This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json) Hash identifier: cOwZHq79XUZcMxKcPrDYHbU+mXHWqSUjTryMgtuyiqM= Subject key identifier: 15:33:59:C9:75:D5:9E:33:BB:88:06:6B:00:A3:55:37:EC:7E:72:57 Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d Certificate serial: 019AF2771372B7C35696948863476D922B7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: a5yaKlijnL4kZ_oj1IyssANoPrY.roa (hash: Ldfc6br/bRY5cT98+AAZmtT6be1fhfXCxblPXo1RRow=) 2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: ptpWs9e/lrFJr78DGKWxUXJQREcjid5drrEur8uPrwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:13:72:b7:c3:56:96:94:88:63:47:6d:92:2b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=153359c975d59e33bb88066b00a35537ec7e7257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:ef:58:1b:dd:c7:d1:0e:7e:0b:e9:f4:50: 99:cc:58:83:20:bd:38:ec:e8:bb:48:51:89:e8:28: 6a:26:de:22:00:6d:1e:90:e8:ae:62:92:48:97:10: 60:3f:17:f6:29:80:d7:ef:e1:8b:74:bb:44:3a:8a: 56:8f:e1:5d:26:6e:62:47:67:0b:a1:1a:54:ac:27: c1:c2:cd:b4:21:f4:1a:27:ff:96:dd:09:f5:28:0d: a1:7a:5f:9d:aa:44:ae:f4:95:2e:46:4d:8b:77:ab: 52:19:d2:8a:e3:2b:d4:a7:44:34:1a:d2:ad:40:97: c5:ae:19:28:0d:49:20:f0:56:ca:0e:87:8b:07:ea: 8c:53:18:7e:e1:4b:61:29:72:c5:67:ff:96:b1:91: e0:a1:3e:87:5d:aa:56:70:f1:db:88:53:67:89:c5: 8b:69:a3:53:89:8c:68:39:8e:44:47:97:be:74:00: 18:cc:af:da:cd:ea:49:b6:bf:f8:6a:52:e2:7b:a5: 52:a9:7a:c9:7c:f6:8f:da:a7:83:b3:04:fb:23:33: 24:ab:5d:08:6b:b8:17:70:6c:e2:88:e4:ff:ff:f4: a7:d3:b7:87:9f:ae:3e:60:61:fb:54:06:d0:54:ad: bb:78:5b:96:b2:25:2b:2e:c9:87:32:f4:10:53:4b: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:33:59:C9:75:D5:9E:33:BB:88:06:6B:00:A3:55:37:EC:7E:72:57 X509v3 Authority Key Identifier: keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7c:b7:1a:b9:ac:f9:10:40:2e:fb:88:77:46:fa:da:ce:08: 41:46:8d:05:2c:b7:da:6d:f6:4b:cb:09:26:0e:61:58:b8:66: d6:71:53:91:ad:8c:fc:b0:df:f3:d3:20:fd:c6:7e:fe:62:de: 62:5e:d8:9e:2e:41:67:7a:11:6f:08:3e:63:51:a2:5e:34:1a: 60:22:e9:29:62:80:39:ca:f2:82:cc:23:6c:47:8c:c8:61:6f: 7c:c7:c1:cb:9d:89:f4:b5:a3:c4:24:e6:fb:9d:f4:91:00:4a: 09:fb:e3:80:66:c2:57:9c:05:51:c4:c2:0d:66:b3:58:45:0b: db:01:ba:f9:86:dc:70:33:f5:c7:62:b9:9a:a0:2b:7e:84:a6: 63:e4:2f:ac:fe:16:c4:04:a4:ab:99:47:78:81:ca:16:fd:90: 78:85:0e:14:da:d6:4a:ee:2a:00:b3:6c:d4:32:1a:36:11:10: 75:8f:6a:f1:05:fe:c2:f7:31:95:61:55:f5:ee:35:78:16:b3: 7a:04:38:e5:86:17:cb:9f:64:be:3d:66:09:e2:2a:33:69:0a: 35:1a:99:af:3c:68:b1:2e:92:86:0e:bb:79:63:5c:9a:d6:d8: 9b:fb:9e:c0:f2:f0:52:db:9e:1c:23:cb:18:f8:61:98:6f:1c: 4e:7c:01:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxNyt8NWlpSIY0dtkit9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3 MDY2MWQwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EygxNTMzNTljOTc1ZDU5ZTMzYmI4ODA2NmIwMGEzNTUzN2VjN2U3MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLvWBvdx9EOfgvp9FCZzFiDIL04 7Oi7SFGJ6ChqJt4iAG0ekOiuYpJIlxBgPxf2KYDX7+GLdLtEOopWj+FdJm5iR2cL oRpUrCfBws20IfQaJ/+W3Qn1KA2hel+dqkSu9JUuRk2Ld6tSGdKK4yvUp0Q0GtKt QJfFrhkoDUkg8FbKDoeLB+qMUxh+4UthKXLFZ/+WsZHgoT6HXapWcPHbiFNnicWL aaNTiYxoOY5ER5e+dAAYzK/azepJtr/4alLie6VSqXrJfPaP2qeDswT7IzMkq10I a7gXcGziiOT///Sn07eHn64+YGH7VAbQVK27eFuWsiUrLsmHMvQQU0uUaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUzWcl11Z4zu4gGawCjVTfsfnJXMB8GA1UdIwQY MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHy3Grms +RBALvuId0b62s4IQUaNBSy32m32S8sJJg5hWLhm1nFTka2M/LDf89Mg/cZ+/mLe Yl7Yni5BZ3oRbwg+Y1GiXjQaYCLpKWKAOcrygswjbEeMyGFvfMfBy52J9LWjxCTm +530kQBKCfvjgGbCV5wFUcTCDWazWEUL2wG6+YbccDP1x2K5mqArfoSmY+QvrP4W xASkq5lHeIHKFv2QeIUOFNrWSu4qALNs1DIaNhEQdY9q8QX+wvcxlWFV9e41eBaz egQ45YYXy59kvj1mCeIqM2kKNRqZrzxosS6Shg67eWNcmtbYm/uewPLwUtueHCPL GPhhmG8cTnwBxw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:33 2025 by rpki-client