1UdIwQY MBaAFF9nPS9iGuMUBwAXSLveY4rL2GBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUt ODQ0NzI5MTM3ZWU1LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUtODQ0NzI5MTM3ZWU1 LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbCGx5ox lc9c97f7NoiaXf3wOkNK5rUVfaZ9VRjNd+k52QWA86RsPC/K51aFmAYZlrLwBFsn IFYJXDI/+ktohvTMEON6Y+vUMetugbMpIjwCeaIXFJyZezzd5uHm7f6kEIzxRbl/ G2ebfDl4EWyaZBRiIR/2VBFKcjb2thzNO4+u76sDpXQ/bP3RCCRfHmuoBXowQJbS Ca/Wv6SR97VEZAkKzEROida66pf/z8nvc1MGFFfVtIZ2XSFfACmI7uShVSltOeYZ Cr0LcDU2iHRFqlol6EDPnFPQsn+5RfotY+i6Q3D4ih5Ic5MPOUbdWTlI6Jpn7IE2 QMyyTS7r9Aaxzw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:14 2025 by rpki-client