This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft File: xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft (raw, json) Hash identifier: ASWByOM7MW17Oe+PxLc2PL+v0QDYvJvUpTElsR809V0= Subject key identifier: FB:03:96:64:69:17:8C:92:F7:D2:B6:7C:16:44:E1:D1:69:48:16:F8 Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5 Certificate serial: 019AF577E0852BD503C7F459E8BCB7694559 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 21:01:05 +0000 Manifest this update: Sat 06 Dec 2025 21:01:05 +0000 Manifest next update: Sun 07 Dec 2025 21:01:05 +0000 Files and hashes: 1: TXaQaEN4XvnYBFgT0ib4CXdw4tY.roa (hash: 0gsLwdoudfPPIkVNaiLgsua+5TeHeS/a6jBdMi3m75A=) 2: xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl (hash: DMaeW16/KRTCYPXP0lXWP7eXQa71oashTxh35G3F4bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:e0:85:2b:d5:03:c7:f4:59:e8:bc:b7:69:45:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5 Validity Not Before: Dec 6 21:01:05 2025 GMT Not After : Dec 7 21:01:05 2025 GMT Subject: CN=fb03966469178c92f7d2b67c1644e1d1694816f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:0b:5d:bc:a2:d8:cb:fe:fb:14:f9:5d:b9: 51:3b:d7:d0:96:35:66:a2:ea:c8:7e:52:97:f7:86: fa:f6:c9:0d:34:b1:c4:3c:dc:33:e6:dc:4e:27:b0: 28:c6:2e:98:89:6d:7c:75:03:a3:91:d9:05:a5:3c: e1:8b:6c:40:37:5b:9d:59:d1:45:10:18:f7:3a:f4: 3a:5e:de:40:81:1d:50:77:50:60:95:09:22:47:93: 1d:5b:a1:b9:bf:ee:1c:3f:b2:02:ca:cc:9b:4a:1d: d4:06:93:57:09:65:a9:19:b7:5e:4a:20:44:6d:15: f2:4b:38:77:c1:e2:2a:a1:02:9c:8c:ea:5e:07:d5: 18:2f:f3:c3:65:d5:aa:04:4c:8c:84:46:10:89:9d: b3:11:0c:87:cc:12:dc:ce:a3:c4:96:79:d3:00:2e: ac:0c:f0:22:b4:36:3f:72:45:66:6a:1e:56:57:92: d8:31:5e:47:12:22:63:32:0f:94:e8:7b:6b:cb:cd: df:bb:9e:af:91:7f:fd:11:2f:5d:e9:20:71:38:30: ee:5c:ee:53:40:c5:4d:c2:7d:45:57:75:90:40:49: c4:e0:43:8a:fd:46:81:1b:4c:2c:11:0d:3d:4b:7e: 20:cd:f7:6f:cd:69:be:77:e7:ba:c5:81:85:2a:a9: 21:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:03:96:64:69:17:8C:92:F7:D2:B6:7C:16:44:E1:D1:69:48:16:F8 X509v3 Authority Key Identifier: keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:bc:47:83:d7:70:d9:b5:39:ac:2f:74:d2:0a:1f:ee:2b:77: 16:ad:ff:9c:67:ae:3f:a0:5c:92:5c:23:7b:ef:8d:33:a8:9f: 75:ba:89:7f:f9:34:70:e0:16:a0:49:9f:c5:74:72:77:9f:3e: 84:a0:a4:6a:49:09:e0:77:d2:3a:d8:5f:c0:66:14:60:57:f9: 00:7c:9e:69:2e:37:b9:0b:c3:25:85:a2:4f:97:94:ab:a3:f4: 3a:46:73:a6:5f:51:c6:12:b1:4f:e8:7a:55:ea:93:f7:a1:41: 3b:d7:7f:8b:f8:0a:07:c0:f1:2a:0d:4b:db:ee:38:92:70:b3: 0f:49:a2:b9:56:5f:9e:e6:f1:43:a7:ed:97:6a:99:5f:c1:b7: f9:c5:8d:72:e1:03:5a:a2:e5:24:a4:de:23:60:3a:ae:fb:8e: 23:60:71:ee:d2:27:97:0e:31:bd:0c:83:53:70:9d:b3:01:13: 33:bf:5e:1f:c8:e0:6e:e5:c7:cf:ed:69:d6:22:66:48:bd:5b: 3c:c0:9a:4f:93:0c:49:35:fc:95:6f:c4:3b:19:fd:ae:44:3b: a2:89:3b:36:ac:56:9a:ac:a9:5a:88:2f:99:49:be:0f:78:ce: 58:80:05:c6:fd:ad:fa:8a:91:48:60:e3:18:4a:89:40:1d:cd: ab:81:f2:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+CFK9UDx/RZ6Ly3aUVZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZjIyMDNiYzAyODY3MDIzNDVhYzQ2NTUwMGI0NDg4YzAz MWM2YjUwHhcNMjUxMjA2MjEwMTA1WhcNMjUxMjA3MjEwMTA1WjAzMTEwLwYDVQQD EyhmYjAzOTY2NDY5MTc4YzkyZjdkMmI2N2MxNjQ0ZTFkMTY5NDgxNmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cULXbyi2Mv++xT5XblRO9fQljVm ourIflKX94b69skNNLHEPNwz5txOJ7Aoxi6YiW18dQOjkdkFpTzhi2xAN1udWdFF EBj3OvQ6Xt5AgR1Qd1BglQkiR5MdW6G5v+4cP7ICysybSh3UBpNXCWWpGbdeSiBE bRXySzh3weIqoQKcjOpeB9UYL/PDZdWqBEyMhEYQiZ2zEQyHzBLczqPElnnTAC6s DPAitDY/ckVmah5WV5LYMV5HEiJjMg+U6Htry83fu56vkX/9ES9d6SBxODDuXO5T QMVNwn1FV3WQQEnE4EOK/UaBG0wsEQ09S34gzfdvzWm+d+e6xYGFKqkhvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsDlmRpF4yS99K2fBZE4dFpSBb4MB8GA1UdIwQY MBaAFMXyIDvAKGcCNFrEZVALRIjAMca1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYt MjQ0NWY2MzRlOTI4LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80MTEyMzQtZGYxMi00ZDNmLWE3MDYtMjQ0NWY2MzRlOTI4 LzEveGZJZ084QW9ad0kwV3NSbFVBdEVpTUF4eHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLxHg9dw 2bU5rC900gof7it3Fq3/nGeuP6Bcklwje++NM6ifdbqJf/k0cOAWoEmfxXRyd58+ hKCkakkJ4HfSOthfwGYUYFf5AHyeaS43uQvDJYWiT5eUq6P0OkZzpl9RxhKxT+h6 VeqT96FBO9d/i/gKB8DxKg1L2+44knCzD0miuVZfnubxQ6ftl2qZX8G3+cWNcuED WqLlJKTeI2A6rvuOI2Bx7tInlw4xvQyDU3CdswETM79eH8jgbuXHz+1p1iJmSL1b PMCaT5MMSTX8lW/EOxn9rkQ7ook7NqxWmqypWogvmUm+D3jOWIAFxv2t+oqRSGDj GEqJQB3Nq4HyCA== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:40 2025 by rpki-client