This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json) Hash identifier: JX+bZp50TxxIo5EU82nommev5LisujS1DWo6nq4FUXw= Subject key identifier: 2A:E7:5C:64:98:7E:7B:43:14:26:FC:6B:AE:7E:EF:D0:90:3F:26:95 Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb Certificate serial: 019AF46508BD68E305C31D885055505CA011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:00:53 +0000 Manifest this update: Sat 06 Dec 2025 16:00:53 +0000 Manifest next update: Sun 07 Dec 2025 16:00:53 +0000 Files and hashes: 1: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: zQ6rh0SpfTT5dlmfgt8Ae3daZS7T+ztPRtoet6+s3hY=) 2: eIbScniidhxgoW_2gLpLbnftECI.roa (hash: 0LV2/9XqX9EVzrNxsg5Sc4fQTUKSwMZdzfQWJW36Pqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:08:bd:68:e3:05:c3:1d:88:50:55:50:5c:a0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb Validity Not Before: Dec 6 16:00:53 2025 GMT Not After : Dec 7 16:00:53 2025 GMT Subject: CN=2ae75c64987e7b431426fc6bae7eefd0903f2695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:47:7e:06:bc:59:cc:5e:6e:6c:64:51:e5:fc: 67:75:50:23:f6:9f:ff:f0:aa:79:20:e9:68:42:59: 40:7b:64:97:37:ce:a7:4b:33:78:98:0b:38:b6:53: 4d:a5:91:59:9c:fd:5a:b8:01:53:45:bb:c9:48:cd: 87:49:5c:2e:4d:8a:a3:34:c7:94:82:20:db:8e:61: 26:39:a8:69:57:7c:dc:f8:a4:da:2c:8a:59:19:d7: 25:30:c7:2f:c4:f5:c3:49:2a:40:df:63:27:27:b3: 1d:2f:bf:89:fc:e3:96:e5:fe:cf:5a:1f:b1:b9:0a: 27:76:2b:71:29:88:5c:8a:95:88:fe:b7:71:dd:9d: 0f:81:29:ce:46:87:47:56:c5:3f:1c:e0:a2:6f:4b: 18:73:04:1a:2f:68:9d:ac:9b:90:a4:c5:a1:4a:a6: 48:36:95:e5:a8:fe:6e:c5:57:b2:41:ed:39:9e:be: 2f:f4:0c:99:4d:41:49:56:c4:16:50:c9:1f:a7:b2: 7c:3a:da:6e:13:f1:c2:22:25:66:22:33:50:2e:2e: 6e:43:a6:14:6f:77:2a:12:53:6d:9d:6d:87:9a:c7: 79:34:e8:0a:db:6e:19:39:cf:48:98:fe:e8:ce:31: 86:41:14:77:27:cf:07:ba:6b:63:0c:68:bd:9e:e2: 90:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:5C:64:98:7E:7B:43:14:26:FC:6B:AE:7E:EF:D0:90:3F:26:95 X509v3 Authority Key Identifier: keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:88:ef:11:49:9b:11:da:60:e4:f1:71:8e:b0:1c:10:b3:d1: 7c:13:88:d4:29:6b:52:d3:b4:fa:4f:b2:2c:5e:cb:97:c6:c7: 9e:dd:73:0a:8f:93:87:b3:ae:ae:c8:2c:3f:65:9b:c4:0a:1a: 17:10:36:1e:cd:92:ed:ec:12:c0:50:d3:c9:3d:8f:4d:8b:6a: 10:b7:80:e4:0f:73:7f:f0:eb:91:83:99:38:65:1c:fe:94:66: b2:8e:d7:d3:05:0a:80:06:35:7c:7b:52:8a:bf:56:9b:b2:fc: a5:ef:d1:31:b2:aa:9c:d2:df:d8:a0:5e:04:02:eb:2e:0d:da: cd:a0:5f:c7:2a:d3:ae:df:db:01:bc:0a:e4:e8:1f:0e:72:fa: db:0c:62:2f:92:a0:f3:4c:18:4c:95:f3:bf:51:46:c3:d4:a0: 55:ed:52:b4:4f:7c:10:79:3a:f1:b1:10:fa:7b:88:98:3a:ae: 48:c8:4f:fb:b5:3a:33:67:be:92:75:19:ec:61:c7:ad:5f:c5: 3b:1d:0f:06:55:3f:43:38:9b:dc:6c:3c:33:cd:91:93:17:c8: b0:19:30:20:39:6d:dd:8c:d4:a4:5b:0d:5f:ff:53:93:f2:42: 36:29:db:c9:10:df:f4:d0:bf:2b:e4:73:ad:6b:06:ad:14:e2: 15:ce:fe:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQi9aOMFwx2IUFVQXKARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNGMyOGE3NWFjOTY5NTFkYzM4NDAwYTgwZjllZjNhYWFm MmFhY2IwHhcNMjUxMjA2MTYwMDUzWhcNMjUxMjA3MTYwMDUzWjAzMTEwLwYDVQQD EygyYWU3NWM2NDk4N2U3YjQzMTQyNmZjNmJhZTdlZWZkMDkwM2YyNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0d+BrxZzF5ubGRR5fxndVAj9p// 8Kp5IOloQllAe2SXN86nSzN4mAs4tlNNpZFZnP1auAFTRbvJSM2HSVwuTYqjNMeU giDbjmEmOahpV3zc+KTaLIpZGdclMMcvxPXDSSpA32MnJ7MdL7+J/OOW5f7PWh+x uQonditxKYhcipWI/rdx3Z0PgSnORodHVsU/HOCib0sYcwQaL2idrJuQpMWhSqZI NpXlqP5uxVeyQe05nr4v9AyZTUFJVsQWUMkfp7J8OtpuE/HCIiVmIjNQLi5uQ6YU b3cqElNtnW2Hmsd5NOgK224ZOc9ImP7ozjGGQRR3J88HumtjDGi9nuKQmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrnXGSYfntDFCb8a65+79CQPyaVMB8GA1UdIwQY MBaAFFxMKKdayWlR3DhACoD57zqq8qrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYt NjdjNzYzMjAxODZhLzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8wOTc3ZWUtYjk4ZC00YTNlLWIzYWYtNjdjNzYzMjAxODZh LzEvWEV3b3AxckphVkhjT0VBS2dQbnZPcXJ5cXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYjvEUmb Edpg5PFxjrAcELPRfBOI1ClrUtO0+k+yLF7Ll8bHnt1zCo+Th7OursgsP2WbxAoa FxA2Hs2S7ewSwFDTyT2PTYtqELeA5A9zf/DrkYOZOGUc/pRmso7X0wUKgAY1fHtS ir9Wm7L8pe/RMbKqnNLf2KBeBALrLg3azaBfxyrTrt/bAbwK5OgfDnL62wxiL5Kg 80wYTJXzv1FGw9SgVe1StE98EHk68bEQ+nuImDquSMhP+7U6M2e+knUZ7GHHrV/F Ox0PBlU/Qzib3Gw8M82RkxfIsBkwIDlt3YzUpFsNX/9Tk/JCNinbyRDf9NC/K+Rz rWsGrRTiFc7+iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:06 2025 by rpki-client