This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft File: x2cScLac7FBGBrEmxMqDOBavfaQ.mft (raw, json) Hash identifier: y7I+dJDRsNK/w3EUehKQFsQzO/3r3vbr9J3IXAMQHns= Subject key identifier: 33:24:72:DD:03:2E:7E:A0:4A:00:67:1A:50:CF:1D:CD:F7:08:1A:8F Authority key identifier: C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4 Certificate issuer: /CN=c7671270b69cec504606b126c4ca833816af7da4 Certificate serial: 019B59E455C1EAD56208719D94647DF77553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft Manifest number: 086B Signing time: Fri 26 Dec 2025 09:01:34 +0000 Manifest this update: Fri 26 Dec 2025 09:01:34 +0000 Manifest next update: Sat 27 Dec 2025 09:01:34 +0000 Files and hashes: 1: l2_sIOs4HMyf2OgLQgyJY2hl_f0.roa (hash: ux1UyG4HPgGv7Al9zX4rAYUS2Y3nKcLtZPuBWZDi2xs=) 2: x2cScLac7FBGBrEmxMqDOBavfaQ.crl (hash: 0m9i0z+WBqv1HtZFb19d1GdnemciRBlSRnf77HjvRrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:55:c1:ea:d5:62:08:71:9d:94:64:7d:f7:75:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7671270b69cec504606b126c4ca833816af7da4 Validity Not Before: Dec 26 09:01:34 2025 GMT Not After : Dec 27 09:01:34 2025 GMT Subject: CN=332472dd032e7ea04a00671a50cf1dcdf7081a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:36:1f:7b:c2:9e:23:16:67:6b:6d:3a:f4: 25:6f:70:1e:1e:17:2e:5f:f3:18:33:69:52:2a:a1: ed:a0:58:4e:d3:1b:0d:dc:96:33:f8:82:46:7c:d9: 19:ec:28:74:c5:80:c2:24:c7:94:67:e4:55:d0:3c: d2:0c:e4:2e:55:25:70:f5:18:65:a8:40:2c:36:80: d9:0f:b5:5c:a6:0c:4b:86:9e:38:e7:fa:ed:2f:62: 96:2c:31:4d:fd:51:e8:5a:5c:0c:40:cb:12:0c:ff: a6:6d:36:30:89:6a:9b:ac:b0:67:1d:c4:ca:32:d3: 20:28:fa:8e:69:99:1e:e5:b1:13:fb:6b:7d:57:b5: 05:88:8e:b2:32:db:4e:3e:9b:c2:6e:fd:a7:98:b2: da:46:cf:26:50:23:75:b8:3e:c4:df:65:e5:2e:7e: 52:d4:1a:1b:56:b6:ad:3b:dc:9e:01:98:54:22:80: 74:6a:98:22:2e:5a:66:55:99:7e:76:7d:a0:79:54: ec:3d:29:cd:34:3d:b0:78:36:06:ba:0c:f8:85:98: d5:55:db:08:ea:fa:c0:c4:01:d0:69:ff:49:96:4e: 79:09:31:a6:9b:5a:4e:fb:e0:50:bb:54:68:cb:c2: e1:3c:ab:e6:9e:28:10:82:03:b3:fe:93:51:83:f5: ce:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:24:72:DD:03:2E:7E:A0:4A:00:67:1A:50:CF:1D:CD:F7:08:1A:8F X509v3 Authority Key Identifier: keyid:C7:67:12:70:B6:9C:EC:50:46:06:B1:26:C4:CA:83:38:16:AF:7D:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2cScLac7FBGBrEmxMqDOBavfaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/aeb70a-a3fc-4463-a7cd-986ea203f9ec/1/x2cScLac7FBGBrEmxMqDOBavfaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:07:d1:df:03:64:cd:b4:87:a3:68:66:64:fd:b2:84:73:60: