This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft File: x6gkb3CuGOc25OU5gUgNWGFq8ug.mft (raw, json) Hash identifier: PC8Xu0+Hqlj36GHAOpezE+DPogCNZ5ltLHrNawQW/Mw= Subject key identifier: F2:E7:33:F9:56:D1:4D:16:A9:2D:30:47:57:E7:A8:C8:64:3F:7C:5F Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Certificate serial: 019AF12CFFDDD1A9A3A7E5F5D1CBE2A7A47E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft Manifest number: 111D Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: jtTgOvbCDl5pHHYwdtzWehbpOW4.roa (hash: JDaZtuKzg04dO4qGDBxTTkPz4qMFiZdAuP8puNSxSpM=) 2: x6gkb3CuGOc25OU5gUgNWGFq8ug.crl (hash: 72DO4kaX9BVVn5M6nkUqU7kU/8GbQKRM00fWe6rEn4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ff:dd:d1:a9:a3:a7:e5:f5:d1:cb:e2:a7:a4:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=f2e733f956d14d16a92d304757e7a8c8643f7c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:c6:dc:e7:e6:2c:21:75:50:f7:33:46:d8: 7d:9c:78:62:f2:6b:bb:f3:ad:44:d3:80:e3:e2:ca: 79:11:51:e7:8b:12:27:8d:09:be:fb:e2:73:d3:83: da:9f:d2:ef:69:b0:78:23:4a:13:d1:53:45:31:4b: 8b:16:a8:12:b4:e1:fb:85:eb:ee:4a:70:55:32:9d: d5:72:c8:0e:e1:25:a6:ab:f5:5e:b7:e4:73:23:cd: 8f:66:cd:ce:a7:56:16:e2:16:8e:c1:1f:2b:34:40: ea:f1:96:2e:6a:02:f7:51:11:f8:57:65:32:7b:1d: d3:b9:3d:ec:9a:d7:94:1a:70:07:9a:4f:11:ee:2c: 5a:41:a9:b1:47:ed:7d:e7:0d:8f:ac:ea:c8:a7:eb: 39:d1:6c:64:cd:57:eb:76:23:b4:3d:f4:32:dc:92: 2f:df:0f:89:6d:96:00:b2:d3:fd:1b:3c:d3:89:09: 68:02:a3:99:d4:78:a4:fb:99:e4:5f:61:a9:52:1c: 08:a0:e8:9c:7c:e1:0e:aa:59:e8:b8:b7:3b:ff:00: a0:d1:d2:17:cc:6e:19:7b:d2:ce:ae:6d:b6:f1:15: 68:10:e1:f5:35:93:30:ed:f6:57:1f:36:b3:71:a9: 1f:7f:28:cc:ae:72:9a:be:31:5a:eb:9a:92:aa:82: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E7:33:F9:56:D1:4D:16:A9:2D:30:47:57:E7:A8:C8:64:3F:7C:5F X509v3 Authority Key Identifier: keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:78:c1:73:b7:8a:d2:9a:c2:e9:df:c0:71:c9:e0:b5:be:d1: b2:3f:21:d7:4b:5b:11:cc:df:b7:65:47:53:6c:53:6c:f7:3f: 18:59:fa:aa:77:d2:78:da:b8:fc:46:e3:98:79:2e:cb:22:4d: 65:ce:41:16:30:c7:60:12:4f:ed:b1:02:e4:ef:dc:f5:9c:af: 2c:bb:54:15:0b:20:af:fa:6b:72:8f:6d:f9:44:91:36:65:df: a2:fb:f6:87:e0:fd:07:d0:82:38:02:85:e5:81:67:13:7b:e4: 1d:6d:b9:87:4f:17:9e:8a:7d:03:d3:90:9a:fa:ab:b2:de:57: 41:17:f9:74:d9:65:00:65:e0:43:17:3d:27:9a:26:47:63:44: 2b:36:1b:cc:b8:ad:7b:f3:cb:86:73:d2:6a:e4:e6:98:a5:9c: 7e:dd:41:1c:88:79:0b:f9:ae:9d:de:e9:4b:cb:3c:4e:d8:dc: 3d:ea:78:03:00:a7:c3:b4:ae:e6:80:79:a2:3d:4e:56:4f:86: 80:c2:3a:9c:b4:a2:c7:0c:47:7f:77:fe:6e:3a:1d:65:9b:60: 1b:92:f3:6b:12:0d:d9:3b:73:36:65:06:79:76:87:f8:0d:8b: b9:f2:6d:1f:e7:49:02:3c:80:63:96:5b:e6:cd:c4:a9:aa:68: 8e:aa:11:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP/d0amjp+X10cvip6R+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2 YWYyZTgwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhmMmU3MzNmOTU2ZDE0ZDE2YTkyZDMwNDc1N2U3YThjODY0M2Y3YzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RrG3OfmLCF1UPczRth9nHhi8mu7 861E04Dj4sp5EVHnixInjQm+++Jz04Pan9LvabB4I0oT0VNFMUuLFqgStOH7hevu SnBVMp3VcsgO4SWmq/Vet+RzI82PZs3Op1YW4haOwR8rNEDq8ZYuagL3URH4V2Uy ex3TuT3smteUGnAHmk8R7ixaQamxR+195w2PrOrIp+s50WxkzVfrdiO0PfQy3JIv 3w+JbZYAstP9GzzTiQloAqOZ1Hik+5nkX2GpUhwIoOicfOEOqlnouLc7/wCg0dIX zG4Ze9LOrm228RVoEOH1NZMw7fZXHzazcakffyjMrnKavjFa65qSqoLGJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLnM/lW0U0WqS0wR1fnqMhkP3xfMB8GA1UdIwQY MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt ZTNkMjg2ZDIwZTUyLzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXjBc7eK 0prC6d/Accngtb7Rsj8h10tbEczft2VHU2xTbPc/GFn6qnfSeNq4/EbjmHkuyyJN Zc5BFjDHYBJP7bEC5O/c9ZyvLLtUFQsgr/prco9t+USRNmXfovv2h+D9B9CCOAKF 5YFnE3vkHW25h08Xnop9A9OQmvqrst5XQRf5dNllAGXgQxc9J5omR2NEKzYbzLit e/PLhnPSauTmmKWcft1BHIh5C/mund7pS8s8TtjcPep4AwCnw7Su5oB5oj1OVk+G gMI6nLSixwxHf3f+bjodZZtgG5LzaxIN2TtzNmUGeXaH+A2LufJtH+dJAjyAY5Zb 5s3EqapojqoRUA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:53 2025 by rpki-client