This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json) Hash identifier: VR3WuOAWv6PkI2nbIZQG4rSIsFDd5hdOvImYLj7QND0= Subject key identifier: 71:30:6F:F0:D8:4F:A1:01:68:79:D7:E4:67:39:02:AA:97:56:4F:AE Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d Certificate serial: 019AF208F46C12AE9D2D2602524912D7ED1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=) 2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: kbwCYtRhLXG28e4XbDyE/XdV+FUXeiTVbxvolHgfN04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:6c:12:ae:9d:2d:26:02:52:49:12:d7:ed:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=71306ff0d84fa1016879d7e4673902aa97564fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:be:fd:af:c0:51:25:07:80:61:e7:76:74: 34:ec:5d:9e:ae:e0:ba:96:89:2e:d0:34:bd:95:6d: f3:a7:10:92:0c:7b:ff:5f:60:22:fc:11:91:52:3f: 23:7f:0e:cf:f7:10:04:09:23:d6:78:d5:d9:c9:34: 03:89:f9:cb:34:ef:63:8a:26:bb:ca:29:34:61:d6: 1c:be:2f:14:90:ad:bb:7e:8e:7b:05:84:70:c7:2f: 08:8c:79:16:d4:16:92:03:a8:f4:69:78:a2:d5:a4: e6:7f:c1:9f:f5:b0:4d:16:03:8f:2b:19:57:09:a8: d1:eb:ca:26:e5:ac:b9:db:59:58:c2:e7:49:47:a8: f5:07:11:7a:81:72:fe:3a:4d:69:a2:e1:e9:cd:67: 05:58:46:49:0f:02:f1:17:18:c0:5b:5f:cb:cf:9c: 1b:ad:eb:cb:13:29:7c:da:ea:85:05:af:7e:86:b0: cf:78:b2:0f:3c:f2:8d:ad:99:69:8f:9a:96:ab:f1: 2f:99:a7:a6:ba:12:b8:72:5f:0c:80:1d:ee:60:44: a4:db:9b:7e:f9:5c:ac:50:39:22:56:6d:51:b0:ad: 0c:01:30:3f:26:a9:dd:99:54:68:88:93:b2:10:c8: 7c:a3:ad:c3:0a:a5:02:a2:d1:e0:6f:a3:6a:7f:d9: 93:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:30:6F:F0:D8:4F:A1:01:68:79:D7:E4:67:39:02:AA:97:56:4F:AE X509v3 Authority Key Identifier: keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:d4:48:88:24:00:10:fa:56:9b:2c:60:1a:86:ab:d6:1d:f5: 8f:b1:ca:07:3f:da:df:04:98:bc:5e:d5:2e:dd:4b:da:38:38: 48:df:bc:0b:90:05:50:09:f7:f8:89:ce:2c:e4:e1:20:0f:ec: cb:88:e4:0d:9a:b6:90:73:19:cf:66:00:aa:ed:2d:3b:9a:5a: f9:db:a4:d4:fd:bb:de:d6:3c:97:1e:a5:57:c6:73:dd:f3:c3: 58:da:7d:7f:75:ed:86:9c:fb:71:ba:94:e6:cd:0c:81:d0:2a: 06:b1:4a:68:d2:b7:d0:df:ee:1b:c4:81:f3:68:74:51:7e:d6: 1f:9e:23:8b:f2:1d:a6:24:f1:07:3b:45:f1:ed:42:5f:25:9c: f5:fa:92:aa:56:e0:cc:9c:c3:41:8e:ba:21:6b:0a:d2:1a:f1: 15:dd:64:63:7e:cf:29:83:41:84:01:8b:c4:ad:3f:20:1a:69: f1:04:6f:dc:cd:0f:d0:32:d5:62:c2:c7:64:21:71:9c:1e:e7: c8:59:86:d5:ae:3b:82:a9:b5:d4:32:5c:ef:7e:fb:80:fe:7e: e8:f2:b0:29:b6:79:4e:0a:fe:a2:29:e8:bd:77:58:04:11:a5: f7:e4:62:fd:97:dd:d3:27:40:37:d5:e5:3a:85:e5:cb:55:15: 56:a3:54:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPRsEq6dLSYCUkkS1+0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2 OWQzMGQwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD Eyg3MTMwNmZmMGQ4NGZhMTAxNjg3OWQ3ZTQ2NzM5MDJhYTk3NTY0ZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseK+/a/AUSUHgGHndnQ07F2eruC6 loku0DS9lW3zpxCSDHv/X2Ai/BGRUj8jfw7P9xAECSPWeNXZyTQDifnLNO9jiia7 yik0YdYcvi8UkK27fo57BYRwxy8IjHkW1BaSA6j0aXii1aTmf8Gf9bBNFgOPKxlX CajR68om5ay521lYwudJR6j1BxF6gXL+Ok1pouHpzWcFWEZJDwLxFxjAW1/Lz5wb revLEyl82uqFBa9+hrDPeLIPPPKNrZlpj5qWq/EvmaemuhK4cl8MgB3uYESk25t+ +VysUDkiVm1RsK0MATA/JqndmVRoiJOyEMh8o63DCqUCotHgb6Nqf9mT8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEwb/DYT6EBaHnX5Gc5AqqXVk+uMB8GA1UdIwQY MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotRIiCQA EPpWmyxgGoar1h31j7HKBz/a3wSYvF7VLt1L2jg4SN+8C5AFUAn3+InOLOThIA/s y4jkDZq2kHMZz2YAqu0tO5pa+duk1P273tY8lx6lV8Zz3fPDWNp9f3Xthpz7cbqU 5s0MgdAqBrFKaNK30N/uG8SB82h0UX7WH54ji/IdpiTxBztF8e1CXyWc9fqSqlbg zJzDQY66IWsK0hrxFd1kY37PKYNBhAGLxK0/IBpp8QRv3M0P0DLVYsLHZCFxnB7n yFmG1a47gqm11DJc7377gP5+6PKwKbZ5Tgr+oinovXdYBBGl9+Ri/Zfd0ydAN9Xl OoXly1UVVqNU+g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:31 2025 by rpki-client