This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft File: x2omXKitcnOooTChdjKD0v8bTdo.mft (raw, json) Hash identifier: jJ6ndnuZ+8y9Mgi6jtXK810jZTomg38msr/lUvtrqxs= Subject key identifier: 80:FC:46:FD:34:DD:8B:F9:24:9E:6B:02:D6:7B:74:67:25:86:BD:22 Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Certificate serial: 019B18714D92D0CD4859C26CF46F7EFF2BD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft Manifest number: 159B Signing time: Sat 13 Dec 2025 16:00:37 +0000 Manifest this update: Sat 13 Dec 2025 16:00:37 +0000 Manifest next update: Sun 14 Dec 2025 16:00:37 +0000 Files and hashes: 1: 2NacgtrTAmPDVQ9lKq5CE6Ehhnw.asa (hash: MpQCPMnmPtD2sJGqmtD1rBnmiwGX8J1+k78/7G1N5Nw=) 2: nHRmCOgf4MDZq-VWKLaXfvZ-bz8.roa (hash: 5Mcf4NqGw75Ujcm8ujMV0dwvrhU39vCuPFd4mY9vPEw=) 3: x2omXKitcnOooTChdjKD0v8bTdo.crl (hash: BoZ1/VyidmSmNjxtOlKQHd1rq9UkNnulomJ2jr+OdCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:71:4d:92:d0:cd:48:59:c2:6c:f4:6f:7e:ff:2b:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Validity Not Before: Dec 13 16:00:37 2025 GMT Not After : Dec 14 16:00:37 2025 GMT Subject: CN=80fc46fd34dd8bf9249e6b02d67b74672586bd22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:dd:fb:cc:c1:46:bb:e9:bb:27:cc:ca:50: c0:20:bb:5d:bc:62:89:11:6e:96:ec:a1:71:6e:73: 4b:9d:68:5a:28:ca:27:d1:38:29:ef:c1:4d:e7:a6: 58:6d:8f:f8:0d:30:34:b3:09:e6:30:d3:e2:a5:20: f3:14:6e:57:2a:68:84:90:3c:ab:14:1c:de:51:04: 4e:80:5d:80:fe:c7:d1:1f:ca:e5:e6:7c:01:ab:a0: 3c:81:c9:91:a9:e8:70:19:b6:44:f9:bc:52:08:67: 4a:65:e7:ec:f6:4b:18:60:34:3d:05:33:65:de:b7: 2c:ea:fc:7b:c5:e6:25:ee:d2:1c:3f:67:1b:c9:e3: 08:a6:81:0a:93:e2:08:6f:f7:a7:a2:c0:ac:bb:0a: 15:92:bb:5b:17:ae:ac:61:d4:b5:3b:e9:7a:40:b7: 25:19:41:f6:79:f2:15:92:06:d7:07:d5:df:88:a5: 3b:17:b2:d7:3b:d7:58:92:2e:39:43:f7:78:09:e8: 35:85:3a:ab:e0:23:56:ac:70:90:7c:b3:d7:f1:cc: ae:a5:8a:13:4e:d4:b7:d1:65:b9:58:20:de:ea:f3: 60:53:9f:ad:04:b4:8a:32:c5:e7:42:58:36:df:63: 0e:1e:86:67:56:16:d9:48:a0:42:21:5c:87:04:05: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FC:46:FD:34:DD:8B:F9:24:9E:6B:02:D6:7B:74:67:25:86:BD:22 X509v3 Authority Key Identifier: keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:86:84:2a:b0:c1:6c:2b:0b:4e:02:be:04:0c:9e:93:fb:d1: 05:01:4d:e3:6b:86:03:7a:08:94:0a:d1:6d:5b:5b:9c:ac:6a: 28:ec:92:3c:37:87:6e:46:b4:cc:b9:80:80:4f:21:03:93:05: 96:de:a6:e4:4b:4b:16:8d:28:72:d5:96:f0:41:16:c6:17:87: 33:e9:2f:08:f4:7c:49:6f:0a:c2:13:e2:78:4d:3b:d1:9c:6b: 04:33:95:93:a4:a7:4e:f7:ab:7a:f2:4d:b2:6f:ab:6a:5a:15: 34:9a:3e:23:ea:d8:9a:2f:e9:a8:42:7e:0d:17:bd:21:12:98: c9:d4:d0:3b:ac:66:fa:29:f8:4a:d1:dc:95:c6:a0:f0:d5:ce: 97:2a:69:d7:69:68:c5:d7:aa:d6:e5:fc:da:bd:a7:da:50:46: 8e:d1:8c:aa:fc:e7:e8:a8:03:74:3a:51:e7:da:96:3a:3f:26: bd:13:52:48:56:d1:ff:f5:73:11:7a:95:2d:d9:5b:57:eb:2e: cc:fe:8d:61:0c:4e:b3:e1:e5:6c:0e:11:74:83:0d:be:dc:d4: 9d:52:54:a9:aa:52:7d:01:b1:20:26:7d:13:56:a7:26:ce:71: 1a:bb:ed:f3:48:41:db:31:01:ec:73:49:62:af:52:06:2b:fe: 4d:94:76:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYcU2S0M1IWcJs9G9+/yvUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx YjRkZGEwHhcNMjUxMjEzMTYwMDM3WhcNMjUxMjE0MTYwMDM3WjAzMTEwLwYDVQQD Eyg4MGZjNDZmZDM0ZGQ4YmY5MjQ5ZTZiMDJkNjdiNzQ2NzI1ODZiZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSPd+8zBRrvpuyfMylDAILtdvGKJ EW6W7KFxbnNLnWhaKMon0Tgp78FN56ZYbY/4DTA0swnmMNPipSDzFG5XKmiEkDyr FBzeUQROgF2A/sfRH8rl5nwBq6A8gcmRqehwGbZE+bxSCGdKZefs9ksYYDQ9BTNl 3rcs6vx7xeYl7tIcP2cbyeMIpoEKk+IIb/enosCsuwoVkrtbF66sYdS1O+l6QLcl GUH2efIVkgbXB9XfiKU7F7LXO9dYki45Q/d4Ceg1hTqr4CNWrHCQfLPX8cyupYoT TtS30WW5WCDe6vNgU5+tBLSKMsXnQlg232MOHoZnVhbZSKBCIVyHBAUq3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFID8Rv003Yv5JJ5rAtZ7dGclhr0iMB8GA1UdIwQY MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt N2U5ODM3YTkyMjhjLzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAloaEKrDB bCsLTgK+BAyek/vRBQFN42uGA3oIlArRbVtbnKxqKOySPDeHbka0zLmAgE8hA5MF lt6m5EtLFo0octWW8EEWxheHM+kvCPR8SW8KwhPieE070ZxrBDOVk6SnTverevJN sm+raloVNJo+I+rYmi/pqEJ+DRe9IRKYydTQO6xm+in4StHclcag8NXOlypp12lo xdeq1uX82r2n2lBGjtGMqvzn6KgDdDpR59qWOj8mvRNSSFbR//VzEXqVLdlbV+su zP6NYQxOs+HlbA4RdIMNvtzUnVJUqapSfQGxICZ9E1anJs5xGrvt80hB2zEB7HNJ Yq9SBiv+TZR2dg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:53 2025 by rpki-client