This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json) Hash identifier: PRbnVb1hzlQiFW2vhdPx3DKA9PE+gTBptaCQ102pufs= Subject key identifier: B4:FC:FD:99:07:82:9E:58:B2:D3:19:89:00:B3:59:A5:8B:D3:48:0D Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Certificate serial: 019AF19AB4DE1B485B9FA9E7FBDB9D0D5EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft Manifest number: 0553 Signing time: Sat 06 Dec 2025 03:00:39 +0000 Manifest this update: Sat 06 Dec 2025 03:00:39 +0000 Manifest next update: Sun 07 Dec 2025 03:00:39 +0000 Files and hashes: 1: 6ygnhBUtwPQwZvSXcNdi14r70G8.roa (hash: GkX4vYSYMB0jxRhwwYLdEtE/7rtPvxVB7Y43y4t2nDM=) 2: GsnOL5iHHrW6oQXApcRlDxJejY0.roa (hash: ouWbGoaZHSfSjzbvHbi5NQp6GPK98y84LC+ZBJMKIe4=) 3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: AdUlJc9jaWMI2fsv/odXlq9ziqCar9QeNxQY0A77CQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b4:de:1b:48:5b:9f:a9:e7:fb:db:9d:0d:5e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad Validity Not Before: Dec 6 03:00:39 2025 GMT Not After : Dec 7 03:00:39 2025 GMT Subject: CN=b4fcfd9907829e58b2d3198900b359a58bd3480d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:66:04:2c:39:74:b5:81:53:0e:b1:75:1c: 3c:ac:7a:01:7f:9a:19:09:cf:ed:52:1f:a4:2b:4e: e7:fb:fa:df:bd:cb:be:07:aa:f1:6c:98:11:a5:31: 27:ab:ac:f0:37:8c:0b:88:87:6c:42:08:c3:da:b9: b8:ee:76:54:c3:f9:d1:d3:c9:84:d8:74:a5:bf:65: 8a:fb:de:a6:9b:47:7c:d4:40:c1:8d:07:a1:ee:bd: bc:42:0f:fd:ce:cb:8d:13:40:a4:99:df:46:68:88: 47:b0:6a:54:6c:71:45:0f:08:01:79:dd:80:6f:9b: 0b:4e:4a:bf:0b:17:d0:eb:cf:d5:01:a5:0d:ec:90: a1:8a:fb:b2:9a:59:9b:eb:0c:15:ae:71:50:19:31: af:6a:ae:cc:55:ff:21:9d:af:53:d0:1e:95:4e:09: 3b:24:da:41:cf:6b:f8:03:8f:23:2e:6b:7c:f0:f3: b9:ed:66:41:52:a7:f6:4e:27:6d:ef:3d:b2:bb:47: cd:1e:0e:95:f0:43:47:64:aa:bd:2f:e3:ba:a7:b9: 1f:cd:59:6c:81:5e:7c:90:36:b9:71:35:57:d6:bb: 9e:79:ac:85:55:b2:2d:9b:cd:44:f7:97:50:8b:41: 54:f1:1d:c6:a3:26:90:3a:7c:5c:03:a5:7d:b9:17: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:FD:99:07:82:9E:58:B2:D3:19:89:00:B3:59:A5:8B:D3:48:0D X509v3 Authority Key Identifier: keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b1:e0:c4:e9:ec:06:51:90:5e:d9:9b:eb:5a:c7:1e:0c:3a: d6:f7:da:d8:72:1c:14:d4:8e:98:ae:4c:12:12:18:6d:5a:47: ed:52:67:6a:dd:00:13:7a:52:95:14:32:6a:2a:c0:e3:ba:86: 12:b8:a4:8a:00:dd:ac:20:0a:7f:97:3c:ed:1a:7c:b4:0c:92: b6:f2:d2:62:42:04:a4:29:89:86:ba:84:38:ae:c0:af:63:a4: b0:f8:4c:92:d3:ad:3b:10:5c:0b:c1:38:64:09:f1:1a:af:10: 23:f0:d2:a3:39:c3:09:d5:65:93:82:d7:7a:bd:7d:b2:e3:0e: 27:1c:66:36:ad:a5:19:58:8d:be:f0:49:f5:17:4a:fc:73:66: b2:14:be:82:4a:d1:2f:57:e7:53:8a:b3:9b:da:2d:73:37:08: 1d:99:f8:56:9e:13:e6:d4:62:79:e9:cb:f5:4e:2b:dd:88:dd: 27:40:3d:2a:7b:68:06:39:48:d7:49:96:e2:1a:c9:d6:e3:fc: 4c:a5:75:ef:4a:90:df:bc:d0:a7:d0:86:74:69:d7:05:6a:3b: 3c:4e:e0:6c:ec:c0:b7:74:89:2b:10:6f:d5:fe:86:38:c6:77: 03:50:80:89:2d:64:2e:7f:2f:ca:7a:0a:45:00:eb:11:25:37: ab:56:d4:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrTeG0hbn6nn+9udDV7qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYzE3NjlkM2ZmMDQyMTI0Njk4ZTMxYzQ3MmI2M2JiZjFi YmI1YWQwHhcNMjUxMjA2MDMwMDM5WhcNMjUxMjA3MDMwMDM5WjAzMTEwLwYDVQQD EyhiNGZjZmQ5OTA3ODI5ZTU4YjJkMzE5ODkwMGIzNTlhNThiZDM0ODBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVmBCw5dLWBUw6xdRw8rHoBf5oZ Cc/tUh+kK07n+/rfvcu+B6rxbJgRpTEnq6zwN4wLiIdsQgjD2rm47nZUw/nR08mE 2HSlv2WK+96mm0d81EDBjQeh7r28Qg/9zsuNE0Ckmd9GaIhHsGpUbHFFDwgBed2A b5sLTkq/CxfQ68/VAaUN7JChivuymlmb6wwVrnFQGTGvaq7MVf8hna9T0B6VTgk7 JNpBz2v4A48jLmt88PO57WZBUqf2Tidt7z2yu0fNHg6V8ENHZKq9L+O6p7kfzVls gV58kDa5cTVX1rueeayFVbItm81E95dQi0FU8R3GoyaQOnxcA6V9uRfrIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT8/ZkHgp5YstMZiQCzWaWL00gNMB8GA1UdIwQY MBaAFF7Bdp0/8EISRpjjHEcrY7vxu7WtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUt NTQyMDRkZGQyY2E2LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWZiMDQtZTA3Yi00ZTMwLWI4ZjUtNTQyMDRkZGQyY2E2 LzEvWHNGMm5UX3dRaEpHbU9NY1J5dGp1X0c3dGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7HgxOns BlGQXtmb61rHHgw61vfa2HIcFNSOmK5MEhIYbVpH7VJnat0AE3pSlRQyairA47qG ErikigDdrCAKf5c87Rp8tAyStvLSYkIEpCmJhrqEOK7Ar2OksPhMktOtOxBcC8E4 ZAnxGq8QI/DSoznDCdVlk4LXer19suMOJxxmNq2lGViNvvBJ9RdK/HNmshS+gkrR L1fnU4qzm9otczcIHZn4Vp4T5tRieenL9U4r3YjdJ0A9KntoBjlI10mW4hrJ1uP8 TKV170qQ37zQp9CGdGnXBWo7PE7gbOzAt3SJKxBv1f6GOMZ3A1CAiS1kLn8vynoK RQDrESU3q1bUyw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:43 2025 by rpki-client