This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json) Hash identifier: LfFYzWdmlbGP5DOIfKADvgYb71jlfoxas5zfcR431f0= Subject key identifier: 89:77:9F:D8:B3:AA:79:BD:7F:51:9B:4A:CD:FF:43:9B:6D:1A:67:35 Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019B47387FB7A922687C7D7828BB1AF79C88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft Manifest number: 0714 Signing time: Mon 22 Dec 2025 18:00:43 +0000 Manifest this update: Mon 22 Dec 2025 18:00:43 +0000 Manifest next update: Tue 23 Dec 2025 18:00:43 +0000 Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: 10JAt8QgzPI7R5tZHbEfEAFtw2oUDas5y1CbNIun7RU=) 2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:7f:b7:a9:22:68:7c:7d:78:28:bb:1a:f7:9c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Dec 22 18:00:43 2025 GMT Not After : Dec 23 18:00:43 2025 GMT Subject: CN=89779fd8b3aa79bd7f519b4acdff439b6d1a6735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:f6:41:78:c0:d0:02:35:06:ec:88:82:7c: 0f:11:50:3a:3b:d6:98:6b:46:94:23:43:0f:fd:d1: 41:dc:28:ca:28:d4:b9:16:fd:d2:51:29:32:cc:5a: cb:42:cd:11:db:27:0e:cc:de:6c:33:00:9a:18:39: 89:2b:12:91:24:9f:5a:ff:16:fa:48:3f:d7:1c:b4: 06:aa:b0:b7:82:b5:7b:6c:6d:9a:f7:a9:1f:6d:c7: 91:72:f5:b0:f4:18:d3:ca:57:3e:bf:02:2c:6b:08: 7d:56:14:eb:d9:b5:67:d3:a0:09:af:11:d2:ab:2f: fe:4e:0c:db:2c:63:ee:50:0f:43:a6:7e:47:e8:93: 30:26:fd:91:de:51:07:18:84:ff:91:d2:25:81:83: 2c:c0:84:5c:8d:6f:e0:7c:72:a1:fb:b9:a2:d2:31: d1:b1:23:23:fc:ec:34:fb:be:f0:e7:95:82:a0:6b: 8d:79:ee:05:6e:2d:e3:4e:9c:27:b5:35:96:03:6e: b4:2c:3c:b1:d8:66:61:f3:2d:7a:c2:07:88:cc:07: 15:8d:d0:8d:9f:cf:29:ff:97:c7:b1:0a:70:23:55: 94:8c:aa:46:1a:2e:50:6b:f6:0b:97:61:29:cd:ac: 46:20:a3:7a:ce:16:4a:10:8e:ea:b1:ae:a7:2a:d2: ad:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:77:9F:D8:B3:AA:79:BD:7F:51:9B:4A:CD:FF:43:9B:6D:1A:67:35 X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:76:1a:2b:36:99:44:c9:f1:c4:a4:b1:48:61:14:7d:a2:c9: da:57:c2:a6:5b:24:33:6c:71:ea:04:b0:0c:46:7c:6f:c5:a2: be:51:2c:77:95:d8:08:85:e4:21:76:69:9b:72:35:a8:23:3f: 25:29:81:6c:fb:97:bd:4b:41:b0:9e:f4:b6:0c:7a:34:7c:13: 53:d3:dc:8a:a6:0e:35:e3:33:7c:7a:5b:0d:3d:11:9e:f2:2c: 72:d8:9b:c6:88:db:a2:32:f5:bb:68:6c:17:b1:29:2a:3f:ec: a4:6e:eb:0a:e9:d0:a7:f1:db:59:67:e0:44:ec:17:4e:48:c4: 59:ba:c4:6d:3c:94:4a:6c:c6:1f:c5:32:c0:e4:bb:f9:b2:b9: b9:ec:81:a5:a3:b8:6d:db:1d:a7:a9:2b:00:9b:79:63:e4:dd: 58:26:a3:38:8f:96:c7:57:0f:49:7d:a9:4b:2f:bc:92:05:f6: 3e:c1:a6:69:c6:cd:73:77:f3:34:15:88:94:4b:fa:07:0f:7e: 61:73:6b:2b:82:f6:c7:b1:fb:65:9e:c8:29:60:a5:0e:7c:d3: 86:7b:0d:67:d3:c4:bc:e5:b4:0a:db:65:05:39:38:6d:17:95: 04:6e:1b:88:72:75:68:0a:c2:52:69:09:35:cc:6d:ea:80:07: d7:8c:c2:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOH+3qSJofH14KLsa95yIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjUxMjIyMTgwMDQzWhcNMjUxMjIzMTgwMDQzWjAzMTEwLwYDVQQD Eyg4OTc3OWZkOGIzYWE3OWJkN2Y1MTliNGFjZGZmNDM5YjZkMWE2NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcn2QXjA0AI1BuyIgnwPEVA6O9aY a0aUI0MP/dFB3CjKKNS5Fv3SUSkyzFrLQs0R2ycOzN5sMwCaGDmJKxKRJJ9a/xb6 SD/XHLQGqrC3grV7bG2a96kfbceRcvWw9BjTylc+vwIsawh9VhTr2bVn06AJrxHS qy/+TgzbLGPuUA9Dpn5H6JMwJv2R3lEHGIT/kdIlgYMswIRcjW/gfHKh+7mi0jHR sSMj/Ow0+77w55WCoGuNee4Fbi3jTpwntTWWA260LDyx2GZh8y16wgeIzAcVjdCN n88p/5fHsQpwI1WUjKpGGi5Qa/YLl2EpzaxGIKN6zhZKEI7qsa6nKtKtEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl3n9izqnm9f1GbSs3/Q5ttGmc1MB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3YaKzaZ RMnxxKSxSGEUfaLJ2lfCplskM2xx6gSwDEZ8b8WivlEsd5XYCIXkIXZpm3I1qCM/ JSmBbPuXvUtBsJ70tgx6NHwTU9PciqYONeMzfHpbDT0RnvIsctibxojbojL1u2hs F7EpKj/spG7rCunQp/HbWWfgROwXTkjEWbrEbTyUSmzGH8UywOS7+bK5ueyBpaO4 bdsdp6krAJt5Y+TdWCajOI+Wx1cPSX2pSy+8kgX2PsGmacbNc3fzNBWIlEv6Bw9+ YXNrK4L2x7H7ZZ7IKWClDnzThnsNZ9PEvOW0CttlBTk4bReVBG4biHJ1aArCUmkJ Ncxt6oAH14zC4A== -----END CERTIFICATE-----Generated at Mon Dec 22 22:54:36 2025 by rpki-client