This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json) Hash identifier: Waiv3J7+lhlYej0riK0t51XAGOp2kF9mCAzywsgiBYw= Subject key identifier: 61:6D:AA:7F:9B:7F:1C:D9:49:B8:6B:5A:72:71:49:E0:F4:AC:FE:28 Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Certificate serial: 019B7C01C3852EE437A36FB97E6B67D9FFAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft Manifest number: 17A9 Signing time: Fri 02 Jan 2026 00:00:48 +0000 Manifest this update: Fri 02 Jan 2026 00:00:48 +0000 Manifest next update: Sat 03 Jan 2026 00:00:48 +0000 Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=) 2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: oW7V7qE49imvYyRx8pd6gnugFo5ltk33s+6DN2uxjv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 00:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:01:c3:85:2e:e4:37:a3:6f:b9:7e:6b:67:d9:ff:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Validity Not Before: Jan 2 00:00:48 2026 GMT Not After : Jan 3 00:00:48 2026 GMT Subject: CN=616daa7f9b7f1cd949b86b5a727149e0f4acfe28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:4d:f8:67:d8:58:b1:ec:53:5f:8e:68:ab: 57:10:68:c8:71:ea:03:46:f6:5f:fc:56:81:12:d9: 5a:8f:11:b3:48:df:f2:2b:b9:50:f3:94:e3:5a:bf: 6c:ce:f2:7e:6f:89:fc:b2:f2:f3:01:ab:f1:be:d3: f3:02:9b:59:5d:1b:df:9e:6f:74:44:cd:34:ae:c9: 06:75:09:54:94:fd:d1:7b:8f:6e:f0:05:92:70:2f: 14:60:8e:61:3b:63:e6:88:cb:74:7f:70:fd:2a:65: 86:1d:05:18:a9:db:bc:36:18:b4:be:bf:62:63:90: 09:e6:c5:78:74:07:e3:c3:54:a2:f5:f3:fe:41:46: 4d:43:75:aa:34:9c:b2:19:5c:3a:29:da:bb:2e:89: cc:b3:9a:93:de:eb:3c:fd:30:0e:11:86:6f:2c:aa: d6:8e:c0:4f:00:b4:6f:35:54:5e:35:95:15:9f:fd: a7:cb:7b:bf:7e:de:5d:c9:d1:f3:c0:53:d9:9e:80: c2:73:af:44:93:b7:f4:fb:1f:43:dd:8b:d9:cf:a0: 65:c4:a3:88:88:da:99:8e:90:5a:5b:5e:5d:0e:cf: 3b:1d:10:27:f9:77:e2:a1:8b:18:47:16:2d:6e:7c: ce:72:7d:56:a9:7a:34:92:b8:8c:36:27:8c:4c:67: ee:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:6D:AA:7F:9B:7F:1C:D9:49:B8:6B:5A:72:71:49:E0:F4:AC:FE:28 X509v3 Authority Key Identifier: keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:9a:f8:9d:72:c2:3c:2a:54:8c:85:9a:c8:36:70:ee:eb:ce: 5c:4f:48:26:a2:fa:b3:06:2e:7b:6a:93:73:1c:88:28:11:95: d7:ce:21:45:d5:98:dd:09:4e:73:b8:51:9a:82:53:69:6a:a0: e2:d7:3c:2a:c3:38:1a:12:f6:97:c3:0d:b0:78:15:22:34:a8: ab:3d:00:de:28:89:c8:a4:b8:db:71:b3:80:57:6f:2b:1a:2d: b1:dd:f1:de:22:3c:cc:c6:84:ca:5b:a7:b4:b5:9e:bb:ce:73: 95:eb:38:24:2c:95:16:e2:63:8f:b5:6f:52:5b:c1:c4:a7:df: 78:4f:e3:dd:dd:f0:31:24:ce:c0:e7:b8:02:d7:96:01:9f:f8: c5:e3:92:d2:6e:e1:d7:8a:9a:f2:65:8c:d2:a4:a8:74:38:1a: 84:ea:68:26:24:00:53:db:5b:0a:a5:89:8f:51:47:23:eb:e9: df:00:5a:1c:ae:a7:2f:7a:c5:f3:c9:ff:9a:00:71:02:b8:52: f9:15:5a:bb:7b:6d:71:cf:f3:0c:a9:d9:bc:83:d3:c1:37:07: 88:10:28:eb:5c:ff:cc:64:19:32:d3:6a:5e:28:92:01:8e:14: aa:00:cc:be:da:3b:4f:82:e7:2b:d7:a2:81:f7:28:c6:48:f2: f0:f4:5e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8AcOFLuQ3o2+5fmtn2f+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0 YTZiMDQwHhcNMjYwMTAyMDAwMDQ4WhcNMjYwMTAzMDAwMDQ4WjAzMTEwLwYDVQQD Eyg2MTZkYWE3ZjliN2YxY2Q5NDliODZiNWE3MjcxNDllMGY0YWNmZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xN+GfYWLHsU1+OaKtXEGjIceoD RvZf/FaBEtlajxGzSN/yK7lQ85TjWr9szvJ+b4n8svLzAavxvtPzAptZXRvfnm90 RM00rskGdQlUlP3Re49u8AWScC8UYI5hO2PmiMt0f3D9KmWGHQUYqdu8Nhi0vr9i Y5AJ5sV4dAfjw1Si9fP+QUZNQ3WqNJyyGVw6Kdq7LonMs5qT3us8/TAOEYZvLKrW jsBPALRvNVReNZUVn/2ny3u/ft5dydHzwFPZnoDCc69Ek7f0+x9D3YvZz6BlxKOI iNqZjpBaW15dDs87HRAn+XfioYsYRxYtbnzOcn1WqXo0kriMNieMTGfujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFtqn+bfxzZSbhrWnJxSeD0rP4oMB8GA1UdIwQY MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKJr4nXLC PCpUjIWayDZw7uvOXE9IJqL6swYue2qTcxyIKBGV184hRdWY3QlOc7hRmoJTaWqg 4tc8KsM4GhL2l8MNsHgVIjSoqz0A3iiJyKS423GzgFdvKxotsd3x3iI8zMaEylun tLWeu85zles4JCyVFuJjj7VvUlvBxKffeE/j3d3wMSTOwOe4AteWAZ/4xeOS0m7h 14qa8mWM0qSodDgahOpoJiQAU9tbCqWJj1FHI+vp3wBaHK6nL3rF88n/mgBxArhS +RVau3ttcc/zDKnZvIPTwTcHiBAo61z/zGQZMtNqXiiSAY4UqgDMvto7T4LnK9ei gfcoxkjy8PReZw== -----END CERTIFICATE-----Generated at Fri Jan 2 09:51:15 2026 by rpki-client