This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft File: X6e2rvC9JBEwTk88aVfILrJWfNM.mft (raw, json) Hash identifier: ncqLadiaEsbcY+wEKeY2dTg7vxgyUl1/zKanF9yTZAk= Subject key identifier: 90:2A:1B:DF:1E:88:11:CC:7A:2F:C6:AA:FF:51:11:D3:5A:A4:2E:07 Authority key identifier: 5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 Certificate issuer: /CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Certificate serial: 019B17CDC2E0A34BD2C061709601DBD9B120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft Manifest number: 0B9B Signing time: Sat 13 Dec 2025 13:01:59 +0000 Manifest this update: Sat 13 Dec 2025 13:01:59 +0000 Manifest next update: Sun 14 Dec 2025 13:01:59 +0000 Files and hashes: 1: X6e2rvC9JBEwTk88aVfILrJWfNM.crl (hash: QrZANQLapRRyipOcFHboWkn9FCIG4PXVYAOnxqfU07E=) 2: zbAgIhB9UBueLLgs2g8PDDqXLXM.roa (hash: Zu8ptrGKP7ppJOnD5tDff+kFIkcbbAr6zSQsVh6Ogok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:cd:c2:e0:a3:4b:d2:c0:61:70:96:01:db:d9:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fa7b6aef0bd2411304e4f3c6957c82eb2567cd3 Validity Not Before: Dec 13 13:01:59 2025 GMT Not After : Dec 14 13:01:59 2025 GMT Subject: CN=902a1bdf1e8811cc7a2fc6aaff5111d35aa42e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f1:5c:e0:33:8c:24:11:cf:fe:b6:d4:ac:be: 93:f7:8b:47:52:86:85:db:d5:4c:a0:33:87:32:4c: 94:0e:30:a2:61:72:91:47:11:e3:6e:7f:d6:a8:cf: 01:9c:d8:7f:8e:a3:9a:cb:51:09:b9:8d:6a:54:f4: 9f:93:5e:da:6c:43:7c:cd:50:48:f5:3c:da:18:c7: c9:5d:4c:c3:00:43:08:3d:6d:e1:da:e8:94:49:c8: fa:4e:54:f3:e0:f9:b8:1e:d9:ff:39:d8:ad:6f:d0: 01:18:1f:be:28:1d:f2:b5:76:5d:c8:5d:14:2c:1b: 78:4b:e8:8c:1a:66:90:ac:58:93:c3:27:20:13:7e: 41:f3:e1:19:e0:c8:a1:0b:b0:68:20:1b:95:3e:67: e6:99:1e:75:3a:e6:30:00:b2:69:84:84:46:79:7d: 3e:57:6e:c5:1d:79:d4:db:cc:c8:f0:73:ee:7a:ec: 60:86:e6:ef:de:54:13:cc:53:4f:fd:11:1e:f0:d7: 24:32:ec:98:08:0a:3f:e0:ee:cd:bc:dd:58:20:bb: 4e:81:21:4d:e5:8e:42:11:4d:30:e1:37:22:59:75: 3e:c0:c6:2f:60:b3:d2:f8:be:5c:75:57:fe:13:6f: e6:6b:9a:dc:4b:7e:15:53:f2:1c:2b:64:eb:13:bc: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2A:1B:DF:1E:88:11:CC:7A:2F:C6:AA:FF:51:11:D3:5A:A4:2E:07 X509v3 Authority Key Identifier: keyid:5F:A7:B6:AE:F0:BD:24:11:30:4E:4F:3C:69:57:C8:2E:B2:56:7C:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6e2rvC9JBEwTk88aVfILrJWfNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/03d342-a349-4656-9d40-b3e43d305b89/1/X6e2rvC9JBEwTk88aVfILrJWfNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a4:00:0b:73:0f:9d:55:43:db:ef:bd:db:85:1c:37:06:be: 