This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json) Hash identifier: 0LZIohbAiTF3LdhBDGZMOfYSonzXP7ylj5/VDp7lILc= Subject key identifier: 29:21:9C:28:57:57:60:EB:BB:C2:2C:9E:3F:E6:AA:11:1C:3E:D4:4C Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Certificate serial: 019B4DE0C9202D674314A4A2476148F42102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 01:02:15 +0000 Manifest this update: Wed 24 Dec 2025 01:02:15 +0000 Manifest next update: Thu 25 Dec 2025 01:02:15 +0000 Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=) 2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: +D9CLvFJ6QNVu7/apDwnNqW4wc4YK3ignK2Yh/UJqsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:c9:20:2d:67:43:14:a4:a2:47:61:48:f4:21:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Validity Not Before: Dec 24 01:02:15 2025 GMT Not After : Dec 25 01:02:15 2025 GMT Subject: CN=29219c28575760ebbbc22c9e3fe6aa111c3ed44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:91:7f:54:1b:56:61:b2:14:52:bb:6d:cd: 50:74:a5:83:1e:03:59:b6:32:83:98:e5:86:0c:59: be:97:ca:12:d6:c9:49:bf:91:f3:14:6a:5e:bb:7f: b8:d4:df:c0:bf:3d:25:2c:ea:52:6b:f2:ed:fb:51: 37:52:5f:80:b9:28:71:57:3a:dd:8f:bd:a5:90:24: 69:63:16:66:66:bc:81:a0:a6:90:c1:49:b6:c0:ac: 4c:de:ff:5b:c2:cd:b6:89:c4:ef:14:21:52:85:b7: f3:5c:34:5d:87:ca:b4:ec:83:ec:be:92:e4:db:b5: 69:38:e9:c8:db:eb:27:ea:28:a3:f5:fd:e9:a5:04: f7:51:c6:86:08:a0:19:2d:8d:f9:a5:14:13:c4:45: 24:fa:bb:03:42:cb:42:ae:50:00:4b:3c:ce:51:d3: df:c2:18:e0:80:a7:6a:16:b0:c0:e4:b5:9e:55:6f: 00:7b:21:0a:3a:5c:64:74:fd:c3:71:f8:0d:9f:c6: 27:92:fd:90:30:02:dc:d3:f5:bc:23:70:7f:22:c4: bd:99:97:17:ef:5d:21:d2:8c:d6:e2:8d:98:6f:9f: 08:6e:fd:4b:44:cb:f1:cf:4b:d2:30:81:99:42:aa: 60:dd:11:3e:4a:8a:e3:b7:b0:d5:14:4e:4c:7f:4a: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:9C:28:57:57:60:EB:BB:C2:2C:9E:3F:E6:AA:11:1C:3E:D4:4C X509v3 Authority Key Identifier: keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:da:e5:db:c7:e4:5a:27:83:f2:22:27:4a:18:77:35:4a:7f: 40:6b:cf:6c:a1:a0:0f:41:5a:c8:6d:da:b0:bb:c8:ca:7e:9b: 4a:c0:cf:c0:49:6d:d1:e7:e7:43:de:a9:77:af:a7:08:9f:0f: f1:bf:2e:66:11:1b:52:9c:75:6e:0f:a8:21:23:b5:28:b2:77: 1e:17:d5:48:ef:89:29:1b:93:6c:99:e2:0b:50:ff:27:77:ab: 73:75:c0:a2:d8:3f:f8:7a:bf:55:4c:7e:e7:92:d2:52:4b:94: 14:d7:09:9c:23:c4:55:e6:37:4d:2e:99:d8:aa:c5:4b:11:c8: cd:77:e9:3a:e5:96:59:7e:49:a0:a7:b9:4b:c0:b9:03:5e:e4: fa:ed:3c:a3:95:38:77:ef:d7:3b:b8:95:6c:33:b2:63:db:9f: c2:7b:c0:b1:ab:a9:64:30:9b:e0:c8:e6:f2:fd:c8:21:1e:62: d6:83:fa:00:cb:99:89:6f:ca:d0:9c:50:71:b1:a5:b9:e0:dc: 06:5a:de:ec:b3:dc:3b:92:75:1d:67:69:27:64:8c:81:5e:d2: c0:9f:72:59:4b:fb:94:6d:08:66:f6:e6:98:a2:5f:f3:d0:bd: f7:5e:27:08:24:51:61:48:e0:48:4c:4c:ca:c6:25:d6:cb:d7: 6f:1b:c0:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4MkgLWdDFKSiR2FI9CECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjVkNjNjOTE2M2YyY2M1YjU2MTRjM2M3ZjMxMTZlN2M3 MmY5ZjUwHhcNMjUxMjI0MDEwMjE1WhcNMjUxMjI1MDEwMjE1WjAzMTEwLwYDVQQD EygyOTIxOWMyODU3NTc2MGViYmJjMjJjOWUzZmU2YWExMTFjM2VkNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5qRf1QbVmGyFFK7bc1QdKWDHgNZ tjKDmOWGDFm+l8oS1slJv5HzFGpeu3+41N/Avz0lLOpSa/Lt+1E3Ul+AuShxVzrd j72lkCRpYxZmZryBoKaQwUm2wKxM3v9bws22icTvFCFShbfzXDRdh8q07IPsvpLk 27VpOOnI2+sn6iij9f3ppQT3UcaGCKAZLY35pRQTxEUk+rsDQstCrlAASzzOUdPf whjggKdqFrDA5LWeVW8AeyEKOlxkdP3DcfgNn8Ynkv2QMALc0/W8I3B/IsS9mZcX 710h0ozW4o2Yb58Ibv1LRMvxz0vSMIGZQqpg3RE+Sorjt7DVFE5Mf0oYWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkhnChXV2Dru8Isnj/mqhEcPtRMMB8GA1UdIwQY MBaAFMdl1jyRY/LMW1YUw8fzEW58cvn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQt OWNlMWI0MTY4NzdkLzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQtOWNlMWI0MTY4Nzdk LzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdrl28fk WieD8iInShh3NUp/QGvPbKGgD0FayG3asLvIyn6bSsDPwElt0efnQ96pd6+nCJ8P 8b8uZhEbUpx1bg+oISO1KLJ3HhfVSO+JKRuTbJniC1D/J3erc3XAotg/+Hq/VUx+ 55LSUkuUFNcJnCPEVeY3TS6Z2KrFSxHIzXfpOuWWWX5JoKe5S8C5A17k+u08o5U4 d+/XO7iVbDOyY9ufwnvAsaupZDCb4Mjm8v3IIR5i1oP6AMuZiW/K0JxQcbGlueDc Blre7LPcO5J1HWdpJ2SMgV7SwJ9yWUv7lG0IZvbmmKJf89C9914nCCRRYUjgSExM ysYl1svXbxvAZQ== -----END CERTIFICATE-----Generated at Wed Dec 24 09:20:30 2025 by rpki-client