This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft File: sX6_RB7hCFYx7rdxmomC39gFe-E.mft (raw, json) Hash identifier: 9Lpe6dyllw8V6+A8BUMKxZOXP+T14t8qjGcE61gSp9A= Subject key identifier: 74:B7:5B:8A:E3:EC:04:53:17:6D:34:04:5C:F6:35:D1:35:2A:FB:7A Authority key identifier: B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1 Certificate issuer: /CN=b17ebf441ee1085631eeb7719a8982dfd8057be1 Certificate serial: 019B53AC185ABF5E50DA2460E10475FE99BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft Manifest number: 0AE9 Signing time: Thu 25 Dec 2025 04:02:25 +0000 Manifest this update: Thu 25 Dec 2025 04:02:25 +0000 Manifest next update: Fri 26 Dec 2025 04:02:25 +0000 Files and hashes: 1: JCqxOWvRMd2lIIGe0fYoaGdhwgI.roa (hash: q79BmLDis9K2JVt9ulN+DMiX99ELtsqzHLGGugITbVk=) 2: sX6_RB7hCFYx7rdxmomC39gFe-E.crl (hash: /8oANSREez72qCn1b34BBrvJKr45wTGAKtaW+RmP2rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:18:5a:bf:5e:50:da:24:60:e1:04:75:fe:99:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17ebf441ee1085631eeb7719a8982dfd8057be1 Validity Not Before: Dec 25 04:02:25 2025 GMT Not After : Dec 26 04:02:25 2025 GMT Subject: CN=74b75b8ae3ec0453176d34045cf635d1352afb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:59:73:04:ed:4f:07:cc:43:74:4e:27:1c: 0d:1f:9c:a6:9c:6f:53:93:9d:9b:3b:70:ed:ce:0c: 96:64:cc:cf:96:37:b2:12:a8:ef:02:c1:b7:b6:1a: 17:1f:76:c0:a3:e3:09:b9:b5:07:9a:a6:6f:82:3c: 56:07:d5:51:d7:e8:05:e8:83:e1:19:64:d7:23:09: b0:80:66:df:b8:3c:2f:0b:2b:88:50:5b:48:41:82: 8d:30:78:67:d3:73:69:ae:bb:e0:09:a7:a3:23:50: 8b:10:91:96:e8:9c:f7:00:41:cc:ef:17:48:6a:dc: 74:71:04:6c:15:41:cc:9f:23:fe:d7:a0:93:09:ab: 4e:df:75:7a:04:a2:3e:c8:b8:56:e8:f2:59:53:6d: be:ed:88:1b:8d:db:a2:c4:ed:36:90:cd:17:35:14: f8:3c:6b:7a:cf:ed:c5:a3:f7:93:48:3e:fa:57:4b: 5d:05:d7:7c:39:90:0c:22:66:0e:fc:24:81:e1:17: ed:08:18:f3:b6:d3:34:ea:16:7b:ea:2c:e9:1c:c2: fb:12:6e:41:f7:70:2d:90:d2:d2:1d:f4:b3:09:b7: d3:04:31:84:8c:2a:3c:c4:d4:ef:9b:52:e3:51:de: f0:76:d2:94:22:16:cb:9c:5b:5b:f0:2c:e4:5d:c4: 90:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:5B:8A:E3:EC:04:53:17:6D:34:04:5C:F6:35:D1:35:2A:FB:7A X509v3 Authority Key Identifier: keyid:B1:7E:BF:44:1E:E1:08:56:31:EE:B7:71:9A:89:82:DF:D8:05:7B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX6_RB7hCFYx7rdxmomC39gFe-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/19ae05-2fb3-424e-ae26-2230dbd5edbb/1/sX6_RB7hCFYx7rdxmomC39gFe-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:10:f5:15:33:85:ad:26:0d:77:b9:f9:f0:e5:80:0d:67:e7: 