This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json) Hash identifier: LFVEhSqi+bzX4zBqFMuyc6gihEz7rBOpr7WQFKrqn5M= Subject key identifier: 7B:07:55:D3:56:E5:04:A7:B5:C3:1E:4E:14:83:33:76:0E:17:74:9E Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Certificate serial: 019B4438B370E9E591E587A7325BD55ACC23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft Manifest number: 0BB2 Signing time: Mon 22 Dec 2025 04:02:05 +0000 Manifest this update: Mon 22 Dec 2025 04:02:05 +0000 Manifest next update: Tue 23 Dec 2025 04:02:05 +0000 Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: pYMrC9IqVJPZzTrluuW+Agb4b8kgqM9mocguJGHInnw=) 2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:b3:70:e9:e5:91:e5:87:a7:32:5b:d5:5a:cc:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Validity Not Before: Dec 22 04:02:05 2025 GMT Not After : Dec 23 04:02:05 2025 GMT Subject: CN=7b0755d356e504a7b5c31e4e148333760e17749e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:3d:ac:0c:fa:00:70:7b:60:43:a2:4e:4b: 94:2c:1e:ce:f4:75:99:bb:24:f0:d9:a7:c5:3b:f2: 87:08:c4:92:6a:33:7d:30:73:2e:9e:77:f5:3a:37: 06:ca:43:36:75:13:68:60:fd:1f:4d:c3:f7:bc:53: 0a:54:61:2f:c2:21:08:89:33:2c:08:c7:84:1a:6a: 07:e7:ee:ec:9a:1c:72:b5:96:cc:91:c8:32:b1:12: 58:a0:a6:bd:79:4b:70:24:fe:e1:18:cd:a1:6b:67: 84:84:7e:e4:ad:07:19:09:96:21:1a:f3:aa:8d:a7: 50:2f:0e:c3:72:34:cc:67:f8:f2:ae:fa:2e:03:89: e7:2d:46:e1:5c:98:64:ff:7d:bd:57:c5:1b:e8:9b: 86:9f:51:4d:fc:89:c0:b0:6d:16:88:5f:68:66:c6: 91:62:07:31:4c:ef:a4:79:d5:04:9b:dc:d4:2d:1f: 44:f0:13:20:0a:5f:6d:a8:92:76:55:e2:ab:3f:b0: 02:97:ab:98:f8:d4:80:fe:8b:b6:e1:88:d0:c7:dc: 0a:e2:fa:b6:d1:b4:a9:8c:d2:15:5f:3c:22:28:d4: b8:d9:6e:9c:d2:dc:ec:f1:43:9d:89:84:02:a8:00: e7:d6:2e:5a:0a:0b:64:f8:97:dc:19:c0:cf:99:45: f3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:07:55:D3:56:E5:04:A7:B5:C3:1E:4E:14:83:33:76:0E:17:74:9E X509v3 Authority Key Identifier: keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:db:0a:7d:b3:9f:93:10:27:8b:f5:60:f3:a4:01:94:eb: b5:58:0a:0f:71:31:2b:e2:ef:af:35:8e:4a:20:6e:d8:8d:be: da:93:c5:29:05:46:31:3f:21:c4:0e:e7:e6:44:0a:be:79:09: 97:46:f6:c1:a1:12:87:22:75:b0:1f:6a:d0:0d:39:2f:be:c3: 32:c9:32:75:29:3e:36:f8:58:2f:6e:03:9a:9e:1a:02:d8:41: 8b:1d:29:ee:d4:9f:a0:86:74:38:fc:3d:a4:ae:cd:6b:6c:4b: 2e:de:a0:ba:d0:d3:7b:d8:47:15:10:9e:e1:14:aa:d7:16:a6: b2:51:df:5c:03:7d:52:5e:1a:17:5b:7d:fe:41:df:02:65:78: 01:f1:07:a5:ad:8f:cf:b2:c6:09:f9:b9:f6:8a:2f:19:55:06: 6c:02:79:58:4f:f3:0f:6d:2f:75:7a:eb:09:f8:48:12:27:e8: 37:63:8b:10:88:d9:da:55:75:f8:15:40:37:27:a2:c3:12:59: f2:2d:91:12:46:71:6f:b1:94:a9:d4:8d:6e:4d:5f:63:68:bd: 53:8b:02:fb:e0:40:e3:29:40:6c:97:52:34:6a:30:14:2c:40: c7:3c:75:27:6a:3c:ab:1e:08:4d:37:ff:67:3d:a4:46:54:bd: 02:fe:6a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOLNw6eWR5YenMlvVWswjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1 NjdjZDMwHhcNMjUxMjIyMDQwMjA1WhcNMjUxMjIzMDQwMjA1WjAzMTEwLwYDVQQD Eyg3YjA3NTVkMzU2ZTUwNGE3YjVjMzFlNGUxNDgzMzM3NjBlMTc3NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY49rAz6AHB7YEOiTkuULB7O9HWZ uyTw2afFO/KHCMSSajN9MHMunnf1OjcGykM2dRNoYP0fTcP3vFMKVGEvwiEIiTMs CMeEGmoH5+7smhxytZbMkcgysRJYoKa9eUtwJP7hGM2ha2eEhH7krQcZCZYhGvOq jadQLw7DcjTMZ/jyrvouA4nnLUbhXJhk/329V8Ub6JuGn1FN/InAsG0WiF9oZsaR YgcxTO+kedUEm9zULR9E8BMgCl9tqJJ2VeKrP7ACl6uY+NSA/ou24YjQx9wK4vq2 0bSpjNIVXzwiKNS42W6c0tzs8UOdiYQCqADn1i5aCgtk+JfcGcDPmUXzIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsHVdNW5QSntcMeThSDM3YOF3SeMB8GA1UdIwQY MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt YjNlNDNkMzA1Yjg5LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5 LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWurbCn2z n5MQJ4v1YPOkAZTrtVgKD3ExK+LvrzWOSiBu2I2+2pPFKQVGMT8hxA7n5kQKvnkJ l0b2waEShyJ1sB9q0A05L77DMskydSk+NvhYL24Dmp4aAthBix0p7tSfoIZ0OPw9 pK7Na2xLLt6gutDTe9hHFRCe4RSq1xamslHfXAN9Ul4aF1t9/kHfAmV4AfEHpa2P z7LGCfm59oovGVUGbAJ5WE/zD20vdXrrCfhIEifoN2OLEIjZ2lV1+BVANyeiwxJZ 8i2REkZxb7GUqdSNbk1fY2i9U4sC++BA4ylAbJdSNGowFCxAxzx1J2o8qx4ITTf/ Zz2kRlS9Av5qjQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:21 2025 by rpki-client