This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json) Hash identifier: fR+UcOdPsf7mK06OJNlQI2BfNjGMIlRBRomLi+OYE7k= Subject key identifier: 63:AD:90:3A:06:4D:67:DD:13:0A:EA:47:4A:E0:51:41:AD:6E:7F:6A Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Certificate serial: 019AF12D01E354002D885F98BF8CA0D24CBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft Manifest number: 168C Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: O4L1dxu6F5qpBBK2RqyXQhlTCrvB4zajomHOUbpFIxs=) 2: d0WzaVWRK0-1XqWWg1imO1fvEdc.roa (hash: eGzK3qDCJFgEI2g80dPr8LU89NhumAd/6hCl+I6fIig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:01:e3:54:00:2d:88:5f:98:bf:8c:a0:d2:4c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=63ad903a064d67dd130aea474ae05141ad6e7f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ee:68:4b:e9:b0:51:3e:66:ee:d2:4e:79:65: 40:be:8d:90:c5:60:72:0f:53:52:bf:07:78:a0:81: 05:05:f5:71:68:ae:73:71:ad:f3:88:d7:be:12:e5: 16:60:23:95:04:62:94:16:ca:af:1f:8e:18:23:19: 9c:59:6c:ee:5b:2a:a6:1a:84:91:8e:47:05:b2:7b: 16:cc:39:cb:5e:5f:0b:b8:03:34:42:1c:e9:59:a9: 05:79:91:9e:aa:f5:ce:6c:72:56:79:4f:88:0b:f1: 66:df:e9:ea:20:47:3a:59:79:ef:26:22:3c:aa:c7: 7c:4d:6d:78:51:2b:83:40:b6:42:73:ef:e0:62:67: 00:16:65:9d:ea:29:74:d5:2d:0e:96:e1:70:24:51: 85:15:e0:07:cb:c6:0b:39:e3:ee:f8:65:b3:94:46: 5b:28:50:98:dd:92:e0:96:4a:81:48:0d:6b:7f:9b: 3d:06:36:db:34:7f:29:28:7c:a0:99:ae:71:17:58: d0:b3:2e:11:e7:7c:6a:d3:0f:da:4b:64:b1:08:dc: 49:bc:c4:7a:17:18:82:c7:48:9d:a5:14:7b:e0:c1: 03:fa:61:32:ee:cb:32:e7:18:17:06:d4:0b:09:fe: fb:22:40:43:00:e5:d6:a4:ec:71:b8:50:9a:3e:38: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:AD:90:3A:06:4D:67:DD:13:0A:EA:47:4A:E0:51:41:AD:6E:7F:6A X509v3 Authority Key Identifier: keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:66:69:41:64:35:d5:42:c3:23:32:22:f4:f7:6b:1c:84:de: 72:aa:ee:75:7a:64:4b:f4:05:04:10:b5:e3:96:f2:6b:d7:67: ef:4a:76:74:eb:49:a3:44:b4:24:ab:6a:d8:5d:73:a0:51:85: d7:5d:db:e3:8a:b5:58:c4:ef:1a:e9:46:e3:d2:56:29:28:52: 8c:e2:3d:b8:08:e1:94:21:fd:5e:c7:16:24:33:21:14:cf:d0: 5a:f7:2f:08:5e:3c:c4:fa:7f:b6:40:21:8d:a9:54:5e:19:19: 44:4d:c4:97:30:9f:b6:8b:f7:be:b7:f9:35:56:3c:9f:bf:3c: 49:e7:3f:5c:50:2b:39:a3:cc:71:26:2d:b8:f8:ec:0c:db:07: a3:70:9e:1d:a8:b0:47:ab:74:b3:49:3f:85:1c:97:1a:9d:2d: 58:83:93:77:fc:59:ca:d7:ef:48:be:8c:4e:79:a9:fc:aa:52: f2:9a:1b:4c:9e:69:57:e3:b5:ba:20:0f:30:10:34:42:6e:59: 45:83:dd:49:02:e3:ec:f2:51:ab:22:be:5a:ce:05:2a:4b:7f: 4e:42:9a:79:08:20:c1:08:a4:ea:78:06:fb:1c:49:ae:75:e9: 15:fa:c8:a6:32:1a:5c:1f:55:6c:97:ff:70:9a:aa:4f:f4:bc: a6:26:34:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQHjVAAtiF+Yv4yg0ky/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNmQ3ZDg3ZmFlYzQ4ZGNhNDM2OWQ2ODM4Y2VlYzUxYWUy YmQ4NmEwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD Eyg2M2FkOTAzYTA2NGQ2N2RkMTMwYWVhNDc0YWUwNTE0MWFkNmU3ZjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO5oS+mwUT5m7tJOeWVAvo2QxWBy D1NSvwd4oIEFBfVxaK5zca3ziNe+EuUWYCOVBGKUFsqvH44YIxmcWWzuWyqmGoSR jkcFsnsWzDnLXl8LuAM0QhzpWakFeZGeqvXObHJWeU+IC/Fm3+nqIEc6WXnvJiI8 qsd8TW14USuDQLZCc+/gYmcAFmWd6il01S0OluFwJFGFFeAHy8YLOePu+GWzlEZb KFCY3ZLglkqBSA1rf5s9BjbbNH8pKHygma5xF1jQsy4R53xq0w/aS2SxCNxJvMR6 FxiCx0idpRR74MED+mEy7ssy5xgXBtQLCf77IkBDAOXWpOxxuFCaPjhmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOtkDoGTWfdEwrqR0rgUUGtbn9qMB8GA1UdIwQY MBaAFFxtfYf67EjcpDadaDjO7FGuK9hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2Ut ZTY5N2M1MmRmYzFlLzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jNDM5ZDMtOGY4MS00MDIyLTk4N2UtZTY5N2M1MmRmYzFl LzEvWEcxOWhfcnNTTnlrTnAxb09NN3NVYTRyMkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGZpQWQ1 1ULDIzIi9PdrHITecqrudXpkS/QFBBC145bya9dn70p2dOtJo0S0JKtq2F1zoFGF 113b44q1WMTvGulG49JWKShSjOI9uAjhlCH9XscWJDMhFM/QWvcvCF48xPp/tkAh jalUXhkZRE3ElzCftov3vrf5NVY8n788Sec/XFArOaPMcSYtuPjsDNsHo3CeHaiw R6t0s0k/hRyXGp0tWIOTd/xZytfvSL6MTnmp/KpS8pobTJ5pV+O1uiAPMBA0Qm5Z RYPdSQLj7PJRqyK+Ws4FKkt/TkKaeQggwQik6ngG+xxJrnXpFfrIpjIaXB9VbJf/ cJqqT/S8piY0ig== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:27 2025 by rpki-client