This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft File: x5d6en0rE11ac3kcp889mtpYj2s.mft (raw, json) Hash identifier: nuJK3OFxq7m6iNB6j9k/nUu97SO4oy0jfAMnQsjcbWI= Subject key identifier: 02:A9:49:13:CC:DF:E9:3D:6A:5F:3F:28:73:F5:2C:AF:86:B0:02:1E Authority key identifier: C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B Certificate issuer: /CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b Certificate serial: 019B2B5430EB02873BF814E20EF5A2AC3CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 08:01:36 +0000 Manifest this update: Wed 17 Dec 2025 08:01:36 +0000 Manifest next update: Thu 18 Dec 2025 08:01:36 +0000 Files and hashes: 1: x5d6en0rE11ac3kcp889mtpYj2s.crl (hash: Hnx3+PgUJOZ6XTU57/lU2Xcwj/MhhXQUJeQDQcQ+Xv0=) 2: yrgIBtaF_Rl3-KfRiLgUYar-yd0.roa (hash: T90C90e5Of8IaOpnooa9JcWxTvLM03hzqcILUaCvjno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:30:eb:02:87:3b:f8:14:e2:0e:f5:a2:ac:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7977a7a7d2b135d5a73791ca7cf3d9ada588f6b Validity Not Before: Dec 17 08:01:36 2025 GMT Not After : Dec 18 08:01:36 2025 GMT Subject: CN=02a94913ccdfe93d6a5f3f2873f52caf86b0021e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:f2:46:4a:bd:0f:4c:71:db:f3:ca:c5:ec: 00:e7:74:9b:a5:d6:21:1b:cc:aa:1b:69:af:0e:d8: 7b:e2:48:23:fb:35:2c:c3:40:52:56:e4:dd:f9:ce: 14:45:98:42:58:9f:69:da:de:b1:48:f5:74:39:78: a7:32:4d:18:ee:a1:2f:e6:98:d8:d2:43:9d:6a:4c: e1:ea:04:86:00:ce:c1:e6:30:f0:e9:14:af:4d:dd: c7:d6:2d:e3:4f:cc:22:9d:3f:e0:59:a9:e7:d6:b3: 8c:50:43:6d:ac:89:ee:b9:09:ac:66:be:ed:e2:19: 1c:29:08:86:c9:ee:c6:c8:e4:d7:ad:54:94:f5:21: 6a:c8:3f:9b:29:ac:82:6e:84:31:09:39:df:fc:5d: a0:6d:a2:09:25:78:9b:48:55:67:af:1e:ac:d2:72: ec:d2:b4:d1:b3:33:78:ad:bc:46:63:c4:b7:4d:d0: 5b:72:f3:82:65:1d:f3:8c:81:95:6a:49:a9:cf:72: 55:99:8e:d1:c0:8f:41:c4:46:27:b3:f1:7c:da:83: 37:88:ac:bf:e4:63:df:aa:2c:90:b7:a3:6d:c5:b5: 38:a4:9a:6b:1b:dd:3f:19:42:e2:6a:e8:91:b8:74: 9c:42:0a:8c:fa:3b:a0:28:a1:fe:02:d5:00:f2:ac: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:49:13:CC:DF:E9:3D:6A:5F:3F:28:73:F5:2C:AF:86:B0:02:1E X509v3 Authority Key Identifier: keyid:C7:97:7A:7A:7D:2B:13:5D:5A:73:79:1C:A7:CF:3D:9A:DA:58:8F:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5d6en0rE11ac3kcp889mtpYj2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9668b6-3073-4c7b-a15d-4a9cce60bdb8/1/x5d6en0rE11ac3kcp889mtpYj2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:04:61:db:cc:5f:ab:25:29:89:8f:ec:cc:a3:2a:f8:a8:93: 