This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json) Hash identifier: rhxFbdnYOg0tKFujrUIzIpND57ZbIV0r4DB7jD27gkU= Subject key identifier: 41:61:61:89:51:41:C9:B5:92:7A:B2:51:02:26:72:03:A9:D9:BA:3D Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050 Certificate serial: 019AF12D43EAE16B0F559B0B3E87B8C71490 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft Manifest number: 07D6 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: HqDRIksWN36QXauqYoD2knIGjbc.roa (hash: 05DMa/ontaHtCWdbIzNxIFAgYET2ZoK4nwid3joHlm8=) 2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: MyKin6oJe38QgFEXb1qFUSvGMtuQiRidi2Hb/JK7Nu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:43:ea:e1:6b:0f:55:9b:0b:3e:87:b8:c7:14:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=416161895141c9b5927ab25102267203a9d9ba3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:91:99:91:58:37:30:b2:51:50:99:eb:16:96: 22:8e:84:82:38:c1:d4:80:70:9a:67:c2:9b:fc:f5: d7:18:29:56:bb:74:f8:36:ed:97:94:a9:3f:e8:ea: 6f:2c:ff:f5:ed:6a:64:28:1f:56:f5:0b:eb:31:88: 32:30:b7:00:e8:85:ff:c7:81:bf:54:de:96:69:ea: 5a:5e:67:bb:3c:d9:3e:60:80:5b:66:1a:da:b6:ac: 42:a6:f5:e0:48:72:f9:a0:c0:76:f1:20:83:32:e2: e4:da:be:07:aa:c1:a1:4f:a3:06:06:1e:18:1a:1d: 8e:89:ac:aa:76:0e:e9:5a:d8:30:73:1c:85:30:f7: 55:cd:85:52:1d:fe:be:1a:38:10:25:eb:9f:8f:d2: 4f:3f:4d:59:d9:9f:ea:a3:25:9b:fe:b0:6a:1b:55: 24:d0:91:64:1c:0e:4d:f2:69:c5:66:94:b9:95:49: b7:3c:20:4b:8f:b6:ba:99:5d:15:e7:06:e7:ab:28: c8:dd:f0:7d:42:42:97:1a:01:d0:5c:d5:51:89:73: d6:d2:f0:0d:85:3f:a7:c4:ae:2d:8f:2b:1c:7a:da: 7f:67:fb:d7:18:6d:23:b4:86:e3:47:e3:09:8c:d3: 18:4e:7f:b6:7e:e8:5f:9e:a8:b9:6d:b2:5c:25:fb: d2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:61:89:51:41:C9:B5:92:7A:B2:51:02:26:72:03:A9:D9:BA:3D X509v3 Authority Key Identifier: keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:5b:1f:56:30:90:2c:27:8e:0b:0f:c1:ae:c3:ee:dc:90:3d: aa:01:49:ba:8c:ee:82:4f:1c:10:2e:46:c0:78:fa:cf:d6:5f: c2:8c:71:e9:a6:8d:12:15:25:6b:59:7e:58:02:bf:f1:76:4f: 12:3b:7c:22:f6:f9:40:71:29:71:16:dc:3e:62:f5:06:c2:ae: f8:27:21:12:37:ee:21:c9:2e:2f:26:28:f9:55:d7:89:1f:19: ac:6b:53:e0:af:4e:9f:b8:36:49:ba:e8:20:45:d2:46:15:f3: 88:c4:2b:fc:22:05:b2:11:42:21:86:b9:31:e7:b7:7d:64:e2: 4b:bf:98:15:30:ee:07:94:5f:b7:de:2a:6b:5f:2b:f0:4c:ba: eb:31:32:73:2b:7c:5d:b1:7b:ab:3b:d4:ce:27:6e:02:08:2f: 3a:ef:20:cb:9d:c3:db:fa:d4:ba:8f:a5:5f:68:36:2c:8b:af: bd:9f:c8:e9:76:90:8c:46:d7:cd:b4:c0:74:58:ea:ae:ec:1a: 52:3f:66:58:d4:08:50:cc:23:7c:a8:dd:3a:fd:61:c1:f0:dd: dc:df:96:00:b3:82:6f:6d:c2:f3:ef:ff:94:dc:27:c8:66:5a: 3c:52:a6:b9:24:de:ae:5a:c2:a2:c7:a2:47:1b:e9:24:cd:96: ea:9e:34:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUPq4WsPVZsLPoe4xxSQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjczZDJmNjIxYWUzMTQwNzAwMTc0OGJiZGU2MzhhY2Jk ODYwNTAwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg0MTYxNjE4OTUxNDFjOWI1OTI3YWIyNTEwMjI2NzIwM2E5ZDliYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJGZkVg3MLJRUJnrFpYijoSCOMHU gHCaZ8Kb/PXXGClWu3T4Nu2XlKk/6OpvLP/17WpkKB9W9QvrMYgyMLcA6IX/x4G/ VN6WaepaXme7PNk+YIBbZhratqxCpvXgSHL5oMB28SCDMuLk2r4HqsGhT6MGBh4Y Gh2Oiayqdg7pWtgwcxyFMPdVzYVSHf6+GjgQJeufj9JPP01Z2Z/qoyWb/rBqG1Uk 0JFkHA5N8mnFZpS5lUm3PCBLj7a6mV0V5wbnqyjI3fB9QkKXGgHQXNVRiXPW0vAN hT+nxK4tjyscetp/Z/vXGG0jtIbjR+MJjNMYTn+2fuhfnqi5bbJcJfvSswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFhYYlRQcm1knqyUQImcgOp2bo9MB8GA1UdIwQY MBaAFF9nPS9iGuMUBwAXSLveY4rL2GBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUt ODQ0NzI5MTM3ZWU1LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUtODQ0NzI5MTM3ZWU1 LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlsfVjCQ LCeOCw/BrsPu3JA9qgFJuozugk8cEC5GwHj6z9Zfwoxx6aaNEhUla1l+WAK/8XZP Ejt8Ivb5QHEpcRbcPmL1BsKu+CchEjfuIckuLyYo+VXXiR8ZrGtT4K9On7g2Sbro IEXSRhXziMQr/CIFshFCIYa5Mee3fWTiS7+YFTDuB5Rft94qa18r8Ey66zEycyt8 XbF7qzvUziduAggvOu8gy53D2/rUuo+lX2g2LIuvvZ/I6XaQjEbXzbTAdFjqruwa Uj9mWNQIUMwjfKjdOv1hwfDd3N+WALOCb23C8+//lNwnyGZaPFKmuSTerlrCosei RxvpJM2W6p40+A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:22 2025 by rpki-client