This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft File: X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft (raw, json) Hash identifier: Lq4Jpr8sL0ERtUMxV5kEXIFyKJzcXRwZktnAkrcsx30= Subject key identifier: 69:BC:B7:36:4C:36:15:E6:9D:5A:8E:7A:66:37:7E:31:66:57:AA:B8 Authority key identifier: 5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04 Certificate issuer: /CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204 Certificate serial: 019B5A1AB67A0CD01A219AD8E296227D3865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft Manifest number: 026D Signing time: Fri 26 Dec 2025 10:00:58 +0000 Manifest this update: Fri 26 Dec 2025 10:00:58 +0000 Manifest next update: Sat 27 Dec 2025 10:00:58 +0000 Files and hashes: 1: 8UVdNw9Tjppo478GX33LOZCZ8cE.roa (hash: xHw9+KBXqx4QOGCdYKePtsH/MkWtajsbjnbd18reXjM=) 2: X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl (hash: VHhn8jhn45wEGB+LMOlg4iPNcRd7gvFJxEgV4uQeqYM=) 3: u0GrLYuACL29DiJCWcYq6HEFJlU.roa (hash: cbSwt1t630uppqdr6/nRai1LaCLEx7Kek/cW9oYpqtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b6:7a:0c:d0:1a:21:9a:d8:e2:96:22:7d:38:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5feb7565e21cf5b07bd971c96ecc3a4a64fad204 Validity Not Before: Dec 26 10:00:58 2025 GMT Not After : Dec 27 10:00:58 2025 GMT Subject: CN=69bcb7364c3615e69d5a8e7a66377e316657aab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7e:7b:4c:45:e8:32:0d:7d:a1:0e:74:08:3c: 59:8d:67:5e:15:48:f7:a8:7d:f8:5a:52:e0:42:c1: 23:d3:dd:67:5d:7a:1c:19:90:93:e1:73:13:a1:ae: de:7f:ef:45:bf:b0:07:3d:83:fd:cc:f4:8c:3b:01: c3:a8:1c:8e:b3:db:cf:47:5d:1c:c5:b5:ed:d1:bf: e3:0a:d6:9c:ba:a2:ed:30:c4:a7:fa:0e:30:b6:04: 98:39:e8:cb:01:1a:92:ac:98:38:df:80:1b:e6:39: e1:ab:67:60:8d:c7:0b:60:59:0d:c9:06:39:be:ba: 5f:7f:06:19:ff:37:cd:7d:8e:58:e4:ef:1f:b4:f0: 06:fb:d7:ac:77:c3:e1:bf:4f:3f:f6:e4:b9:26:23: f7:f9:40:51:52:f0:d0:87:71:43:cd:60:0f:02:8e: f8:5d:f9:ee:22:b7:01:9a:41:dc:04:c5:f7:f9:a1: d4:a6:e6:07:e7:f7:db:d2:b0:e4:bf:90:b5:2e:a8: 59:a0:07:9c:c5:e5:92:37:14:8d:21:65:6b:93:83: c5:5d:d7:31:3e:7d:97:80:28:a4:18:e0:69:0b:5b: 0d:f0:22:9b:12:96:fa:a0:68:a5:ef:66:4c:b3:d6: f3:76:49:a5:ef:e6:bc:5a:bf:50:68:32:c6:2a:69: 66:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BC:B7:36:4C:36:15:E6:9D:5A:8E:7A:66:37:7E:31:66:57:AA:B8 X509v3 Authority Key Identifier: