This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft File: x2sILxfCC126JFzqbk5unGCZzvc.mft (raw, json) Hash identifier: JwA4e684uE/Nv/6TRn2AWwHQ9nxt7MyCOetMBqeOwwI= Subject key identifier: 1A:AA:6F:51:14:BD:8B:AE:70:0E:25:2B:14:6E:81:81:92:3E:7F:C9 Authority key identifier: C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7 Certificate issuer: /CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7 Certificate serial: 019AF208CCB522C146708A8D3C7370A72249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft Manifest number: 0A3E Signing time: Sat 06 Dec 2025 05:00:54 +0000 Manifest this update: Sat 06 Dec 2025 05:00:54 +0000 Manifest next update: Sun 07 Dec 2025 05:00:54 +0000 Files and hashes: 1: 3LcFCg7RM1aLPbE3Ib_6QCxrJwE.roa (hash: FJ26OKzgHHeltXGq/dly/S1GCLExUrR4LooVCROsPhY=) 2: x2sILxfCC126JFzqbk5unGCZzvc.crl (hash: Kp+2McYXy3XtYyoGehDfDQBY5Ha89eTYVhnNmSxFx0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:cc:b5:22:c1:46:70:8a:8d:3c:73:70:a7:22:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76b082f17c20b5dba245cea6e4e6e9c6099cef7 Validity Not Before: Dec 6 05:00:54 2025 GMT Not After : Dec 7 05:00:54 2025 GMT Subject: CN=1aaa6f5114bd8bae700e252b146e8181923e7fc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7c:96:73:92:b5:31:ff:4b:3b:91:7d:86:24: 43:70:99:18:3f:85:9c:0d:8a:bd:23:5a:59:1e:bf: 43:05:e5:21:b1:e2:ea:45:25:fd:f7:93:12:60:c5: 84:72:68:62:d2:38:59:46:3f:04:be:c3:b3:37:79: 74:98:27:57:ac:b6:d1:c2:0d:b2:82:7c:40:d2:e7: 00:01:ab:ef:e9:4b:a5:75:5a:0f:e7:79:49:86:66: fa:c0:5c:88:a9:e0:31:e0:ab:57:df:c5:ef:88:fe: 09:c3:ee:bd:b9:31:0b:1a:20:8e:d6:47:be:94:83: a8:b3:ca:61:26:20:a8:46:85:94:84:12:87:49:7d: c2:4e:03:0f:dc:f8:94:cb:0d:98:1d:24:28:9a:eb: a9:2b:8c:59:dc:ae:6c:05:6c:c0:ca:c8:2d:af:12: e4:f0:b1:7a:ec:00:21:a7:d7:06:1e:87:53:97:29: bc:e8:09:73:05:57:51:a9:47:57:a6:31:e6:62:f0: a5:48:fe:79:3a:8a:f3:7b:94:e3:32:0a:dd:38:55: 6b:4a:80:8b:9a:8c:6e:45:68:09:5e:b7:a8:cb:8b: fe:50:a8:f7:66:5b:ef:55:15:b6:ca:93:8a:3f:f8: 9a:9f:d8:58:ef:ff:01:89:e1:37:96:38:78:a7:f5: 31:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:6F:51:14:BD:8B:AE:70:0E:25:2B:14:6E:81:81:92:3E:7F:C9 X509v3 Authority Key Identifier: keyid:C7:6B:08:2F:17:C2:0B:5D:BA:24:5C:EA:6E:4E:6E:9C:60:99:CE:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2sILxfCC126JFzqbk5unGCZzvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d6ad96-5478-40f7-b1ac-6c72092c0f18/1/x2sILxfCC126JFzqbk5unGCZzvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e0:c1:95:84:bb:ce:d6:6c:7e:dd:4d:8b:64:8d:9b:ed:99: