This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json) Hash identifier: X94PJdP6p1GilmWKyq9GKhIUgUzsW3CWaJnB4jR0m7s= Subject key identifier: 46:21:91:EE:00:9B:22:D5:48:8A:26:08:7E:68:CE:E3:13:AB:00:CB Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Certificate serial: 019AF276CD191764D27649DE3A73ACD0BA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: AHyOG1MnctFTYdTzOeujyYGDJDQ.roa (hash: iaAt0/bbvCRZ2f2g8keArsuPB1vBUzluOk1uRDDqIZ4=) 2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: 09wTr6puAonH/bzpo136mv08Ns/P5SyXUE4E7/Rx4N8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cd:19:17:64:d2:76:49:de:3a:73:ac:d0:ba:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=462191ee009b22d5488a26087e68cee313ab00cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:32:5d:12:49:52:59:5e:0c:3a:ea:0f:08: d7:85:fd:2f:a5:7c:e5:58:53:b2:bb:3a:3e:a6:b7: 6f:be:46:2c:24:ed:b8:b4:47:1d:62:ae:d4:5b:6c: e1:7a:a0:7f:65:1f:da:e6:f2:4e:7c:9b:61:5b:38: eb:64:f3:68:6c:b9:2b:dc:84:a3:15:a2:c6:f8:3b: 77:9c:60:fa:2f:70:9b:de:bd:12:a4:9f:8a:71:07: a2:82:9e:5c:f2:0c:4c:b7:00:84:6c:39:9c:b7:b2: 28:20:d9:9f:93:10:03:f9:6e:94:df:74:75:6a:48: 18:a4:99:51:ba:b3:19:a5:42:93:6c:3c:72:e5:3e: f7:be:da:fa:f6:d3:37:9d:78:4b:30:8b:55:4b:22: 81:2f:b2:f7:8e:ec:04:2c:1d:95:5f:d1:95:d5:aa: c3:ef:98:20:21:cb:68:dd:b1:9b:42:a3:1b:45:18: 64:e6:66:25:de:db:7c:9f:35:2d:f7:38:6e:a8:e3: 19:e0:62:b4:e2:72:0e:af:e1:fa:b7:99:7f:3b:ca: 05:1c:92:2b:54:cc:88:be:3c:fe:02:16:7c:1e:2c: 00:c1:e8:34:57:3c:8e:3b:b7:c6:5c:6d:d4:6f:f3: e1:e8:5e:8b:12:1e:65:e9:ba:e0:29:10:bd:c5:17: 8b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:21:91:EE:00:9B:22:D5:48:8A:26:08:7E:68:CE:E3:13:AB:00:CB X509v3 Authority Key Identifier: keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b6:c0:3e:9f:16:4e:dd:b3:99:51:78:8c:a7:d6:e1:dd:c5: d3:15:cb:2f:88:77:e5:14:f4:d9:7e:5c:48:55:80:04:ee:c7: 55:36:aa:a2:eb:e2:6e:e6:cd:5e:4b:54:e2:02:85:17:68:27: 79:09:a4:32:f5:20:93:88:ae:74:34:f5:ce:df:e9:36:a5:0a: e7:46:7c:35:50:48:44:ee:6a:2c:9e:50:f8:b4:85:96:a5:a6: e6:e7:03:27:2f:7d:fb:59:a4:f5:f6:3d:d1:f0:a1:7a:be:d5: b6:6d:20:f6:0a:58:ef:31:c9:ff:3b:9c:34:fb:53:80:83:05: ae:bd:f8:00:08:48:d8:05:4f:6c:a4:46:45:b6:6d:5a:94:9e: 0d:33:b6:cb:3a:a3:15:0d:13:ba:41:a0:a7:c7:88:7d:80:8b: c9:66:35:9c:84:97:c5:79:ec:f3:13:a4:14:44:ce:0f:d3:71: 5e:68:79:1e:68:e7:87:f9:63:12:63:66:49:9c:70:cc:23:0d: 85:c2:cf:bd:8b:ff:77:aa:f0:51:eb:81:a2:e5:a9:dc:65:df: 7a:43:b9:2a:cd:46:38:85:2a:27:61:c4:4d:22:56:6f:d6:bf: 94:0e:11:93:fc:38:26:52:0a:28:a7:b0:f8:04:7c:af:75:87: 42:42:56:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds0ZF2TSdkneOnOs0LpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZWRhNmU1MmY4Nzc5NjBhOWUwZmJjOTNlNjgzZmU2NDg0 YTZiMDQwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg0NjIxOTFlZTAwOWIyMmQ1NDg4YTI2MDg3ZTY4Y2VlMzEzYWIwMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXYyXRJJUlleDDrqDwjXhf0vpXzl WFOyuzo+prdvvkYsJO24tEcdYq7UW2zheqB/ZR/a5vJOfJthWzjrZPNobLkr3ISj FaLG+Dt3nGD6L3Cb3r0SpJ+KcQeigp5c8gxMtwCEbDmct7IoINmfkxAD+W6U33R1 akgYpJlRurMZpUKTbDxy5T73vtr69tM3nXhLMItVSyKBL7L3juwELB2VX9GV1arD 75ggIcto3bGbQqMbRRhk5mYl3tt8nzUt9zhuqOMZ4GK04nIOr+H6t5l/O8oFHJIr VMyIvjz+AhZ8HiwAweg0VzyOO7fGXG3Ub/Ph6F6LEh5l6brgKRC9xReLkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYhke4AmyLVSIomCH5ozuMTqwDLMB8GA1UdIwQY MBaAFMftpuUvh3lgqeD7yT5oP+ZISmsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDIt ZTVmZDkxZDEzOTUwLzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iNmRiMzYtY2Y4Ni00MTcyLThkZDItZTVmZDkxZDEzOTUw LzEveC0ybTVTLUhlV0NwNFB2SlBtZ181a2hLYXdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibbAPp8W Tt2zmVF4jKfW4d3F0xXLL4h35RT02X5cSFWABO7HVTaqouvibubNXktU4gKFF2gn eQmkMvUgk4iudDT1zt/pNqUK50Z8NVBIRO5qLJ5Q+LSFlqWm5ucDJy99+1mk9fY9 0fCher7Vtm0g9gpY7zHJ/zucNPtTgIMFrr34AAhI2AVPbKRGRbZtWpSeDTO2yzqj FQ0TukGgp8eIfYCLyWY1nISXxXns8xOkFETOD9NxXmh5Hmjnh/ljEmNmSZxwzCMN hcLPvYv/d6rwUeuBouWp3GXfekO5Ks1GOIUqJ2HETSJWb9a/lA4Rk/w4JlIKKKew +AR8r3WHQkJWpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:53 2025 by rpki-client