This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft File: X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft (raw, json) Hash identifier: 68kCwfNQ22z9lZoe2OOHBfMK/YO5Oqw0qdFi0e3L22M= Subject key identifier: E9:1C:68:2E:D6:5A:3E:A7:5E:B4:81:1B:5B:97:F3:E1:62:37:18:25 Authority key identifier: 5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C Certificate issuer: /CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Certificate serial: 019AF3F74119D5C755048D5BB55089E2EDAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: LTquGO6JvOxW-LYJu4ZO5vl58sw.roa (hash: v+hhHffkC8MxjORjl69a74aTRaVaz0829ZGGCSWHn0k=) 2: X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl (hash: XNSkXsjKCMTuCwe5ax5BxQv8aGibVoYOUMBzfqcUn/8=) 3: YOp8_XwcgPGtX480oZMMv5FkFTE.roa (hash: JNbcPg+eKKH2RwoC8Uz9lo+3KmcraBTljIvma3VhA6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:41:19:d5:c7:55:04:8d:5b:b5:50:89:e2:ed:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f41c664c0c013dffb6e0dd1d73b369cba5fbd1c Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=e91c682ed65a3ea75eb4811b5b97f3e162371825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:4b:b9:ff:eb:be:fa:9f:83:66:18:6d:67: 0c:d9:8a:60:08:bf:38:72:c2:45:01:52:4c:13:de: a7:7f:4c:33:ba:52:04:bd:4f:83:78:da:5d:39:d4: 82:ca:1f:73:92:e2:1d:9a:a6:ad:9f:66:8a:68:b5: 81:14:9e:71:00:57:c6:d5:31:22:b4:8f:44:f2:fc: e1:40:cc:b5:9c:bd:b8:4f:02:32:87:49:ab:35:52: a4:31:d7:02:83:55:b2:97:65:4a:38:5c:04:5c:4c: 3b:be:36:7f:e8:f8:a9:7a:95:05:79:5d:2b:f4:b8: a9:87:13:c0:c1:59:fb:bb:8f:89:74:87:b3:2d:69: 7e:1b:96:d7:09:26:2d:01:74:1f:0b:c4:ea:b8:c2: 12:b1:59:87:f0:f5:25:79:4a:a5:29:d1:83:10:f5: c9:a9:41:1f:09:f3:ce:70:78:c0:91:33:84:8a:59: b8:99:15:cb:15:1f:2f:59:88:52:da:59:69:71:f9: 14:b0:e9:1a:9f:46:fc:97:37:0f:29:0c:0c:a5:39: 71:6d:77:26:33:e5:a1:d0:14:4d:b9:75:50:a3:1f: 3c:df:7f:22:a3:dd:87:b0:37:e7:88:74:f0:b5:aa: 24:13:df:77:be:c1:ed:f9:b7:53:05:d0:d6:07:e5: 92:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:1C:68:2E:D6:5A:3E:A7:5E:B4:81:1B:5B:97:F3:E1:62:37:18:25 X509v3 Authority Key Identifier: keyid:5F:41:C6:64:C0:C0:13:DF:FB:6E:0D:D1:D7:3B:36:9C:BA:5F:BD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0HGZMDAE9_7bg3R1zs2nLpfvRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/379a1d-52b9-4669-9625-62306abdfa03/1/X0HGZMDAE9_7bg3R1zs2nLpfvRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:94:17:18:c5:23:8e:3b:be:fa:31:fa:52:eb:72:18:71:f6: 92:9f:18:e3:47:1d:15:ba:19:06:d2:97:ae:ce:fe:8d:4b:96: 8f:7a:00:74:41:ca:fa:d9:6f:0e:93:c5:80:57:d7:cc:44:61: 44:ce:1e:01:54:e4:d6:c7:47:e8:09:5b:96:0d:5f:1e:9a:65: 67:37:d2:c6:64:2a:62:f3:a7:79:7e:47:fc:f5:ae:f6:c7:88: 3f:68:ff:2f:2e:a2:c4:b2:4d:f4:52:81:bc:db:72:c5:ae:1c: a2:aa:6a:3b:b3:25:c1:f7:2f:82:5b:ea:c1:70:fa:c1:c5:ac: ef:d6:11:52:d4:a0:ab:39:1e:06:4a:66:f0:01:64:3b:98:eb: 13:2e:91:ea:12:3a:03:d8:5f:f7:2c:e5:9d:20:85:29:66:3c: 57:c3:db:0d:c1:f4:8f:fd:b1:7b:f1:ae:0a:61:9f:2f:b9:c0: 7c:81:ef:f5:83:f1:78:19:eb:14:26:15:e8:b4:2b:af:2e:ff: 2d:12:b4:7c:b8:ac:ac:ea:e4:93:a5:35:73:68:3d:a9:7a:66: 94:84:44:f0:72:3a:ca:0c:35:c5:bf:8d:fe:3c:3d:58:bf:20: d0:63:40:c5:1f:2f:cc:dd:8b:4b:43:9d:56:54:69:95:61:f9: e1:fc:a1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90EZ1cdVBI1btVCJ4u2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNDFjNjY0YzBjMDEzZGZmYjZlMGRkMWQ3M2IzNjljYmE1 ZmJkMWMwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD EyhlOTFjNjgyZWQ2NWEzZWE3NWViNDgxMWI1Yjk3ZjNlMTYyMzcxODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHBLuf/rvvqfg2YYbWcM2YpgCL84 csJFAVJME96nf0wzulIEvU+DeNpdOdSCyh9zkuIdmqatn2aKaLWBFJ5xAFfG1TEi tI9E8vzhQMy1nL24TwIyh0mrNVKkMdcCg1Wyl2VKOFwEXEw7vjZ/6PipepUFeV0r 9LiphxPAwVn7u4+JdIezLWl+G5bXCSYtAXQfC8TquMISsVmH8PUleUqlKdGDEPXJ qUEfCfPOcHjAkTOEilm4mRXLFR8vWYhS2llpcfkUsOkan0b8lzcPKQwMpTlxbXcm M+Wh0BRNuXVQox88338io92HsDfniHTwtaokE993vsHt+bdTBdDWB+WSowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkcaC7WWj6nXrSBG1uX8+FiNxglMB8GA1UdIwQY MBaAFF9BxmTAwBPf+24N0dc7Npy6X70cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUt NjIzMDZhYmRmYTAzLzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNzlhMWQtNTJiOS00NjY5LTk2MjUtNjIzMDZhYmRmYTAz LzEvWDBIR1pNREFFOV83YmczUjF6czJuTHBmdlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJQXGMUj jju++jH6UutyGHH2kp8Y40cdFboZBtKXrs7+jUuWj3oAdEHK+tlvDpPFgFfXzERh RM4eAVTk1sdH6Alblg1fHpplZzfSxmQqYvOneX5H/PWu9seIP2j/Ly6ixLJN9FKB vNtyxa4coqpqO7MlwfcvglvqwXD6wcWs79YRUtSgqzkeBkpm8AFkO5jrEy6R6hI6 A9hf9yzlnSCFKWY8V8PbDcH0j/2xe/GuCmGfL7nAfIHv9YPxeBnrFCYV6LQrry7/ LRK0fLisrOrkk6U1c2g9qXpmlIRE8HI6ygw1xb+N/jw9WL8g0GNAxR8vzN2LS0Od VlRplWH54fyhqg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:30 2025 by rpki-client