This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json) Hash identifier: d7N9B25aW09dAkjfDguhKAcu3ODD5NaNK3kEPGkexaI= Subject key identifier: 71:E6:98:AE:F5:F7:89:3A:37:98:D4:96:87:E8:0C:98:F1:A9:3D:E4 Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Certificate serial: 019AF12CC31B09EE5766240E9666ACE5D7F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft Manifest number: 05C7 Signing time: Sat 06 Dec 2025 01:00:33 +0000 Manifest this update: Sat 06 Dec 2025 01:00:33 +0000 Manifest next update: Sun 07 Dec 2025 01:00:33 +0000 Files and hashes: 1: 0_rsDpozI4g5wPFKDmzbwq9bb1k.roa (hash: 7DcbeCiF69zZXzwKjiTUr+RmXx7bcAENnZcFTHZwzHM=) 2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 1Nu7T/4FEO5mXiGD+ESAAMajSm0LtuktxEnf+G/UZgo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c3:1b:09:ee:57:66:24:0e:96:66:ac:e5:d7:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f Validity Not Before: Dec 6 01:00:33 2025 GMT Not After : Dec 7 01:00:33 2025 GMT Subject: CN=71e698aef5f7893a3798d49687e80c98f1a93de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:be:8a:d6:15:5c:f1:1c:f0:e2:33:51:46:1c: 20:3b:b0:d6:7e:61:c8:ec:b0:a5:0a:7d:a6:df:3e: cf:56:8f:8f:1f:73:0e:d9:c6:c1:9f:5d:25:43:39: 8b:71:51:b5:29:be:0f:0b:2f:5b:5c:27:b6:22:25: 91:6b:4e:5e:ef:8a:0b:90:a0:49:e7:3e:29:79:92: a7:c9:4e:d6:a0:68:fa:f9:4c:f7:40:ac:c1:de:a0: 06:98:b7:d6:7f:57:37:59:cf:7b:24:36:a7:18:8c: bd:60:3a:41:75:3e:f1:62:55:58:fb:9f:4a:79:43: e8:2c:45:b2:f6:21:a6:5a:03:05:76:da:24:a2:d3: d4:56:e6:e3:d2:f5:0e:57:8c:44:57:8b:e7:e7:ef: 15:a5:37:e8:c7:58:2e:75:2c:0d:e8:6e:e6:76:97: a2:e1:e6:da:42:9b:c2:13:d4:98:09:32:7b:48:3a: 22:e2:96:e4:bb:20:12:e6:0a:51:fe:7d:e9:f0:a2: 56:b8:6d:27:ae:98:12:4a:9b:c7:40:2c:fe:f2:01: e1:ba:94:49:3c:96:6a:88:83:c2:03:1b:c4:ce:62: d7:32:66:07:fd:29:87:1f:cf:ca:80:b1:51:dc:77: 7b:ea:8a:d6:d6:38:8b:e4:bc:b7:f7:ce:57:18:53: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E6:98:AE:F5:F7:89:3A:37:98:D4:96:87:E8:0C:98:F1:A9:3D:E4 X509v3 Authority Key Identifier: keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:15:2b:ed:25:d4:99:93:c0:a8:7b:0a:6c:4b:b4:68:46:52: af:07:c1:58:4c:7b:33:8f:96:30:ef:b1:10:77:14:bc:d3:c0: ab:3d:97:77:97:23:c8:d3:f1:9e:c5:37:0b:18:49:3d:64:37: e0:4b:aa:dd:d2:a5:ff:ab:9f:f9:97:94:00:df:03:c6:e8:30: e7:8d:fc:81:ca:84:3d:4c:cf:e4:93:ee:65:4f:d9:56:b0:01: c8:5b:b1:e8:cb:d6:2b:ba:86:7b:7f:24:9b:fd:43:3c:59:a5: c0:e2:39:87:f1:80:ad:3f:cf:35:07:52:cf:90:d4:5a:85:f6: ef:81:ad:2c:8d:f7:95:c3:69:73:b1:c0:dd:58:42:11:32:a9: d0:05:e8:45:03:44:a7:a2:5d:64:ff:12:fb:a2:d9:41:74:d5: 4b:7a:97:fd:3d:1d:09:0f:ed:2d:06:0c:12:3b:cf:08:b6:8d: e2:47:42:30:99:a7:5b:e5:73:8b:1a:be:d6:39:9c:05:08:4c: 7e:a9:f5:54:e8:dd:e6:f6:af:23:52:40:bc:11:17:35:8b:56: a4:30:4a:4d:0c:c0:cc:3b:8c:67:db:a1:66:a4:79:d1:ec:fc: 0c:29:66:9e:0e:d5:a2:ea:7c:46:7c:34:50:9f:f3:16:86:1d: d7:dd:85:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMMbCe5XZiQOlmas5df5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0YjdhMzM4NjcyM2JhOGEyZWE0ODJjN2I2ODAzMWE1NDEy MmFjNGYwHhcNMjUxMjA2MDEwMDMzWhcNMjUxMjA3MDEwMDMzWjAzMTEwLwYDVQQD Eyg3MWU2OThhZWY1Zjc4OTNhMzc5OGQ0OTY4N2U4MGM5OGYxYTkzZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL6K1hVc8Rzw4jNRRhwgO7DWfmHI 7LClCn2m3z7PVo+PH3MO2cbBn10lQzmLcVG1Kb4PCy9bXCe2IiWRa05e74oLkKBJ 5z4peZKnyU7WoGj6+Uz3QKzB3qAGmLfWf1c3Wc97JDanGIy9YDpBdT7xYlVY+59K eUPoLEWy9iGmWgMFdtokotPUVubj0vUOV4xEV4vn5+8VpTfox1gudSwN6G7mdpei 4ebaQpvCE9SYCTJ7SDoi4pbkuyAS5gpR/n3p8KJWuG0nrpgSSpvHQCz+8gHhupRJ PJZqiIPCAxvEzmLXMmYH/SmHH8/KgLFR3Hd76orW1jiL5Ly3985XGFMVVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHmmK7194k6N5jUlofoDJjxqT3kMB8GA1UdIwQY MBaAFMS3ozhnI7qKLqSCx7aAMaVBIqxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEt YmQ0MGRmYWU3ODg2LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYTdiZjYtNjUyNS00Mzk0LTgwYmEtYmQ0MGRmYWU3ODg2 LzEveExlak9HY2p1b291cElMSHRvQXhwVUVpckU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhUr7SXU mZPAqHsKbEu0aEZSrwfBWEx7M4+WMO+xEHcUvNPAqz2Xd5cjyNPxnsU3CxhJPWQ3 4Euq3dKl/6uf+ZeUAN8Dxugw5438gcqEPUzP5JPuZU/ZVrAByFux6MvWK7qGe38k m/1DPFmlwOI5h/GArT/PNQdSz5DUWoX274GtLI33lcNpc7HA3VhCETKp0AXoRQNE p6JdZP8S+6LZQXTVS3qX/T0dCQ/tLQYMEjvPCLaN4kdCMJmnW+Vzixq+1jmcBQhM fqn1VOjd5vavI1JAvBEXNYtWpDBKTQzAzDuMZ9uhZqR50ez8DClmng7Voup8Rnw0 UJ/zFoYd192F8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:05 2025 by rpki-client