This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json) Hash identifier: uI1pLKOhChoD65FHZSOlAwodLow2NHu2L+7UlnPVGEw= Subject key identifier: 85:7C:F0:FA:B9:33:51:3E:C9:3B:71:70:C7:08:7F:7D:07:0D:EF:C0 Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Certificate serial: 019B5AF6768767B5933D70B5C7B3C47017BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft Manifest number: 0103 Signing time: Fri 26 Dec 2025 14:01:00 +0000 Manifest this update: Fri 26 Dec 2025 14:01:00 +0000 Manifest next update: Sat 27 Dec 2025 14:01:00 +0000 Files and hashes: 1: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: SYIR4n1CzR8PLSoB8fttx2OOx9dOu6ZPWSkU55QWeN4=) 2: fNWf8gF7iXGvViphR_N8dfoAxbs.roa (hash: aazZL/oDilKF6hXZ5Ap5LBwXM/kHZtXfME42Y75LwwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:76:87:67:b5:93:3d:70:b5:c7:b3:c4:70:17:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73 Validity Not Before: Dec 26 14:01:00 2025 GMT Not After : Dec 27 14:01:00 2025 GMT Subject: CN=857cf0fab933513ec93b7170c7087f7d070defc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:aa:4a:e4:56:1b:50:2a:1a:71:60:95:df: cd:55:df:c3:6c:bb:5c:4d:93:0e:b6:9d:91:82:32: 1c:da:30:bb:96:ad:0a:06:4f:1c:59:4b:79:3a:95: 62:09:0d:8a:e3:47:01:f8:df:02:98:39:aa:4b:c8: 66:54:30:30:87:e3:36:e5:c2:96:4f:0f:02:e9:22: dc:bc:7b:10:d4:88:ce:6d:3d:8c:cc:f0:e8:0c:4b: 6e:74:e9:44:1d:5e:ab:11:96:d4:b5:80:64:58:9c: 5f:07:2f:d4:83:ae:19:92:57:d6:73:f9:8a:d0:13: 31:44:8c:4e:fa:18:ac:4f:cb:ca:77:7e:b9:b1:92: bb:5f:ea:1a:bb:7f:b9:1e:11:c8:a1:81:71:ad:50: dc:c6:cd:e8:62:ed:85:ba:5e:ea:16:56:7b:84:ee: 6f:3d:b3:26:aa:1b:9e:c8:3f:28:87:f9:d6:56:a9: 13:cc:29:88:de:c6:36:36:9f:96:f1:13:23:75:47: e1:e6:72:ad:b0:bb:aa:c8:f2:d4:69:a5:4b:3e:92: 48:ad:bd:17:f2:d3:ad:12:0b:f5:80:b7:79:2a:7b: e6:4d:16:c9:0f:e8:bd:c5:e3:ac:dc:57:de:c7:aa: 9e:27:03:35:29:27:00:e3:14:7a:39:ad:7b:6a:4b: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7C:F0:FA:B9:33:51:3E:C9:3B:71:70:C7:08:7F:7D:07:0D:EF:C0 X509v3 Authority Key Identifier: keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:9b:22:48:27:01:92:1b:2c:5d:68:bd:18:b9:2b:fd:8d:a7: b8:76:d0:d0:e1:7b:d0:3e:cb:29:24:a9:be:b8:c0:d2:69:d7: 5f:b7:3f:31:20:85:ad:1b:40:39:55:2b:27:3c:df:c8:28:8a: 03:ae:68:c5:f3:9f:65:af:5d:ad:c0:28:a8:2f:98:8d:7d:13: 69:0b:42:e7:08:69:3c:12:95:12:04:ed:97:77:f6:59:4a:47: 7c:66:11:b7:ea:42:e1:20:d4:e9:4c:37:6a:c6:6e:65:4f:49: 6e:00:96:d2:89:3e:0a:40:57:0a:61:17:ed:f3:ce:d6:96:cf: df:8c:1f:b6:30:cb:b2:66:e9:cf:11:84:ad:73:ac:77:83:4a: 82:42:40:f2:e2:ff:5a:97:47:97:16:09:24:3b:36:cc:a6:3a: 88:cf:4b:a6:6c:98:95:eb:34:8c:c3:50:8d:9c:a5:23:e9:d2: c1:fb:09:45:ec:2c:6f:d1:82:7a:5f:dc:bb:a4:29:6b:d6:ec: b2:3b:ad:e3:21:de:37:6d:e1:f3:e7:dc:e6:16:02:fd:64:2a: 35:ce:60:0f:e3:bb:7c:0b:18:02:0c:1b:e6:bb:2b:5e:68:39: 91:3e:81:be:ab:c8:d4:88:2c:d9:36:1e:6a:fc:41:63:d9:ea: 54:ff:b5:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9naHZ7WTPXC1x7PEcBe/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNmI5MDAxOWQ0ZDJiNTJhYjRjYWY2NzFjMzdlOWM0ZDAz YWRhNzMwHhcNMjUxMjI2MTQwMTAwWhcNMjUxMjI3MTQwMTAwWjAzMTEwLwYDVQQD Eyg4NTdjZjBmYWI5MzM1MTNlYzkzYjcxNzBjNzA4N2Y3ZDA3MGRlZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/KqSuRWG1AqGnFgld/NVd/DbLtc TZMOtp2RgjIc2jC7lq0KBk8cWUt5OpViCQ2K40cB+N8CmDmqS8hmVDAwh+M25cKW Tw8C6SLcvHsQ1IjObT2MzPDoDEtudOlEHV6rEZbUtYBkWJxfBy/Ug64ZklfWc/mK 0BMxRIxO+hisT8vKd365sZK7X+oau3+5HhHIoYFxrVDcxs3oYu2Ful7qFlZ7hO5v PbMmqhueyD8oh/nWVqkTzCmI3sY2Np+W8RMjdUfh5nKtsLuqyPLUaaVLPpJIrb0X 8tOtEgv1gLd5KnvmTRbJD+i9xeOs3Ffex6qeJwM1KScA4xR6Oa17akutmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIV88Pq5M1E+yTtxcMcIf30HDe/AMB8GA1UdIwQY MBaAFF9rkAGdTStSq0yvZxw36cTQOtpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEt N2NmMDMxZmE3NWNlLzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEtN2NmMDMxZmE3NWNl LzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpsiSCcB khssXWi9GLkr/Y2nuHbQ0OF70D7LKSSpvrjA0mnXX7c/MSCFrRtAOVUrJzzfyCiK A65oxfOfZa9drcAoqC+YjX0TaQtC5whpPBKVEgTtl3f2WUpHfGYRt+pC4SDU6Uw3 asZuZU9JbgCW0ok+CkBXCmEX7fPO1pbP34wftjDLsmbpzxGErXOsd4NKgkJA8uL/ WpdHlxYJJDs2zKY6iM9LpmyYles0jMNQjZylI+nSwfsJRewsb9GCel/cu6Qpa9bs sjut4yHeN23h8+fc5hYC/WQqNc5gD+O7fAsYAgwb5rsrXmg5kT6BvqvI1Igs2TYe avxBY9nqVP+1ew== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:02 2025 by rpki-client