This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft File: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft (raw, json) Hash identifier: xtAeNqlWtAvw8N/WWOwYteK3oHcJnNU/8vwvTcRbf+E= Subject key identifier: 9E:EF:FD:8F:A1:05:0B:A1:35:57:5A:EA:9F:89:B7:D4:CE:4F:B5:52 Authority key identifier: 5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 Certificate issuer: /CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7 Certificate serial: 019AF2094ABFCFE3EA1CC6A2EF2CD08E2770 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl (hash: cci4wPhStJWcr6FzsW+RALVWDdNbJsvi6WdER3NlxFs=) 2: jKWW8lM-7qWMZl51o-CojPJFkjs.roa (hash: qo4ws59Zs5PpOs3LLh3sz4ISOqKQfl11xb7AgRxxDws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4a:bf:cf:e3:ea:1c:c6:a2:ef:2c:d0:8e:27:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e35ed043c8de151bebdc09dfcbffcc7dc7759c7 Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=9eeffd8fa1050ba135575aea9f89b7d4ce4fb552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:70:8b:5c:32:56:57:54:7c:d5:35:cd:12: 48:35:38:f9:f4:ce:ac:8e:93:1e:9e:5e:35:94:23: bf:f7:8c:b0:5c:76:e8:eb:a6:a9:57:d0:80:34:fd: fa:36:65:cc:b9:53:47:30:06:06:3e:d9:71:e2:d3: 20:9d:7a:b1:87:e9:c6:77:f7:f8:b2:63:19:f8:d1: b1:a4:24:50:c7:55:8e:f8:c8:6e:e4:96:36:bc:91: 8f:f6:4d:90:bb:27:d7:81:fe:ce:5e:f5:a4:fc:a1: 11:cd:b0:5d:e0:da:0c:cc:e1:da:ac:86:c7:2e:d9: ba:f9:7a:a0:79:aa:b8:6a:64:bb:33:61:d5:61:44: f5:b3:0d:e0:54:c8:df:29:75:2f:82:a6:e9:a7:4e: 7a:6a:dc:ba:fc:ac:53:8f:20:4c:11:b4:8a:39:cd: 8c:31:14:33:eb:62:55:12:7a:ae:02:bb:cb:ee:6d: 8c:10:c7:15:a1:48:86:aa:30:6c:25:7e:ad:81:cd: bc:fb:9b:5b:d6:b3:af:70:e0:9f:e0:af:32:05:d5: 87:d1:75:a6:ff:ab:47:ea:91:ab:8a:1e:cd:5a:d9: 04:a5:0e:57:f4:b5:d2:e4:87:02:ea:4b:81:df:e1: b7:b3:b6:f2:18:14:0f:ec:d8:b5:4d:f4:dd:f2:93: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:FD:8F:A1:05:0B:A1:35:57:5A:EA:9F:89:B7:D4:CE:4F:B5:52 X509v3 Authority Key Identifier: keyid:5E:35:ED:04:3C:8D:E1:51:BE:BD:C0:9D:FC:BF:FC:C7:DC:77:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e17fa2-7866-4fa1-972b-1776813e7224/1/XjXtBDyN4VG-vcCd_L_8x9x3Wcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:54:a4:b6:f6:94:37:71:0a:c1:77:87:67:26:b9:87:8d:5e: 91:c4:f9:2e:3c:c4:97:cf:9c:9c:02:8f:07:50:bd:4d:85:1e: a8:bd:d7:fc:8f:a5:f2:c3:ba:e4:18:48:9a:76:a6:be:19:94: b7:27:46:cb:9d:3e:36:62:54:1f:c0:87:8c:d0:d6:a3:6b:0b: 18:9e:6d:c6:3d:a6:fc:a2:90:97:f7:42:ee:ac:2a:0d:03:b2: f0:31:65:d3:7a:7a:59:5d:cb:57:40:08:90:7f:de:26:80:29: 93:bb:06:a1:17:56:77:19:76:94:89:1e:d5:1b:3f:02:34:77: 3c:cb:76:c0:06:84:1d:c7:ae:ea:4c:11:06:db:8f:92:15:76: 22:21:da:c5:91:3c:2e:bf:24:02:9b:c2:20:93:f5:fe:4d:a5: a9:d8:a0:a1:79:0b:98:b6:07:8f:0a:75:24:cc:8d:f6:bd:9f: bb:c8:7c:f7:04:d3:62:8d:8b:8f:07:ba:92:26:3d:e1:13:9d: 7b:0a:c8:8d:69:dc:f6:c0:64:8e:58:ff:3a:61:06:04:6b:79: 9f:95:cf:57:54:42:04:60:14:eb:d5:92:b2:a8:7e:cd:ba:fc: b9:cd:40:87:b7:15:83:97:9e:15:68:b7:e8:1f:72:f1:b9:07: 62:a8:51:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUq/z+PqHMai7yzQjidwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMzVlZDA0M2M4ZGUxNTFiZWJkYzA5ZGZjYmZmY2M3ZGM3 NzU5YzcwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg5ZWVmZmQ4ZmExMDUwYmExMzU1NzVhZWE5Zjg5YjdkNGNlNGZiNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzhwi1wyVldUfNU1zRJINTj59M6s jpMenl41lCO/94ywXHbo66apV9CANP36NmXMuVNHMAYGPtlx4tMgnXqxh+nGd/f4 smMZ+NGxpCRQx1WO+Mhu5JY2vJGP9k2QuyfXgf7OXvWk/KERzbBd4NoMzOHarIbH Ltm6+Xqgeaq4amS7M2HVYUT1sw3gVMjfKXUvgqbpp056aty6/KxTjyBMEbSKOc2M MRQz62JVEnquArvL7m2MEMcVoUiGqjBsJX6tgc28+5tb1rOvcOCf4K8yBdWH0XWm /6tH6pGrih7NWtkEpQ5X9LXS5IcC6kuB3+G3s7byGBQP7Ni1TfTd8pMPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7v/Y+hBQuhNVda6p+Jt9TOT7VSMB8GA1UdIwQY MBaAFF417QQ8jeFRvr3Anfy//Mfcd1nHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmIt MTc3NjgxM2U3MjI0LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lMTdmYTItNzg2Ni00ZmExLTk3MmItMTc3NjgxM2U3MjI0 LzEvWGpYdEJEeU40VkctdmNDZF9MXzh4OXgzV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1SktvaU N3EKwXeHZya5h41ekcT5LjzEl8+cnAKPB1C9TYUeqL3X/I+l8sO65BhImnamvhmU tydGy50+NmJUH8CHjNDWo2sLGJ5txj2m/KKQl/dC7qwqDQOy8DFl03p6WV3LV0AI kH/eJoApk7sGoRdWdxl2lIke1Rs/AjR3PMt2wAaEHceu6kwRBtuPkhV2IiHaxZE8 Lr8kApvCIJP1/k2lqdigoXkLmLYHjwp1JMyN9r2fu8h89wTTYo2Ljwe6kiY94ROd ewrIjWnc9sBkjlj/OmEGBGt5n5XPV1RCBGAU69WSsqh+zbr8uc1Ah7cVg5eeFWi3 6B9y8bkHYqhREw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:15 2025 by rpki-client