This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json) Hash identifier: krUpQJQaFbzppFI71iza8siq5wR5ijnA+zlmXNmTyfE= Subject key identifier: F0:60:6F:E2:83:86:CF:72:2F:68:EF:8E:57:47:8E:77:CA:B1:5F:B1 Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f Certificate serial: 019AF276537C46E984A2B82EAE63CED577AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft Manifest number: 11ED Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=) 2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: ehOgkvck90YACWuHmt6llR9MWl6ZfUmXnVag/I4bc2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:53:7c:46:e9:84:a2:b8:2e:ae:63:ce:d5:77:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=f0606fe28386cf722f68ef8e57478e77cab15fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:e2:d5:77:46:c4:6c:c1:de:b9:e4:52:ba: 41:f7:85:0b:cd:7e:33:85:97:d8:d6:e3:31:e9:c7: 0a:e0:a7:da:e1:1b:ae:98:ad:8f:8f:45:b4:a9:55: 20:a7:ae:a4:d6:4e:26:96:3e:17:ae:75:01:1c:c2: 1d:0b:4f:f8:03:a9:7c:91:b7:e0:22:61:b8:4f:4e: a0:dc:95:8f:ba:47:ad:55:3e:d7:42:bf:6d:94:42: 94:e3:23:c1:cf:40:db:fe:e8:49:eb:ef:02:4a:9c: 26:9e:7a:db:b5:1c:02:47:ed:f3:97:91:6b:c2:6f: f0:ea:fc:2e:6c:c8:d1:90:12:ab:9c:a6:78:17:5e: e5:a4:c1:8a:c1:49:38:ca:58:20:65:2f:77:47:4e: c2:1c:9c:39:4a:95:18:03:bc:fb:7a:d6:86:b0:d7: 63:19:94:d8:86:89:af:54:b0:62:4d:d5:87:59:6c: a4:8a:5e:a4:68:cb:80:d1:ee:72:d7:59:d5:75:e2: 6e:e6:25:dc:75:f9:dc:f4:2d:3e:ac:6a:d8:4e:9d: 69:7e:49:e0:ff:e2:19:08:12:43:9f:4f:f3:b3:6b: 2e:c1:6b:5b:a7:63:bc:f9:16:83:0f:f9:a9:95:4f: 66:1e:5d:fb:a6:bd:b9:4f:a3:ef:73:6f:be:df:d8: b3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:60:6F:E2:83:86:CF:72:2F:68:EF:8E:57:47:8E:77:CA:B1:5F:B1 X509v3 Authority Key Identifier: keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:91:23:2d:3e:4b:0a:29:d7:a3:df:c0:44:cd:f5:76:66:24: 2b:2e:6d:ac:01:9c:cd:87:13:19:77:eb:9a:ce:67:37:89:4f: 7a:99:9e:d2:f9:99:be:9b:79:6e:90:fa:0a:7c:4b:8a:9d:bb: 04:9f:a1:b1:d3:4b:f5:47:03:0b:ab:52:82:47:24:ef:89:b0: df:1e:f3:37:06:a5:a5:f2:d5:62:90:92:e4:1a:21:49:61:95: 92:fa:f2:9c:e8:2d:fe:6e:3b:06:88:ee:30:6c:15:d8:4e:27: a8:af:27:ac:3c:98:fa:85:6c:d1:9e:ab:16:fc:49:3a:d9:b6: 58:4c:91:da:5c:00:b3:53:97:b3:8a:18:9c:cf:08:4e:79:8d: b1:c8:25:50:91:1c:4a:87:0c:96:e5:8a:95:de:b3:64:d6:bb: 61:4c:31:62:90:ad:5c:d6:7c:0b:6f:f1:e6:3e:56:a5:5e:18: cd:92:a8:8a:9e:81:44:21:19:b4:35:70:28:6b:e5:33:2e:1c: 9b:95:bb:17:6c:1e:9d:c2:2f:a4:8c:e8:9e:4a:0d:52:86:b4: dd:ea:89:6a:5b:7d:a8:fe:9f:0b:2d:1c:64:c9:c2:3f:cd:4a: fa:62:72:9d:4a:ed:c4:19:63:f4:bd:9b:f2:b4:89:ef:36:b8: e6:91:b4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlN8RumEorgurmPO1XeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmEwZGIwODMwMzM4ZDJkMjk2MWU0YzhmZmIwYWI1YTAz ZmZlNWYwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD EyhmMDYwNmZlMjgzODZjZjcyMmY2OGVmOGU1NzQ3OGU3N2NhYjE1ZmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCTi1XdGxGzB3rnkUrpB94ULzX4z hZfY1uMx6ccK4Kfa4RuumK2Pj0W0qVUgp66k1k4mlj4XrnUBHMIdC0/4A6l8kbfg ImG4T06g3JWPuketVT7XQr9tlEKU4yPBz0Db/uhJ6+8CSpwmnnrbtRwCR+3zl5Fr wm/w6vwubMjRkBKrnKZ4F17lpMGKwUk4ylggZS93R07CHJw5SpUYA7z7etaGsNdj GZTYhomvVLBiTdWHWWykil6kaMuA0e5y11nVdeJu5iXcdfnc9C0+rGrYTp1pfkng /+IZCBJDn0/zs2suwWtbp2O8+RaDD/mplU9mHl37pr25T6Pvc2++39izswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBgb+KDhs9yL2jvjldHjnfKsV+xMB8GA1UdIwQY MBaAFMdqDbCDAzjS0pYeTI/7CrWgP/5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEt NTIxN2RmMzY5MWFiLzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEtNTIxN2RmMzY5MWFi LzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZEjLT5L CinXo9/ARM31dmYkKy5trAGczYcTGXfrms5nN4lPepme0vmZvpt5bpD6CnxLip27 BJ+hsdNL9UcDC6tSgkck74mw3x7zNwalpfLVYpCS5BohSWGVkvrynOgt/m47Boju MGwV2E4nqK8nrDyY+oVs0Z6rFvxJOtm2WEyR2lwAs1OXs4oYnM8ITnmNscglUJEc SocMluWKld6zZNa7YUwxYpCtXNZ8C2/x5j5WpV4YzZKoip6BRCEZtDVwKGvlMy4c m5W7F2wencIvpIzonkoNUoa03eqJalt9qP6fCy0cZMnCP81K+mJynUrtxBlj9L2b 8rSJ7za45pG03Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:29 2025 by rpki-client