This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft File: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft (raw, json) Hash identifier: OH51ivoG0Bz0f7GnWNhs0J8IAM7KpSja9Yim1JKvlyw= Subject key identifier: F8:B5:20:41:1D:D1:0D:00:FE:4C:2E:D5:7F:15:39:59:3D:3A:36:0F Authority key identifier: C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D Certificate issuer: /CN=c76c3644741336b01b638563314f40d10c69d30d Certificate serial: 019B5A5180E2DA41312122BC0599AD1DCE17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft Manifest number: 0BA5 Signing time: Fri 26 Dec 2025 11:00:49 +0000 Manifest this update: Fri 26 Dec 2025 11:00:49 +0000 Manifest next update: Sat 27 Dec 2025 11:00:49 +0000 Files and hashes: 1: VL_sUVNGEMQYYwl9Xv-gftIOtVk.roa (hash: Nb6N1oOcP6n4dJnS6N2r/DJY5HC1wzR3gXjz4D8FCrM=) 2: x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl (hash: t/veTVTKcPcY1Zac5nQz047PsmB1UtB+hQo22MzeTSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:80:e2:da:41:31:21:22:bc:05:99:ad:1d:ce:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76c3644741336b01b638563314f40d10c69d30d Validity Not Before: Dec 26 11:00:49 2025 GMT Not After : Dec 27 11:00:49 2025 GMT Subject: CN=f8b520411dd10d00fe4c2ed57f1539593d3a360f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:f0:5b:b2:5b:ee:19:65:01:de:a8:f1:b3: 00:3c:ce:e5:63:7a:82:91:3a:6a:35:1b:ea:45:70: e8:85:d4:d8:e8:fc:ec:d7:f7:7f:44:57:e0:bb:f3: 8c:a6:27:db:19:fa:7f:e9:71:23:13:a1:00:6c:db: df:4e:21:90:54:9c:a0:55:97:01:5a:46:24:a8:6e: 73:68:9e:34:ec:95:71:b7:d7:64:d2:d2:e4:9b:3b: 19:83:8a:f7:47:e8:45:61:37:75:6e:39:a2:4c:55: af:6b:6f:fa:f2:af:87:d8:3e:6d:e1:b5:58:90:2b: b8:c6:a8:2f:70:86:67:ba:8e:f0:35:b6:8a:79:23: b0:1d:16:e8:e2:5e:2e:05:c9:e3:8e:ac:7d:7b:c7: 11:02:54:ec:73:24:df:f4:68:62:e4:98:42:80:4d: 4b:32:05:d0:79:22:9c:49:38:1b:a6:86:f6:97:64: 96:2c:4f:57:ef:14:c8:d9:df:e0:8d:40:53:b8:6a: 17:71:34:af:46:69:74:05:a6:7a:e7:58:fb:5f:e6: f4:c2:e1:4b:1b:64:06:1a:0d:e6:d1:e9:8d:a0:c3: 36:96:be:87:a6:e8:83:ff:6a:f7:0b:5f:ee:f3:e3: 3b:13:46:58:ba:8a:3c:d4:01:8f:f1:ce:8c:5e:51: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:20:41:1D:D1:0D:00:FE:4C:2E:D5:7F:15:39:59:3D:3A:36:0F X509v3 Authority Key Identifier: keyid:C7:6C:36:44:74:13:36:B0:1B:63:85:63:31:4F:40:D1:0C:69:D3:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7df7c6-decd-4bbc-babc-23697f752f2e/1/x2w2RHQTNrAbY4VjMU9A0Qxp0w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:28:02:c7:ed:9e:24:94:e5:8f:45:65:19:2a:11:5e:49:94: 