This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json) Hash identifier: AcBPV7sTTZEI2wYSudWQUfwFP9rEsLzXyQFYolJkhWU= Subject key identifier: 90:12:80:05:EF:AD:A4:98:AD:A9:28:70:54:9F:30:F3:1F:0C:96:5E Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Certificate serial: 019B32D61D04C5D1C874F23999B842363826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft Manifest number: 05E9 Signing time: Thu 18 Dec 2025 19:00:51 +0000 Manifest this update: Thu 18 Dec 2025 19:00:51 +0000 Manifest next update: Fri 19 Dec 2025 19:00:51 +0000 Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=) 2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: okwxBpYUFDQxkXIEdf78JDq6XVRo6dVatP8LXfOa7iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:1d:04:c5:d1:c8:74:f2:39:99:b8:42:36:38:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Validity Not Before: Dec 18 19:00:51 2025 GMT Not After : Dec 19 19:00:51 2025 GMT Subject: CN=90128005efada498ada92870549f30f31f0c965e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:98:26:c2:e2:61:5e:77:93:f3:b7:63:eb: c6:d1:ea:e6:0a:30:46:8b:eb:8c:d0:dc:a3:43:e7: f6:ac:23:21:99:4a:16:4b:f5:5a:f1:14:31:13:67: 23:ae:b5:0e:d1:d5:b2:f6:a7:8c:19:20:b1:9c:05: 9b:96:ee:91:49:67:53:62:2e:48:96:c3:37:a2:46: 2d:27:ed:5a:f5:b3:75:8c:53:0d:88:c5:2a:ef:2e: 5e:e0:60:0c:18:58:90:28:fa:75:82:56:3e:2d:b9: 2a:0f:4e:dd:7c:65:74:13:ed:ad:ca:dc:0c:7d:0c: fa:a2:f9:ce:e3:99:6c:b3:34:29:10:30:6e:c4:1f: dd:42:3d:b9:02:3b:be:97:57:a1:76:71:42:82:a3: 84:0c:26:67:c0:28:d7:68:de:5a:40:fc:66:8d:0a: 04:80:ab:88:79:8e:02:f4:08:38:3e:87:53:16:26: 44:55:31:1a:ec:83:15:53:fe:79:17:1b:23:86:73: 4b:71:02:06:bb:71:fc:ed:49:11:04:d5:9e:0e:07: 62:86:6d:95:6c:0f:4c:17:70:5c:75:15:25:c7:68: 8a:c9:72:eb:91:18:90:51:b3:10:bc:55:98:6c:ff: 8c:c2:c5:e3:7a:6f:94:c6:6e:eb:d6:82:7a:f9:04: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:12:80:05:EF:AD:A4:98:AD:A9:28:70:54:9F:30:F3:1F:0C:96:5E X509v3 Authority Key Identifier: keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4d:1f:6c:7c:e5:ac:0b:f6:5e:39:79:09:ec:3e:4c:f6:7d: b6:63:11:be:4c:d4:ce:a6:56:ac:44:40:49:fd:35:cf:58:0b: 3c:25:86:3f:32:d5:81:ce:2e:66:0c:d7:32:ce:40:ba:67:04: 2c:f4:22:6b:70:08:04:08:74:8c:e6:b2:12:90:a6:90:40:72: f2:fc:ca:8d:bc:c1:67:32:0e:3c:b3:ec:18:71:bc:f4:ac:f6: a0:5d:10:59:00:6f:4c:14:f9:eb:06:5e:12:48:9d:53:aa:3b: 5d:5c:5c:56:45:8d:5b:03:a2:af:8f:ff:33:b2:8d:c7:aa:c9: 26:69:01:d9:02:97:fe:22:8f:4e:4c:0f:56:8c:93:4c:16:d1: 8b:76:ff:12:ff:15:68:68:9c:63:2d:ff:f9:5b:61:46:ac:62: 09:90:b6:40:06:3f:32:7d:5f:0c:64:fd:c7:e2:b7:ff:26:d6: 1c:e8:fa:0c:96:d7:d3:04:1f:9a:d4:80:6a:d4:e9:03:be:11: 72:66:fd:ed:d2:9c:60:96:97:34:da:3d:3a:1a:d2:6a:2d:73: 8b:d1:f8:43:43:7a:86:23:28:99:84:7a:f5:21:1a:b1:18:d8: eb:57:8d:6f:ca:05:57:3f:2c:8e:99:6e:0c:56:51:14:08:c4: d8:c4:e3:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1h0ExdHIdPI5mbhCNjgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy MmFjNGYwHhcNMjUxMjE4MTkwMDUxWhcNMjUxMjE5MTkwMDUxWjAzMTEwLwYDVQQD Eyg5MDEyODAwNWVmYWRhNDk4YWRhOTI4NzA1NDlmMzBmMzFmMGM5NjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HiYJsLiYV53k/O3Y+vG0ermCjBG i+uM0NyjQ+f2rCMhmUoWS/Va8RQxE2cjrrUO0dWy9qeMGSCxnAWblu6RSWdTYi5I lsM3okYtJ+1a9bN1jFMNiMUq7y5e4GAMGFiQKPp1glY+LbkqD07dfGV0E+2tytwM fQz6ovnO45lsszQpEDBuxB/dQj25Aju+l1ehdnFCgqOEDCZnwCjXaN5aQPxmjQoE gKuIeY4C9Ag4PodTFiZEVTEa7IMVU/55FxsjhnNLcQIGu3H87UkRBNWeDgdihm2V bA9MF3BcdRUlx2iKyXLrkRiQUbMQvFWYbP+MwsXjem+Uxm7r1oJ6+QTM1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJASgAXvraSYrakocFSfMPMfDJZeMB8GA1UdIwQY MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2 LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk0fbHzl rAv2Xjl5Cew+TPZ9tmMRvkzUzqZWrERASf01z1gLPCWGPzLVgc4uZgzXMs5AumcE LPQia3AIBAh0jOayEpCmkEBy8vzKjbzBZzIOPLPsGHG89Kz2oF0QWQBvTBT56wZe EkidU6o7XVxcVkWNWwOir4//M7KNx6rJJmkB2QKX/iKPTkwPVoyTTBbRi3b/Ev8V aGicYy3/+VthRqxiCZC2QAY/Mn1fDGT9x+K3/ybWHOj6DJbX0wQfmtSAatTpA74R cmb97dKcYJaXNNo9OhrSai1zi9H4Q0N6hiMomYR69SEasRjY61eNb8oFVz8sjplu DFZRFAjE2MTjAQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:09:37 2025 by rpki-client