6c:12:bb:90:43:80:22:76:6c:4e:b5:0f:b8:52:c0:fa:f9:db: 7e:85:98:42:06:d5:d4:98:d1:54:9f:3b:93:26:c2:cc:49:f3: 7c:65:cc:3b:75:26:5f:22:3e:7f:d8:02:84:aa:f7:2a:ac:8d: 6e:22:e4:e4:61:1b:3a:c7:17:f6:c0:0e:14:7c:95:b7:62:fe: 4f:3a:13:fa:09:46:3c:c9:45:68:0e:38:09:eb:96:f7:8a:55: c3:40:c9:b9:e0:e5:6c:11:bb:6b:8f:b3:6d:ca:a9:26:a3:5f: c6:a8:c5:0d:ca:87:5d:c2:4f:c7:19:2b:d8:1f:fe:5e:70:5b: d8:ba:7c:9b:6a:ca:02:ec:c8:51:ed:00:a0:10:27:5f:c6:63: e3:db:e7:64:56:40:f8:ea:ba:74:30:09:ee:41:06:fe:85:4d: ad:a2:ac:13:6b:8d:3c:d0:63:89:74:f3:6f:ea:9f:11:96:7d: 53:33:42:4f:4f:44:06:89:42:a5:8e:41:17:30:c0:db:15:78: 39:b1:ff:0c:26:b9:af:52:da:8c:e5:cc:c0:73:64:cb:fb:f0: 45:7f:59:84:d3:9f:21:0f:08:eb:91:2d:ca:38:ce:bc:ad:54: d6:53:f8:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVDDrAoc7+BTiDvWirDzgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTc3YTdhN2QyYjEzNWQ1YTczNzkxY2E3Y2YzZDlhZGE1 ODhmNmIwHhcNMjUxMjE3MDgwMTM2WhcNMjUxMjE4MDgwMTM2WjAzMTEwLwYDVQQD EygwMmE5NDkxM2NjZGZlOTNkNmE1ZjNmMjg3M2Y1MmNhZjg2YjAwMjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZryRkq9D0xx2/PKxewA53SbpdYh G8yqG2mvDth74kgj+zUsw0BSVuTd+c4URZhCWJ9p2t6xSPV0OXinMk0Y7qEv5pjY 0kOdakzh6gSGAM7B5jDw6RSvTd3H1i3jT8winT/gWann1rOMUENtrInuuQmsZr7t 4hkcKQiGye7GyOTXrVSU9SFqyD+bKayCboQxCTnf/F2gbaIJJXibSFVnrx6s0nLs 0rTRszN4rbxGY8S3TdBbcvOCZR3zjIGVakmpz3JVmY7RwI9BxEYns/F82oM3iKy/ 5GPfqiyQt6NtxbU4pJprG90/GULiauiRuHScQgqM+jugKKH+AtUA8qzp7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKpSRPM3+k9al8/KHP1LK+GsAIeMB8GA1UdIwQY MBaAFMeXenp9KxNdWnN5HKfPPZraWI9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQt NGE5Y2NlNjBiZGI4LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NjY4YjYtMzA3My00YzdiLWExNWQtNGE5Y2NlNjBiZGI4 LzEveDVkNmVuMHJFMTFhYzNrY3A4ODltdHBZajJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQRh28xf qyUpiY/szKMq+KiTbBK7kEOAInZsTrUPuFLA+vnbfoWYQgbV1JjRVJ87kybCzEnz fGXMO3UmXyI+f9gChKr3KqyNbiLk5GEbOscX9sAOFHyVt2L+TzoT+glGPMlFaA44 CeuW94pVw0DJueDlbBG7a4+zbcqpJqNfxqjFDcqHXcJPxxkr2B/+XnBb2Lp8m2rK AuzIUe0AoBAnX8Zj49vnZFZA+Oq6dDAJ7kEG/oVNraKsE2uNPNBjiXTzb+qfEZZ9 UzNCT09EBolCpY5BFzDA2xV4ObH/DCa5r1LajOXMwHNky/vwRX9ZhNOfIQ8I65Et yjjOvK1U1lP4rQ== -----END CERTIFICATE-----Generated at Wed Dec 17 18:32:06 2025 by rpki-client