This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json) Hash identifier: 8wGh78foq0DBM5wTFJQHGp5dTlCZevkCulTZyfQAk08= Subject key identifier: 57:5B:4C:6C:51:A3:92:D7:EA:7B:66:4D:61:D7:52:18:E5:D1:02:C7 Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d Certificate serial: 019AF3F74E75DF41FC48BE688B56CC6EF5EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft Manifest number: 06A0 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: Cp3a8QStnqXfkMEt3MzPv0NPLfw.roa (hash: JHMaMdRFsj91Cuvd913r35tABZ3iUgx4wHKDhRus+w0=) 2: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: sJz2bAw/Bt5QqKhY6og2QPa70LSlDFlJY1bl4bz0OFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4e:75:df:41:fc:48:be:68:8b:56:cc:6e:f5:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5947a414a8830515656d738a78382890160377d Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=575b4c6c51a392d7ea7b664d61d75218e5d102c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:1d:57:71:8b:52:2d:d0:5f:72:81:91:c8: a1:d7:0e:32:c1:3b:13:86:72:b5:14:df:a0:c4:d6: a2:17:bd:8d:02:14:24:5c:2d:9d:fd:cf:be:9c:8e: f3:1b:a1:bf:0a:90:0c:49:44:2c:c4:84:c0:c8:ff: 13:b5:4c:1a:f5:2e:4d:67:40:dc:c2:ac:3b:1c:7e: cd:71:1f:cf:b7:ea:e5:49:2c:05:e1:76:83:d2:38: 9d:e6:b1:af:76:57:74:55:d8:6a:1c:59:8e:3b:03: b8:39:3d:d8:33:19:0e:9c:df:a3:09:5c:74:2e:72: 1f:54:64:63:10:73:c5:14:03:a9:80:98:54:5b:fe: e2:4a:37:e0:e1:ad:0f:dc:d7:6a:24:a7:1b:32:36: d6:f1:c0:ef:3f:85:4d:ad:ca:46:ef:c1:bb:11:4d: 2e:56:c7:0f:a6:07:5b:a9:d5:66:2a:a9:dc:89:3d: 71:4f:df:08:5c:3f:be:94:81:37:01:84:2c:46:a8: 02:e6:cd:1e:e4:62:4c:99:f9:62:0b:ea:ba:a3:93: 2c:2b:b4:01:ba:b5:27:c7:fd:03:97:f7:4b:d1:02: 18:ee:73:2b:33:a7:c3:5d:91:ae:6f:b6:e3:40:a1: b9:3d:ab:ed:6f:7c:b5:aa:63:0e:58:58:4e:be:5f: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5B:4C:6C:51:A3:92:D7:EA:7B:66:4D:61:D7:52:18:E5:D1:02:C7 X509v3 Authority Key Identifier: keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:55:b5:dc:d9:96:26:c3:44:6b:c3:e8:1c:b6:52:1c:91:2c: ed:05:c2:76:4c:87:1c:be:93:12:89:73:32:95:25:c8:86:93: fb:f4:43:64:13:7f:6c:7b:af:8f:19:88:09:11:77:02:16:87: e5:9c:3c:d9:61:8f:75:74:fb:be:cf:dd:43:59:a1:18:55:76: d7:18:b7:36:e0:eb:87:ea:91:f2:af:f4:63:3f:cb:76:8c:b2: 97:9b:cd:b8:39:c4:4b:20:dc:88:1a:8f:8c:10:59:c4:58:36: 6c:18:cb:d0:1f:83:f9:8b:da:32:69:d9:88:14:56:a1:e1:c0: 0f:02:96:dd:89:3f:12:1a:d1:36:db:9d:14:ad:ea:ba:20:cf: 90:9c:d1:fd:c8:61:4c:3d:0e:28:1c:57:24:a3:80:3f:27:4e: d8:f6:78:69:c1:5e:a7:da:f0:bd:b9:17:91:d3:c9:83:1a:75: fc:20:82:ee:60:ec:05:78:50:64:53:b7:54:ca:32:ff:f5:13: 9d:0c:00:60:a0:27:64:99:d9:da:1c:a3:e0:9e:f7:c6:3e:57: f6:7b:d7:fe:47:ad:f7:0e:9c:ed:73:a2:58:17:ef:5e:e3:c1: 7c:a2:41:cd:0c:de:6f:7c:71:33:b1:71:2c:9c:9f:f9:a2:5a: 34:a4:df:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz905130H8SL5oi1bMbvXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTQ3YTQxNGE4ODMwNTE1NjU2ZDczOGE3ODM4Mjg5MDE2 MDM3N2QwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD Eyg1NzViNGM2YzUxYTM5MmQ3ZWE3YjY2NGQ2MWQ3NTIxOGU1ZDEwMmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K4dV3GLUi3QX3KBkcih1w4ywTsT hnK1FN+gxNaiF72NAhQkXC2d/c++nI7zG6G/CpAMSUQsxITAyP8TtUwa9S5NZ0Dc wqw7HH7NcR/Pt+rlSSwF4XaD0jid5rGvdld0VdhqHFmOOwO4OT3YMxkOnN+jCVx0 LnIfVGRjEHPFFAOpgJhUW/7iSjfg4a0P3NdqJKcbMjbW8cDvP4VNrcpG78G7EU0u VscPpgdbqdVmKqnciT1xT98IXD++lIE3AYQsRqgC5s0e5GJMmfliC+q6o5MsK7QB urUnx/0Dl/dL0QIY7nMrM6fDXZGub7bjQKG5Pavtb3y1qmMOWFhOvl9ONQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdbTGxRo5LX6ntmTWHXUhjl0QLHMB8GA1UdIwQY MBaAFMWUekFKiDBRVlbXOKeDgokBYDd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2Yt MGU1NDk0YWY1ODQwLzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85MmUwYTYtYjNlMy00NTVkLTkyY2YtMGU1NDk0YWY1ODQw LzEveFpSNlFVcUlNRkZXVnRjNHA0T0NpUUZnTjMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVW13NmW JsNEa8PoHLZSHJEs7QXCdkyHHL6TEolzMpUlyIaT+/RDZBN/bHuvjxmICRF3AhaH 5Zw82WGPdXT7vs/dQ1mhGFV21xi3NuDrh+qR8q/0Yz/Ldoyyl5vNuDnESyDciBqP jBBZxFg2bBjL0B+D+YvaMmnZiBRWoeHADwKW3Yk/EhrRNtudFK3quiDPkJzR/chh TD0OKBxXJKOAPydO2PZ4acFep9rwvbkXkdPJgxp1/CCC7mDsBXhQZFO3VMoy//UT nQwAYKAnZJnZ2hyj4J73xj5X9nvX/ket9w6c7XOiWBfvXuPBfKJBzQzeb3xxM7Fx LJyf+aJaNKTfgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:12 2025 by rpki-client