This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json) Hash identifier: QgSjl69GeeeVwcEH8kPzhepuoFToxI3tHg2JdBZ8KsY= Subject key identifier: E1:F0:0E:2A:4B:87:2B:5D:1A:82:F7:01:33:0C:FA:FD:8D:DC:DD:0A Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019AF23F709F06C5A74601D413CDDFF64382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft Manifest number: 06E8 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: eiCXc1keHVR1Ri2OJ4ZtvNZSMiRzEFPTgQwUtyJNogg=) 2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:9f:06:c5:a7:46:01:d4:13:cd:df:f6:43:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=e1f00e2a4b872b5d1a82f701330cfafd8ddcdd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:c7:69:bb:25:f2:d0:59:55:24:19:94:3e: eb:97:e3:63:78:38:25:2b:75:7e:d7:aa:77:98:fd: 4a:e9:8a:80:b9:e9:1b:f1:a5:df:df:38:db:eb:f4: 53:9d:58:b9:d3:7e:9a:4c:d0:18:8b:47:e2:c8:59: 50:86:11:e4:57:9f:79:57:c4:b7:88:8a:0d:90:a0: 20:04:d8:34:64:90:35:0c:76:9e:9e:84:45:57:a9: c0:a2:52:5a:bb:7c:8c:d6:5b:89:84:e1:cc:7a:e5: ae:9f:7b:17:02:9e:9f:19:19:55:6d:69:95:78:3d: 6b:a1:65:e1:8c:b4:04:65:49:59:e7:84:56:0f:f6: 63:2b:50:34:d0:45:3e:e4:8c:d5:94:12:34:b7:dc: a9:b0:a8:af:55:91:54:76:eb:6b:84:4e:ba:6a:ab: 3c:d0:48:1e:72:1d:c1:91:fb:ee:c3:95:aa:9e:86: 70:d5:4c:07:5c:1a:1e:d5:d4:b5:23:b7:89:07:85: d8:3c:f6:8f:7f:68:b8:be:05:0e:46:29:67:6c:d4: f7:51:37:b1:78:c3:85:bf:94:f1:71:b5:76:54:85: 58:dc:d8:e9:37:86:8f:d1:e4:75:06:61:f8:e7:9b: ba:26:db:04:0e:37:da:48:7d:12:68:9d:1f:8c:dc: 18:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:0E:2A:4B:87:2B:5D:1A:82:F7:01:33:0C:FA:FD:8D:DC:DD:0A X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:40:63:d0:9e:5e:06:5b:aa:8e:dd:c5:5a:09:5f:ca:10:d6: cd:b5:b3:e8:a8:a2:91:4f:11:e5:63:1a:fa:27:51:5e:c2:49: 84:fc:8b:64:ad:d0:56:22:9c:e6:72:9a:90:c2:eb:3f:8a:dc: 87:79:d0:98:0b:cd:b1:40:2b:e5:be:65:8e:a8:17:cb:33:bd: 8f:1b:70:36:81:d6:b5:90:8e:e4:d4:82:78:d6:6e:70:52:65: fd:ad:a6:74:77:2c:00:16:ed:6b:a7:bf:a9:03:33:27:2f:c4: 3c:e6:5a:83:eb:e8:ff:3e:33:cc:1e:b5:0b:62:7c:9c:a8:ef: 76:70:42:8b:87:b9:cc:12:d4:a5:4d:69:a0:4d:67:96:ca:73: 92:bf:51:03:49:1c:aa:5e:1c:ec:12:2c:73:9f:b4:d6:63:f9: 6f:1a:9d:f8:1a:08:27:db:b9:f7:ad:6c:90:fc:ce:b5:90:ad: 02:e3:d5:90:71:72:10:bd:10:af:0e:49:61:56:24:0d:74:1b: b5:77:bc:fa:50:07:26:a2:fd:9e:15:cc:68:13:f1:5c:1a:82: c0:5f:f6:0d:af:5d:91:37:e8:4b:7c:ce:c7:31:e1:20:15:f2: f3:80:fe:a2:ee:9a:fb:a4:c2:91:7b:cb:6c:83:cc:7a:c5:02: df:20:54:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3CfBsWnRgHUE83f9kOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhlMWYwMGUyYTRiODcyYjVkMWE4MmY3MDEzMzBjZmFmZDhkZGNkZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AfHabsl8tBZVSQZlD7rl+NjeDgl K3V+16p3mP1K6YqAuekb8aXf3zjb6/RTnVi5036aTNAYi0fiyFlQhhHkV595V8S3 iIoNkKAgBNg0ZJA1DHaenoRFV6nAolJau3yM1luJhOHMeuWun3sXAp6fGRlVbWmV eD1roWXhjLQEZUlZ54RWD/ZjK1A00EU+5IzVlBI0t9ypsKivVZFUdutrhE66aqs8 0Egech3Bkfvuw5WqnoZw1UwHXBoe1dS1I7eJB4XYPPaPf2i4vgUORilnbNT3UTex eMOFv5TxcbV2VIVY3NjpN4aP0eR1BmH455u6JtsEDjfaSH0SaJ0fjNwY2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHwDipLhytdGoL3ATMM+v2N3N0KMB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEBj0J5e Bluqjt3FWglfyhDWzbWz6KiikU8R5WMa+idRXsJJhPyLZK3QViKc5nKakMLrP4rc h3nQmAvNsUAr5b5ljqgXyzO9jxtwNoHWtZCO5NSCeNZucFJl/a2mdHcsABbta6e/ qQMzJy/EPOZag+vo/z4zzB61C2J8nKjvdnBCi4e5zBLUpU1poE1nlspzkr9RA0kc ql4c7BIsc5+01mP5bxqd+BoIJ9u5961skPzOtZCtAuPVkHFyEL0Qrw5JYVYkDXQb tXe8+lAHJqL9nhXMaBPxXBqCwF/2Da9dkTfoS3zOxzHhIBXy84D+ou6a+6TCkXvL bIPMesUC3yBURA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:01:40 2025 by rpki-client