This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json) Hash identifier: ex089Tcm/D1sQg+I68EydjmhgqdM5lUGF+9kbS+1AXg= Subject key identifier: BA:E1:1C:FF:C9:ED:8A:6E:E8:56:B0:0F:3F:35:67:0A:44:47:15:08 Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Certificate serial: 019AF54114EC917CC4CD299CC0D5EE15F1A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft Manifest number: 0753 Signing time: Sat 06 Dec 2025 20:01:14 +0000 Manifest this update: Sat 06 Dec 2025 20:01:14 +0000 Manifest next update: Sun 07 Dec 2025 20:01:14 +0000 Files and hashes: 1: AYZF24EgOrNz6WZhkXpTDIKj7Uw.roa (hash: XuYEiMGlP57vEAu/M5jaVByOWmDwAZB50X25JNOPTpo=) 2: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: 4lQ/zlTKAVvtmSaJgFYePOF5yJr5ldO9ShzviRAfuBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:41:14:ec:91:7c:c4:cd:29:9c:c0:d5:ee:15:f1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4 Validity Not Before: Dec 6 20:01:14 2025 GMT Not After : Dec 7 20:01:14 2025 GMT Subject: CN=bae11cffc9ed8a6ee856b00f3f35670a44471508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:1a:90:f1:38:9d:3e:d9:b7:49:01:e2:4c: f2:0c:05:70:7e:42:d1:6f:2b:39:83:b1:4a:56:0a: c3:c2:80:7d:88:05:d4:82:2c:51:1b:51:5a:fb:72: f8:ba:65:66:c6:da:17:a0:25:a8:0a:35:e8:96:16: 3d:7b:be:4d:e9:a8:bb:d2:7c:23:1d:fd:be:f0:60: 31:7b:88:dd:bd:7b:f0:1d:5c:af:41:f0:0f:5b:d7: 98:75:3e:a1:ec:84:1b:e8:e6:c0:84:3b:2a:7b:8e: bc:88:ef:a7:fc:ab:3f:4b:15:9a:ab:2b:57:2e:aa: 59:ed:17:a1:fd:c1:3f:6b:34:13:28:59:9c:e7:71: 10:ad:6a:f2:e5:62:65:56:81:d3:bc:2a:ba:eb:ca: a3:8f:f2:af:bf:32:99:ba:43:ce:09:4b:7b:20:a3: ab:41:39:7b:0c:e2:fc:3e:a5:af:0e:ce:0a:19:a3: f4:7b:65:e9:7f:1f:f0:9c:75:36:e1:d2:1a:6f:24: a3:9b:94:0a:79:34:42:a1:2b:5e:6f:2c:33:d2:bf: cd:5c:ce:64:04:a2:b0:7b:6b:32:91:4c:14:c2:ba: 9d:53:2b:aa:18:f1:c3:24:27:37:59:3d:27:ae:11: ab:5e:cc:42:07:ba:83:68:39:c3:9b:c7:fe:0b:c3: e6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E1:1C:FF:C9:ED:8A:6E:E8:56:B0:0F:3F:35:67:0A:44:47:15:08 X509v3 Authority Key Identifier: keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:26:5f:a7:99:eb:47:b9:3c:d9:53:e3:a1:86:bc:cc:04:ba: 13:b6:4c:bd:f3:aa:fb:f1:8d:77:30:d9:04:be:5b:a0:f5:b4: 71:0e:70:91:b4:63:8f:f9:bf:a0:ea:1b:26:0a:45:df:5d:a3: a5:b4:06:1a:33:de:00:0b:98:51:89:5f:dc:aa:65:ec:d6:53: b7:56:c5:81:5d:b4:98:1e:e2:e5:ae:d3:3e:21:fe:08:c2:76: 68:7a:ca:60:9b:57:a3:51:1c:75:b9:34:d3:6e:31:08:48:66: dd:06:d0:24:d8:36:09:f4:03:e5:a2:39:5c:62:8b:bd:85:87: dd:54:27:82:84:a8:1d:83:84:91:4b:6c:2a:11:a6:94:12:e4: 76:93:12:96:0c:1e:ec:53:2f:27:93:fe:27:f8:dc:52:b9:8b: 8b:ee:3d:ad:eb:70:5b:ab:bd:41:a4:2e:c0:01:84:08:b2:f6: b2:16:66:25:a8:23:d0:fc:4c:74:6c:6f:3a:c8:fc:4e:27:aa: 2d:ce:cd:98:e7:71:48:4f:b6:43:fd:e8:a3:4d:a5:05:79:18: 74:d6:9b:48:ae:0e:b7:33:57:8f:01:cb:5e:55:b3:67:63:00: 48:93:3e:ad:5b:2d:a4:ba:99:98:2e:5c:88:aa:f2:ab:e4:f1: 42:d5:fc:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QRTskXzEzSmcwNXuFfGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZTE0MDcwMjEwNjI3YmZjYTQ2NTRiNDJkZTc5N2FjZDZk MmM0ZjQwHhcNMjUxMjA2MjAwMTE0WhcNMjUxMjA3MjAwMTE0WjAzMTEwLwYDVQQD EyhiYWUxMWNmZmM5ZWQ4YTZlZTg1NmIwMGYzZjM1NjcwYTQ0NDcxNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KoakPE4nT7Zt0kB4kzyDAVwfkLR bys5g7FKVgrDwoB9iAXUgixRG1Fa+3L4umVmxtoXoCWoCjXolhY9e75N6ai70nwj Hf2+8GAxe4jdvXvwHVyvQfAPW9eYdT6h7IQb6ObAhDsqe468iO+n/Ks/SxWaqytX LqpZ7Reh/cE/azQTKFmc53EQrWry5WJlVoHTvCq668qjj/KvvzKZukPOCUt7IKOr QTl7DOL8PqWvDs4KGaP0e2Xpfx/wnHU24dIabySjm5QKeTRCoStebywz0r/NXM5k BKKwe2sykUwUwrqdUyuqGPHDJCc3WT0nrhGrXsxCB7qDaDnDm8f+C8PmUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrhHP/J7Ypu6FawDz81ZwpERxUIMB8GA1UdIwQY MBaAFMXhQHAhBie/ykZUtC3nl6zW0sT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDIt M2M0ODM5YzhlODUxLzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80YmQ1MDAtNWQ0Zi00ODg5LTkxNDItM2M0ODM5YzhlODUx LzEveGVGQWNDRUdKN19LUmxTMExlZVhyTmJTeFBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiZfp5nr R7k82VPjoYa8zAS6E7ZMvfOq+/GNdzDZBL5boPW0cQ5wkbRjj/m/oOobJgpF312j pbQGGjPeAAuYUYlf3Kpl7NZTt1bFgV20mB7i5a7TPiH+CMJ2aHrKYJtXo1Ecdbk0 024xCEhm3QbQJNg2CfQD5aI5XGKLvYWH3VQngoSoHYOEkUtsKhGmlBLkdpMSlgwe 7FMvJ5P+J/jcUrmLi+49retwW6u9QaQuwAGECLL2shZmJagj0PxMdGxvOsj8Tieq Lc7NmOdxSE+2Q/3oo02lBXkYdNabSK4OtzNXjwHLXlWzZ2MASJM+rVstpLqZmC5c iKryq+TxQtX8hQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:45 2025 by rpki-client