This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json) Hash identifier: aarK965HeOdT3vF6YMZdfjpVek5zITuBr7qgqGVykq0= Subject key identifier: 6C:EB:79:07:F5:60:E4:D3:2D:6B:0B:6A:C9:CF:EC:F8:9E:60:31:F1 Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Certificate serial: 019AF389E8B6AEC598EC51CEB863849EDA95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft Manifest number: 067B Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 12:01:32 +0000 Manifest next update: Sun 07 Dec 2025 12:01:32 +0000 Files and hashes: 1: tSYSYm63yj3qobuZYMSr1LAsH4E.roa (hash: e9vbUkUz5x9f5ya8J4QgHE0l9ibgPIgGHQ86whMQdU8=) 2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: nYU4t6JzK+w7K0dfmpuOKCH2gkarM0V1TQEXXbRtwks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:e8:b6:ae:c5:98:ec:51:ce:b8:63:84:9e:da:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300 Validity Not Before: Dec 6 12:01:32 2025 GMT Not After : Dec 7 12:01:32 2025 GMT Subject: CN=6ceb7907f560e4d32d6b0b6ac9cfecf89e6031f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:99:ec:76:7c:d1:49:7d:6b:16:00:64:1c:6e: 5f:a6:67:c3:dd:e9:b2:14:0c:6a:5d:55:f0:9b:26: 04:ed:b7:d1:71:12:c1:4d:21:51:c6:5a:4c:0e:79: 74:b9:cd:d6:e8:1e:1d:c2:f1:91:97:37:ce:ad:f7: 2a:60:cc:54:75:ba:03:15:c3:2a:8d:54:60:28:d7: fd:9e:6d:2a:0f:ef:6e:d1:26:90:41:67:29:4e:d5: 7b:24:4d:2a:24:0f:cd:34:12:09:56:35:95:2f:aa: 6a:8a:15:e0:b1:0b:cb:c2:65:ff:aa:c9:0e:b7:90: 1a:14:0a:a0:2b:0c:3a:37:ec:00:04:2c:75:81:40: 70:2e:12:4e:1f:96:61:5e:c3:80:aa:e7:78:1a:d3: d8:bd:13:fb:ff:36:63:85:01:2b:52:5a:3b:bd:a8: 1f:f8:1f:8d:1d:17:35:ae:ef:2c:5e:89:53:9a:2a: 89:18:e7:8e:f6:25:d5:a0:18:0b:6d:80:f8:64:0e: 74:9d:e2:05:27:63:e1:3c:37:07:73:1d:46:7c:00: c0:37:f5:1f:b9:13:e3:3a:18:6c:78:49:ca:84:8d: ad:df:eb:97:dd:bc:54:8c:2e:fd:4b:05:03:19:c4: 80:cc:cf:67:7c:3e:f4:2f:87:a0:62:7e:a1:be:d5: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:EB:79:07:F5:60:E4:D3:2D:6B:0B:6A:C9:CF:EC:F8:9E:60:31:F1 X509v3 Authority Key Identifier: keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:0b:72:9b:23:ce:dd:98:3e:1c:5a:fd:73:43:44:61:a1:5c: c8:50:48:55:83:06:9d:31:2a:c1:1d:8d:1d:50:45:81:16:d6: 20:2f:b5:cf:20:a1:7a:13:dc:82:06:d0:49:36:cb:1c:8c:92: d7:c2:90:25:7f:80:71:f2:58:4a:15:82:1a:6f:f0:85:82:de: a5:72:f4:0a:44:6d:41:06:96:62:ac:7b:72:27:32:82:94:c6: 4d:d5:cf:aa:c4:05:7b:bf:74:66:d0:28:5f:52:75:05:0d:fe: d7:0a:c3:a2:b5:21:76:3c:ba:ca:19:5b:58:b4:bd:cd:0a:93: 4f:28:25:de:7c:a5:3b:65:70:65:59:73:2f:ed:f1:d0:e5:ff: 8a:6e:ff:42:7b:e0:ef:3e:0e:06:13:4a:6d:96:4c:b8:5a:a9: 4d:78:82:21:d9:6b:95:da:19:7a:e0:c3:48:bf:c1:92:8d:d5: 8b:8c:70:7d:c4:3e:c4:5e:c3:c0:98:c2:4b:6e:ac:27:82:93: 81:90:8a:b8:b8:5a:85:e0:48:8a:22:af:f4:4b:41:a0:35:e2: 93:88:35:29:07:c2:4f:5a:1d:ca:57:dd:00:bf:60:0d:47:84: 84:3c:64:78:bc:e0:e1:f1:9c:b0:e7:9e:fa:4b:0e:66:29:8f: 3c:c0:75:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziei2rsWY7FHOuGOEntqVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YzRiM2FlNTlkOTgxZjI1MGNjODdkYWI1OTc4NTRhYmVk N2EzMDAwHhcNMjUxMjA2MTIwMTMyWhcNMjUxMjA3MTIwMTMyWjAzMTEwLwYDVQQD Eyg2Y2ViNzkwN2Y1NjBlNGQzMmQ2YjBiNmFjOWNmZWNmODllNjAzMWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpnsdnzRSX1rFgBkHG5fpmfD3emy FAxqXVXwmyYE7bfRcRLBTSFRxlpMDnl0uc3W6B4dwvGRlzfOrfcqYMxUdboDFcMq jVRgKNf9nm0qD+9u0SaQQWcpTtV7JE0qJA/NNBIJVjWVL6pqihXgsQvLwmX/qskO t5AaFAqgKww6N+wABCx1gUBwLhJOH5ZhXsOAqud4GtPYvRP7/zZjhQErUlo7vagf +B+NHRc1ru8sXolTmiqJGOeO9iXVoBgLbYD4ZA50neIFJ2PhPDcHcx1GfADAN/Uf uRPjOhhseEnKhI2t3+uX3bxUjC79SwUDGcSAzM9nfD70L4egYn6hvtXW4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzreQf1YOTTLWsLasnP7PieYDHxMB8GA1UdIwQY MBaAFMXEs65Z2YHyUMyH2rWXhUq+16MAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYt ZWRkZjUyN2U4ZjJkLzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS85ZjU0YTYtOTMzZi00N2RlLTg3MjYtZWRkZjUyN2U4ZjJk LzEveGNTenJsblpnZkpReklmYXRaZUZTcjdYb3dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAtymyPO 3Zg+HFr9c0NEYaFcyFBIVYMGnTEqwR2NHVBFgRbWIC+1zyChehPcggbQSTbLHIyS 18KQJX+AcfJYShWCGm/whYLepXL0CkRtQQaWYqx7cicygpTGTdXPqsQFe790ZtAo X1J1BQ3+1wrDorUhdjy6yhlbWLS9zQqTTygl3nylO2VwZVlzL+3x0OX/im7/Qnvg 7z4OBhNKbZZMuFqpTXiCIdlrldoZeuDDSL/Bko3Vi4xwfcQ+xF7DwJjCS26sJ4KT gZCKuLhaheBIiiKv9EtBoDXik4g1KQfCT1odylfdAL9gDUeEhDxkeLzg4fGcsOee +ksOZimPPMB1LA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:15 2025 by rpki-client