This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft File: xZttw7wi9sNqA5hVU0stQauxJCM.mft (raw, json) Hash identifier: LX524g0B4L7UIDcFbo+RCtRHQiK5v+WW8tEOYnpiACQ= Subject key identifier: 35:A4:55:54:DA:99:5D:61:70:32:98:DB:7E:CE:9D:1A:59:D9:E6:BC Authority key identifier: C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 Certificate issuer: /CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Certificate serial: 019AF2AD7F879F4CCD5DCFB9BAA4956D5C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 08:00:47 +0000 Manifest this update: Sat 06 Dec 2025 08:00:47 +0000 Manifest next update: Sun 07 Dec 2025 08:00:47 +0000 Files and hashes: 1: WOcgzm6uQCs6AkEViYONoq1N374.roa (hash: nQFtl/WwmhlASNmPqjUWZCZ7o+laxk6LEJZG32/xqcY=) 2: xZttw7wi9sNqA5hVU0stQauxJCM.crl (hash: AgkjZiT65Dp/b+oe4kugAjN/AzXKCTQO5jNUJ9csxsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:7f:87:9f:4c:cd:5d:cf:b9:ba:a4:95:6d:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c59b6dc3bc22f6c36a039855534b2d41abb12423 Validity Not Before: Dec 6 08:00:47 2025 GMT Not After : Dec 7 08:00:47 2025 GMT Subject: CN=35a45554da995d61703298db7ece9d1a59d9e6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:3c:21:cd:24:86:58:98:d8:12:b0:f6:32: e7:7f:d1:ec:0e:a6:d4:cb:87:74:17:a6:a6:75:ef: 17:52:91:48:1b:16:9a:06:15:d4:99:40:e4:a6:a2: 10:3d:10:91:b7:6f:3e:c2:4a:b5:72:8a:b2:13:78: 9d:9c:7f:74:a7:dd:62:1a:75:0f:86:e2:e9:f0:a9: ca:43:36:ba:7e:cd:b0:72:e9:d3:32:a1:ce:92:ed: d6:da:bb:92:c6:c6:d1:8b:e5:a6:4c:8b:00:2f:7b: 88:9c:08:fc:c8:cf:93:fa:bf:72:9a:b0:8a:b8:6e: b2:3b:35:05:06:e8:55:e0:f0:67:94:34:e4:81:0b: 3c:d5:89:a8:09:77:29:4c:d3:42:2a:b2:23:55:5a: 90:8e:de:5c:5b:1a:41:93:b8:6c:5c:3b:e2:8a:24: 72:05:4e:f6:f4:ae:63:21:e5:f0:17:d5:9f:c7:ce: f8:4b:21:37:49:5a:7c:7f:ea:4b:88:cd:32:d8:b7: 80:e1:b5:fe:b6:a1:06:5b:86:43:c1:00:4f:38:71: 92:9e:88:72:55:41:16:ba:b2:8a:a7:65:a0:e8:8e: 94:6e:d2:00:68:e9:bb:99:32:f9:1a:ef:b6:5b:38: 8c:43:2c:ab:ff:47:39:68:b9:8b:5a:a0:ae:9c:d4: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:55:54:DA:99:5D:61:70:32:98:DB:7E:CE:9D:1A:59:D9:E6:BC X509v3 Authority Key Identifier: keyid:C5:9B:6D:C3:BC:22:F6:C3:6A:03:98:55:53:4B:2D:41:AB:B1:24:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZttw7wi9sNqA5hVU0stQauxJCM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f0efe3-413c-43d2-bb69-d2f40de049b7/1/xZttw7wi9sNqA5hVU0stQauxJCM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:22:e8:f2:57:71:29:e9:34:d2:8b:71:01:a6:21:48:06:08: 