This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json) Hash identifier: Y0bSWrfmrLyQ5Q5omCHAjz3YqTTwFnhTTaqe3mphjZ4= Subject key identifier: C3:E8:56:7A:28:3E:6E:82:36:2B:A2:98:F0:45:E9:30:DF:94:FF:3A Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Certificate serial: 019AF12D37F489CE21C110CC7C7586E4A388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=) 2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: XqaDiuwcn9JpeZLZ+MosDrwWuyAGPZKc4+21dEHj0+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:37:f4:89:ce:21:c1:10:cc:7c:75:86:e4:a3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=c3e8567a283e6e82362ba298f045e930df94ff3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:1b:52:04:f8:3b:ca:c5:c9:68:9b:55:7c: d3:6f:9d:91:65:2c:a2:96:66:7a:6e:1b:ec:a9:3d: 63:b9:47:be:23:0a:e5:df:d7:c9:e1:8b:47:74:68: 94:58:49:39:e4:fe:48:0c:18:36:08:93:a1:8b:ef: 34:fb:9a:2f:c3:5c:f1:1b:28:b1:64:3b:9a:7f:5e: 65:5c:cb:ac:f8:23:44:a9:e7:4f:22:a4:ea:89:a1: 53:c8:cc:74:b6:61:84:fe:73:69:6f:6c:9f:0a:62: 70:2a:bf:a1:58:6b:84:ea:f1:40:b0:51:76:a8:de: fd:8d:7e:bc:e7:cd:53:f7:1d:4b:15:9b:02:93:3f: 6e:fa:27:01:71:ed:29:95:44:62:59:20:0d:86:ed: bc:80:d7:9c:03:3b:a4:09:e4:af:8a:6d:72:a0:b0: 43:96:a6:20:f8:7c:1d:e0:43:4b:e5:18:47:49:47: aa:14:12:3f:a3:1a:8a:1c:0f:66:1a:68:74:36:31: 1c:53:4a:e4:5e:d4:d3:42:57:a1:43:0e:59:d7:ef: 9f:22:f1:65:cf:d0:00:3d:18:d1:c4:a6:44:c1:f0: 76:97:2e:e8:9b:05:9d:84:66:16:66:58:9f:db:b9: f8:bb:2c:3c:fc:22:c5:ce:b2:b2:1d:62:18:7d:9c: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:E8:56:7A:28:3E:6E:82:36:2B:A2:98:F0:45:E9:30:DF:94:FF:3A X509v3 Authority Key Identifier: keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:1e:89:56:09:f2:5a:3b:ec:67:78:53:7c:48:d1:f9:e5:66: c8:55:db:f3:e0:93:3c:ee:3b:95:2b:35:dd:33:5c:2e:a2:b8: 12:8e:95:fc:98:ab:ba:50:cd:3a:db:1a:d5:b1:62:f9:f8:fc: bb:7e:e7:80:f3:d6:d0:55:fd:cf:12:fb:8c:4a:dc:a7:07:3a: 95:d5:3b:a3:82:9e:71:00:b0:b4:b7:0c:a2:70:b0:c9:ab:80: 7a:52:f8:ab:34:9e:37:07:28:04:c5:b6:4f:5a:9e:85:9a:5e: 63:63:45:47:a6:64:d0:4f:fd:07:39:f8:a7:45:4d:2f:2e:4c: f1:66:b6:99:c8:ed:27:68:ff:66:bf:cc:36:50:7c:72:bb:1e: f6:9e:68:27:76:cc:9b:51:42:ed:08:7a:7b:27:6b:49:23:94: 86:c3:1c:5a:42:40:1c:d1:d2:73:73:9d:5f:18:e7:54:34:7c: ee:87:d0:66:81:0a:dc:bc:cd:7e:f9:24:a9:84:94:12:15:0b: 6a:ea:14:42:19:44:91:3c:21:59:8f:09:27:a3:fb:c8:40:5b: 64:b2:16:f6:bd:3c:8e:3a:26:43:e7:c5:41:31:68:cf:87:44: 32:b9:4e:ef:e7:3f:40:10:58:83:b6:02:39:88:4f:e6:bb:7b: 4c:f7:60:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTf0ic4hwRDMfHWG5KOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjVkNjNjOTE2M2YyY2M1YjU2MTRjM2M3ZjMxMTZlN2M3 MmY5ZjUwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD EyhjM2U4NTY3YTI4M2U2ZTgyMzYyYmEyOThmMDQ1ZTkzMGRmOTRmZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCcbUgT4O8rFyWibVXzTb52RZSyi lmZ6bhvsqT1juUe+Iwrl39fJ4YtHdGiUWEk55P5IDBg2CJOhi+80+5ovw1zxGyix ZDuaf15lXMus+CNEqedPIqTqiaFTyMx0tmGE/nNpb2yfCmJwKr+hWGuE6vFAsFF2 qN79jX68581T9x1LFZsCkz9u+icBce0plURiWSANhu28gNecAzukCeSvim1yoLBD lqYg+Hwd4ENL5RhHSUeqFBI/oxqKHA9mGmh0NjEcU0rkXtTTQlehQw5Z1++fIvFl z9AAPRjRxKZEwfB2ly7omwWdhGYWZlif27n4uyw8/CLFzrKyHWIYfZxvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPoVnooPm6CNiuimPBF6TDflP86MB8GA1UdIwQY MBaAFMdl1jyRY/LMW1YUw8fzEW58cvn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQt OWNlMWI0MTY4NzdkLzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQtOWNlMWI0MTY4Nzdk LzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFh6JVgny WjvsZ3hTfEjR+eVmyFXb8+CTPO47lSs13TNcLqK4Eo6V/JirulDNOtsa1bFi+fj8 u37ngPPW0FX9zxL7jErcpwc6ldU7o4KecQCwtLcMonCwyauAelL4qzSeNwcoBMW2 T1qehZpeY2NFR6Zk0E/9Bzn4p0VNLy5M8Wa2mcjtJ2j/Zr/MNlB8crse9p5oJ3bM m1FC7Qh6eydrSSOUhsMcWkJAHNHSc3OdXxjnVDR87ofQZoEK3LzNfvkkqYSUEhUL auoUQhlEkTwhWY8JJ6P7yEBbZLIW9r08jjomQ+fFQTFoz4dEMrlO7+c/QBBYg7YC OYhP5rt7TPdgCw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:18 2025 by rpki-client