This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json) Hash identifier: vEV/XxxvFENL3ljGfP0OruwE0Kky+wj/7UHy6HE2/ZE= Subject key identifier: 3D:DF:B6:5D:42:19:74:7B:7F:C3:24:A8:82:5B:B4:67:AA:0F:DB:91 Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Certificate serial: 019AF841D6B56E6E647336EBEC4DB2E280E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft Manifest number: 1179 Signing time: Sun 07 Dec 2025 10:00:55 +0000 Manifest this update: Sun 07 Dec 2025 10:00:55 +0000 Manifest next update: Mon 08 Dec 2025 10:00:55 +0000 Files and hashes: 1: PnVATVHozDfPNeX2JOaIkRbv6D8.roa (hash: 4Aq3QEbr9dXg3c82vnEqBRKtSSDl04fMwo+ZjR3NIuA=) 2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: 1RcJNOrPQdY5KSe8b2bFT0hMH57QGi0bhx5LhEkhJZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:41:d6:b5:6e:6e:64:73:36:eb:ec:4d:b2:e2:80:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Validity Not Before: Dec 7 10:00:55 2025 GMT Not After : Dec 8 10:00:55 2025 GMT Subject: CN=3ddfb65d4219747b7fc324a8825bb467aa0fdb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:e2:b7:6f:17:66:b9:59:34:25:57:fb:ce: 97:fc:ac:92:ce:17:8d:3a:51:c8:9a:88:54:36:47: 4b:bf:ae:ba:1a:09:27:1a:b5:17:bc:80:59:16:f5: 3a:07:d4:15:61:36:0b:ac:97:f6:99:7a:11:74:c3: 6b:91:63:25:1e:e3:0a:7f:b6:0a:3a:c6:b1:a5:50: 13:df:fa:6f:50:5e:d9:c5:96:9d:7e:d6:40:2d:29: c9:09:8a:2a:ca:28:cb:aa:79:2f:39:86:d9:c5:15: 88:0a:55:2a:cb:bb:6f:f7:b3:06:c6:a7:fd:76:2b: 5f:2f:cc:85:67:e1:c6:31:d5:72:08:8e:7d:de:09: 41:f7:bc:56:83:b6:05:b4:b8:ce:6e:b0:0f:c7:45: 63:a5:5c:5a:e0:a3:7f:2d:ac:5a:6c:e8:0e:15:30: 1f:8f:0c:7c:6e:d7:f4:c0:80:d5:ff:cb:34:43:f5: 20:2c:3e:9f:a2:56:f7:03:63:a8:01:f5:6b:65:3e: 77:38:88:6a:60:a2:2f:f2:08:ea:39:a7:55:fb:cb: 3e:40:b3:31:71:4b:b5:5e:54:7e:e2:f1:9b:7c:9b: f8:96:55:d2:f8:7f:4e:f6:0c:4c:ce:2a:b1:70:17: d1:f4:ba:15:91:3f:72:ec:22:52:f0:b5:73:2b:ad: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DF:B6:5D:42:19:74:7B:7F:C3:24:A8:82:5B:B4:67:AA:0F:DB:91 X509v3 Authority Key Identifier: keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:25:5f:b3:11:7a:df:7c:03:66:93:ab:17:c7:13:8e:64:d5: b5:3a:e4:49:b0:eb:fd:3a:0c:59:cc:65:36:aa:5b:4f:06:d6: d2:61:83:8b:0b:9b:2d:9a:4d:0b:2c:f1:dc:ec:66:10:0c:51: 42:1c:41:f3:f5:99:40:29:60:b4:59:ca:00:30:bc:57:fe:c0: d4:14:20:19:3c:21:36:0d:aa:7d:75:f3:9e:d4:ab:6d:eb:ea: 23:82:ae:19:6b:92:b8:04:8f:96:2a:92:c5:8b:12:dc:0b:7b: ba:54:5b:a0:d2:3c:0c:3c:8b:bd:06:59:3f:4e:11:9a:d1:0a: e8:00:32:59:a2:fe:1b:1b:37:f2:39:2a:cc:39:98:b2:c8:ae: 61:f6:a8:5a:51:3f:8b:6e:1a:ae:77:04:19:a8:e6:a0:9a:e3: 57:15:34:5f:cb:3b:d0:0b:7d:8d:aa:ca:07:7e:1c:36:ef:5e: f7:d5:97:c4:40:3f:bf:17:f8:2f:b0:bb:ad:18:07:16:13:2a: 8c:68:79:f4:5c:1f:ed:43:01:18:12:6f:a6:d5:59:c9:58:df: 48:35:cc:b3:67:64:58:f6:26:96:15:38:a7:74:f0:7b:61:c1: 40:53:e3:b8:34:3e:44:88:d1:13:dd:49:0b:81:e1:8c:c8:48: d0:95:6e:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Qda1bm5kczbr7E2y4oDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm NzJkOTMwHhcNMjUxMjA3MTAwMDU1WhcNMjUxMjA4MTAwMDU1WjAzMTEwLwYDVQQD EygzZGRmYjY1ZDQyMTk3NDdiN2ZjMzI0YTg4MjViYjQ2N2FhMGZkYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshzit28XZrlZNCVX+86X/KySzheN OlHImohUNkdLv666GgknGrUXvIBZFvU6B9QVYTYLrJf2mXoRdMNrkWMlHuMKf7YK OsaxpVAT3/pvUF7ZxZadftZALSnJCYoqyijLqnkvOYbZxRWIClUqy7tv97MGxqf9 ditfL8yFZ+HGMdVyCI593glB97xWg7YFtLjObrAPx0VjpVxa4KN/LaxabOgOFTAf jwx8btf0wIDV/8s0Q/UgLD6folb3A2OoAfVrZT53OIhqYKIv8gjqOadV+8s+QLMx cUu1XlR+4vGbfJv4llXS+H9O9gxMziqxcBfR9LoVkT9y7CJS8LVzK60wIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3ftl1CGXR7f8MkqIJbtGeqD9uRMB8GA1UdIwQY MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByVfsxF6 33wDZpOrF8cTjmTVtTrkSbDr/ToMWcxlNqpbTwbW0mGDiwubLZpNCyzx3OxmEAxR QhxB8/WZQClgtFnKADC8V/7A1BQgGTwhNg2qfXXzntSrbevqI4KuGWuSuASPliqS xYsS3At7ulRboNI8DDyLvQZZP04RmtEK6AAyWaL+Gxs38jkqzDmYssiuYfaoWlE/ i24arncEGajmoJrjVxU0X8s70At9jarKB34cNu9e99WXxEA/vxf4L7C7rRgHFhMq jGh59Fwf7UMBGBJvptVZyVjfSDXMs2dkWPYmlhU4p3Twe2HBQFPjuDQ+RIjRE91J C4HhjMhI0JVuSw== -----END CERTIFICATE-----Generated at Sun Dec 7 13:26:55 2025 by rpki-client