12:e7:91:8c:75:2c:e0:bd:62:24:ae:90:14:79:2a:cc:4c:0c: 09:b9:e6:54:0f:f7:cc:4c:ca:48:6e:70:e1:73:1b:f0:55:d3: 54:96:86:f1:ac:44:f1:19:70:b3:39:51:47:fc:bc:8b:1b:49: 61:82:9b:42:5f:6b:64:01:27:ee:68:10:98:d8:e2:5a:10:05: 6a:cd:37:2d:9a:15:a4:08:d1:26:39:c3:96:96:e8:45:ed:1c: 8b:85:44:a3:eb:ed:ed:48:d5:74:d9:50:b9:f0:57:76:c6:fe: 7a:b5:0a:0b:44:3b:b9:fc:58:33:33:bf:75:b8:29:01:11:29: 16:09:d3:c0:58:37:2f:be:b0:07:82:12:f6:4b:5f:fd:99:d0: fe:fa:90:2b:a3:0b:d9:ce:4b:59:25:5b:3b:15:87:e9:0d:e2: 3c:68:ad:b6:65:2a:9c:13:1f:ca:32:93:d0:94:00:c1:19:90: a3:af:0e:91:92:92:5a:ac:a5:a5:ca:d0:49:f9:95:8c:d4:f2: e7:46:5d:49:d6:c8:15:1f:42:0f:fb:03:b5:ca:05:52:16:7d: f1:23:2e:bc:f9:6f:28:d2:7c:a0:ee:ef:3b:45:96:c3:34:8f: d5:52:8b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrBhav15Q2iRg4QR1/pm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxN2ViZjQ0MWVlMTA4NTYzMWVlYjc3MTlhODk4MmRmZDgw NTdiZTEwHhcNMjUxMjI1MDQwMjI1WhcNMjUxMjI2MDQwMjI1WjAzMTEwLwYDVQQD Eyg3NGI3NWI4YWUzZWMwNDUzMTc2ZDM0MDQ1Y2Y2MzVkMTM1MmFmYjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7tZcwTtTwfMQ3ROJxwNH5ymnG9T k52bO3DtzgyWZMzPljeyEqjvAsG3thoXH3bAo+MJubUHmqZvgjxWB9VR1+gF6IPh GWTXIwmwgGbfuDwvCyuIUFtIQYKNMHhn03NprrvgCaejI1CLEJGW6Jz3AEHM7xdI atx0cQRsFUHMnyP+16CTCatO33V6BKI+yLhW6PJZU22+7YgbjduixO02kM0XNRT4 PGt6z+3Fo/eTSD76V0tdBdd8OZAMImYO/CSB4RftCBjzttM06hZ76izpHML7Em5B 93AtkNLSHfSzCbfTBDGEjCo8xNTvm1LjUd7wdtKUIhbLnFtb8CzkXcSQJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHS3W4rj7ARTF200BFz2NdE1Kvt6MB8GA1UdIwQY MBaAFLF+v0Qe4QhWMe63cZqJgt/YBXvhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYt MjIzMGRiZDVlZGJiLzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xOWFlMDUtMmZiMy00MjRlLWFlMjYtMjIzMGRiZDVlZGJi LzEvc1g2X1JCN2hDRll4N3JkeG1vbUMzOWdGZS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhD1FTOF rSYNd7n58OWADWfnEueRjHUs4L1iJK6QFHkqzEwMCbnmVA/3zEzKSG5w4XMb8FXT VJaG8axE8RlwszlRR/y8ixtJYYKbQl9rZAEn7mgQmNjiWhAFas03LZoVpAjRJjnD lpboRe0ci4VEo+vt7UjVdNlQufBXdsb+erUKC0Q7ufxYMzO/dbgpAREpFgnTwFg3 L76wB4IS9ktf/ZnQ/vqQK6ML2c5LWSVbOxWH6Q3iPGittmUqnBMfyjKT0JQAwRmQ o68OkZKSWqylpcrQSfmVjNTy50ZdSdbIFR9CD/sDtcoFUhZ98SMuvPlvKNJ8oO7v O0WWwzSP1VKLcw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:56 2025 by rpki-client