60:1a:5b:52:cf:c1:d4:dc:5b:16:5e:bd:6e:bc:23:32:ea:24: 67:62:68:45:05:2b:1d:c0:3e:f8:a7:09:86:36:36:59:c6:92: ec:78:3e:3f:66:b5:a0:2b:44:8d:98:f1:cc:fc:d3:f9:e4:4e: ac:9a:80:6d:25:07:bb:8c:51:78:84:39:ea:3d:62:b9:00:15: 85:06:48:24:29:c0:79:a7:99:a9:c0:9d:fa:07:c8:3f:f8:ae: 06:15:4a:b4:ab:b6:26:3f:3c:02:d7:bf:aa:5a:66:c5:21:da: ec:b3:70:f0:69:48:b9:7c:ab:a6:20:dc:34:39:d1:1c:37:0e: d5:c6:4d:29:28:b4:72:85:b3:b3:6b:53:07:2a:c9:ec:4b:85: c8:a8:23:7c:a0:e7:4f:f5:98:95:3c:20:93:d1:0f:aa:e4:5a: f1:90:d4:b5:59:69:eb:f7:e1:b0:08:d1:e9:93:1e:06:a4:1b: a0:ce:62:43:dd:ae:37:5a:d3:66:c8:8d:c5:3e:54:1f:7b:9e: 1e:2c:53:be:2b:cb:6c:f6:07:ec:88:3c:bc:3b:91:7f:2a:7e: 96:fc:d8:17:a3:fb:96:ca:13:76:c3:df:00:cb:cb:5a:e9:38: 8f:43:48:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXzcLgo0vSwGFwlgHb2bEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYTdiNmFlZjBiZDI0MTEzMDRlNGYzYzY5NTdjODJlYjI1 NjdjZDMwHhcNMjUxMjEzMTMwMTU5WhcNMjUxMjE0MTMwMTU5WjAzMTEwLwYDVQQD Eyg5MDJhMWJkZjFlODgxMWNjN2EyZmM2YWFmZjUxMTFkMzVhYTQyZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Fc4DOMJBHP/rbUrL6T94tHUoaF 29VMoDOHMkyUDjCiYXKRRxHjbn/WqM8BnNh/jqOay1EJuY1qVPSfk17abEN8zVBI 9TzaGMfJXUzDAEMIPW3h2uiUScj6TlTz4Pm4Htn/Oditb9ABGB++KB3ytXZdyF0U LBt4S+iMGmaQrFiTwycgE35B8+EZ4MihC7BoIBuVPmfmmR51OuYwALJphIRGeX0+ V27FHXnU28zI8HPueuxghubv3lQTzFNP/REe8NckMuyYCAo/4O7NvN1YILtOgSFN 5Y5CEU0w4TciWXU+wMYvYLPS+L5cdVf+E2/ma5rcS34VU/IcK2TrE7zvAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAqG98eiBHMei/Gqv9REdNapC4HMB8GA1UdIwQY MBaAFF+ntq7wvSQRME5PPGlXyC6yVnzTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAt YjNlNDNkMzA1Yjg5LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wM2QzNDItYTM0OS00NjU2LTlkNDAtYjNlNDNkMzA1Yjg5 LzEvWDZlMnJ2QzlKQkV3VGs4OGFWZklMckpXZk5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKQAC3MP nVVD2++924UcNwa+YBpbUs/B1NxbFl69brwjMuokZ2JoRQUrHcA++KcJhjY2WcaS 7Hg+P2a1oCtEjZjxzPzT+eROrJqAbSUHu4xReIQ56j1iuQAVhQZIJCnAeaeZqcCd +gfIP/iuBhVKtKu2Jj88Ate/qlpmxSHa7LNw8GlIuXyrpiDcNDnRHDcO1cZNKSi0 coWzs2tTByrJ7EuFyKgjfKDnT/WYlTwgk9EPquRa8ZDUtVlp6/fhsAjR6ZMeBqQb oM5iQ92uN1rTZsiNxT5UH3ueHixTvivLbPYH7Ig8vDuRfyp+lvzYF6P7lsoTdsPf AMvLWuk4j0NISA== -----END CERTIFICATE-----Generated at Sat Dec 13 17:32:07 2025 by rpki-client