keyid:5F:EB:75:65:E2:1C:F5:B0:7B:D9:71:C9:6E:CC:3A:4A:64:FA:D2:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-t1ZeIc9bB72XHJbsw6SmT60gQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3eebf9-0e05-48b6-8450-dcf5b86693c9/1/X-t1ZeIc9bB72XHJbsw6SmT60gQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ab:b3:72:8c:de:b2:63:e1:c3:f4:f0:4f:f7:f2:34:68:65: 3b:b5:15:c3:81:3c:79:e7:19:ec:47:be:d0:00:c1:75:0f:d2: ad:13:46:12:2e:c8:40:d4:ea:17:5b:1d:58:cd:dc:5c:7b:6f: f0:01:38:59:42:fe:d4:f1:68:7c:fb:d0:b1:f2:6b:4d:cb:72: c2:eb:d9:95:1c:21:6f:9b:75:76:0c:04:4a:55:bc:08:ec:9b: 57:be:5c:18:31:34:07:4d:22:51:11:52:fa:23:26:61:11:ca: f4:be:a1:da:d7:77:0a:76:ca:e3:a2:29:7c:ab:99:9a:cc:7d: 3c:80:ec:0f:01:a6:a5:5a:ec:23:85:1b:30:50:17:e6:d0:04: 6a:89:a6:ea:1f:a0:a6:10:6f:ec:68:35:b7:d7:34:95:ef:cd: a8:18:1f:10:04:b5:7d:3c:5d:10:2b:0a:ad:92:22:a2:37:45: e3:05:39:18:d7:4b:30:62:77:8f:8d:f8:98:96:48:a0:35:8d: a2:e9:e1:7e:5c:84:2c:7c:70:c5:fc:a3:4a:13:2f:6d:06:6b: 92:10:7b:f7:8d:ad:52:7e:12:9a:fa:d1:c5:97:69:e2:1a:61: 3e:8b:37:41:a4:ba:f7:4b:c7:45:99:73:c8:9c:ae:12:69:b1: b9:91:1f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrZ6DNAaIZrY4pYifThlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZWI3NTY1ZTIxY2Y1YjA3YmQ5NzFjOTZlY2MzYTRhNjRm YWQyMDQwHhcNMjUxMjI2MTAwMDU4WhcNMjUxMjI3MTAwMDU4WjAzMTEwLwYDVQQD Eyg2OWJjYjczNjRjMzYxNWU2OWQ1YThlN2E2NjM3N2UzMTY2NTdhYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn57TEXoMg19oQ50CDxZjWdeFUj3 qH34WlLgQsEj091nXXocGZCT4XMToa7ef+9Fv7AHPYP9zPSMOwHDqByOs9vPR10c xbXt0b/jCtacuqLtMMSn+g4wtgSYOejLARqSrJg434Ab5jnhq2dgjccLYFkNyQY5 vrpffwYZ/zfNfY5Y5O8ftPAG+9esd8Phv08/9uS5JiP3+UBRUvDQh3FDzWAPAo74 XfnuIrcBmkHcBMX3+aHUpuYH5/fb0rDkv5C1LqhZoAecxeWSNxSNIWVrk4PFXdcx Pn2XgCikGOBpC1sN8CKbEpb6oGil72ZMs9bzdkml7+a8Wr9QaDLGKmlmZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm8tzZMNhXmnVqOemY3fjFmV6q4MB8GA1UdIwQY MBaAFF/rdWXiHPWwe9lxyW7MOkpk+tIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAt ZGNmNWI4NjY5M2M5LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zZWViZjktMGUwNS00OGI2LTg0NTAtZGNmNWI4NjY5M2M5 LzEvWC10MVplSWM5YkI3MlhISmJzdzZTbVQ2MGdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKuzcoze smPhw/TwT/fyNGhlO7UVw4E8eecZ7Ee+0ADBdQ/SrRNGEi7IQNTqF1sdWM3cXHtv 8AE4WUL+1PFofPvQsfJrTctywuvZlRwhb5t1dgwESlW8COybV75cGDE0B00iURFS +iMmYRHK9L6h2td3CnbK46IpfKuZmsx9PIDsDwGmpVrsI4UbMFAX5tAEaomm6h+g phBv7Gg1t9c0le/NqBgfEAS1fTxdECsKrZIiojdF4wU5GNdLMGJ3j434mJZIoDWN ounhflyELHxwxfyjShMvbQZrkhB7942tUn4SmvrRxZdp4hphPos3QaS690vHRZlz yJyuEmmxuZEfCw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:52 2025 by rpki-client