This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft File: x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json) Hash identifier: WcNQ4veJThCg+dlqGlk7QodQJ1iZ5lSVd0pB2LgUjMw= Subject key identifier: 7B:C9:03:70:BB:72:AA:30:8C:09:05:81:C4:9E:87:0F:86:AF:D1:14 Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Certificate serial: 019B3C7F545F2A3CEC1A17852EA6DE430C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:02:16 +0000 Manifest this update: Sat 20 Dec 2025 16:02:16 +0000 Manifest next update: Sun 21 Dec 2025 16:02:16 +0000 Files and hashes: 1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=) 2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: Spzma9KA7Jweq+G94visM5/OfhwYUPOrNAsfKKCs0dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:54:5f:2a:3c:ec:1a:17:85:2e:a6:de:43:0c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5 Validity Not Before: Dec 20 16:02:16 2025 GMT Not After : Dec 21 16:02:16 2025 GMT Subject: CN=7bc90370bb72aa308c090581c49e870f86afd114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4e:84:50:e6:62:75:6b:1a:ac:bc:51:2a:b2: 56:b3:9d:a4:aa:d8:16:bc:46:d1:50:46:2d:5e:ea: 2a:ba:61:53:c0:00:0e:39:d8:a3:3c:66:48:ef:ed: 20:c1:13:1f:5c:22:a4:4f:b7:b5:54:ae:c0:08:83: 90:8e:b3:44:2f:92:8c:07:f7:94:f2:92:f2:16:7d: 06:f8:72:c5:e9:30:dc:62:1f:f9:cf:dd:c7:52:2d: 3b:a5:50:12:10:b4:58:d8:cc:c5:5d:80:28:70:99: 36:80:24:83:0d:f9:51:04:4c:13:b4:2d:0f:2c:cc: 13:39:4b:99:d7:55:5d:21:9e:6d:c6:8e:5b:c5:75: d1:0f:9e:d1:1e:25:2e:b5:26:19:25:ae:3c:90:88: e7:72:73:da:78:5b:15:19:b1:e9:75:d3:ab:cf:d6: 61:5a:7b:40:82:7f:52:81:80:cc:ca:aa:ce:ba:05: 43:fe:c8:c8:f1:7c:bc:1c:d4:2d:8b:66:f0:f8:4b: 5c:cd:63:33:e8:71:56:4e:09:bc:3c:0c:7b:cd:d0: 3e:79:29:67:f2:da:26:10:64:1d:d7:53:e6:57:54: 22:75:d8:58:38:95:e5:fb:f0:9b:7a:9c:26:4e:74: 26:8e:be:cd:0c:bb:da:ab:fc:07:bc:68:4b:9b:ca: 68:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C9:03:70:BB:72:AA:30:8C:09:05:81:C4:9E:87:0F:86:AF:D1:14 X509v3 Authority Key Identifier: keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:f3:4a:cb:bd:1e:31:60:bd:51:6e:7c:d8:1d:70:6d:81: 6b:bb:33:fc:4f:d2:05:61:57:61:b9:08:4f:ef:a2:83:f4:2e: 8d:e9:0a:84:2f:4e:48:ab:08:ca:07:fd:15:30:a5:ae:49:d0: d3:cf:a1:b9:91:d2:1a:01:cd:29:93:5f:dc:8e:06:f0:fc:be: 9b:ef:14:27:fd:19:ea:cd:cf:f0:10:f4:bc:17:af:30:4f:d8: 9a:d5:93:db:4a:49:7a:80:c9:f0:e3:ec:b3:c4:df:00:a1:d3: 00:bd:40:7b:05:bf:11:d6:1e:cd:7d:86:c7:ef:95:e5:99:83: 57:37:f7:29:19:e3:fd:84:55:86:2d:ab:ef:0b:b8:30:c6:3c: e5:66:d5:55:69:f0:c7:4b:c8:e7:9e:ae:d0:bd:66:0d:75:19: e4:7e:fd:98:4f:18:01:d4:21:20:d6:e9:44:44:02:27:38:a9: 4c:c3:40:65:ee:48:b3:86:cb:00:c7:09:9e:7d:25:42:7f:db: ba:a0:e9:70:45:dd:5d:03:ed:b1:4d:d4:62:e3:0a:11:7e:e9: 22:5b:07:ce:4b:cc:12:22:df:57:ee:73:b5:e1:bf:3e:61:42: c3:e8:59:a1:fb:9a:97:8a:c3:40:74:5d:0e:af:d7:fd:87:bf: 62:3e:4d:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f1RfKjzsGheFLqbeQwx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjVkNjNjOTE2M2YyY2M1YjU2MTRjM2M3ZjMxMTZlN2M3 MmY5ZjUwHhcNMjUxMjIwMTYwMjE2WhcNMjUxMjIxMTYwMjE2WjAzMTEwLwYDVQQD Eyg3YmM5MDM3MGJiNzJhYTMwOGMwOTA1ODFjNDllODcwZjg2YWZkMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArU6EUOZidWsarLxRKrJWs52kqtgW vEbRUEYtXuoqumFTwAAOOdijPGZI7+0gwRMfXCKkT7e1VK7ACIOQjrNEL5KMB/eU 8pLyFn0G+HLF6TDcYh/5z93HUi07pVASELRY2MzFXYAocJk2gCSDDflRBEwTtC0P LMwTOUuZ11VdIZ5txo5bxXXRD57RHiUutSYZJa48kIjncnPaeFsVGbHpddOrz9Zh WntAgn9SgYDMyqrOugVD/sjI8Xy8HNQti2bw+EtczWMz6HFWTgm8PAx7zdA+eSln 8tomEGQd11PmV1QiddhYOJXl+/CbepwmTnQmjr7NDLvaq/wHvGhLm8poBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvJA3C7cqowjAkFgcSehw+Gr9EUMB8GA1UdIwQY MBaAFMdl1jyRY/LMW1YUw8fzEW58cvn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQt OWNlMWI0MTY4NzdkLzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85Nzk0MTctZjE4Ni00NmRlLWFjZDQtOWNlMWI0MTY4Nzdk LzEveDJYV1BKRmo4c3hiVmhURHhfTVJibnh5LWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfvzSsu9 HjFgvVFufNgdcG2Ba7sz/E/SBWFXYbkIT++ig/QujekKhC9OSKsIygf9FTClrknQ 08+huZHSGgHNKZNf3I4G8Py+m+8UJ/0Z6s3P8BD0vBevME/YmtWT20pJeoDJ8OPs s8TfAKHTAL1AewW/EdYezX2Gx++V5ZmDVzf3KRnj/YRVhi2r7wu4MMY85WbVVWnw x0vI556u0L1mDXUZ5H79mE8YAdQhINbpREQCJzipTMNAZe5Is4bLAMcJnn0lQn/b uqDpcEXdXQPtsU3UYuMKEX7pIlsHzkvMEiLfV+5zteG/PmFCw+hZofual4rDQHRd Dq/X/Ye/Yj5Nhw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:25:31 2025 by rpki-client