37:aa:b8:8f:55:f7:46:f7:8b:d2:99:48:ba:88:ea:3b:08:2a: ef:00:fb:4f:8c:9d:51:ca:a1:e1:48:30:6b:cd:60:01:59:07: 64:e3:b0:c6:01:1c:bf:c6:a4:27:24:b9:93:60:5d:34:f1:10: 9c:23:e8:8f:93:65:e7:08:5c:fa:21:26:b8:67:88:82:68:54: 7d:53:fe:a5:5a:93:1c:32:14:91:8b:e6:53:03:61:32:76:04: 4e:26:c6:9a:cc:f4:ab:f3:7e:25:b3:8e:b3:2e:b9:6c:cf:75: be:b5:3b:52:fc:e7:ad:14:89:c2:52:29:d2:28:00:a9:9e:77: 1b:8f:71:40:98:29:e3:28:90:23:80:f2:73:ec:d9:33:6c:02: 91:d9:15:df:92:b9:12:01:b7:98:13:af:e7:82:0e:77:e7:ba: f0:85:43:36:87:73:dc:c5:02:3b:40:e2:43:45:ff:99:6a:ac: f5:a2:27:e8:50:69:bc:40:01:30:ef:76:50:57:98:9c:18:72: 06:a7:e7:82:56:01:1f:a0:5f:8b:10:bd:35:d5:be:ec:22:fc: f8:f5:60:3f:8f:63:26:05:6c:8f:55:92:33:0d:42:c3:88:ec: b2:a0:e6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrX+Hn0zNXc+5uqSVbVyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OWI2ZGMzYmMyMmY2YzM2YTAzOTg1NTUzNGIyZDQxYWJi MTI0MjMwHhcNMjUxMjA2MDgwMDQ3WhcNMjUxMjA3MDgwMDQ3WjAzMTEwLwYDVQQD EygzNWE0NTU1NGRhOTk1ZDYxNzAzMjk4ZGI3ZWNlOWQxYTU5ZDllNmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJU8Ic0khliY2BKw9jLnf9HsDqbU y4d0F6amde8XUpFIGxaaBhXUmUDkpqIQPRCRt28+wkq1coqyE3idnH90p91iGnUP huLp8KnKQza6fs2wcunTMqHOku3W2ruSxsbRi+WmTIsAL3uInAj8yM+T+r9ymrCK uG6yOzUFBuhV4PBnlDTkgQs81YmoCXcpTNNCKrIjVVqQjt5cWxpBk7hsXDviiiRy BU729K5jIeXwF9Wfx874SyE3SVp8f+pLiM0y2LeA4bX+tqEGW4ZDwQBPOHGSnohy VUEWurKKp2Wg6I6UbtIAaOm7mTL5Gu+2WziMQyyr/0c5aLmLWqCunNRm9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWkVVTamV1hcDKY237OnRpZ2ea8MB8GA1UdIwQY MBaAFMWbbcO8IvbDagOYVVNLLUGrsSQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjkt ZDJmNDBkZTA0OWI3LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mMGVmZTMtNDEzYy00M2QyLWJiNjktZDJmNDBkZTA0OWI3 LzEveFp0dHc3d2k5c05xQTVoVlUwc3RRYXV4SkNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiLo8ldx Kek00otxAaYhSAYIN6q4j1X3RveL0plIuojqOwgq7wD7T4ydUcqh4Ugwa81gAVkH ZOOwxgEcv8akJyS5k2BdNPEQnCPoj5Nl5whc+iEmuGeIgmhUfVP+pVqTHDIUkYvm UwNhMnYETibGmsz0q/N+JbOOsy65bM91vrU7UvznrRSJwlIp0igAqZ53G49xQJgp 4yiQI4Dyc+zZM2wCkdkV35K5EgG3mBOv54IOd+e68IVDNodz3MUCO0DiQ0X/mWqs 9aIn6FBpvEABMO92UFeYnBhyBqfnglYBH6BfixC9NdW+7CL8+PVgP49jJgVsj1WS Mw1Cw4jssqDmgA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:14 2025 by rpki-client