This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json) Hash identifier: Iium+fmPk6I1VuzS0MUidYZzbyye1cWGBbfNDeyeAVA= Subject key identifier: AB:99:5B:2F:5D:C2:73:84:D6:A0:E4:59:0A:4B:5D:41:AB:A1:9A:42 Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1 Certificate serial: 019B63546C8A41377251779F7F59D38BD28F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft Manifest number: 05C2 Signing time: Sun 28 Dec 2025 05:00:35 +0000 Manifest this update: Sun 28 Dec 2025 05:00:35 +0000 Manifest next update: Mon 29 Dec 2025 05:00:35 +0000 Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: w3RiPwT8T/XfuZPb6Ip0L1RCrMUo7LXgmT8oMUsEJhw=) 2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:54:6c:8a:41:37:72:51:77:9f:7f:59:d3:8b:d2:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1 Validity Not Before: Dec 28 05:00:35 2025 GMT Not After : Dec 29 05:00:35 2025 GMT Subject: CN=ab995b2f5dc27384d6a0e4590a4b5d41aba19a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:88:0e:61:b0:05:ae:5b:ba:b2:61:ff:fc:c8: b4:b7:9f:42:f3:57:b9:ac:96:f0:3c:15:6f:2f:21: ab:bf:2b:cb:25:e9:94:d7:2f:90:9e:07:90:0b:49: b8:ec:72:ae:80:01:bd:71:fe:90:24:47:55:41:14: 6b:0c:22:0c:0b:2a:f9:7b:cd:aa:86:8c:c4:1d:99: 9d:ec:77:9e:66:77:fe:5a:36:e7:22:4c:92:d7:5d: f9:72:66:67:ce:9f:ae:b7:e3:41:2f:82:bc:ac:c8: a0:47:41:50:e5:73:27:6d:3e:ac:56:42:8c:f7:47: 78:c6:87:18:3a:51:a3:cc:e3:83:c8:56:ac:b5:b8: e8:6c:31:45:4b:17:d5:a0:5b:b1:6d:2f:e3:9b:3f: b2:d1:e3:52:92:0e:22:88:f8:3b:8d:4d:aa:1b:a9: 8a:0e:cd:9e:37:70:f9:0f:0f:cc:7b:90:7d:23:e2: 55:bf:60:73:d5:8a:25:67:89:57:0e:da:f1:06:e5: 0a:6f:35:0d:60:8d:14:2a:93:29:1f:17:4d:a8:1d: 93:1d:81:02:d7:57:a4:fb:01:77:be:75:b0:8f:fa: 22:e5:6c:45:2c:99:15:3e:61:52:38:64:c1:bb:49: 7f:0f:f0:11:9c:ef:85:04:7b:c2:ff:61:71:ba:08: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:99:5B:2F:5D:C2:73:84:D6:A0:E4:59:0A:4B:5D:41:AB:A1:9A:42 X509v3 Authority Key Identifier: keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a6:7c:13:f1:fc:8e:f8:2e:33:56:51:a9:52:c7:3e:09:c4: 81:63:7e:e4:86:4d:4e:76:2e:5b:70:c7:a1:6a:30:5d:3d:ba: e3:d9:e3:28:ba:0d:72:e0:5d:44:93:2a:1f:78:50:64:3a:b2: 9c:41:87:8b:fb:5f:3f:bd:de:e1:1c:8f:53:94:b8:7a:99:22: 18:37:e0:cf:72:d8:62:ce:82:10:b1:6f:e1:95:92:e0:19:06: 81:7d:76:4a:95:b4:73:28:eb:f7:d3:20:7d:30:e4:f6:d2:46: ab:31:b5:9c:01:d0:af:7b:b7:11:da:65:e1:4a:75:4d:62:f2: 03:72:9a:f5:92:c4:5c:75:36:8e:d3:8a:ca:19:c3:82:e7:53: 8e:03:7e:d8:fb:80:31:73:9f:93:3f:fc:8d:51:2a:5d:39:e9: ed:1e:22:40:15:bf:57:80:01:1c:02:f8:f3:57:9c:48:3d:52: df:a5:13:e8:65:db:77:bb:01:4f:a6:4b:7d:da:7d:92:49:f5: 6e:7e:8d:87:c3:b0:68:09:45:c4:5a:b8:a4:51:69:34:86:65: 58:e3:aa:5c:6d:6c:4a:87:9e:45:b3:55:9e:81:4b:e5:07:2c: 89:ff:69:4a:bc:fc:11:9f:de:e2:68:8f:d6:81:ec:51:54:e1: 0c:39:64:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVGyKQTdyUXeff1nTi9KPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl MDY3ZDEwHhcNMjUxMjI4MDUwMDM1WhcNMjUxMjI5MDUwMDM1WjAzMTEwLwYDVQQD EyhhYjk5NWIyZjVkYzI3Mzg0ZDZhMGU0NTkwYTRiNWQ0MWFiYTE5YTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ogOYbAFrlu6smH//Mi0t59C81e5 rJbwPBVvLyGrvyvLJemU1y+QngeQC0m47HKugAG9cf6QJEdVQRRrDCIMCyr5e82q hozEHZmd7HeeZnf+WjbnIkyS1135cmZnzp+ut+NBL4K8rMigR0FQ5XMnbT6sVkKM 90d4xocYOlGjzOODyFastbjobDFFSxfVoFuxbS/jmz+y0eNSkg4iiPg7jU2qG6mK Ds2eN3D5Dw/Me5B9I+JVv2Bz1YolZ4lXDtrxBuUKbzUNYI0UKpMpHxdNqB2THYEC 11ek+wF3vnWwj/oi5WxFLJkVPmFSOGTBu0l/D/ARnO+FBHvC/2FxuggemQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuZWy9dwnOE1qDkWQpLXUGroZpCMB8GA1UdIwQY MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6Z8E/H8 jvguM1ZRqVLHPgnEgWN+5IZNTnYuW3DHoWowXT2649njKLoNcuBdRJMqH3hQZDqy nEGHi/tfP73e4RyPU5S4epkiGDfgz3LYYs6CELFv4ZWS4BkGgX12SpW0cyjr99Mg fTDk9tJGqzG1nAHQr3u3Edpl4Up1TWLyA3Ka9ZLEXHU2jtOKyhnDgudTjgN+2PuA MXOfkz/8jVEqXTnp7R4iQBW/V4ABHAL481ecSD1S36UT6GXbd7sBT6ZLfdp9kkn1 bn6Nh8OwaAlFxFq4pFFpNIZlWOOqXG1sSoeeRbNVnoFL5Qcsif9pSrz8EZ/e4miP 1oHsUVThDDlkbg== -----END CERTIFICATE-----Generated at Sun Dec 28 13:00:58 2025 by rpki-client