This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json) Hash identifier: rKHS0wYRWNuL2hRPiL1NIDQOeWTPCOu/b0GDsQ5JVWo= Subject key identifier: 24:26:A6:C2:9F:8F:81:C5:06:2E:9D:AE:8B:E0:2D:C4:3F:AF:22:76 Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1 Certificate serial: 019AF163EE99302BFBED97A2FB8FCAB29E2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: m7XEAYEzVecBRiCvQetrlvv2ki27bawLZBDgZPMhoAs=) 2: zN7bolKHX5-8_T6xAiHUcxzsXEU.roa (hash: Ja9ytSf2n5JngXin2znXRtSQXJwWKPjF0nquQXGWBgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ee:99:30:2b:fb:ed:97:a2:fb:8f:ca:b2:9e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=2426a6c29f8f81c5062e9dae8be02dc43faf2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:29:c2:b8:ca:ac:ef:8b:c2:aa:3d:45:ef: b6:b9:40:a6:eb:04:9d:91:ba:42:89:28:62:f8:2e: ec:0c:a6:5d:bb:b5:65:a6:22:ef:b5:93:12:64:c9: f4:5b:e4:02:bc:9d:91:91:67:52:ce:9b:88:74:9a: c9:d1:46:b9:5a:36:21:ef:28:21:db:2b:ec:95:df: c1:ea:fc:7e:4a:43:68:45:5e:92:64:63:7d:36:b1: 24:de:54:ad:4f:16:a0:b3:0f:55:d1:71:28:61:1c: 0b:a7:87:ba:8b:49:c2:34:0f:7a:37:89:47:00:c1: 36:b6:64:eb:42:97:a5:85:f8:63:bb:6f:58:2c:55: 06:04:bb:4b:ba:15:c2:59:f7:81:b9:fa:61:aa:1e: 6f:ca:23:32:f8:24:b7:94:ba:d6:e4:a2:53:29:00: 24:8c:ee:89:7d:af:4f:e2:1e:b3:c3:8e:4f:2f:84: 5d:2b:d6:13:5b:f8:9d:4b:b1:40:af:bb:b7:88:91: bd:08:e3:81:dc:81:be:42:09:fd:c1:fd:c3:ea:53: 97:90:ff:8e:90:d0:0c:05:52:62:1b:48:56:6d:3a: 05:af:30:dd:81:ad:98:bf:5b:34:1e:a0:7a:c1:9a: fc:0b:62:ef:8c:1f:44:22:f0:8b:1f:b7:49:46:74: ad:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:26:A6:C2:9F:8F:81:C5:06:2E:9D:AE:8B:E0:2D:C4:3F:AF:22:76 X509v3 Authority Key Identifier: keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:e4:29:7d:d6:eb:30:b3:1e:71:16:ca:eb:11:6a:54:5d:74: 5e:a6:2f:00:b0:f8:45:d7:c0:43:fe:1a:6b:a5:95:73:47:aa: 1b:e1:63:93:6b:40:dd:5c:6d:5e:4d:31:7e:d6:42:c0:ce:8a: 95:f2:e8:71:1c:0e:54:f7:88:24:02:73:bd:13:8d:09:8f:af: 05:81:8d:62:43:e3:cb:4a:69:d0:b7:d1:cb:30:88:ac:e3:d3: 80:4b:08:eb:51:b8:4e:73:2d:b8:2f:c0:b6:88:24:5a:6b:a1: a9:03:cf:0f:98:83:f1:95:09:a5:70:20:48:67:4e:34:76:48: 1c:6f:01:0c:0c:83:69:34:90:05:53:8d:d8:de:02:53:c5:ed: 25:fc:9d:7b:1c:38:a9:90:92:6a:5e:b9:04:b0:d6:02:41:02: 2b:c6:9f:d9:f4:05:81:ac:74:01:df:7f:ad:9b:43:4f:8b:05: 42:7e:6a:02:dc:aa:7b:1a:e7:ea:c5:03:a8:f1:10:74:54:f8: b7:5d:55:db:7c:ee:97:a5:a5:ac:43:96:a2:17:ba:b8:64:6c: c0:12:7d:e3:c4:2c:61:67:e9:0a:af:47:1c:f9:c1:d8:6f:fc: 09:2c:49:4a:bb:76:68:d9:44:a6:8a:1f:55:fe:f7:61:c6:d1: 59:4f:08:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+6ZMCv77Zei+4/Ksp4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYWIwMTlkOThiODhjNTg1ZDVmMDE2MjA0MTEzYzgzOWFl MDY3ZDEwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EygyNDI2YTZjMjlmOGY4MWM1MDYyZTlkYWU4YmUwMmRjNDNmYWYyMjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssEpwrjKrO+Lwqo9Re+2uUCm6wSd kbpCiShi+C7sDKZdu7VlpiLvtZMSZMn0W+QCvJ2RkWdSzpuIdJrJ0Ua5WjYh7ygh 2yvsld/B6vx+SkNoRV6SZGN9NrEk3lStTxagsw9V0XEoYRwLp4e6i0nCNA96N4lH AME2tmTrQpelhfhju29YLFUGBLtLuhXCWfeBufphqh5vyiMy+CS3lLrW5KJTKQAk jO6Jfa9P4h6zw45PL4RdK9YTW/idS7FAr7u3iJG9COOB3IG+Qgn9wf3D6lOXkP+O kNAMBVJiG0hWbToFrzDdga2Yv1s0HqB6wZr8C2LvjB9EIvCLH7dJRnStowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQmpsKfj4HFBi6drovgLcQ/ryJ2MB8GA1UdIwQY MBaAFF+rAZ2YuIxYXV8BYgQRPIOa4GfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTct Yzk1M2E4OGJiZmEzLzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9mYjI3OWMtYmQxZS00M2JkLWE0OTctYzk1M2E4OGJiZmEz LzEvWDZzQm5aaTRqRmhkWHdGaUJCRThnNXJnWjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASeQpfdbr MLMecRbK6xFqVF10XqYvALD4RdfAQ/4aa6WVc0eqG+Fjk2tA3VxtXk0xftZCwM6K lfLocRwOVPeIJAJzvRONCY+vBYGNYkPjy0pp0LfRyzCIrOPTgEsI61G4TnMtuC/A togkWmuhqQPPD5iD8ZUJpXAgSGdONHZIHG8BDAyDaTSQBVON2N4CU8XtJfydexw4 qZCSal65BLDWAkECK8af2fQFgax0Ad9/rZtDT4sFQn5qAtyqexrn6sUDqPEQdFT4 t11V23zul6WlrEOWohe6uGRswBJ948QsYWfpCq9HHPnB2G/8CSxJSrt2aNlEpoof Vf73YcbRWU8IMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:17 2025 by rpki-client