This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft File: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft (raw, json) Hash identifier: TuTB2UwE7c76OrVfAAoDmVsiEQKRaqMWMbpfR7ctUNM= Subject key identifier: 91:55:BF:EA:A9:75:E6:1E:A9:DD:AC:C8:C4:E4:56:94:66:E8:C5:9E Authority key identifier: 5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B Certificate issuer: /CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b Certificate serial: 019AF12E2013BF46E27764072145B4F0A808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft Manifest number: 123A Signing time: Sat 06 Dec 2025 01:02:03 +0000 Manifest this update: Sat 06 Dec 2025 01:02:03 +0000 Manifest next update: Sun 07 Dec 2025 01:02:03 +0000 Files and hashes: 1: X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl (hash: Y8C9WTeDuJt1kiB/9kL0UJ238coXhEA/abWbNzhtNYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:20:13:bf:46:e2:77:64:07:21:45:b4:f0:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa625dc398cb700f72fa8ea6f4313bf3335a53b Validity Not Before: Dec 6 01:02:03 2025 GMT Not After : Dec 7 01:02:03 2025 GMT Subject: CN=9155bfeaa975e61ea9ddacc8c4e4569466e8c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:4c:40:a9:01:b3:ff:b9:ca:58:e5:31:b0: 86:97:8e:c9:8a:a0:f1:34:8b:df:a0:96:87:d7:42: ca:ce:9c:3e:6c:2b:af:9a:cb:1a:4e:9e:e7:05:6c: 1f:f6:68:63:d5:f1:9e:b4:4c:88:ed:6e:56:4c:10: 57:4d:4b:12:bf:e7:58:6d:43:ea:13:ca:46:8f:a8: 0b:b0:05:9c:0b:5c:2b:58:61:0f:25:e3:73:7a:53: 33:73:7f:3f:2b:65:b2:a9:9b:20:e1:d1:df:41:7e: e1:54:ca:f1:44:dd:0c:79:1b:1a:63:d4:4a:16:80: 22:01:c0:f7:14:b6:08:35:ce:38:9e:6f:54:d8:de: c7:46:3b:4f:f2:64:a1:74:15:49:d2:7c:13:38:48: 74:2f:b0:18:e4:1d:b2:45:d9:45:45:99:bb:41:13: ea:d0:77:e3:f9:96:d1:a8:86:cd:0f:c3:66:4b:9d: 66:5d:30:51:92:4c:39:52:c8:8d:28:b6:7d:a7:2e: 15:50:2a:78:de:aa:99:63:df:53:8c:81:c1:d2:0a: 62:f6:8b:b4:2d:ce:98:34:1d:fb:c3:c9:b7:d6:a1: 59:12:06:68:85:6d:71:36:02:66:8c:33:3b:06:40: 69:a8:d0:ef:65:0f:66:fa:ff:88:41:c7:6f:f3:6b: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:BF:EA:A9:75:E6:1E:A9:DD:AC:C8:C4:E4:56:94:66:E8:C5:9E X509v3 Authority Key Identifier: keyid:5F:A6:25:DC:39:8C:B7:00:F7:2F:A8:EA:6F:43:13:BF:33:35:A5:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/17062a-96bd-493f-8b20-eac106300b0a/1/X6Yl3DmMtwD3L6jqb0MTvzM1pTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e9:46:42:12:87:86:95:5a:09:db:0c:86:cf:60:7a:4b:7b: 00:30:43:fe:b1:67:8e:8d:26:a9:24:e2:13:02:27:6a:44:0e: 40:9d:c4:c2:e0:14:6b:94:f7:9f:c2:44:1b:30:f2:8a:18:2b: 30:64:30:36:64:d0:b1:fe:a0:22:88:78:aa:26:f3:0f:fb:51: 36:65:1c:a4:cb:83:57:37:51:0a:b3:60:35:db:1a:33:67:5e: 1e:6a:42:d6:35:24:eb:ae:b2:e9:90:62:07:f4:d5:b2:99:19: 59:67:c9:52:e8:79:06:4f:20:87:10:59:78:6b:9b:3f:a8:45: f4:d5:a9:a7:87:ca:ca:fa:3b:d3:0d:21:70:a9:21:05:f9:45: 3b:ef:f0:e7:d6:14:76:1a:c4:ca:de:e3:15:94:3a:07:7c:68: 8a:e4:b5:be:06:2f:56:4c:1f:41:55:2b:48:13:46:07:81:3b: 89:92:26:15:2e:f0:f4:f3:60:9f:f3:86:a9:e9:ec:a4:43:f8: 9e:38:eb:d3:4c:8d:6a:57:b6:8d:17:77:39:5d:24:01:72:48: 24:8b:3e:88:88:de:a2:7c:22:21:e7:4f:e0:50:1b:a6:47:e1: e7:38:ac:cf:48:22:61:1d:03:99:af:69:f3:8f:6a:b4:f8:81: 76:46:b9:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiATv0bid2QHIUW08KgIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTYyNWRjMzk4Y2I3MDBmNzJmYThlYTZmNDMxM2JmMzMz NWE1M2IwHhcNMjUxMjA2MDEwMjAzWhcNMjUxMjA3MDEwMjAzWjAzMTEwLwYDVQQD Eyg5MTU1YmZlYWE5NzVlNjFlYTlkZGFjYzhjNGU0NTY5NDY2ZThjNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6JMQKkBs/+5yljlMbCGl47JiqDx NIvfoJaH10LKzpw+bCuvmssaTp7nBWwf9mhj1fGetEyI7W5WTBBXTUsSv+dYbUPq E8pGj6gLsAWcC1wrWGEPJeNzelMzc38/K2WyqZsg4dHfQX7hVMrxRN0MeRsaY9RK FoAiAcD3FLYINc44nm9U2N7HRjtP8mShdBVJ0nwTOEh0L7AY5B2yRdlFRZm7QRPq 0Hfj+ZbRqIbND8NmS51mXTBRkkw5UsiNKLZ9py4VUCp43qqZY99TjIHB0gpi9ou0 Lc6YNB37w8m31qFZEgZohW1xNgJmjDM7BkBpqNDvZQ9m+v+IQcdv82u6UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFVv+qpdeYeqd2syMTkVpRm6MWeMB8GA1UdIwQY MBaAFF+mJdw5jLcA9y+o6m9DE78zNaU7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAt ZWFjMTA2MzAwYjBhLzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8xNzA2MmEtOTZiZC00OTNmLThiMjAtZWFjMTA2MzAwYjBh LzEvWDZZbDNEbU10d0QzTDZqcWIwTVR2ek0xcFRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOlGQhKH hpVaCdsMhs9gekt7ADBD/rFnjo0mqSTiEwInakQOQJ3EwuAUa5T3n8JEGzDyihgr MGQwNmTQsf6gIoh4qibzD/tRNmUcpMuDVzdRCrNgNdsaM2deHmpC1jUk666y6ZBi B/TVspkZWWfJUuh5Bk8ghxBZeGubP6hF9NWpp4fKyvo70w0hcKkhBflFO+/w59YU dhrEyt7jFZQ6B3xoiuS1vgYvVkwfQVUrSBNGB4E7iZImFS7w9PNgn/OGqenspEP4 njjr00yNale2jRd3OV0kAXJIJIs+iIjeonwiIedP4FAbpkfh5zisz0giYR0Dma9p 849qtPiBdka5zA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:22 2025 by rpki-client