ee:3c:3a:68:ec:bc:8b:29:20:82:c0:ce:6d:10:49:10:e7:36: 29:d6:99:fa:de:c6:b1:a9:cf:a3:a9:f1:60:32:61:b9:ac:16: f8:ce:3f:4b:e2:29:eb:2a:3f:8c:17:8d:7f:1f:a9:4f:46:66: 00:8d:ea:e8:ca:01:92:b4:85:e7:df:fd:29:58:8f:3a:45:fc: 50:a3:f5:fc:5a:70:ce:2f:4f:e1:d7:77:8a:88:41:e8:a0:74: 60:8d:97:43:50:22:69:a0:26:45:dc:e0:d8:81:b9:44:86:3f: e0:97:1a:a6:52:f8:6e:57:5a:47:68:8b:63:a1:63:b5:fb:59: 82:90:ea:d3:96:81:8b:7f:b7:4d:c2:d0:59:a0:6b:e0:14:fc: 0d:51:f0:b1:ce:17:04:a7:43:ac:b9:60:5d:bf:7a:40:52:3d: 32:17:2f:28:38:23:d6:24:a9:d1:1e:b4:94:7f:b7:df:71:4a: 7b:2d:dd:d8:04:20:89:9c:85:b2:56:0a:9f:bc:db:b8:8c:af: 77:c3:27:85:27:8c:da:30:5c:56:5b:53:75:7f:99:23:54:01: 38:aa:2d:b7:1b:42:dd:5c:82:95:11:0b:04:1d:d4:4f:dc:e0: 56:77:48:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FXB6tViCHGdlGR993VTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NjcxMjcwYjY5Y2VjNTA0NjA2YjEyNmM0Y2E4MzM4MTZh ZjdkYTQwHhcNMjUxMjI2MDkwMTM0WhcNMjUxMjI3MDkwMTM0WjAzMTEwLwYDVQQD EygzMzI0NzJkZDAzMmU3ZWEwNGEwMDY3MWE1MGNmMWRjZGY3MDgxYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsc2H3vCniMWZ2ttOvQlb3AeHhcu X/MYM2lSKqHtoFhO0xsN3JYz+IJGfNkZ7Ch0xYDCJMeUZ+RV0DzSDOQuVSVw9Rhl qEAsNoDZD7VcpgxLhp445/rtL2KWLDFN/VHoWlwMQMsSDP+mbTYwiWqbrLBnHcTK MtMgKPqOaZke5bET+2t9V7UFiI6yMttOPpvCbv2nmLLaRs8mUCN1uD7E32XlLn5S 1BobVratO9yeAZhUIoB0apgiLlpmVZl+dn2geVTsPSnNND2weDYGugz4hZjVVdsI 6vrAxAHQaf9Jlk55CTGmm1pO++BQu1Roy8LhPKvmnigQggOz/pNRg/XO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMkct0DLn6gSgBnGlDPHc33CBqPMB8GA1UdIwQY MBaAFMdnEnC2nOxQRgaxJsTKgzgWr32kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2Qt OTg2ZWEyMDNmOWVjLzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9hZWI3MGEtYTNmYy00NDYzLWE3Y2QtOTg2ZWEyMDNmOWVj LzEveDJjU2NMYWM3RkJHQnJFbXhNcURPQmF2ZmFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQfR3wNk zbSHo2hmZP2yhHNg7jw6aOy8iykggsDObRBJEOc2KdaZ+t7GsanPo6nxYDJhuawW +M4/S+Ip6yo/jBeNfx+pT0ZmAI3q6MoBkrSF59/9KViPOkX8UKP1/Fpwzi9P4dd3 iohB6KB0YI2XQ1AiaaAmRdzg2IG5RIY/4JcaplL4bldaR2iLY6FjtftZgpDq05aB i3+3TcLQWaBr4BT8DVHwsc4XBKdDrLlgXb96QFI9MhcvKDgj1iSp0R60lH+333FK ey3d2AQgiZyFslYKn7zbuIyvd8MnhSeM2jBcVltTdX+ZI1QBOKottxtC3VyClREL BB3UT9zgVndIyg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:03 2025 by rpki-client