This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json) Hash identifier: NJ1OwSvdlXFSwjcl1xL6cflShafuAp4CAAMD3a9Xwlg= Subject key identifier: A7:02:A1:D1:5E:DD:15:8E:A5:B6:80:5F:57:EF:E2:8E:6B:3B:4B:D0 Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Certificate serial: 019AF1645E30ADA833A16F6D2DD7381A738E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:18 +0000 Manifest this update: Sat 06 Dec 2025 02:01:18 +0000 Manifest next update: Sun 07 Dec 2025 02:01:18 +0000 Files and hashes: 1: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: p2VJ+UcRVQkAk2eKRq5OnZbPzwkmN1QG8+7PCiNpdig=) 2: tjHH92n144_2kyCpRlp025zS_60.roa (hash: ok5CTqSNJzdSSlXk4Sa58sv7A+s3smyB2E8BTCCRwo4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5e:30:ad:a8:33:a1:6f:6d:2d:d7:38:1a:73:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed Validity Not Before: Dec 6 02:01:18 2025 GMT Not After : Dec 7 02:01:18 2025 GMT Subject: CN=a702a1d15edd158ea5b6805f57efe28e6b3b4bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:20:e8:e2:43:0a:6e:35:ae:c1:4a:28:26:a9: bc:c8:30:73:5c:1c:42:67:3f:2c:93:47:15:ac:e9: d9:17:e3:18:c9:78:c6:9a:40:81:65:8f:d7:33:da: be:e3:fb:b4:24:38:12:16:56:88:86:6c:59:a2:7f: 85:b8:49:db:1d:e9:77:a7:c3:96:75:57:56:41:de: 78:91:d4:cf:88:ff:3a:4b:40:7e:0d:dc:d1:9a:3e: ee:9b:7a:8e:80:d6:da:64:2f:62:6f:86:e0:2b:64: 57:eb:0c:76:d6:e2:1f:49:4c:2c:2b:04:4c:14:8e: 4c:98:59:b3:a6:df:c4:c2:ba:4e:99:9d:12:72:c1: d1:5b:38:a5:61:ba:13:99:ed:7a:0c:86:82:a5:f7: 7d:8f:55:da:79:de:98:30:89:59:19:b1:55:66:7a: 43:d2:3c:bf:37:58:5a:cc:f6:99:27:90:0f:49:67: 26:1e:c7:f3:9e:8a:49:14:c6:83:b8:71:36:60:ba: bd:37:ef:54:69:98:ca:7c:4e:58:36:91:4b:55:62: a7:6c:5b:e1:c8:59:97:14:cc:3e:40:bc:a8:13:44: a8:14:3d:35:a7:d8:0a:6e:69:80:9f:d6:47:e5:00: b9:c7:57:f0:d5:55:2b:0a:c9:22:68:51:f5:39:88: c7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:02:A1:D1:5E:DD:15:8E:A5:B6:80:5F:57:EF:E2:8E:6B:3B:4B:D0 X509v3 Authority Key Identifier: keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:29:c0:d7:42:7d:67:6d:59:b2:98:0c:58:0b:b0:5c:fa:6f: 9e:a6:78:a5:47:41:55:b4:12:ee:13:25:30:5a:be:cc:7f:c3: c4:1c:75:f6:e7:83:6e:1b:8d:52:51:4c:90:ab:0e:df:3a:5f: a5:ca:e6:30:87:1b:0a:12:4a:3f:c6:01:e9:82:7c:aa:4f:e8: 04:51:cd:2f:6e:c0:5e:aa:c8:97:1d:76:13:2c:96:5c:68:4a: 02:4d:96:f8:71:47:72:a4:c6:d0:e1:9e:b3:80:9c:ab:05:d5: 53:88:5e:4b:a0:26:43:67:78:3e:23:ee:06:55:0a:03:b3:66: 01:18:d0:bc:84:41:cd:07:cb:c5:bb:32:29:41:2e:82:f2:2a: 2b:35:69:8c:79:cb:21:f7:13:99:fc:b2:36:24:1d:49:39:93: f4:b1:03:42:11:60:1c:32:e2:b5:6c:a0:84:78:fa:ca:ed:45: 79:61:e3:86:da:9b:22:a2:1e:31:0e:f5:61:45:34:10:b8:58: 6a:d6:a0:ab:6d:6f:0c:eb:5f:36:d2:8d:d3:54:f9:3b:a7:70: b1:b2:88:de:51:2c:c5:4d:e5:3c:dc:2f:50:9f:9e:be:8e:4c: c4:75:d1:aa:25:99:e0:cf:cb:8e:1a:0b:2a:3a:b7:19:a2:eb: d8:46:b2:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZF4wragzoW9tLdc4GnOOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOWM1YjczM2ZiYTcxZTk4YzA3ZTEzYjAzYTdjNTVhYjg0 Y2M4ZWQwHhcNMjUxMjA2MDIwMTE4WhcNMjUxMjA3MDIwMTE4WjAzMTEwLwYDVQQD EyhhNzAyYTFkMTVlZGQxNThlYTViNjgwNWY1N2VmZTI4ZTZiM2I0YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDo4kMKbjWuwUooJqm8yDBzXBxC Zz8sk0cVrOnZF+MYyXjGmkCBZY/XM9q+4/u0JDgSFlaIhmxZon+FuEnbHel3p8OW dVdWQd54kdTPiP86S0B+DdzRmj7um3qOgNbaZC9ib4bgK2RX6wx21uIfSUwsKwRM FI5MmFmzpt/EwrpOmZ0ScsHRWzilYboTme16DIaCpfd9j1Xaed6YMIlZGbFVZnpD 0jy/N1hazPaZJ5APSWcmHsfznopJFMaDuHE2YLq9N+9UaZjKfE5YNpFLVWKnbFvh yFmXFMw+QLyoE0SoFD01p9gKbmmAn9ZH5QC5x1fw1VUrCskiaFH1OYjHmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcCodFe3RWOpbaAX1fv4o5rO0vQMB8GA1UdIwQY MBaAFF2cW3M/unHpjAfhOwOnxVq4TMjtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUt YWQ5ZDVkYjBmMDk5LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hMmQ0Y2ItOTIzYS00ZTA0LThkODUtYWQ5ZDVkYjBmMDk5 LzEvWFp4YmN6LTZjZW1NQi1FN0E2ZkZXcmhNeU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABynA10J9 Z21ZspgMWAuwXPpvnqZ4pUdBVbQS7hMlMFq+zH/DxBx19ueDbhuNUlFMkKsO3zpf pcrmMIcbChJKP8YB6YJ8qk/oBFHNL27AXqrIlx12EyyWXGhKAk2W+HFHcqTG0OGe s4CcqwXVU4heS6AmQ2d4PiPuBlUKA7NmARjQvIRBzQfLxbsyKUEugvIqKzVpjHnL IfcTmfyyNiQdSTmT9LEDQhFgHDLitWyghHj6yu1FeWHjhtqbIqIeMQ71YUU0ELhY atagq21vDOtfNtKN01T5O6dwsbKI3lEsxU3lPNwvUJ+evo5MxHXRqiWZ4M/LjhoL Kjq3GaLr2Eay6A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:36 2025 by rpki-client