This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json) Hash identifier: BpPdKdzbXQzGADREA40Mvpod5+Wmpa6PlLKc0oOgqEM= Subject key identifier: D5:F5:FB:D7:BC:F9:70:A1:15:B1:E9:86:37:40:D9:9F:99:18:74:04 Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Certificate serial: 019B4A70B3E2E450F6C52589CCBEF0E6BB9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft Manifest number: 14D2 Signing time: Tue 23 Dec 2025 09:00:58 +0000 Manifest this update: Tue 23 Dec 2025 09:00:58 +0000 Manifest next update: Wed 24 Dec 2025 09:00:58 +0000 Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=) 2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=) 3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: 9AGGJTwYQRa6fXFmzVj0tgJX4VFH54eKoF81psFDDc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:70:b3:e2:e4:50:f6:c5:25:89:cc:be:f0:e6:bb:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Validity Not Before: Dec 23 09:00:58 2025 GMT Not After : Dec 24 09:00:58 2025 GMT Subject: CN=d5f5fbd7bcf970a115b1e9863740d99f99187404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6b:86:ec:f9:53:5d:ba:1a:16:8e:0a:2a:e6: 5a:b8:54:9d:52:10:e6:62:aa:c1:e8:db:5c:c5:74: 2f:30:ab:10:c7:fb:2e:c4:b6:2f:6b:01:b8:f6:bd: e6:64:ee:57:10:05:1d:fa:d9:a8:1a:f6:32:3d:49: e2:fa:11:4b:d6:be:5c:19:f0:89:19:80:95:de:2d: 70:7d:ea:5d:b1:9a:e7:f6:83:16:67:6d:ae:7a:89: f5:e2:82:46:3d:42:ea:51:8c:28:e4:13:74:f4:3e: 1a:af:53:6a:de:0c:0e:29:cd:df:fd:6c:b1:b7:8c: d4:31:03:b3:70:0a:bb:e8:8b:98:a8:c1:7d:92:94: 6e:d8:7a:44:e7:37:5b:a8:da:c7:ef:58:b5:5d:f9: 0b:46:04:4a:df:47:b5:64:f7:e0:a7:67:16:cd:da: 3d:74:a1:6e:52:e5:ad:bc:9f:cc:f2:55:53:21:59: ff:9f:50:98:eb:8f:8d:1b:50:59:79:56:52:42:eb: 88:d9:0d:d7:88:d9:8f:40:22:07:38:03:44:47:d0: 8d:3c:35:56:d0:c7:8f:a7:ab:3a:2c:ac:b7:25:f6: df:10:8f:9e:10:6c:c9:d2:63:83:91:8e:90:1a:f1: 1b:fc:e2:9f:90:a9:67:17:c1:b6:8e:99:d8:de:c1: 27:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F5:FB:D7:BC:F9:70:A1:15:B1:E9:86:37:40:D9:9F:99:18:74:04 X509v3 Authority Key Identifier: keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ac:c6:91:33:f9:84:34:f5:27:99:c7:b3:99:6b:98:bc:ce: ac:b1:dc:f3:f7:f2:9a:4e:2c:c6:00:10:bd:93:75:0c:86:63: 58:37:ab:ce:a7:91:02:23:59:1f:36:ee:ee:7f:82:ba:17:f9: 19:d5:dc:fd:09:a1:e9:af:b7:a0:d9:ba:ba:7f:a8:cf:5b:39: 43:47:35:ff:71:0f:d6:8e:4b:55:5d:e5:b6:e3:f9:79:e9:c9: 62:5d:ca:85:d0:19:d0:16:33:16:8c:52:1c:63:b5:40:d8:87: a6:a3:ce:17:d5:10:56:6a:0d:8b:3c:56:73:33:2f:1a:c7:f1: ce:65:d4:22:87:05:7f:9e:e9:10:bb:ab:48:32:89:ff:0e:75: c3:66:50:d9:05:61:e1:3f:8d:29:1b:c5:38:7d:b5:bf:b2:d0: 51:a1:d2:f6:a5:f7:dd:11:5e:94:70:8b:7f:07:76:b0:f7:d4: 71:9d:50:8a:9d:c4:01:d1:b0:64:42:9c:1d:54:6a:98:2f:71: 19:0a:87:cd:0e:58:d7:92:6d:64:2c:5b:55:2d:66:13:2c:cc: d2:ca:ed:b0:af:02:7e:55:cd:4f:ef:76:3f:12:e9:3f:cd:92: 69:31:d6:4b:9c:68:ee:79:cc:fd:a9:77:d4:7b:a3:40:14:e8: 2a:d8:c4:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcLPi5FD2xSWJzL7w5ruaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0 YmI2Y2MwHhcNMjUxMjIzMDkwMDU4WhcNMjUxMjI0MDkwMDU4WjAzMTEwLwYDVQQD EyhkNWY1ZmJkN2JjZjk3MGExMTViMWU5ODYzNzQwZDk5Zjk5MTg3NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2uG7PlTXboaFo4KKuZauFSdUhDm YqrB6NtcxXQvMKsQx/suxLYvawG49r3mZO5XEAUd+tmoGvYyPUni+hFL1r5cGfCJ GYCV3i1wfepdsZrn9oMWZ22ueon14oJGPULqUYwo5BN09D4ar1Nq3gwOKc3f/Wyx t4zUMQOzcAq76IuYqMF9kpRu2HpE5zdbqNrH71i1XfkLRgRK30e1ZPfgp2cWzdo9 dKFuUuWtvJ/M8lVTIVn/n1CY64+NG1BZeVZSQuuI2Q3XiNmPQCIHOANER9CNPDVW 0MePp6s6LKy3JfbfEI+eEGzJ0mODkY6QGvEb/OKfkKlnF8G2jpnY3sEntwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX1+9e8+XChFbHphjdA2Z+ZGHQEMB8GA1UdIwQY MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbazGkTP5 hDT1J5nHs5lrmLzOrLHc8/fymk4sxgAQvZN1DIZjWDerzqeRAiNZHzbu7n+Cuhf5 GdXc/Qmh6a+3oNm6un+oz1s5Q0c1/3EP1o5LVV3ltuP5eenJYl3KhdAZ0BYzFoxS HGO1QNiHpqPOF9UQVmoNizxWczMvGsfxzmXUIocFf57pELurSDKJ/w51w2ZQ2QVh 4T+NKRvFOH21v7LQUaHS9qX33RFelHCLfwd2sPfUcZ1Qip3EAdGwZEKcHVRqmC9x GQqHzQ5Y15JtZCxbVS1mEyzM0srtsK8CflXNT+92PxLpP82SaTHWS5xo7nnM/al3 1HujQBToKtjEBw== -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:47 2025 by rpki-client