This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json) Hash identifier: 1v6dfK44oM8GjuJeFvjSnBIgk9LU450C7q6sda1vRkE= Subject key identifier: 92:F6:9E:95:64:3E:6D:D9:F0:3A:51:5D:EA:74:B1:B0:A5:98:EA:69 Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Certificate serial: 019AF31BB47669CB9F727BA42C6820FC1546 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft Manifest number: 1586 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=) 2: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: MxjrKqzRJdYC29KVEaHzs5yJcgzYPncgKVi8LFne49w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b4:76:69:cb:9f:72:7b:a4:2c:68:20:fc:15:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=92f69e95643e6dd9f03a515dea74b1b0a598ea69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:aa:3b:a5:57:40:f9:6a:fe:ad:5a:65:10:13: cf:44:b7:97:97:49:81:4e:b1:6c:af:80:20:ef:2f: 57:45:ae:25:73:2c:57:4e:c4:1e:41:d2:1a:73:42: 46:96:5a:97:93:62:76:69:14:6d:b1:65:76:f2:8f: 0a:38:c1:af:79:18:58:23:9e:e1:58:fb:37:42:23: b2:d6:01:1b:67:c4:43:40:2e:b2:df:86:4d:61:81: 6c:a2:69:31:e8:fb:f0:3c:8b:42:c8:59:df:a3:7d: 93:5e:2b:e2:fb:33:cf:8a:f2:68:1c:46:5e:6c:ad: 4b:36:e9:82:1e:ac:27:c5:74:a0:96:93:34:cc:44: 62:c2:c3:93:13:ad:de:43:f9:b5:1d:68:49:c8:6d: d6:13:56:af:d2:8e:3f:4c:6a:64:e9:dc:bd:76:a5: f4:b6:d6:22:06:fc:a8:03:75:66:bb:b9:33:d6:fc: 05:93:ee:5d:c1:e8:13:26:51:3d:f1:0d:bd:c5:88: bd:32:c9:ef:5d:c0:5b:0c:33:a0:df:c0:ae:5c:68: 21:af:cd:70:51:0c:fb:8d:ff:f1:52:61:0c:0b:73: d5:21:52:3e:4b:e6:38:e2:c8:c4:3e:ae:95:6a:6f: 23:5d:27:cb:0f:1c:9c:f9:ff:95:3d:11:4b:bc:26: 4e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:9E:95:64:3E:6D:D9:F0:3A:51:5D:EA:74:B1:B0:A5:98:EA:69 X509v3 Authority Key Identifier: keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:ac:88:0f:88:68:60:c1:34:26:3c:72:ce:99:7f:f4:16: 7a:16:b2:86:04:bb:0b:e3:7f:0d:ca:df:c6:db:dd:a9:f6:b1: d4:fa:19:b5:4e:10:fd:b3:fd:b8:39:11:ec:03:a5:a2:80:0b: 13:ac:cb:f9:a6:8d:20:4a:ed:ae:3e:e1:23:0a:03:e9:29:46: 9e:f8:28:26:7e:17:6f:9d:f5:2e:4d:54:56:5f:e6:76:50:15: 7a:e7:9b:22:70:16:f9:8f:fc:b2:9a:4d:dc:27:ba:a9:b8:f6: 3b:06:82:69:d7:af:4b:c6:f9:52:fc:7d:d5:f2:1c:bd:fe:2d: eb:f0:6d:da:71:ee:f8:e4:bd:38:1f:9f:75:81:ec:e5:aa:fa: 58:8f:b8:53:29:c8:d7:9a:70:57:9b:9d:1a:78:5d:15:9b:de: 79:63:11:ce:13:b7:cd:0a:b4:f3:69:62:ae:18:7e:68:bc:b4: f3:19:7d:1e:c6:f3:8d:75:b3:75:17:c1:fb:85:4f:e4:a1:47: 96:ed:fb:6c:f6:97:b7:bc:a1:3a:04:6e:99:c9:2d:e8:85:d5: 2c:34:b8:e0:06:01:96:ca:ee:c3:bf:6c:a6:f6:71:89:0a:a2: f1:b3:32:b4:f7:8c:c8:06:2f:52:70:3b:68:37:8c:5b:71:54: 01:9c:90:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7R2acufcnukLGgg/BVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx YjRkZGEwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD Eyg5MmY2OWU5NTY0M2U2ZGQ5ZjAzYTUxNWRlYTc0YjFiMGE1OThlYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtao7pVdA+Wr+rVplEBPPRLeXl0mB TrFsr4Ag7y9XRa4lcyxXTsQeQdIac0JGllqXk2J2aRRtsWV28o8KOMGveRhYI57h WPs3QiOy1gEbZ8RDQC6y34ZNYYFsomkx6PvwPItCyFnfo32TXivi+zPPivJoHEZe bK1LNumCHqwnxXSglpM0zERiwsOTE63eQ/m1HWhJyG3WE1av0o4/TGpk6dy9dqX0 ttYiBvyoA3Vmu7kz1vwFk+5dwegTJlE98Q29xYi9MsnvXcBbDDOg38CuXGghr81w UQz7jf/xUmEMC3PVIVI+S+Y44sjEPq6Vam8jXSfLDxyc+f+VPRFLvCZOzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL2npVkPm3Z8DpRXep0sbClmOppMB8GA1UdIwQY MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt N2U5ODM3YTkyMjhjLzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOWsiA+I aGDBNCY8cs6Zf/QWehayhgS7C+N/Dcrfxtvdqfax1PoZtU4Q/bP9uDkR7AOlooAL E6zL+aaNIErtrj7hIwoD6SlGnvgoJn4Xb531Lk1UVl/mdlAVeuebInAW+Y/8sppN 3Ce6qbj2OwaCadevS8b5Uvx91fIcvf4t6/Bt2nHu+OS9OB+fdYHs5ar6WI+4UynI 15pwV5udGnhdFZveeWMRzhO3zQq082lirhh+aLy08xl9HsbzjXWzdRfB+4VP5KFH lu37bPaXt7yhOgRumckt6IXVLDS44AYBlsruw79spvZxiQqi8bMytPeMyAYvUnA7 aDeMW3FUAZyQ8w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:43 2025 by rpki-client