This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json) Hash identifier: BkpNaEkYIBYNJ7241zgZU9k1MH6xPZCOdkqiJb5H/T8= Subject key identifier: 2D:F3:2C:C1:27:06:25:4F:0D:47:C9:01:22:10:D4:88:B5:95:D6:C2 Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Certificate serial: 019B1B04A54255DEB0EBE2D06AFA0B39016F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft Manifest number: 118B Signing time: Sun 14 Dec 2025 04:00:47 +0000 Manifest this update: Sun 14 Dec 2025 04:00:47 +0000 Manifest next update: Mon 15 Dec 2025 04:00:47 +0000 Files and hashes: 1: PnVATVHozDfPNeX2JOaIkRbv6D8.roa (hash: 4Aq3QEbr9dXg3c82vnEqBRKtSSDl04fMwo+ZjR3NIuA=) 2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: pm7noxwS65mu6I9Kdf9F2smX/EBNaVb7gMZE9irDUAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:a5:42:55:de:b0:eb:e2:d0:6a:fa:0b:39:01:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93 Validity Not Before: Dec 14 04:00:47 2025 GMT Not After : Dec 15 04:00:47 2025 GMT Subject: CN=2df32cc12706254f0d47c9012210d488b595d6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:77:69:1b:5c:45:ec:7e:77:28:0a:5c:66: a0:c4:10:ad:12:54:15:d1:47:16:09:f8:a2:c8:7e: f7:fe:9f:8f:c0:ce:9d:d4:f9:e4:cd:0b:59:4d:ca: 27:d8:ee:51:cd:aa:c3:53:67:ae:fc:a2:6a:8b:48: af:dc:12:7c:41:9c:d7:b3:8e:8a:7b:8a:3a:0e:66: 36:3f:d2:ba:ac:c7:16:6d:b9:1f:9b:02:c3:67:f6: ce:0c:8b:d3:e5:a3:d5:88:a7:68:9a:70:0a:fb:27: 4a:ea:05:10:4c:0e:07:45:b8:d9:ef:d1:ae:57:3d: 8d:be:94:7d:3a:96:1e:06:ff:24:ae:11:86:64:65: 95:77:f0:81:bc:51:75:fa:94:8a:30:c5:e8:69:d6: 1a:94:9b:fa:82:84:03:fc:0a:a1:3f:f6:62:97:0c: 92:8d:cc:91:f1:28:3e:02:7a:a4:b7:8a:77:fe:8c: 9a:ee:f0:12:d3:ca:83:73:75:1c:a9:5b:6c:5b:3a: 0c:e3:a1:1a:a3:51:0c:7b:8d:eb:c0:7a:af:6c:e4: 0b:fc:37:51:54:5b:92:d1:50:9a:20:ac:85:9c:5c: 59:15:25:f3:cb:37:a3:6c:fb:95:d1:2a:6d:3f:75: 28:89:43:96:ba:75:51:07:91:3f:67:51:97:5e:1c: 2d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F3:2C:C1:27:06:25:4F:0D:47:C9:01:22:10:D4:88:B5:95:D6:C2 X509v3 Authority Key Identifier: keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:11:57:98:8b:12:8d:ba:f5:a8:59:b8:69:00:3a:03:52: db:21:5b:4d:5f:6e:37:ff:b0:51:a2:f4:37:d7:83:34:a8:e1: f4:40:89:a2:eb:26:6d:db:79:f1:bf:8f:a1:27:28:b1:29:93: ed:4d:7f:49:62:03:72:b3:c2:73:08:14:73:98:e5:1d:bd:24: 03:d8:cc:00:cc:08:7b:c4:75:43:12:fa:43:f1:98:47:5c:36: 8a:d6:3f:e3:26:3a:ef:04:b0:56:55:98:9a:f2:0d:23:c0:17: e4:2e:76:2a:42:bd:60:25:3a:8e:a6:d3:4a:76:ae:96:fa:d8: 4d:ea:c5:2a:b2:b7:cc:66:10:4b:c7:90:1c:a9:70:5f:50:36: 2b:97:86:07:8d:20:1f:cc:16:6d:4f:ea:c3:10:1a:67:a0:2c: b5:e0:9d:f3:cb:e7:84:1d:03:b9:4f:7b:c2:e0:74:86:19:74: ec:5e:49:9c:aa:dd:20:1f:49:4a:c6:e4:24:62:b9:32:4c:f3: d7:4b:82:2a:36:71:d0:2b:28:14:b2:eb:38:43:eb:3b:69:dd: 34:65:1d:46:1a:1e:2e:b2:d3:25:ac:2a:d3:a8:d8:b3:27:9c: 9a:ba:2d:99:3f:78:79:0d:3f:06:25:4b:80:91:42:89:f9:63: f8:80:02:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBKVCVd6w6+LQavoLOQFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTRkODA0NjQ5NzhmNmViZmJhOTVmNzQ1YTMzMDU3MjZm NzJkOTMwHhcNMjUxMjE0MDQwMDQ3WhcNMjUxMjE1MDQwMDQ3WjAzMTEwLwYDVQQD EygyZGYzMmNjMTI3MDYyNTRmMGQ0N2M5MDEyMjEwZDQ4OGI1OTVkNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Z3aRtcRex+dygKXGagxBCtElQV 0UcWCfiiyH73/p+PwM6d1PnkzQtZTcon2O5RzarDU2eu/KJqi0iv3BJ8QZzXs46K e4o6DmY2P9K6rMcWbbkfmwLDZ/bODIvT5aPViKdomnAK+ydK6gUQTA4HRbjZ79Gu Vz2NvpR9OpYeBv8krhGGZGWVd/CBvFF1+pSKMMXoadYalJv6goQD/AqhP/ZilwyS jcyR8Sg+Anqkt4p3/oya7vAS08qDc3UcqVtsWzoM46Eao1EMe43rwHqvbOQL/DdR VFuS0VCaIKyFnFxZFSXzyzejbPuV0SptP3UoiUOWunVRB5E/Z1GXXhwtBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3zLMEnBiVPDUfJASIQ1Ii1ldbCMB8GA1UdIwQY MBaAFF+k2ARkl49uv7qV90WjMFcm9y2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYt NGZhNjI0MmI4YTNhLzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMDUwYjQtOWJhMC00ZTg1LTlkNzYtNGZhNjI0MmI4YTNh LzEvWDZUWUJHU1hqMjZfdXBYM1JhTXdWeWIzTFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW0RV5iL Eo269ahZuGkAOgNS2yFbTV9uN/+wUaL0N9eDNKjh9ECJousmbdt58b+PoScosSmT 7U1/SWIDcrPCcwgUc5jlHb0kA9jMAMwIe8R1QxL6Q/GYR1w2itY/4yY67wSwVlWY mvINI8AX5C52KkK9YCU6jqbTSnaulvrYTerFKrK3zGYQS8eQHKlwX1A2K5eGB40g H8wWbU/qwxAaZ6AsteCd88vnhB0DuU97wuB0hhl07F5JnKrdIB9JSsbkJGK5Mkzz 10uCKjZx0CsoFLLrOEPrO2ndNGUdRhoeLrLTJawq06jYsyecmrotmT94eQ0/BiVL gJFCiflj+IAC8A== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:34 2025 by rpki-client