This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft File: xa0QdigFcZJWQLKu2jnMCXTAbOI.mft (raw, json) Hash identifier: C/jDO9iftoTm5xZabIF6VB0+mH1hSDjPVd4obMSIWuQ= Subject key identifier: 0A:BD:A7:DB:9E:72:B6:24:F1:08:3B:FB:E1:8E:BD:68:20:87:42:E9 Authority key identifier: C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2 Certificate issuer: /CN=c5ad1076280571925640b2aeda39cc0974c06ce2 Certificate serial: 019AF0F5E1B23B5F38B6F607FFF6F10C4FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft Manifest number: FA Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: TUdbI3fTIue2IS2nP7PyiMKvzpA.roa (hash: +rF1e9gIJIKIRSdOUzoKGO5Eq8f3G2LeMwZHkFAE720=) 2: xa0QdigFcZJWQLKu2jnMCXTAbOI.crl (hash: Wb5HaiFOEo69+FUuPGijTcfsPjeuOD6NvNxWE3FWh74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e1:b2:3b:5f:38:b6:f6:07:ff:f6:f1:0c:4f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ad1076280571925640b2aeda39cc0974c06ce2 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=0abda7db9e72b624f1083bfbe18ebd68208742e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:30:16:7d:4d:2b:2d:27:cd:55:35:6d:7f:00: d1:1e:d6:45:55:50:9d:ef:47:f8:2a:3a:a0:2e:48: bf:f9:df:83:08:06:71:79:ba:de:26:c0:c1:66:2f: d6:00:32:cb:aa:4f:3f:0c:3a:7d:88:22:db:64:d5: 74:0c:d8:55:4d:ba:4f:db:d4:a8:e1:44:ec:88:15: 88:4a:0b:e9:06:d9:ae:a9:53:23:08:6e:6b:c5:40: 72:82:f8:99:dd:77:5c:df:df:d9:bf:6f:2f:3a:5e: f6:1f:0b:88:3d:90:c8:da:8c:3a:fd:aa:25:8d:eb: 79:5d:b0:3f:88:be:a1:ae:4c:63:79:45:a1:26:67: 43:6e:01:76:36:ef:26:b8:ba:57:b8:d1:9c:9e:23: 1c:82:b3:ba:3b:c1:ac:c5:77:96:0f:5c:b7:7a:96: 94:bd:7f:85:14:57:47:c7:81:0e:1b:d8:76:46:af: 59:b1:fe:53:72:fc:fe:6d:db:ee:4a:81:a5:4e:fd: 65:c2:fa:5a:84:2c:bb:23:a2:a6:cc:89:82:56:47: c4:6a:83:48:7e:65:4e:df:e4:90:ef:af:e4:57:a2: 06:fc:63:42:13:a9:7e:4f:11:d9:cf:8a:11:30:a2: 70:e4:5e:ee:31:8b:93:59:bc:ac:92:0a:68:2c:63: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:A7:DB:9E:72:B6:24:F1:08:3B:FB:E1:8E:BD:68:20:87:42:E9 X509v3 Authority Key Identifier: keyid:C5:AD:10:76:28:05:71:92:56:40:B2:AE:DA:39:CC:09:74:C0:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xa0QdigFcZJWQLKu2jnMCXTAbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/75ad91-fcfc-4cf4-ab22-d0f9804a9f1e/1/xa0QdigFcZJWQLKu2jnMCXTAbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4c:3a:0d:ba:81:db:ca:cf:b5:8a:01:79:b0:9c:7b:7a:a1: