This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json) Hash identifier: 6dUK4FFgsmUVZNDkiRDH2X0mTfX6/R1bHNMJCmryDeM= Subject key identifier: E0:1E:A1:B5:95:1A:0D:3F:4B:C4:B9:D2:01:60:93:83:84:F9:31:E4 Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084 Certificate serial: 019B0F3735CD224903AD6ED1CDC9026B01F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft Manifest number: 06F7 Signing time: Thu 11 Dec 2025 21:00:35 +0000 Manifest this update: Thu 11 Dec 2025 21:00:35 +0000 Manifest next update: Fri 12 Dec 2025 21:00:35 +0000 Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: uoBfIp+Bs/dp4C6lRBKGIaKIQfNZ/jMTB84AtNlKqGg=) 2: u-lGXvBrrOtS45APR_Waw4axrTc.roa (hash: W3bOvfQ0kiPnMkAC0M/+bR7qhmdbihjJm/WhE44sz9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:35:cd:22:49:03:ad:6e:d1:cd:c9:02:6b:01:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa386e97656d648ab5381b29666414081b00084 Validity Not Before: Dec 11 21:00:35 2025 GMT Not After : Dec 12 21:00:35 2025 GMT Subject: CN=e01ea1b5951a0d3f4bc4b9d20160938384f931e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:d0:c7:92:5c:4c:1a:f9:70:0d:af:b9:ff: 46:e4:59:7a:4d:bc:dc:13:8e:25:e3:7e:f4:8a:3e: 4f:2b:b3:45:c8:29:ca:64:9d:f8:74:69:84:98:69: 71:77:2d:8c:d7:97:06:aa:24:fb:df:41:90:b4:53: 62:6f:65:89:b7:31:1e:82:7e:6c:5c:b8:ee:c7:df: 85:1d:05:fa:11:ee:3d:23:be:6a:ae:07:02:0a:a0: 89:90:b3:47:37:3b:ff:8c:13:e9:f0:c5:e2:25:d7: c5:4a:08:1a:8e:13:8e:33:05:2e:e3:a1:9a:b3:9c: 59:16:ef:44:64:cc:c4:70:93:12:c7:75:5a:ad:56: a8:ce:8c:ec:09:73:f8:a3:e3:aa:64:84:52:76:1d: 9b:68:df:86:b5:aa:7f:fe:a2:0a:e0:02:c8:99:88: 72:64:c1:09:46:30:e5:6b:71:7e:4c:6c:aa:e8:d5: 30:22:e1:0c:0b:5b:26:92:d2:2b:be:7b:a8:08:53: ca:78:65:eb:2b:89:ab:16:23:bc:c6:24:f7:87:11: b0:b7:ea:9d:e7:f3:52:f9:02:a8:8c:37:49:59:ab: 2e:ba:95:d2:61:b0:8b:79:d3:bb:27:f5:45:49:e6: 45:9c:47:39:a9:7d:d1:6b:c0:f3:84:ef:12:e2:45: 37:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1E:A1:B5:95:1A:0D:3F:4B:C4:B9:D2:01:60:93:83:84:F9:31:E4 X509v3 Authority Key Identifier: keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:31:3c:cf:76:a2:58:ab:37:1a:ac:53:aa:53:f3:a4:4a:01: 8d:27:81:99:d9:20:7e:80:06:b1:54:b9:b0:69:c2:e7:c8:0f: 33:56:19:fb:12:1e:f3:48:3f:13:ab:88:3c:28:67:52:a2:72: 6b:4f:33:00:d6:8c:b8:73:bc:3c:f0:82:ad:c4:5f:31:b6:15: 8c:2b:bf:a0:5a:d8:94:96:66:ed:c8:96:66:b6:85:b1:7e:f1: 5e:fc:40:62:34:e2:4d:f9:ac:81:c4:c7:c9:2f:fc:30:d6:cd: aa:b5:c3:09:e5:fa:69:8c:f8:9e:66:bc:95:04:e5:b1:de:d4: a7:83:21:3f:c6:ce:7b:ba:22:aa:67:8b:5b:0b:e0:97:1f:19: 4f:61:4d:07:5d:4a:71:b1:68:74:98:bd:f8:b3:d9:e7:96:e9: df:28:46:93:11:9e:a7:ef:36:6c:40:76:72:4c:14:6a:0d:3f: de:9e:4b:c1:ab:c9:1b:60:89:66:f2:93:b8:95:cc:7d:37:f1: d0:a8:15:05:e6:a2:9d:1d:2b:28:c0:b5:a9:99:de:58:da:c0: 84:e9:f1:c8:bc:f1:ea:0d:42:df:64:e7:29:b9:7b:45:2a:cf: ad:74:9d:ed:85:b6:ea:e8:22:9d:81:c7:ce:aa:ac:fe:a8:a4: 44:04:8e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPNzXNIkkDrW7RzckCawHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi MDAwODQwHhcNMjUxMjExMjEwMDM1WhcNMjUxMjEyMjEwMDM1WjAzMTEwLwYDVQQD EyhlMDFlYTFiNTk1MWEwZDNmNGJjNGI5ZDIwMTYwOTM4Mzg0ZjkzMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvjQx5JcTBr5cA2vuf9G5Fl6Tbzc E44l4370ij5PK7NFyCnKZJ34dGmEmGlxdy2M15cGqiT730GQtFNib2WJtzEegn5s XLjux9+FHQX6Ee49I75qrgcCCqCJkLNHNzv/jBPp8MXiJdfFSggajhOOMwUu46Ga s5xZFu9EZMzEcJMSx3VarVaozozsCXP4o+OqZIRSdh2baN+Gtap//qIK4ALImYhy ZMEJRjDla3F+TGyq6NUwIuEMC1smktIrvnuoCFPKeGXrK4mrFiO8xiT3hxGwt+qd 5/NS+QKojDdJWasuupXSYbCLedO7J/VFSeZFnEc5qX3Ra8DzhO8S4kU3UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAeobWVGg0/S8S50gFgk4OE+THkMB8GA1UdIwQY MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjE8z3ai WKs3GqxTqlPzpEoBjSeBmdkgfoAGsVS5sGnC58gPM1YZ+xIe80g/E6uIPChnUqJy a08zANaMuHO8PPCCrcRfMbYVjCu/oFrYlJZm7ciWZraFsX7xXvxAYjTiTfmsgcTH yS/8MNbNqrXDCeX6aYz4nma8lQTlsd7Up4MhP8bOe7oiqmeLWwvglx8ZT2FNB11K cbFodJi9+LPZ55bp3yhGkxGep+82bEB2ckwUag0/3p5LwavJG2CJZvKTuJXMfTfx 0KgVBeainR0rKMC1qZneWNrAhOnxyLzx6g1C32TnKbl7RSrPrXSd7YW26uginYHH zqqs/qikRASOnQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:34:13 2025 by rpki-client