This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft File: XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft (raw, json) Hash identifier: J/G7vdoS8TSlO4cmDPhzaPaEyskB17vzWwoYn+GUkNc= Subject key identifier: F2:81:23:5B:4D:0F:D7:44:5C:42:2F:FE:69:0C:80:B6:0F:C4:8B:7F Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c Certificate serial: 019AF1D1BFC608F0788499B1AE746CE1A75C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl (hash: Chy/Kn9ZrQpjZIqJKjA5LcggcRNLzWXlDBUkBvaVm8U=) 2: yPiwl9qBas0_CWwr3HhvXq6bAGE.roa (hash: yb05fvQGJfFhNZnnjkljRSCUExMNOud+I+YEv/Cdk1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bf:c6:08:f0:78:84:99:b1:ae:74:6c:e1:a7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=f281235b4d0fd7445c422ffe690c80b60fc48b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:0c:d3:2d:84:37:71:bd:a4:35:c6:98:44: 0d:f0:0c:b1:ec:f9:42:e5:34:60:a8:4c:f3:eb:93: f0:9b:0c:3d:8e:14:d5:48:46:16:db:9f:d8:ca:33: 29:2f:d7:ea:ea:51:b7:82:c0:b1:53:0c:58:75:24: 86:61:fe:43:25:75:8e:be:47:b7:a4:55:01:24:8a: 9a:18:0a:90:a6:81:73:47:a5:08:18:68:37:50:80: cf:15:ea:f6:4b:da:6f:13:17:15:02:2c:d1:5f:af: 23:e1:b4:b7:eb:63:cf:1f:e5:9b:74:be:b7:82:36: 2c:a4:83:02:db:3f:bd:7d:a5:7d:40:07:e1:df:29: 56:b4:cb:06:c4:81:6a:07:9f:fd:5a:c4:ef:13:d0: f7:7c:f2:00:c2:b3:4a:1d:7b:7e:f2:75:1a:13:87: 0d:56:aa:e0:58:b5:f1:ef:f3:8f:68:43:9a:0f:88: 28:d3:6a:da:42:03:ab:2b:7d:f4:57:f8:23:2c:90: 52:fc:96:3d:e5:73:0d:20:5a:6b:cd:45:5f:37:d6: fe:fd:f0:f4:3d:4f:4e:5a:53:77:94:1c:cf:34:9b: fa:55:41:8e:83:08:e5:37:ea:87:8a:8e:1c:f1:61: 87:e5:5e:47:14:01:1d:9c:91:bd:b1:50:54:c6:d5: 71:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:23:5B:4D:0F:D7:44:5C:42:2F:FE:69:0C:80:B6:0F:C4:8B:7F X509v3 Authority Key Identifier: keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:c0:2a:dc:d6:69:0d:3f:68:39:fa:65:4f:88:8d:42:0e:c5: 58:ff:28:61:4a:d6:96:cf:a8:d8:de:46:98:04:a8:04:0d:f2: 98:c1:ff:85:42:88:de:1e:90:98:fe:fd:fa:78:e4:8c:02:3d: 15:4c:6b:dc:ef:a0:95:a9:a1:d1:19:11:99:d4:f9:e7:70:69: ad:15:8b:fa:96:c9:a9:92:e1:e9:b9:6f:c8:8b:ec:86:b8:d4: 37:6a:d5:ee:19:83:fe:8b:a6:c2:4d:75:8d:c0:98:f7:b5:c3: 1d:2a:78:02:a2:cc:98:d7:b1:31:84:2a:f9:5f:d6:e4:2d:ca: d0:c5:8f:89:28:ec:cf:fb:06:4d:62:7a:6c:94:6e:ed:2c:84: 7f:33:08:3a:5e:c7:d1:8b:a8:b5:a9:5e:53:11:a7:9d:4b:40: e8:ce:52:db:24:f4:cc:36:47:af:4a:ac:b7:19:5d:a4:09:fa: 4f:fc:55:12:75:d7:0b:94:d8:7e:bb:4a:28:c1:8d:b2:5b:db: fc:7d:58:45:44:74:4c:95:8d:ad:c8:83:ce:77:3f:8f:db:46: 4c:a4:d3:e9:8e:2c:d0:7b:b5:cf:f9:d7:8e:8a:14:5f:54:ac: 22:37:7f:c6:10:bc:6c:ef:33:57:9a:7e:d2:3e:98:59:c2:7c: 1c:10:42:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b/GCPB4hJmxrnRs4adcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi ODg2NWMwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhmMjgxMjM1YjRkMGZkNzQ0NWM0MjJmZmU2OTBjODBiNjBmYzQ4YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h4M0y2EN3G9pDXGmEQN8Ayx7PlC 5TRgqEzz65Pwmww9jhTVSEYW25/YyjMpL9fq6lG3gsCxUwxYdSSGYf5DJXWOvke3 pFUBJIqaGAqQpoFzR6UIGGg3UIDPFer2S9pvExcVAizRX68j4bS362PPH+WbdL63 gjYspIMC2z+9faV9QAfh3ylWtMsGxIFqB5/9WsTvE9D3fPIAwrNKHXt+8nUaE4cN VqrgWLXx7/OPaEOaD4go02raQgOrK330V/gjLJBS/JY95XMNIFprzUVfN9b+/fD0 PU9OWlN3lBzPNJv6VUGOgwjlN+qHio4c8WGH5V5HFAEdnJG9sVBUxtVx5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKBI1tND9dEXEIv/mkMgLYPxIt/MB8GA1UdIwQY MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It ODk3OTlkZWFkYzQ3LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3 LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcAq3NZp DT9oOfplT4iNQg7FWP8oYUrWls+o2N5GmASoBA3ymMH/hUKI3h6QmP79+njkjAI9 FUxr3O+glamh0RkRmdT553BprRWL+pbJqZLh6blvyIvshrjUN2rV7hmD/oumwk11 jcCY97XDHSp4AqLMmNexMYQq+V/W5C3K0MWPiSjsz/sGTWJ6bJRu7SyEfzMIOl7H 0YuotaleUxGnnUtA6M5S2yT0zDZHr0qstxldpAn6T/xVEnXXC5TYfrtKKMGNslvb /H1YRUR0TJWNrciDznc/j9tGTKTT6Y4s0Hu1z/nXjooUX1SsIjd/xhC8bO8zV5p+ 0j6YWcJ8HBBCqw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:28 2025 by rpki-client