This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json) Hash identifier: ubavumBhBLsUUabqi8UX0io++UmfkgF2zjp1tbFPuQM= Subject key identifier: 57:73:DB:A5:85:D2:B3:2A:30:06:93:11:D7:1A:AE:D9:1D:AB:29:B0 Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c Certificate serial: 019AF23FD8A0E2D8258F5F0BD28FE83F800C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 06:01:01 +0000 Manifest this update: Sat 06 Dec 2025 06:01:01 +0000 Manifest next update: Sun 07 Dec 2025 06:01:01 +0000 Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: i5/fI2nKBf5rs6iNt3j9P5gm6WUjDCB1Wrgtj+uDc0A=) 2: vyiJ9VgxunO1beL-TLp8DQho0z4.roa (hash: ThIUsMZZykRqe6AuoTNCl3LT/Ty2lekPXvQyW0X+N8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d8:a0:e2:d8:25:8f:5f:0b:d2:8f:e8:3f:80:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c Validity Not Before: Dec 6 06:01:01 2025 GMT Not After : Dec 7 06:01:01 2025 GMT Subject: CN=5773dba585d2b32a30069311d71aaed91dab29b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:48:ad:e9:4a:2f:94:ad:25:20:7a:36:a4:21: 74:7a:c5:04:d5:7e:ec:db:4a:c9:1f:d9:0e:c4:76: d7:95:aa:60:70:0a:34:42:d4:e2:60:3c:d7:e7:aa: 8d:86:91:6f:92:d6:22:5c:dc:4e:ba:03:ea:b8:0d: 17:0c:4c:49:1c:e5:8c:69:88:0e:95:44:1f:1c:0a: 01:09:6e:17:15:6c:b1:2a:1d:38:7b:52:64:0d:e4: bd:2f:56:ed:15:e4:72:ba:67:70:cf:94:ec:18:66: 6e:37:22:83:cb:89:76:cb:28:e6:7b:38:ac:de:90: d7:f9:2e:93:3c:f7:0a:37:bb:37:94:a9:17:1f:c3: 7f:bc:df:f0:4e:cf:68:21:ee:06:bf:85:fd:42:07: 09:8b:b2:a7:c9:fe:2a:a7:45:07:41:79:7d:a2:27: 76:62:9c:04:4d:4e:e0:f8:42:ab:3d:b8:3d:05:bd: 3f:26:0f:60:5e:90:48:7a:36:93:1c:02:e6:d7:82: 40:14:d7:ca:33:c9:07:44:9c:2b:05:33:49:ad:e0: 28:1a:8b:a8:17:8c:00:85:9e:67:e3:0b:59:04:e0: 57:b8:0b:6b:a1:60:4f:89:63:f4:b5:d6:2c:e6:fb: ee:52:e6:c3:4b:c6:fd:94:45:45:67:aa:ac:63:ef: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:73:DB:A5:85:D2:B3:2A:30:06:93:11:D7:1A:AE:D9:1D:AB:29:B0 X509v3 Authority Key Identifier: keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ce:c2:08:ed:af:b2:40:30:83:02:9e:68:0a:dc:ac:24:63: 81:d9:75:5a:df:5c:f4:0b:59:5b:97:25:07:a3:fb:84:7e:18: 36:ff:f6:ad:41:48:a3:c7:29:2f:4b:22:97:9c:f2:e2:70:a7: 36:66:9f:d9:26:05:49:57:38:23:95:fd:98:94:99:83:9a:11: dc:19:c0:1c:5b:68:02:e4:31:f6:23:5e:a9:d0:4f:b9:ea:84: 82:3a:80:57:99:31:8b:db:81:4b:06:e4:cb:eb:3a:5f:f7:f2: 35:59:21:bc:2c:a0:19:68:0a:a2:26:42:3a:f3:d4:1a:b9:08: b8:cb:8f:b6:93:4e:45:b1:fe:7b:34:2f:b0:18:1f:4a:41:47: 90:55:fa:0d:b4:96:e2:c5:2a:ec:25:50:16:3e:9f:81:a0:10: ab:8a:ff:9a:70:f1:62:9d:ef:ec:4d:c6:9a:79:38:4f:01:3a: 48:ae:39:88:e3:9e:9d:50:f6:06:b3:93:b5:a6:16:61:1d:d5: 28:42:c0:ea:89:ea:de:ab:0f:33:45:bc:8f:a4:b0:d1:db:ee: 91:6a:2b:48:e7:27:fb:f8:b2:b0:f6:25:ac:1a:9a:16:04:ad: 8a:eb:9b:5b:1b:86:29:21:9f:b8:13:08:d6:5f:6c:e9:59:d9: 53:22:83:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9ig4tglj18L0o/oP4AMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1 ZTI2OWMwHhcNMjUxMjA2MDYwMTAxWhcNMjUxMjA3MDYwMTAxWjAzMTEwLwYDVQQD Eyg1NzczZGJhNTg1ZDJiMzJhMzAwNjkzMTFkNzFhYWVkOTFkYWIyOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUit6UovlK0lIHo2pCF0esUE1X7s 20rJH9kOxHbXlapgcAo0QtTiYDzX56qNhpFvktYiXNxOugPquA0XDExJHOWMaYgO lUQfHAoBCW4XFWyxKh04e1JkDeS9L1btFeRyumdwz5TsGGZuNyKDy4l2yyjmezis 3pDX+S6TPPcKN7s3lKkXH8N/vN/wTs9oIe4Gv4X9QgcJi7Knyf4qp0UHQXl9oid2 YpwETU7g+EKrPbg9Bb0/Jg9gXpBIejaTHALm14JAFNfKM8kHRJwrBTNJreAoGouo F4wAhZ5n4wtZBOBXuAtroWBPiWP0tdYs5vvuUubDS8b9lEVFZ6qsY+8xAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdz26WF0rMqMAaTEdcartkdqymwMB8GA1UdIwQY MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2 LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk87CCO2v skAwgwKeaArcrCRjgdl1Wt9c9AtZW5clB6P7hH4YNv/2rUFIo8cpL0sil5zy4nCn Nmaf2SYFSVc4I5X9mJSZg5oR3BnAHFtoAuQx9iNeqdBPueqEgjqAV5kxi9uBSwbk y+s6X/fyNVkhvCygGWgKoiZCOvPUGrkIuMuPtpNORbH+ezQvsBgfSkFHkFX6DbSW 4sUq7CVQFj6fgaAQq4r/mnDxYp3v7E3Gmnk4TwE6SK45iOOenVD2BrOTtaYWYR3V KELA6onq3qsPM0W8j6Sw0dvukWorSOcn+/iysPYlrBqaFgStiuubWxuGKSGfuBMI 1l9s6VnZUyKDnw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:34 2025 by rpki-client