d0:40:9c:0a:46:4a:38:89:d2:c9:56:b1:27:ec:68:a2:a7:1a: 4e:1d:9d:6e:e5:6a:20:3b:d2:3a:49:db:94:f7:ca:4b:ad:6d: d4:f8:0a:80:d4:aa:b0:51:76:37:64:b1:e0:a5:83:37:bf:38: b2:9a:98:ff:a0:0d:f5:81:5f:1a:85:75:8b:89:d1:69:c7:e3: e1:e1:22:64:b7:cb:7e:06:39:39:a9:20:c2:fc:22:3f:ba:2d: 3f:ce:47:09:c7:2c:47:d0:2a:f5:3e:71:74:e0:9b:cd:8b:7d: 66:4c:56:63:4f:69:95:51:94:0a:55:a4:68:b0:33:73:25:b4: de:38:b1:c8:88:5b:ad:d6:62:ab:8d:7e:5a:60:ce:e1:8b:dd: 6c:24:ba:96:88:63:11:95:11:ff:44:6d:7c:31:3f:e3:d8:df: e5:11:4b:e3:39:f4:4b:6a:89:81:00:c3:21:24:28:f8:42:99: 40:23:17:3d:f2:d5:aa:3f:fc:6c:93:d4:38:76:75:c4:e4:60: d0:61:6c:61:6b:e6:cd:1c:7d:7b:fe:14:b4:6c:c2:76:75:3d: 98:39:89:10:53:4d:91:41:49:14:e7:ff:90:dd:ed:39:b3:85: da:67:f6:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMy1IsFGcIqNPHNwpyJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmIwODJmMTdjMjBiNWRiYTI0NWNlYTZlNGU2ZTljNjA5 OWNlZjcwHhcNMjUxMjA2MDUwMDU0WhcNMjUxMjA3MDUwMDU0WjAzMTEwLwYDVQQD EygxYWFhNmY1MTE0YmQ4YmFlNzAwZTI1MmIxNDZlODE4MTkyM2U3ZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nyWc5K1Mf9LO5F9hiRDcJkYP4Wc DYq9I1pZHr9DBeUhseLqRSX995MSYMWEcmhi0jhZRj8EvsOzN3l0mCdXrLbRwg2y gnxA0ucAAavv6UuldVoP53lJhmb6wFyIqeAx4KtX38XviP4Jw+69uTELGiCO1ke+ lIOos8phJiCoRoWUhBKHSX3CTgMP3PiUyw2YHSQomuupK4xZ3K5sBWzAysgtrxLk 8LF67AAhp9cGHodTlym86AlzBVdRqUdXpjHmYvClSP55Oorze5TjMgrdOFVrSoCL moxuRWgJXreoy4v+UKj3ZlvvVRW2ypOKP/ian9hY7/8BieE3ljh4p/UxKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqqb1EUvYuucA4lKxRugYGSPn/JMB8GA1UdIwQY MBaAFMdrCC8XwgtduiRc6m5Obpxgmc73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMt NmM3MjA5MmMwZjE4LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kNmFkOTYtNTQ3OC00MGY3LWIxYWMtNmM3MjA5MmMwZjE4 LzEveDJzSUx4ZkNDMTI2SkZ6cWJrNXVuR0NaenZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuDBlYS7 ztZsft1Ni2SNm+2Z0ECcCkZKOInSyVaxJ+xooqcaTh2dbuVqIDvSOknblPfKS61t 1PgKgNSqsFF2N2Sx4KWDN784spqY/6AN9YFfGoV1i4nRacfj4eEiZLfLfgY5Oakg wvwiP7otP85HCccsR9Aq9T5xdOCbzYt9ZkxWY09plVGUClWkaLAzcyW03jixyIhb rdZiq41+WmDO4YvdbCS6lohjEZUR/0RtfDE/49jf5RFL4zn0S2qJgQDDISQo+EKZ QCMXPfLVqj/8bJPUOHZ1xORg0GFsYWvmzRx9e/4UtGzCdnU9mDmJEFNNkUFJFOf/ kN3tObOF2mf2LA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:08 2025 by rpki-client