This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json) Hash identifier: W4C2KW+d3R3vEjqV+oSqWZJo038h1i0ZCclEB4fgO4U= Subject key identifier: B6:7D:33:C9:12:F6:BB:BE:96:2B:11:4F:55:3D:CC:47:7A:56:B4:7C Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Certificate serial: 019AF50A8C7238B8A59C35483EF6098F206C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:01:40 +0000 Manifest this update: Sat 06 Dec 2025 19:01:40 +0000 Manifest next update: Sun 07 Dec 2025 19:01:40 +0000 Files and hashes: 1: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: 9tfr1oLnA/0M0i9PiE0KxIqc6uamQ71g6Nx+H8zhsJs=) 2: aOlQW-HjiTaqNC1rxfk_lAkcv5A.roa (hash: ECnqpiibCaw2wJdogaxFoaIJMNjyCvBElHPR6vh8uaI=) 3: r0sx0dKkFtH5IxbLaEsFdTPr2X0.roa (hash: EBn7sEe1WosQ18UNra4vN2152bj1ofOm+tLWvyXPfXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:8c:72:38:b8:a5:9c:35:48:3e:f6:09:8f:20:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa Validity Not Before: Dec 6 19:01:40 2025 GMT Not After : Dec 7 19:01:40 2025 GMT Subject: CN=b67d33c912f6bbbe962b114f553dcc477a56b47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5f:ac:06:56:ce:e7:ab:dd:ae:ff:8d:5c:1d: 43:2d:04:74:9a:99:3b:4c:fe:b6:88:52:0c:4d:cd: 73:a8:e8:1b:17:c2:c1:48:2e:b3:8d:9b:07:67:0e: 94:79:c7:82:1d:92:7d:86:85:0e:ac:ad:0e:36:11: e4:a9:27:3f:55:a6:0e:66:df:53:f4:28:15:fa:e0: 1b:7b:39:49:4c:f5:b2:a0:5d:f4:b6:30:b7:51:21: 79:c1:d0:6c:5a:37:fe:ad:09:d0:28:ef:0d:c6:da: db:08:7d:c1:d3:7f:50:aa:96:f9:e9:02:94:19:19: 1b:b9:0a:ae:8e:7a:86:8a:ac:aa:52:33:c7:66:ed: f2:51:4c:58:a9:3c:42:a1:bc:7a:64:e6:b6:71:d6: 9f:50:de:6c:2f:a3:c3:86:78:af:20:a7:d8:d9:26: 6c:6f:51:43:a4:74:8e:50:2f:ac:6b:fa:c5:5a:5f: 56:a5:22:7e:a7:fe:c4:33:a0:f5:88:57:43:f9:91: a5:64:26:ec:c4:53:c6:c8:fd:0e:df:da:25:e8:73: a5:c7:d4:f8:80:7c:2e:e2:b5:14:1e:61:af:e8:2f: dd:23:e9:58:a3:14:64:23:c2:27:f5:9b:2a:f3:36: ea:19:ad:04:93:b0:df:0a:a5:d2:85:25:da:92:7c: 14:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7D:33:C9:12:F6:BB:BE:96:2B:11:4F:55:3D:CC:47:7A:56:B4:7C X509v3 Authority Key Identifier: keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:98:71:06:d7:bf:17:ff:3a:de:64:ba:00:2f:ec:e6:8d:b7: a2:b9:dc:21:af:15:dd:96:7e:f3:e2:69:13:d8:5c:2c:34:1e: 9a:b1:f7:5c:1b:31:fa:2d:1f:30:f8:5a:5d:73:b3:18:06:5e: 98:5b:48:e7:c6:c4:21:53:92:b1:b8:eb:41:1e:23:9f:6a:73: fd:ea:6b:52:41:4e:dd:6a:13:03:3d:2d:b6:12:35:9b:75:f8: df:a0:c1:87:71:f6:19:8a:5c:94:c0:34:c4:f1:6f:c1:61:29: 59:a6:ed:12:57:1b:3c:ea:c5:4d:70:5a:0d:00:be:69:20:6e: b1:fe:af:c6:10:50:60:1f:ed:d4:06:66:b7:72:bd:98:ad:7e: d1:f8:61:a3:01:79:d4:9c:83:7f:9a:03:fe:bb:97:a8:d4:9d: 72:80:a0:2b:2c:2f:7d:0f:56:33:29:d6:bc:f9:e9:f8:99:54: 55:64:c2:84:7f:29:33:1e:8f:ee:44:a5:27:da:55:98:f2:39: 62:15:a7:3c:5b:1d:3b:ee:d5:fa:c7:fc:17:ac:b5:60:23:65: e5:19:1e:ee:d0:77:74:ce:40:0a:df:1d:c0:31:7b:01:ef:f7: d1:11:d5:0a:57:8e:2f:7c:57:6e:9e:92:99:6a:19:d4:d8:b7: de:02:27:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CoxyOLilnDVIPvYJjyBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDVjYjY3MjA5YmJkMTk4M2Y0MzI3NzE2NTIzZWIxNzc3 ZmQ0ZmEwHhcNMjUxMjA2MTkwMTQwWhcNMjUxMjA3MTkwMTQwWjAzMTEwLwYDVQQD EyhiNjdkMzNjOTEyZjZiYmJlOTYyYjExNGY1NTNkY2M0NzdhNTZiNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2F+sBlbO56vdrv+NXB1DLQR0mpk7 TP62iFIMTc1zqOgbF8LBSC6zjZsHZw6UeceCHZJ9hoUOrK0ONhHkqSc/VaYOZt9T 9CgV+uAbezlJTPWyoF30tjC3USF5wdBsWjf+rQnQKO8NxtrbCH3B039Qqpb56QKU GRkbuQqujnqGiqyqUjPHZu3yUUxYqTxCobx6ZOa2cdafUN5sL6PDhnivIKfY2SZs b1FDpHSOUC+sa/rFWl9WpSJ+p/7EM6D1iFdD+ZGlZCbsxFPGyP0O39ol6HOlx9T4 gHwu4rUUHmGv6C/dI+lYoxRkI8In9Zsq8zbqGa0Ek7DfCqXShSXaknwULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ9M8kS9ru+lisRT1U9zEd6VrR8MB8GA1UdIwQY MBaAFF4Fy2cgm70Zg/QydxZSPrF3f9T6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgt MTcxNTkxOTU2N2M5LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS85Y2EwZGYtZDQ3NC00MGNkLTg2ODgtMTcxNTkxOTU2N2M5 LzEvWGdYTFp5Q2J2Um1EOURKM0ZsSS1zWGRfMVBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZhxBte/ F/863mS6AC/s5o23orncIa8V3ZZ+8+JpE9hcLDQemrH3XBsx+i0fMPhaXXOzGAZe mFtI58bEIVOSsbjrQR4jn2pz/eprUkFO3WoTAz0tthI1m3X436DBh3H2GYpclMA0 xPFvwWEpWabtElcbPOrFTXBaDQC+aSBusf6vxhBQYB/t1AZmt3K9mK1+0fhhowF5 1JyDf5oD/ruXqNSdcoCgKywvfQ9WMynWvPnp+JlUVWTChH8pMx6P7kSlJ9pVmPI5 YhWnPFsdO+7V+sf8F6y1YCNl5Rke7tB3dM5ACt8dwDF7Ae/30RHVCleOL3xXbp6S mWoZ1Ni33gInSA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:13 2025 by rpki-client