This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json) Hash identifier: 4VVJHvM0pE96ulqmpGQu5g1mfHOI2njifcdz++68OzI= Subject key identifier: 23:10:A7:D2:7C:1F:5A:56:51:1F:0E:86:64:AC:0E:63:79:0D:3F:69 Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Certificate serial: 019AF19AFF7211DF060287DE6AE4B5788A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=) 2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=) 3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: aPTqoxt5tqFHMrtojirsbEZ3+RveQA11rGXh62xMrHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ff:72:11:df:06:02:87:de:6a:e4:b5:78:8a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=2310a7d27c1f5a56511f0e8664ac0e63790d3f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:64:9d:24:dd:24:08:6f:87:45:6b:d8:12: df:af:4b:b0:1f:ff:a6:d4:9f:da:17:a3:bb:64:69: b6:79:e6:3c:70:57:4e:14:a0:7c:0b:11:8b:19:b2: 9d:74:e9:0f:cc:5d:e0:5b:86:b2:60:8f:4f:30:b2: 89:1f:df:be:db:30:f5:0e:4c:3d:1d:a4:fe:48:b7: b1:ae:2f:a2:ee:8b:11:15:55:ed:72:4d:4e:67:b7: b3:44:2c:8a:41:40:78:ec:07:b5:22:b4:4c:69:6f: 26:f2:c4:af:30:64:0a:57:51:29:1d:ef:d0:8b:d5: a8:f8:50:59:aa:b1:51:43:ab:b7:28:01:7f:a1:92: 4c:0d:e4:16:29:5c:79:51:19:03:1f:00:93:54:b6: 86:3c:93:77:fd:c2:95:83:7e:c8:89:f7:64:f1:f3: 42:82:dc:30:c7:03:c7:d1:28:12:d6:37:76:cf:ea: 69:c1:82:0a:c5:1f:20:67:7d:23:0b:04:b6:c7:22: c5:56:e1:e5:f1:54:ff:cd:a2:84:45:93:13:14:81: 95:a9:71:69:99:8b:39:fb:9a:fa:6f:c0:46:6d:b8: f0:c3:a4:18:36:7f:aa:dd:62:53:37:e7:b5:05:1e: bc:d2:e3:3e:80:3e:dc:c0:f1:f3:aa:bb:2d:a2:7f: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:10:A7:D2:7C:1F:5A:56:51:1F:0E:86:64:AC:0E:63:79:0D:3F:69 X509v3 Authority Key Identifier: keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:6f:82:e9:7f:c2:cb:20:42:b6:97:8c:06:5c:5c:96:7b:55: 0d:87:a8:3c:5b:28:91:a9:cf:d4:26:6f:fd:94:68:93:a5:df: 02:0b:4d:3a:24:c0:58:0e:2c:c1:97:29:0a:05:a3:bc:85:ef: 39:17:90:18:09:89:76:0f:82:63:89:1b:21:4b:e5:f3:48:2c: 64:91:19:9d:ce:38:d5:3a:7d:6e:84:bf:d1:3d:1e:56:10:52: 6c:0d:70:29:80:54:53:8d:a6:31:08:80:15:72:be:2c:e0:9b: 48:fa:74:57:1b:86:07:ac:27:78:b9:c3:4b:93:eb:04:34:87: 2f:cc:d4:3e:ca:43:be:45:ce:3f:9c:76:2a:f9:3d:4b:5b:e8: f7:64:94:eb:79:8f:82:aa:19:00:d1:be:f5:18:c8:ac:ed:1b: f1:b1:1b:ab:23:1e:8d:ab:13:f9:59:1d:88:58:71:a7:39:f4: f6:0d:a6:67:6c:f2:4e:77:94:7c:de:9c:15:c3:6d:0c:4c:3e: d4:ff:f7:95:11:59:06:c7:91:10:06:1b:63:f2:99:5d:85:a8: bd:90:a9:aa:6e:71:a6:07:07:c4:6f:20:2e:0e:ba:8a:d4:4c: 7f:05:63:66:a5:91:e1:41:c3:42:8d:39:01:46:c7:c7:0c:a2: 94:76:a7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv9yEd8GAofeauS1eIpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YWI2YjIyNTRlNDU3MzBhYWZhNDVhYjUxOTczMjAzNjE0 YmI2Y2MwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EygyMzEwYTdkMjdjMWY1YTU2NTExZjBlODY2NGFjMGU2Mzc5MGQzZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUlknSTdJAhvh0Vr2BLfr0uwH/+m 1J/aF6O7ZGm2eeY8cFdOFKB8CxGLGbKddOkPzF3gW4ayYI9PMLKJH9++2zD1Dkw9 HaT+SLexri+i7osRFVXtck1OZ7ezRCyKQUB47Ae1IrRMaW8m8sSvMGQKV1EpHe/Q i9Wo+FBZqrFRQ6u3KAF/oZJMDeQWKVx5URkDHwCTVLaGPJN3/cKVg37Iifdk8fNC gtwwxwPH0SgS1jd2z+ppwYIKxR8gZ30jCwS2xyLFVuHl8VT/zaKERZMTFIGVqXFp mYs5+5r6b8BGbbjww6QYNn+q3WJTN+e1BR680uM+gD7cwPHzqrston/QSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMQp9J8H1pWUR8OhmSsDmN5DT9pMB8GA1UdIwQY MBaAFMerayJU5FcwqvpFq1GXMgNhS7bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAt MWQ1NWQ1OTI5Y2VjLzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zM2I2OWQtZjRjYS00M2FhLTk3ODAtMWQ1NWQ1OTI5Y2Vj LzEveDZ0cklsVGtWekNxLWtXclVaY3lBMkZMdHN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW+C6X/C yyBCtpeMBlxclntVDYeoPFsokanP1CZv/ZRok6XfAgtNOiTAWA4swZcpCgWjvIXv OReQGAmJdg+CY4kbIUvl80gsZJEZnc441Tp9boS/0T0eVhBSbA1wKYBUU42mMQiA FXK+LOCbSPp0VxuGB6wneLnDS5PrBDSHL8zUPspDvkXOP5x2Kvk9S1vo92SU63mP gqoZANG+9RjIrO0b8bEbqyMejasT+VkdiFhxpzn09g2mZ2zyTneUfN6cFcNtDEw+ 1P/3lRFZBseREAYbY/KZXYWovZCpqm5xpgcHxG8gLg66itRMfwVjZqWR4UHDQo05 AUbHxwyilHanxg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:34 2025 by rpki-client