This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft File: xPvoQiQycn04dLFWS66sioBVey0.mft (raw, json) Hash identifier: 0qY24w1Lo46MaTJnyLkJs7B7BE4yL/3Zd4qPuwlzX8I= Subject key identifier: 90:CA:AE:07:88:31:C0:C3:B2:AD:EF:E1:DF:5B:0F:0D:92:F3:72:7B Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d Certificate serial: 019AF12DB8763005810230C1B68351C704B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 01:01:36 +0000 Manifest this update: Sat 06 Dec 2025 01:01:36 +0000 Manifest next update: Sun 07 Dec 2025 01:01:36 +0000 Files and hashes: 1: 1hWOyxjtpeVhDwv-xDOeCqg3vaI.roa (hash: mKtZwD+iuzmAhkLKZ2UYytr92oY2lNBDkGBNEW7xkLg=) 2: Et3EjfyShVqsXEJ0-il-9h75pBI.roa (hash: 7NwgLcL7u8H9AHMShaODStUwLh9+b7vWHMW72q0np80=) 3: xPvoQiQycn04dLFWS66sioBVey0.crl (hash: /6huvi4dOS0xVe+XjdfxKrUg7Tpgcd1fZMqSttZA2jM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:b8:76:30:05:81:02:30:c1:b6:83:51:c7:04:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d Validity Not Before: Dec 6 01:01:36 2025 GMT Not After : Dec 7 01:01:36 2025 GMT Subject: CN=90caae078831c0c3b2adefe1df5b0f0d92f3727b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:e0:99:4b:ab:49:cf:ca:29:c5:dc:d6:1e: a6:6f:30:7b:b2:57:88:96:5f:1b:25:7d:e3:3f:ba: 7d:3a:27:2e:33:4f:22:a9:90:4c:13:9a:22:0e:20: 65:c6:5a:3e:3d:08:40:61:d9:f5:e7:3d:9f:99:47: b8:14:b0:8f:7b:7e:13:86:bd:d0:ac:bc:70:6f:6c: e0:0e:44:be:68:59:98:27:2d:e3:1c:46:fc:10:8b: ea:dc:5a:bb:53:ee:be:82:eb:90:9e:0c:e9:14:eb: 16:02:99:56:a2:e3:16:10:76:01:29:ee:33:1e:f1: e9:87:db:7c:ee:bb:22:bb:3c:96:d1:f2:31:68:84: e4:61:72:ad:44:15:3a:00:fa:bc:a4:dd:b4:b9:a0: 14:97:54:68:9d:aa:ab:fe:27:7a:98:d0:1d:54:b9: 49:b4:52:98:b3:d5:65:d0:c5:a9:84:9f:9d:f8:88: bb:c6:95:86:74:20:08:3d:f0:26:84:2e:1f:22:4e: 88:9d:76:ac:4b:e5:13:a0:98:e2:2f:db:a3:96:60: 8f:47:04:b0:f4:26:30:4d:8b:83:83:11:2e:1d:12: 25:9f:78:af:eb:22:ce:9f:58:c2:aa:a6:c2:bd:c6: 43:24:b0:98:24:0c:45:64:98:29:3c:1e:35:de:39: 98:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CA:AE:07:88:31:C0:C3:B2:AD:EF:E1:DF:5B:0F:0D:92:F3:72:7B X509v3 Authority Key Identifier: keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:76:6f:d0:73:fe:e4:ef:05:1a:ee:81:6e:89:45:06:d2:77: ab:8d:45:7b:2d:32:74:89:b6:51:f6:54:bd:d1:e5:f8:0a:8f: ad:14:c2:ff:cb:a8:cb:dc:66:92:63:bb:d4:c5:dd:7c:a7:c4: 04:33:e7:7a:e1:37:86:75:0d:de:55:f0:02:7d:90:6b:5a:57: 4f:eb:a5:42:d2:bd:4f:e2:d2:34:af:00:92:43:e0:1f:24:8e: ae:0d:1d:9f:5f:9e:30:b9:c8:1c:c7:a1:a7:41:57:db:6a:20: 61:c1:6e:91:c4:b0:31:fa:03:73:e0:7c:30:7e:fa:a8:10:ff: 70:9b:fb:39:49:a8:3f:70:33:9c:df:07:7e:a6:d5:2c:46:e4: 16:f6:f9:d9:7c:a5:b3:30:b3:ea:2b:b6:20:e3:aa:58:ab:7e: 5b:02:af:c7:f4:3f:66:03:e1:ab:fd:fa:ef:fd:90:e5:12:63: a2:c2:49:ce:51:b4:24:9a:9d:2a:86:dc:4f:99:f0:7a:51:d1: 7d:f9:73:80:33:27:4f:15:8b:31:35:01:e3:a6:42:f0:b1:09: 96:ca:6d:ec:93:7a:62:f1:da:65:31:e6:aa:31:da:f2:8a:6f: 3b:d5:c2:76:ac:ac:17:75:9e:12:86:06:e4:0d:12:0a:60:16: b5:d3:43:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLbh2MAWBAjDBtoNRxwS1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmJlODQyMjQzMjcyN2QzODc0YjE1NjRiYWVhYzhhODA1 NTdiMmQwHhcNMjUxMjA2MDEwMTM2WhcNMjUxMjA3MDEwMTM2WjAzMTEwLwYDVQQD Eyg5MGNhYWUwNzg4MzFjMGMzYjJhZGVmZTFkZjViMGYwZDkyZjM3MjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYngmUurSc/KKcXc1h6mbzB7sleI ll8bJX3jP7p9OicuM08iqZBME5oiDiBlxlo+PQhAYdn15z2fmUe4FLCPe34Thr3Q rLxwb2zgDkS+aFmYJy3jHEb8EIvq3Fq7U+6+guuQngzpFOsWAplWouMWEHYBKe4z HvHph9t87rsiuzyW0fIxaITkYXKtRBU6APq8pN20uaAUl1Ronaqr/id6mNAdVLlJ tFKYs9Vl0MWphJ+d+Ii7xpWGdCAIPfAmhC4fIk6InXasS+UToJjiL9ujlmCPRwSw 9CYwTYuDgxEuHRIln3iv6yLOn1jCqqbCvcZDJLCYJAxFZJgpPB413jmYXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJDKrgeIMcDDsq3v4d9bDw2S83J7MB8GA1UdIwQY MBaAFMT76EIkMnJ9OHSxVkuurIqAVXstMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmIt ZWNmMjIxN2Y5ODY3LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9iZjJkOGMtZTM4Yi00NjNhLWIyNmItZWNmMjIxN2Y5ODY3 LzEveFB2b1FpUXljbjA0ZExGV1M2NnNpb0JWZXkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHZv0HP+ 5O8FGu6BbolFBtJ3q41Fey0ydIm2UfZUvdHl+AqPrRTC/8uoy9xmkmO71MXdfKfE BDPneuE3hnUN3lXwAn2Qa1pXT+ulQtK9T+LSNK8AkkPgHySOrg0dn1+eMLnIHMeh p0FX22ogYcFukcSwMfoDc+B8MH76qBD/cJv7OUmoP3AznN8HfqbVLEbkFvb52Xyl szCz6iu2IOOqWKt+WwKvx/Q/ZgPhq/367/2Q5RJjosJJzlG0JJqdKobcT5nwelHR fflzgDMnTxWLMTUB46ZC8LEJlspt7JN6YvHaZTHmqjHa8opvO9XCdqysF3WeEoYG 5A0SCmAWtdNDqA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:20 2025 by rpki-client