This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json) Hash identifier: MYsGKyoBHUt9EiAIirCWZjNnylvpf/4Yq2UOXJOgRFc= Subject key identifier: 9D:DF:80:F7:1B:88:0D:F5:81:07:FC:89:EF:23:3B:29:92:E9:7E:BE Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d Certificate serial: 019B620B96ED012A200A0835B0446847DB0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft Manifest number: 0BA9 Signing time: Sat 27 Dec 2025 23:01:25 +0000 Manifest this update: Sat 27 Dec 2025 23:01:25 +0000 Manifest next update: Sun 28 Dec 2025 23:01:25 +0000 Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=) 2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: WQV1clQDVSDAW3eLvxuq54hKHStsMUKhLoRQEcHlSTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:96:ed:01:2a:20:0a:08:35:b0:44:68:47:db:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d Validity Not Before: Dec 27 23:01:25 2025 GMT Not After : Dec 28 23:01:25 2025 GMT Subject: CN=9ddf80f71b880df58107fc89ef233b2992e97ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:78:22:12:08:aa:04:48:ec:2f:99:ea:a2:cf: ca:08:73:e8:4c:3d:d2:55:00:56:d7:0b:5d:22:5b: 86:c7:d9:9e:8f:ae:1c:32:6b:82:8b:d6:83:40:b1: ff:31:e5:aa:e6:45:b7:ee:2b:f3:3c:2d:07:89:1b: d2:3e:e4:be:1c:59:0f:4e:45:df:70:d3:ef:8c:d0: 35:0f:98:a8:a7:a5:14:c2:47:ba:21:b2:73:2c:51: 3b:a1:5f:6f:dd:ad:53:bd:13:b0:ce:59:af:c5:c4: 78:fd:a8:fe:da:45:6a:2a:29:6b:9d:58:f6:17:fa: 1b:fc:dc:45:12:47:46:23:29:31:4b:7e:f8:90:df: 5f:51:e5:46:43:77:2d:c2:63:1a:fa:22:a2:72:e7: 18:fa:2c:bb:1a:b9:46:4e:47:ac:51:a0:fe:d2:b9: e6:fc:c7:4e:e6:f7:f7:02:6e:2a:f7:b7:62:17:8a: a2:fe:49:12:d9:2d:1a:64:6b:73:4a:aa:90:d5:b3: c4:98:8c:b0:d5:5c:79:41:98:e9:75:57:53:da:c8: 27:74:48:10:b8:9e:ab:0b:10:7b:ac:0d:f2:d2:4e: 76:e1:fa:18:c6:d5:ef:c9:42:fe:5e:e7:40:eb:ac: 3e:f7:ba:d2:16:13:72:20:ef:85:04:a5:e9:da:78: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:DF:80:F7:1B:88:0D:F5:81:07:FC:89:EF:23:3B:29:92:E9:7E:BE X509v3 Authority Key Identifier: keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:a2:66:24:3b:47:e8:35:eb:3a:bb:95:82:7a:33:8a:83:32: 62:e4:54:40:96:5b:26:1f:b6:a1:bb:64:2a:6e:fa:07:6c:74: c1:d0:b6:8f:01:ab:99:38:d7:75:e1:f1:18:4e:8d:57:33:e1: 45:e1:29:e0:ec:86:38:d7:5f:35:f6:cb:98:dc:7a:6b:8a:c1: f0:f9:00:f0:7d:1f:4b:80:d0:ed:9f:50:a6:9f:06:ff:75:a0: 15:24:d4:df:57:1a:f6:06:84:a9:03:64:ba:c9:07:99:15:cc: 9c:61:63:22:49:28:a2:5c:4f:1f:25:4f:d1:f1:31:43:64:6f: af:aa:cc:16:0d:2b:3b:a9:30:37:f3:ce:19:62:ea:5b:da:a2: 4e:07:e7:c9:b0:cf:c3:c3:e7:21:ba:74:37:ee:9d:f8:85:dd: 6a:fd:ee:18:e5:7c:9a:81:cc:f2:d6:2f:0a:7f:68:14:53:ad: f4:a5:0c:a6:43:56:49:e2:96:51:f2:04:1c:71:4a:9b:b9:0e: 3c:5f:a8:0c:e2:7c:27:ef:07:60:ae:18:2b:4d:2c:4e:c2:46: 61:7c:3c:c4:31:03:79:d3:05:07:be:c6:10:1b:f2:c4:f1:53: 92:df:46:83:be:f8:0a:23:8e:2b:3f:16:ea:7c:13:94:34:4e: 37:8c:40:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiC5btASogCgg1sERoR9sLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2 OWQzMGQwHhcNMjUxMjI3MjMwMTI1WhcNMjUxMjI4MjMwMTI1WjAzMTEwLwYDVQQD Eyg5ZGRmODBmNzFiODgwZGY1ODEwN2ZjODllZjIzM2IyOTkyZTk3ZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjngiEgiqBEjsL5nqos/KCHPoTD3S VQBW1wtdIluGx9mej64cMmuCi9aDQLH/MeWq5kW37ivzPC0HiRvSPuS+HFkPTkXf cNPvjNA1D5iop6UUwke6IbJzLFE7oV9v3a1TvROwzlmvxcR4/aj+2kVqKilrnVj2 F/ob/NxFEkdGIykxS374kN9fUeVGQ3ctwmMa+iKicucY+iy7GrlGTkesUaD+0rnm /MdO5vf3Am4q97diF4qi/kkS2S0aZGtzSqqQ1bPEmIyw1Vx5QZjpdVdT2sgndEgQ uJ6rCxB7rA3y0k524foYxtXvyUL+XudA66w+97rSFhNyIO+FBKXp2nhTHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3fgPcbiA31gQf8ie8jOymS6X6+MB8GA1UdIwQY MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKJmJDtH 6DXrOruVgnozioMyYuRUQJZbJh+2obtkKm76B2x0wdC2jwGrmTjXdeHxGE6NVzPh ReEp4OyGONdfNfbLmNx6a4rB8PkA8H0fS4DQ7Z9Qpp8G/3WgFSTU31ca9gaEqQNk uskHmRXMnGFjIkkoolxPHyVP0fExQ2Rvr6rMFg0rO6kwN/POGWLqW9qiTgfnybDP w8PnIbp0N+6d+IXdav3uGOV8moHM8tYvCn9oFFOt9KUMpkNWSeKWUfIEHHFKm7kO PF+oDOJ8J+8HYK4YK00sTsJGYXw8xDEDedMFB77GEBvyxPFTkt9Gg774CiOOKz8W 6nwTlDRON4xAUA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:49:42 2025 by rpki-client