6d:c5:97:76:82:17:5f:c6:1d:43:87:fa:c6:06:16:91:f3:db: ea:35:f6:84:96:6f:aa:5a:f0:3c:f9:64:30:fb:b0:df:eb:bb: 7e:ac:d9:ee:d9:20:f6:fc:a7:96:eb:08:44:dd:9c:00:d3:10: ad:3f:1e:4d:40:75:07:01:ef:ef:b5:ea:3e:08:d8:66:a8:3b: d0:80:9b:93:61:6b:7d:ca:6e:ff:be:34:d3:65:a8:d1:c0:1b: 65:d5:ce:b9:ce:88:04:a1:1e:e1:f0:4e:14:38:f3:c9:9c:c6: e5:ca:8d:51:59:28:0d:4f:e4:ec:a5:52:69:22:27:3f:47:7a: ea:7e:32:b1:0f:2e:b5:f0:8a:fe:d2:89:60:4a:a5:38:d5:a6: 47:b2:1c:ef:c9:19:6e:09:1a:54:4b:76:6d:72:19:01:e3:28: c6:55:9b:d3:a2:41:22:0b:64:0d:ab:60:55:c4:d8:b4:ce:37: f0:29:19:86:39:bc:07:96:89:6a:87:7c:02:9d:4d:e7:e9:be: 6e:05:1f:6e:78:48:ec:22:37:8d:39:64:ba:85:55:e0:32:92: a9:53:cd:7f:2f:06:25:82:40:5a:4c:e6:67:71:7d:66:9e:fd: f3:04:78:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYDi2kExISK8BZmtHc4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmMzNjQ0NzQxMzM2YjAxYjYzODU2MzMxNGY0MGQxMGM2 OWQzMGQwHhcNMjUxMjI2MTEwMDQ5WhcNMjUxMjI3MTEwMDQ5WjAzMTEwLwYDVQQD EyhmOGI1MjA0MTFkZDEwZDAwZmU0YzJlZDU3ZjE1Mzk1OTNkM2EzNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEjwW7Jb7hllAd6o8bMAPM7lY3qC kTpqNRvqRXDohdTY6Pzs1/d/RFfgu/OMpifbGfp/6XEjE6EAbNvfTiGQVJygVZcB WkYkqG5zaJ407JVxt9dk0tLkmzsZg4r3R+hFYTd1bjmiTFWva2/68q+H2D5t4bVY kCu4xqgvcIZnuo7wNbaKeSOwHRbo4l4uBcnjjqx9e8cRAlTscyTf9Ghi5JhCgE1L MgXQeSKcSTgbpob2l2SWLE9X7xTI2d/gjUBTuGoXcTSvRml0BaZ651j7X+b0wuFL G2QGGg3m0emNoMM2lr6HpuiD/2r3C1/u8+M7E0ZYuoo81AGP8c6MXlFdXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi1IEEd0Q0A/kwu1X8VOVk9OjYPMB8GA1UdIwQY MBaAFMdsNkR0EzawG2OFYzFPQNEMadMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMt MjM2OTdmNzUyZjJlLzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83ZGY3YzYtZGVjZC00YmJjLWJhYmMtMjM2OTdmNzUyZjJl LzEveDJ3MlJIUVROckFiWTRWak1VOUEwUXhwMHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANigCx+2e JJTlj0VlGSoRXkmUbcWXdoIXX8YdQ4f6xgYWkfPb6jX2hJZvqlrwPPlkMPuw3+u7 fqzZ7tkg9vynlusIRN2cANMQrT8eTUB1BwHv77XqPgjYZqg70ICbk2Frfcpu/740 02Wo0cAbZdXOuc6IBKEe4fBOFDjzyZzG5cqNUVkoDU/k7KVSaSInP0d66n4ysQ8u tfCK/tKJYEqlONWmR7Ic78kZbgkaVEt2bXIZAeMoxlWb06JBIgtkDatgVcTYtM43 8CkZhjm8B5aJaod8Ap1N5+m+bgUfbnhI7CI3jTlkuoVV4DKSqVPNfy8GJYJAWkzm Z3F9Zp798wR4Ow== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:54 2025 by rpki-client