This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json) Hash identifier: Q+l8htKzn+Jx2olCdnLJ9vDfCerY0/1ffGkBpgAe7so= Subject key identifier: 53:68:A4:01:E8:6D:DC:75:C2:A8:FD:62:39:10:B4:A8:CB:7B:56:41 Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d Certificate serial: 019B4701DE573B0E64AEE075A84139A62312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft Manifest number: 0B9B Signing time: Mon 22 Dec 2025 17:01:03 +0000 Manifest this update: Mon 22 Dec 2025 17:01:03 +0000 Manifest next update: Tue 23 Dec 2025 17:01:03 +0000 Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=) 2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: r8roUi4rOwjM21V1Tir4LDMszmQHjuDatd3Uo74GsN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:de:57:3b:0e:64:ae:e0:75:a8:41:39:a6:23:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d Validity Not Before: Dec 22 17:01:03 2025 GMT Not After : Dec 23 17:01:03 2025 GMT Subject: CN=5368a401e86ddc75c2a8fd623910b4a8cb7b5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:74:40:cb:d6:9c:d1:49:6a:a8:8d:0f:4d:51: 21:d7:d0:ca:97:c6:6e:68:70:74:3f:87:32:28:23: 15:64:1c:9a:17:dd:ba:69:9c:6c:2f:01:bc:4c:1a: 98:95:35:1c:70:49:01:66:6f:2e:08:13:c7:9b:92: 77:77:84:70:c2:fa:f0:4d:5e:7f:37:23:1a:d3:19: 92:44:a4:5e:d5:42:8d:86:69:63:a7:48:61:81:28: 37:57:9c:d8:d4:a2:af:e7:97:d1:cc:da:e2:9d:9f: 3e:b5:84:0e:b4:7f:12:2f:52:77:4f:18:80:f4:d4: bb:0f:98:af:4f:3f:1d:f8:06:58:8f:b5:d7:14:04: fc:57:01:d9:69:8f:d6:7c:45:ad:0a:fc:af:8a:60: 80:68:b1:ea:ea:fa:4f:c9:30:41:09:e2:de:1d:89: 49:24:2b:3d:dd:20:6e:a1:dd:af:d4:40:41:cf:59: 78:9d:7a:2c:38:6d:51:1a:8f:60:07:75:71:5d:70: 8e:f5:58:72:f4:46:24:30:43:c9:bd:6e:5b:e2:ab: f1:b1:26:dd:00:ad:90:49:04:73:ea:26:de:c2:07: a2:2c:21:af:93:b2:51:82:7f:29:37:b7:43:4a:e9: b2:6c:88:f9:3c:d6:ac:20:8c:9c:4d:ff:81:f7:92: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:68:A4:01:E8:6D:DC:75:C2:A8:FD:62:39:10:B4:A8:CB:7B:56:41 X509v3 Authority Key Identifier: keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c5:59:c0:f7:df:09:4a:23:cf:ec:d4:d6:c1:7a:4e:d2:bc: be:be:e7:b8:bb:aa:2c:1f:8c:d2:08:ff:32:03:fa:f9:17:8f: c2:25:65:e8:2c:4b:22:12:af:27:2a:75:53:87:03:48:07:73: 7e:8a:ae:98:04:1c:85:51:24:34:a2:e8:ed:03:87:55:ad:d4: bf:04:38:a7:52:0c:89:3e:c6:7f:f6:e7:72:ff:3d:3d:24:ad: e6:ed:03:9e:b1:ee:95:87:56:b1:19:8b:8f:9d:f7:e0:2f:54: 75:a7:fa:43:86:a2:2f:75:1a:88:9d:24:aa:8a:f0:99:ad:6a: ab:a9:a7:17:90:d9:a2:d0:27:ee:7e:21:c4:38:80:93:54:a0: 99:af:d9:ac:1b:1b:33:a1:66:82:20:3b:83:3c:a9:43:91:09: ba:4e:a6:e0:06:20:b8:bb:02:90:e2:37:2d:72:fb:11:65:b4: 3d:69:36:98:6b:be:e7:92:ef:f9:6d:d3:dd:56:ef:39:e9:a2: 4e:08:e2:eb:4e:d0:e2:bd:57:ab:8a:bf:4b:09:02:57:97:b6: f7:3b:99:1d:d4:f4:97:75:1b:78:fe:ea:de:8a:28:00:ce:3b: 26:07:c7:58:e1:1e:0f:10:22:31:d3:0b:13:e4:20:c3:92:9a: e5:96:d4:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAd5XOw5kruB1qEE5piMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2 OWQzMGQwHhcNMjUxMjIyMTcwMTAzWhcNMjUxMjIzMTcwMTAzWjAzMTEwLwYDVQQD Eyg1MzY4YTQwMWU4NmRkYzc1YzJhOGZkNjIzOTEwYjRhOGNiN2I1NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3RAy9ac0UlqqI0PTVEh19DKl8Zu aHB0P4cyKCMVZByaF926aZxsLwG8TBqYlTUccEkBZm8uCBPHm5J3d4RwwvrwTV5/ NyMa0xmSRKRe1UKNhmljp0hhgSg3V5zY1KKv55fRzNrinZ8+tYQOtH8SL1J3TxiA 9NS7D5ivTz8d+AZYj7XXFAT8VwHZaY/WfEWtCvyvimCAaLHq6vpPyTBBCeLeHYlJ JCs93SBuod2v1EBBz1l4nXosOG1RGo9gB3VxXXCO9Vhy9EYkMEPJvW5b4qvxsSbd AK2QSQRz6ibewgeiLCGvk7JRgn8pN7dDSumybIj5PNasIIycTf+B95JDUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNopAHobdx1wqj9YjkQtKjLe1ZBMB8GA1UdIwQY MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccVZwPff CUojz+zU1sF6TtK8vr7nuLuqLB+M0gj/MgP6+RePwiVl6CxLIhKvJyp1U4cDSAdz foqumAQchVEkNKLo7QOHVa3UvwQ4p1IMiT7Gf/bncv89PSSt5u0DnrHulYdWsRmL j5334C9Udaf6Q4aiL3UaiJ0kqorwma1qq6mnF5DZotAn7n4hxDiAk1Sgma/ZrBsb M6FmgiA7gzypQ5EJuk6m4AYguLsCkOI3LXL7EWW0PWk2mGu+55Lv+W3T3VbvOemi Tgji607Q4r1Xq4q/SwkCV5e29zuZHdT0l3UbeP7q3oooAM47JgfHWOEeDxAiMdML E+Qgw5Ka5ZbUug== -----END CERTIFICATE-----Generated at Tue Dec 23 02:40:09 2025 by rpki-client