This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json) Hash identifier: tQ5yUvzPW2BEiv7WA4v66C5dBKibw/6viZog4chqr6g= Subject key identifier: 6D:CE:7C:43:E3:3F:EA:64:EF:F5:19:D9:7D:37:DC:16:10:23:9C:1C Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Certificate serial: 019AF49C7D7C6F14CFD3B9CF8CFB1F035FA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft Manifest number: CE Signing time: Sat 06 Dec 2025 17:01:27 +0000 Manifest this update: Sat 06 Dec 2025 17:01:27 +0000 Manifest next update: Sun 07 Dec 2025 17:01:27 +0000 Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: F1Ap8UgyAgWZqDnGZZOOWWqoghBBTjSQMe1h7tCIL1Y=) 2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:7d:7c:6f:14:cf:d3:b9:cf:8c:fb:1f:03:5f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Validity Not Before: Dec 6 17:01:27 2025 GMT Not After : Dec 7 17:01:27 2025 GMT Subject: CN=6dce7c43e33fea64eff519d97d37dc1610239c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:63:78:1c:40:37:e2:8e:05:17:a1:b5:2c: 04:9f:0f:dc:45:20:4b:51:72:2d:44:3d:f0:50:23: 5b:eb:ab:c8:7d:f5:0e:33:91:86:8d:47:23:dd:20: 52:06:b0:1b:e3:63:b5:d1:d1:f5:8f:69:7e:98:d1: 1a:44:63:5e:d8:5c:5f:e8:af:4e:47:a2:6f:9b:7a: 1e:a2:93:c6:79:84:87:ff:98:02:ff:f4:e8:cb:17: fa:e3:c5:7e:8d:7e:d2:45:2c:a2:21:f5:23:a9:f1: ba:8d:ff:52:50:27:f7:2d:3c:e2:05:7f:28:78:97: c1:0c:a2:43:e2:24:e4:7a:de:01:3c:4e:56:ae:71: 31:bc:f1:c2:01:c1:40:6a:85:5c:ab:9d:25:b8:fc: 1c:63:17:bb:ed:84:db:93:9e:7a:e2:4c:72:47:3e: 5b:8c:c8:58:07:a5:2b:b6:0b:cf:c6:8b:68:77:c7: 79:2c:77:ec:3b:7e:cf:83:18:74:5f:bb:11:4a:1f: c5:b6:14:5d:46:92:46:73:7d:f2:1c:c8:27:3b:d6: 5f:1b:c4:5e:2e:99:f2:f7:b2:d2:82:d2:0e:a8:ca: 84:2c:a8:cf:b7:47:fb:4a:52:74:41:ac:a9:14:5e: 32:02:30:a8:9f:1a:98:5d:2e:14:db:6b:84:f3:be: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:CE:7C:43:E3:3F:EA:64:EF:F5:19:D9:7D:37:DC:16:10:23:9C:1C X509v3 Authority Key Identifier: keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:85:8b:ca:c4:bb:57:ca:34:62:76:8d:f2:41:e8:a2:dc:b0: 5d:5e:d7:17:c1:da:cd:9d:35:7f:d7:af:2e:3c:2d:00:73:86: d4:34:ab:f6:a7:af:56:9b:f9:74:e9:ad:8f:65:1e:41:f9:23: 6c:a8:96:77:80:38:e5:70:36:32:1b:7a:59:a6:83:4a:8a:ee: c9:fb:2a:b2:c5:16:f0:4a:da:1e:9c:77:2b:2e:7e:3b:7c:05: 2a:b6:56:9e:74:99:36:0e:b2:e0:78:bc:4d:8c:1d:4e:01:f1: 0c:0e:b1:de:62:8f:4c:ce:ca:cf:03:1e:ad:6d:de:9e:f5:a6: 1a:95:f7:dd:da:93:59:bd:d4:23:fb:87:ae:ab:39:31:c4:89: b0:b7:e8:8a:06:24:40:5b:39:c9:6b:54:27:30:9d:a6:57:1f: bf:c1:37:2d:70:90:db:db:9f:f7:a4:64:83:96:aa:4e:06:f1: 37:d8:fc:b3:06:37:81:07:d6:9c:67:2c:70:fe:b0:2c:cf:95: 50:28:0a:c3:d8:12:5c:ce:80:4b:fb:65:95:0c:6a:2d:e2:53: 59:cf:0d:75:b1:bc:aa:74:c4:d5:27:3d:4b:d6:56:ca:fa:7f: af:c9:f6:51:32:48:35:23:3f:a2:2f:14:e1:8f:e0:b6:f8:94: 90:d7:d3:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nH18bxTP07nPjPsfA1+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNmI5MDAxOWQ0ZDJiNTJhYjRjYWY2NzFjMzdlOWM0ZDAz YWRhNzMwHhcNMjUxMjA2MTcwMTI3WhcNMjUxMjA3MTcwMTI3WjAzMTEwLwYDVQQD Eyg2ZGNlN2M0M2UzM2ZlYTY0ZWZmNTE5ZDk3ZDM3ZGMxNjEwMjM5YzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoBjeBxAN+KOBRehtSwEnw/cRSBL UXItRD3wUCNb66vIffUOM5GGjUcj3SBSBrAb42O10dH1j2l+mNEaRGNe2Fxf6K9O R6Jvm3oeopPGeYSH/5gC//Toyxf648V+jX7SRSyiIfUjqfG6jf9SUCf3LTziBX8o eJfBDKJD4iTket4BPE5WrnExvPHCAcFAaoVcq50luPwcYxe77YTbk5564kxyRz5b jMhYB6UrtgvPxotod8d5LHfsO37Pgxh0X7sRSh/FthRdRpJGc33yHMgnO9ZfG8Re Lpny97LSgtIOqMqELKjPt0f7SlJ0QaypFF4yAjConxqYXS4U22uE874qzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3OfEPjP+pk7/UZ2X033BYQI5wcMB8GA1UdIwQY MBaAFF9rkAGdTStSq0yvZxw36cTQOtpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEt N2NmMDMxZmE3NWNlLzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEtN2NmMDMxZmE3NWNl LzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4WLysS7 V8o0YnaN8kHootywXV7XF8HazZ01f9evLjwtAHOG1DSr9qevVpv5dOmtj2UeQfkj bKiWd4A45XA2Mht6WaaDSoruyfsqssUW8EraHpx3Ky5+O3wFKrZWnnSZNg6y4Hi8 TYwdTgHxDA6x3mKPTM7KzwMerW3envWmGpX33dqTWb3UI/uHrqs5McSJsLfoigYk QFs5yWtUJzCdplcfv8E3LXCQ29uf96Rkg5aqTgbxN9j8swY3gQfWnGcscP6wLM+V UCgKw9gSXM6AS/tllQxqLeJTWc8NdbG8qnTE1Sc9S9ZWyvp/r8n2UTJINSM/oi8U 4Y/gtviUkNfTBA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:53:53 2025 by rpki-client