This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft File: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft (raw, json) Hash identifier: 7i6ABIUVOA3JHHxT07E9L8ebYI1aC5IyaqUN18oYmkY= Subject key identifier: 1A:31:EE:9E:F5:07:50:83:FE:F4:EF:F2:4B:52:70:2C:84:8D:3C:75 Authority key identifier: C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 Certificate issuer: /CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Certificate serial: 019AF0F5F8F0D461C13ECCF621BA0329D260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 00:00:43 +0000 Manifest this update: Sat 06 Dec 2025 00:00:43 +0000 Manifest next update: Sun 07 Dec 2025 00:00:43 +0000 Files and hashes: 1: PbaQDOw99sbMqST1_6GFgBuET80.roa (hash: z/Z68ylDK98w4Ux4hRpw7BRYSr2koQbXP7ZWYLEFwCQ=) 2: xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl (hash: 3nEwYlCnWCgYaZ4Yagzjgvog9ofog3XbtSem8L9RUvg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f8:f0:d4:61:c1:3e:cc:f6:21:ba:03:29:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68ec9c7f1ecc27cb2ec713c2764a0214fce7828 Validity Not Before: Dec 6 00:00:43 2025 GMT Not After : Dec 7 00:00:43 2025 GMT Subject: CN=1a31ee9ef5075083fef4eff24b52702c848d3c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ef:32:48:c5:76:98:a6:6e:62:18:b1:2b:87: d0:c5:01:6f:b9:01:b0:99:d5:9f:ce:f1:94:9c:41: 6d:3d:5e:36:e8:4f:97:c5:3a:0a:01:87:1b:af:0f: 4e:70:ca:3e:59:37:4a:a1:52:f2:ea:4e:69:fd:fa: 0c:6a:2d:ea:0f:c9:0f:8a:ca:19:9a:2f:3d:11:66: f4:b9:15:b6:eb:7f:ff:09:fa:97:1b:27:57:d8:55: 0f:f2:ac:2e:e4:40:e9:54:52:bb:0f:ec:e3:f9:f2: b6:71:4c:54:f0:5e:f0:c2:44:48:45:ec:67:b4:90: 4a:61:80:9f:15:7b:ab:ba:70:5b:82:a7:7f:58:2e: 36:61:dc:96:ed:fc:cd:55:2e:d1:70:24:f5:1e:5d: eb:74:1d:1a:66:72:a2:98:1f:73:90:86:4c:11:bf: 64:d1:69:2f:00:1f:b3:6e:38:3b:aa:fd:12:1d:c8: 80:95:90:9f:2d:1b:95:13:f8:29:11:7c:f6:77:6d: f8:d9:cf:c4:34:0c:7e:60:c1:dd:5e:5c:89:2b:5f: 58:7e:af:de:97:af:b2:2b:2d:ea:25:a5:3f:cd:59: 67:1f:bb:b2:7f:10:be:a9:5e:01:f1:7e:2f:13:f3: ab:6b:75:c2:05:49:db:8e:c8:26:65:24:29:a4:ee: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:31:EE:9E:F5:07:50:83:FE:F4:EF:F2:4B:52:70:2C:84:8D:3C:75 X509v3 Authority Key Identifier: keyid:C6:8E:C9:C7:F1:EC:C2:7C:B2:EC:71:3C:27:64:A0:21:4F:CE:78:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d74c9e-04f0-4e63-af30-8632ee94145b/1/xo7Jx_Hswnyy7HE8J2SgIU_OeCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:cb:ab:e6:98:c4:e6:da:d3:6f:db:50:d3:93:40:e2:dd:46: e6:e5:ca:8e:12:f7:e5:2b:e3:a3:96:5f:59:a0:26:6b:2f:84: 7b:59:35:6c:67:16:0d:5b:86:b9:44:22:cd:22:e5:5d:cd:32: 02:65:30:4e:71:62:d4:18:75:b7:86:ca:92:5a:45:57:58:40: b2:e6:f3:2c:e8:01:df:44:0f:e6:5e:7f:2b:b0:96:bc:77:d0: db:32:d7:95:5f:a1:16:dc:ee:29:f2:aa:c6:2a:a3:55:4f:0f: 9a:97:b8:31:61:23:57:03:65:b0:24:5f:bd:19:7d:59:20:33: f1:bb:11:b3:09:34:d6:dc:96:3c:9c:b1:6f:aa:44:5f:07:fc: 9e:79:aa:8e:ef:15:ca:1d:d0:4b:be:f8:7d:e5:2e:a6:18:4d: af:d6:4b:44:f5:26:9d:85:ce:01:5d:2e:8e:73:fa:ee:8b:f6: c9:f2:c2:77:a6:c7:55:b0:f3:5d:e8:f2:85:b9:d8:fd:d1:e9: 9b:9c:ac:28:52:92:e0:c7:bf:9f:3b:de:4c:9e:47:b1:7d:25: 55:a5:34:36:d4:5f:a0:73:0d:27:4d:17:00:31:78:7e:64:0e: b3:c3:1b:86:2c:73:8d:bf:86:67:2a:1b:aa:6e:17:81:14:ff: f4:40:85:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fjw1GHBPsz2IboDKdJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGVjOWM3ZjFlY2MyN2NiMmVjNzEzYzI3NjRhMDIxNGZj ZTc4MjgwHhcNMjUxMjA2MDAwMDQzWhcNMjUxMjA3MDAwMDQzWjAzMTEwLwYDVQQD EygxYTMxZWU5ZWY1MDc1MDgzZmVmNGVmZjI0YjUyNzAyYzg0OGQzYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+8ySMV2mKZuYhixK4fQxQFvuQGw mdWfzvGUnEFtPV426E+XxToKAYcbrw9OcMo+WTdKoVLy6k5p/foMai3qD8kPisoZ mi89EWb0uRW263//CfqXGydX2FUP8qwu5EDpVFK7D+zj+fK2cUxU8F7wwkRIRexn tJBKYYCfFXurunBbgqd/WC42YdyW7fzNVS7RcCT1Hl3rdB0aZnKimB9zkIZMEb9k 0WkvAB+zbjg7qv0SHciAlZCfLRuVE/gpEXz2d2342c/ENAx+YMHdXlyJK19Yfq/e l6+yKy3qJaU/zVlnH7uyfxC+qV4B8X4vE/Ora3XCBUnbjsgmZSQppO5pAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBox7p71B1CD/vTv8ktScCyEjTx1MB8GA1UdIwQY MBaAFMaOycfx7MJ8suxxPCdkoCFPzngoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAt ODYzMmVlOTQxNDViLzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kNzRjOWUtMDRmMC00ZTYzLWFmMzAtODYzMmVlOTQxNDVi LzEveG83SnhfSHN3bnl5N0hFOEoyU2dJVV9PZUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMur5pjE 5trTb9tQ05NA4t1G5uXKjhL35Svjo5ZfWaAmay+Ee1k1bGcWDVuGuUQizSLlXc0y AmUwTnFi1Bh1t4bKklpFV1hAsubzLOgB30QP5l5/K7CWvHfQ2zLXlV+hFtzuKfKq xiqjVU8Pmpe4MWEjVwNlsCRfvRl9WSAz8bsRswk01tyWPJyxb6pEXwf8nnmqju8V yh3QS774feUuphhNr9ZLRPUmnYXOAV0ujnP67ov2yfLCd6bHVbDzXejyhbnY/dHp m5ysKFKS4Me/nzveTJ5HsX0lVaU0NtRfoHMNJ00XADF4fmQOs8Mbhixzjb+GZyob qm4XgRT/9ECFXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:03 2025 by rpki-client