This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json) Hash identifier: 7b54GEwDe5rrA+/SL+XdzGWb/Gp4rGJuBDsrzp5aypw= Subject key identifier: BC:83:DD:9F:1E:C1:A5:7F:7D:63:86:64:32:DF:43:C8:5B:32:D0:5A Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Certificate serial: 019AF2091A2ADF925E12783FABC967E79C4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft Manifest number: 0C07 Signing time: Sat 06 Dec 2025 05:01:14 +0000 Manifest this update: Sat 06 Dec 2025 05:01:14 +0000 Manifest next update: Sun 07 Dec 2025 05:01:14 +0000 Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: zi4VKDO/YeEC1Uc/1MUkwGfpRfUkFH1BvdBx0mDaz9o=) 2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1a:2a:df:92:5e:12:78:3f:ab:c9:67:e7:9c:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Validity Not Before: Dec 6 05:01:14 2025 GMT Not After : Dec 7 05:01:14 2025 GMT Subject: CN=bc83dd9f1ec1a57f7d63866432df43c85b32d05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:08:8a:8f:bd:a5:37:19:2e:06:b7:bc:25: e0:bf:b5:01:7c:e8:96:49:a1:f8:37:6c:3f:c5:eb: 1b:4a:6c:24:3d:15:61:1c:e0:4f:9c:15:2d:61:a4: b1:c4:fb:d3:1d:bc:06:80:4d:7f:6d:b5:72:49:f1: f8:55:01:d7:4b:00:97:15:81:0b:c4:27:78:77:7f: 2c:1d:36:73:76:b7:2b:84:cc:c2:00:29:14:3a:3e: 88:37:ed:f1:9f:0e:4d:fc:8e:84:f7:a4:ac:b9:ed: 40:67:39:db:9a:ba:99:d4:1d:43:fe:c7:0a:b4:8e: 5c:ac:a9:a3:a3:14:9c:d7:35:72:f9:5e:9e:84:54: e7:77:dd:1a:7c:29:e4:71:5a:a0:24:de:7a:4a:aa: 07:f8:1d:5f:a5:27:1f:da:8d:0b:36:4b:ce:51:b0: fc:bf:a9:fb:4a:54:20:b5:1e:3f:86:13:e7:83:6d: ca:e9:c9:fe:44:26:47:d3:31:e8:a4:9d:4d:e4:6f: 18:07:d5:9d:81:ab:28:b6:36:3f:18:7b:13:79:cb: f8:dd:31:0b:3a:77:40:d0:fd:1e:58:4d:e1:78:25: db:4a:0f:f7:ac:4f:5d:21:39:ea:2c:69:68:18:d9: c5:9f:21:32:94:e3:a6:a2:b8:8d:ab:47:af:d3:81: 07:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:83:DD:9F:1E:C1:A5:7F:7D:63:86:64:32:DF:43:C8:5B:32:D0:5A X509v3 Authority Key Identifier: keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:04:30:f3:c1:5a:d7:7e:a2:fd:6a:0b:21:fd:db:bc:47:67: ff:93:30:69:78:81:cc:43:7c:d4:bd:ba:9b:80:93:df:78:81: c6:86:d9:04:20:32:9a:5a:3a:b3:80:1f:b5:d8:35:f2:4e:30: 06:3e:64:35:ac:81:83:34:54:4a:cb:d6:65:69:ed:af:63:8e: 1e:3a:cc:7c:c0:8b:f2:d4:52:8a:aa:d4:77:15:02:dc:9d:e8: 53:a7:47:07:57:51:02:0f:73:a1:a3:ef:87:33:c8:30:79:da: a8:09:66:be:65:f1:de:6c:a8:39:6a:0b:76:80:c1:1c:76:c0: 6c:f6:a3:07:da:70:97:fb:03:a7:d0:0c:4c:8f:fe:b1:9d:08: fd:36:3f:09:07:be:fa:63:90:ab:da:da:ca:1c:e2:d0:ac:13: b3:48:11:d4:f6:f2:78:cb:15:8b:d5:00:e4:36:48:74:c7:ae: d5:d1:b5:71:c5:94:80:a8:8c:46:ea:4d:ec:c8:49:7e:b1:fd: 39:b7:69:66:c0:c9:79:3e:ae:25:cf:6e:34:c9:18:12:ac:ba: d2:65:2b:b0:5e:4f:41:a5:a9:0c:e5:e5:c2:a7:74:2f:f7:9c: 6c:9e:68:d8:c3:bc:77:73:53:4b:bc:c1:ac:68:1e:e8:ec:95: 3b:ea:12:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRoq35JeEng/q8ln55xKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj MDQ1MTUwHhcNMjUxMjA2MDUwMTE0WhcNMjUxMjA3MDUwMTE0WjAzMTEwLwYDVQQD EyhiYzgzZGQ5ZjFlYzFhNTdmN2Q2Mzg2NjQzMmRmNDNjODViMzJkMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44cIio+9pTcZLga3vCXgv7UBfOiW SaH4N2w/xesbSmwkPRVhHOBPnBUtYaSxxPvTHbwGgE1/bbVySfH4VQHXSwCXFYEL xCd4d38sHTZzdrcrhMzCACkUOj6IN+3xnw5N/I6E96Ssue1AZznbmrqZ1B1D/scK tI5crKmjoxSc1zVy+V6ehFTnd90afCnkcVqgJN56SqoH+B1fpScf2o0LNkvOUbD8 v6n7SlQgtR4/hhPng23K6cn+RCZH0zHopJ1N5G8YB9WdgasotjY/GHsTecv43TEL OndA0P0eWE3heCXbSg/3rE9dITnqLGloGNnFnyEylOOmoriNq0ev04EHMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyD3Z8ewaV/fWOGZDLfQ8hbMtBaMB8GA1UdIwQY MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgQw88Fa 136i/WoLIf3bvEdn/5MwaXiBzEN81L26m4CT33iBxobZBCAymlo6s4Aftdg18k4w Bj5kNayBgzRUSsvWZWntr2OOHjrMfMCL8tRSiqrUdxUC3J3oU6dHB1dRAg9zoaPv hzPIMHnaqAlmvmXx3myoOWoLdoDBHHbAbPajB9pwl/sDp9AMTI/+sZ0I/TY/CQe+ +mOQq9rayhzi0KwTs0gR1PbyeMsVi9UA5DZIdMeu1dG1ccWUgKiMRupN7MhJfrH9 ObdpZsDJeT6uJc9uNMkYEqy60mUrsF5PQaWpDOXlwqd0L/ecbJ5o2MO8d3NTS7zB rGge6OyVO+oShA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:40 2025 by rpki-client