This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json) Hash identifier: 9BmL7agfOR8IF8d+hQSyXiops3RxBELAws7twyaMDdk= Subject key identifier: 1B:03:04:D4:4D:69:F7:E8:2A:4B:34:BB:01:40:8B:BC:33:E9:D8:1F Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Certificate serial: 019B3FB5B500CE1E42E291D135C03C3DA043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 07:00:31 +0000 Manifest this update: Sun 21 Dec 2025 07:00:31 +0000 Manifest next update: Mon 22 Dec 2025 07:00:31 +0000 Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=) 2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: LRBBKWBS6zmuUtTkNcLv7J382zDF2c3n0q2Gl5xBs3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:b5:00:ce:1e:42:e2:91:d1:35:c0:3c:3d:a0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Validity Not Before: Dec 21 07:00:31 2025 GMT Not After : Dec 22 07:00:31 2025 GMT Subject: CN=1b0304d44d69f7e82a4b34bb01408bbc33e9d81f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:fd:91:5a:ff:2e:b9:51:f9:60:bb:5f:93: 63:31:ac:6d:d6:b6:fc:96:22:54:bc:13:0b:d6:38: 44:f5:12:c8:69:df:11:5c:09:39:de:df:0e:79:be: 3c:6c:dc:e0:61:11:a3:0d:7d:66:5b:e5:82:4c:53: 0d:d5:59:9d:5e:1e:fe:4f:63:63:48:59:eb:07:75: c2:71:a6:46:b4:7b:9d:59:5d:43:65:f0:91:c8:16: ff:b3:22:d7:04:34:11:0e:96:78:f4:7b:f4:5e:ce: 52:7a:2f:35:b6:ae:23:68:03:45:40:0a:83:c1:25: f1:13:4e:da:b7:92:db:55:4c:4e:fb:f3:05:34:d7: bc:0a:ca:8a:b8:5a:df:90:5c:8c:02:ff:43:d7:32: c8:a1:7f:72:b9:fc:52:fb:fc:11:c1:79:47:77:d0: d2:23:41:23:0c:40:b1:f1:e2:b6:59:22:9d:3f:25: 84:02:26:1f:a8:ea:f7:6f:ea:86:64:6c:d3:94:5c: e4:2a:44:f7:96:8f:1d:56:67:2b:3e:2f:7b:c6:75: 4e:68:a9:6f:d0:bf:ba:00:31:0d:fb:79:9c:9a:9a: 59:1f:f0:51:14:ab:c8:6b:c4:24:5c:06:fc:72:79: 1a:8f:96:64:e9:98:45:15:d0:b4:39:af:5d:a4:2c: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:04:D4:4D:69:F7:E8:2A:4B:34:BB:01:40:8B:BC:33:E9:D8:1F X509v3 Authority Key Identifier: keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0e:af:4c:db:6d:cf:ce:cc:5f:73:f2:bf:33:91:4c:8a:00: 29:f2:df:ab:81:1a:1c:83:ee:ac:d1:fe:ad:a2:8a:a0:6d:4e: 5d:9c:37:8e:99:c8:19:2c:5b:68:0b:cf:6c:32:c2:3c:93:8e: f4:5d:be:c6:1e:59:04:48:59:81:d3:e5:77:f2:d2:9c:a2:39: 30:ab:71:17:7e:bd:4c:0f:47:1b:a5:a5:d4:33:a8:7a:85:57: 54:9a:46:a5:68:ec:37:4b:91:9c:90:fd:b7:bd:72:24:2e:6b: 14:a8:40:18:df:8f:b2:c3:3f:78:34:17:53:26:12:99:e9:23: 1a:af:2e:8a:e0:4f:7f:e6:94:32:eb:d1:a8:34:28:20:f8:15: 09:1d:d9:5a:78:21:5b:70:c2:1f:5b:90:e7:0f:7c:cb:e1:d7: 66:35:db:2d:bf:2b:5d:fd:f6:ce:d8:3d:55:c9:a1:69:54:fd: 15:0d:60:b8:a8:35:0b:ce:6b:6c:55:bf:25:36:17:e4:f7:fb: 66:be:79:6a:3d:e4:04:ef:68:c9:86:8d:38:90:bd:09:db:d2: 43:cc:3f:6e:1c:7d:a2:22:0c:2a:6a:22:37:96:5e:86:24:c5: 37:50:f9:21:9e:88:08:39:2b:ed:d0:b8:80:55:ad:f7:e4:85: 83:c4:a5:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbUAzh5C4pHRNcA8PaBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0 YTZiMDQwHhcNMjUxMjIxMDcwMDMxWhcNMjUxMjIyMDcwMDMxWjAzMTEwLwYDVQQD EygxYjAzMDRkNDRkNjlmN2U4MmE0YjM0YmIwMTQwOGJiYzMzZTlkODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1H9kVr/LrlR+WC7X5NjMaxt1rb8 liJUvBML1jhE9RLIad8RXAk53t8Oeb48bNzgYRGjDX1mW+WCTFMN1VmdXh7+T2Nj SFnrB3XCcaZGtHudWV1DZfCRyBb/syLXBDQRDpZ49Hv0Xs5Sei81tq4jaANFQAqD wSXxE07at5LbVUxO+/MFNNe8CsqKuFrfkFyMAv9D1zLIoX9yufxS+/wRwXlHd9DS I0EjDECx8eK2WSKdPyWEAiYfqOr3b+qGZGzTlFzkKkT3lo8dVmcrPi97xnVOaKlv 0L+6ADEN+3mcmppZH/BRFKvIa8QkXAb8cnkaj5Zk6ZhFFdC0Oa9dpCx21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBsDBNRNaffoKks0uwFAi7wz6dgfMB8GA1UdIwQY MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg6vTNtt z87MX3PyvzORTIoAKfLfq4EaHIPurNH+raKKoG1OXZw3jpnIGSxbaAvPbDLCPJOO 9F2+xh5ZBEhZgdPld/LSnKI5MKtxF369TA9HG6Wl1DOoeoVXVJpGpWjsN0uRnJD9 t71yJC5rFKhAGN+PssM/eDQXUyYSmekjGq8uiuBPf+aUMuvRqDQoIPgVCR3ZWngh W3DCH1uQ5w98y+HXZjXbLb8rXf32ztg9VcmhaVT9FQ1guKg1C85rbFW/JTYX5Pf7 Zr55aj3kBO9oyYaNOJC9CdvSQ8w/bhx9oiIMKmoiN5ZehiTFN1D5IZ6ICDkr7dC4 gFWt9+SFg8Slxw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:51:02 2025 by rpki-client