This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json) Hash identifier: oeDFZqQWve5U53Cxu9SP+X0rRQuCJbT79MiGJSkkjQ4= Subject key identifier: D0:C9:97:60:00:0E:06:E9:2C:2A:35:62:D8:89:69:94:D9:93:2E:D5 Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Certificate serial: 019AF12CEED4A10252E1EE90056822B8BE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft Manifest number: 0B87 Signing time: Sat 06 Dec 2025 01:00:45 +0000 Manifest this update: Sat 06 Dec 2025 01:00:45 +0000 Manifest next update: Sun 07 Dec 2025 01:00:45 +0000 Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: XuNlFq7MoUZ9yo7d7/0IoU+LR2x0QWRrEqDzGyq5+H4=) 2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ee:d4:a1:02:52:e1:ee:90:05:68:22:b8:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Validity Not Before: Dec 6 01:00:45 2025 GMT Not After : Dec 7 01:00:45 2025 GMT Subject: CN=d0c99760000e06e92c2a3562d8896994d9932ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7c:fe:83:46:dc:c6:67:18:d4:c6:dd:7d:e4: c6:5e:d7:68:95:6d:60:7e:b6:b0:20:51:6d:1b:a9: 56:76:7a:79:00:fe:ad:0d:6d:a6:42:4d:86:6a:c7: c6:ab:61:0c:e3:d9:c0:4d:bb:2d:48:31:d7:ec:dc: 71:15:64:e7:00:77:71:19:de:82:f8:13:89:9f:3a: b6:64:0f:75:38:7a:c2:d8:ca:00:08:5f:a0:65:a4: a0:6a:f9:8d:fb:99:38:71:fe:b0:94:ae:6a:44:d4: 2a:7f:aa:09:2f:dd:fc:93:34:c7:98:6f:b6:20:40: ac:43:d5:d6:47:55:1e:6e:1d:af:f1:08:d0:a9:93: 10:4a:cb:74:c6:2b:eb:02:82:87:eb:50:32:18:c6: 02:e7:dd:d8:09:b3:dd:6d:e6:e4:08:3d:07:b1:77: bf:2f:8b:d6:bc:e3:23:22:05:22:e9:ba:e7:8c:a6: 14:8c:4b:c3:31:bc:91:0d:1a:53:7f:3d:06:5a:59: 12:4e:3d:f6:0e:d7:9e:d0:28:b8:75:1c:c7:f5:24: d9:e5:7e:00:b0:ea:7e:10:f8:af:1c:6e:8d:8d:17: 6f:67:7f:3a:2d:ae:50:60:4f:97:ab:85:33:01:72: 15:d8:26:cc:4e:77:85:f1:bc:a6:53:be:a1:98:d7: 87:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C9:97:60:00:0E:06:E9:2C:2A:35:62:D8:89:69:94:D9:93:2E:D5 X509v3 Authority Key Identifier: keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:47:fd:ef:14:02:18:5c:c7:4d:14:d7:a2:4b:62:7f:e6:62: f6:7d:1c:ed:fc:c9:87:5f:9f:a7:b5:d2:fc:5f:ca:93:81:25: ba:f8:a1:b7:cf:50:71:67:5d:6c:2e:76:0f:c7:8b:f7:fc:91: b9:92:3a:8c:74:a9:22:6c:81:fa:84:dc:21:cd:69:5b:28:cc: 7f:ff:22:08:50:2a:9b:62:a5:b6:3b:df:b3:5f:49:02:ac:b6: f9:e5:54:15:86:46:31:ab:19:59:f4:b5:c2:c4:63:db:2d:54: e9:88:e9:71:77:02:80:67:bf:58:29:23:56:01:c3:bc:b2:d2: 47:ef:25:6b:c0:53:8b:7e:08:bb:c7:cf:dd:96:32:07:b4:20: 0e:cd:83:5a:20:87:0b:cd:0d:11:3f:dd:9e:3d:2f:80:4c:fa: 88:d0:f6:79:13:80:2c:05:f9:57:d3:55:65:4d:ae:9c:23:14: 04:a5:97:2c:db:7c:42:67:6f:44:cf:f6:1d:09:27:80:16:0a: 87:ed:70:40:d7:bd:ac:f9:3c:ad:33:c8:8b:1c:e2:6e:16:4e: 5f:5c:79:ba:43:25:0e:39:53:d8:73:45:dd:77:78:d4:67:d0: 55:35:36:d9:9f:3e:58:58:df:c7:e1:36:a7:a4:2d:fa:af:cd: b8:6a:40:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLO7UoQJS4e6QBWgiuL59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1 NjdjZDMwHhcNMjUxMjA2MDEwMDQ1WhcNMjUxMjA3MDEwMDQ1WjAzMTEwLwYDVQQD EyhkMGM5OTc2MDAwMGUwNmU5MmMyYTM1NjJkODg5Njk5NGQ5OTMyZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHz+g0bcxmcY1MbdfeTGXtdolW1g frawIFFtG6lWdnp5AP6tDW2mQk2GasfGq2EM49nATbstSDHX7NxxFWTnAHdxGd6C +BOJnzq2ZA91OHrC2MoACF+gZaSgavmN+5k4cf6wlK5qRNQqf6oJL938kzTHmG+2 IECsQ9XWR1Uebh2v8QjQqZMQSst0xivrAoKH61AyGMYC593YCbPdbebkCD0HsXe/ L4vWvOMjIgUi6brnjKYUjEvDMbyRDRpTfz0GWlkSTj32Dtee0Ci4dRzH9STZ5X4A sOp+EPivHG6NjRdvZ386La5QYE+Xq4UzAXIV2CbMTneF8bymU76hmNeHOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDJl2AADgbpLCo1YtiJaZTZky7VMB8GA1UdIwQY MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt YjNlNDNkMzA1Yjg5LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5 LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkf97xQC GFzHTRTXoktif+Zi9n0c7fzJh1+fp7XS/F/Kk4Eluviht89QcWddbC52D8eL9/yR uZI6jHSpImyB+oTcIc1pWyjMf/8iCFAqm2Kltjvfs19JAqy2+eVUFYZGMasZWfS1 wsRj2y1U6YjpcXcCgGe/WCkjVgHDvLLSR+8la8BTi34Iu8fP3ZYyB7QgDs2DWiCH C80NET/dnj0vgEz6iND2eROALAX5V9NVZU2unCMUBKWXLNt8QmdvRM/2HQkngBYK h+1wQNe9rPk8rTPIixzibhZOX1x5ukMlDjlT2HNF3Xd41GfQVTU22Z8+WFjfx+E2 p6Qt+q/NuGpANA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:36 2025 by rpki-client