c4:0d:c5:a7:ee:d7:a1:4e:64:76:be:27:48:72:5a:89:fe:e1: 70:70:bd:2b:0e:35:ba:0a:35:ad:8b:a4:b4:b2:ae:70:bb:20: c6:11:40:e9:41:38:1d:bb:0f:88:d4:f2:cc:7c:6d:56:cf:19: 4a:eb:60:f6:7f:a4:a6:4e:12:79:42:be:47:da:0b:10:7a:39: 83:54:b6:9c:a6:0c:b8:ab:dc:d9:f4:bf:c6:db:af:87:ab:b2: 27:36:3b:bf:bd:7b:80:47:28:0e:78:01:4f:96:60:1a:a5:38: 76:dc:5f:af:e4:2b:5e:53:1c:6d:17:9d:9d:bd:ba:00:1c:57: 9c:48:55:de:b8:bb:f5:c4:77:be:20:fb:16:81:d2:24:73:00: 95:92:b9:8c:46:84:e6:28:2d:8b:31:07:f4:01:1e:cc:6b:6e: 2a:14:87:3c:d7:0a:39:3f:4c:49:41:89:ad:36:f4:83:be:f9: 81:0a:5b:09:6e:65:5e:9f:59:ca:ea:8c:3c:33:75:09:cb:80: 3f:73:a1:e2:2f:dd:8f:aa:95:56:15:61:00:46:0c:de:c1:8e: c1:b7:97:51:2e:5f:57:51:2d:bd:8d:f8:62:57:0d:75:9d:93: dc:71:c8:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eGyO184tvYH//bxDE/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YWQxMDc2MjgwNTcxOTI1NjQwYjJhZWRhMzljYzA5NzRj MDZjZTIwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EygwYWJkYTdkYjllNzJiNjI0ZjEwODNiZmJlMThlYmQ2ODIwODc0MmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTAWfU0rLSfNVTVtfwDRHtZFVVCd 70f4KjqgLki/+d+DCAZxebreJsDBZi/WADLLqk8/DDp9iCLbZNV0DNhVTbpP29So 4UTsiBWISgvpBtmuqVMjCG5rxUBygviZ3Xdc39/Zv28vOl72HwuIPZDI2ow6/aol jet5XbA/iL6hrkxjeUWhJmdDbgF2Nu8muLpXuNGcniMcgrO6O8GsxXeWD1y3epaU vX+FFFdHx4EOG9h2Rq9Zsf5Tcvz+bdvuSoGlTv1lwvpahCy7I6KmzImCVkfEaoNI fmVO3+SQ76/kV6IG/GNCE6l+TxHZz4oRMKJw5F7uMYuTWbyskgpoLGOIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq9p9uecrYk8Qg7++GOvWggh0LpMB8GA1UdIwQY MBaAFMWtEHYoBXGSVkCyrto5zAl0wGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGEwUWRpZ0ZjWkpXUUxLdTJqbk1DWFRBYk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NWFkOTEtZmNmYy00Y2Y0LWFiMjIt ZDBmOTgwNGE5ZjFlLzEveGEwUWRpZ0ZjWkpXUUxLdTJqbk1DWFRBYk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NWFkOTEtZmNmYy00Y2Y0LWFiMjItZDBmOTgwNGE5ZjFl LzEveGEwUWRpZ0ZjWkpXUUxLdTJqbk1DWFRBYk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEw6DbqB 28rPtYoBebCce3qhxA3Fp+7XoU5kdr4nSHJaif7hcHC9Kw41ugo1rYuktLKucLsg xhFA6UE4HbsPiNTyzHxtVs8ZSutg9n+kpk4SeUK+R9oLEHo5g1S2nKYMuKvc2fS/ xtuvh6uyJzY7v717gEcoDngBT5ZgGqU4dtxfr+QrXlMcbRednb26ABxXnEhV3ri7 9cR3viD7FoHSJHMAlZK5jEaE5igtizEH9AEezGtuKhSHPNcKOT9MSUGJrTb0g775 gQpbCW5lXp9ZyuqMPDN1CcuAP3Oh4i/dj6qVVhVhAEYM3sGOwbeXUS5fV1EtvY34 YlcNdZ2T3HHIrw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:42 2025 by rpki-client