This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json) Hash identifier: LZScaD+/5GHuFkCAckcPWQC6rml1w3t0cqMAADxPYPY= Subject key identifier: 64:82:8C:94:6D:35:2E:1F:E4:67:B8:DA:BB:A6:0C:97:8D:E7:C0:69 Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Certificate serial: 019AF12CC63BDC2BC832D554A702E0B375B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:00:34 +0000 Manifest this update: Sat 06 Dec 2025 01:00:34 +0000 Manifest next update: Sun 07 Dec 2025 01:00:34 +0000 Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: jU1VUx1FoERquoSU53qUHJmHUr3Bb8g1NUXvGzkvm20=) 2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:c6:3b:dc:2b:c8:32:d5:54:a7:02:e0:b3:75:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Validity Not Before: Dec 6 01:00:34 2025 GMT Not After : Dec 7 01:00:34 2025 GMT Subject: CN=64828c946d352e1fe467b8dabba60c978de7c069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:7e:b4:62:b2:f4:62:23:20:f3:fe:64:39: 1d:22:d8:5f:53:90:95:19:80:4c:4f:83:13:e6:51: 80:53:32:0e:f0:93:78:08:38:d0:0b:4c:cf:54:0b: c3:46:69:c9:f6:e4:6f:c9:d7:92:85:94:f1:9a:c2: ce:52:e1:7f:bf:fd:72:80:81:ba:58:50:72:f1:b0: e6:7b:0e:68:1a:f3:b0:c8:a2:6b:30:15:a1:ac:d3: 0a:b4:d1:a2:df:a0:f2:9d:61:54:9a:13:69:ef:e4: 8d:df:38:c0:2d:0a:9a:ad:b3:fd:6c:9a:12:0c:3c: 1c:35:c0:7f:4c:53:99:6a:87:4f:92:d6:f6:1e:77: 98:cf:53:1f:63:ba:d4:63:86:f2:f0:31:ff:56:7a: 6c:79:ff:b9:69:64:29:ef:0d:dc:ef:33:41:af:1c: c2:68:87:9e:82:41:4f:eb:7b:de:d8:5c:13:ce:34: 4e:7a:08:89:b7:97:03:e4:d7:83:2f:47:a8:48:6a: 89:40:be:a1:c5:f7:3d:25:c6:2b:ab:32:05:ab:de: 8c:4a:97:52:79:71:c7:91:d5:13:90:e0:26:97:3b: c2:c6:81:e4:ac:3c:84:48:93:37:87:6b:f1:a2:55: e4:ee:52:42:42:41:fd:62:60:41:c7:49:96:a0:62: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:8C:94:6D:35:2E:1F:E4:67:B8:DA:BB:A6:0C:97:8D:E7:C0:69 X509v3 Authority Key Identifier: keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:2c:97:7b:b0:0e:f7:be:3a:30:46:5c:1a:e1:99:d4:6e:af: 0a:d5:49:4c:8c:19:7e:4e:e9:c2:bd:fa:7e:d8:53:29:80:db: 07:08:d5:90:4b:50:54:ea:9c:01:6a:63:10:af:1a:cd:c2:95: ce:89:8c:e4:1a:49:a6:0b:6b:52:0d:69:44:ab:19:25:9f:85: 3e:d3:6d:48:83:dd:b5:c9:1f:f7:40:7e:74:2a:13:64:08:da: c3:88:9a:c0:d5:f5:8c:aa:53:83:9a:9f:4e:a7:59:a5:09:eb: f9:2f:d2:08:0e:84:95:0c:a6:28:44:54:28:7b:41:88:bb:3c: cb:1b:d1:07:a8:43:a9:ad:20:61:26:e3:2c:78:ec:5e:c2:3e: 65:80:76:ae:42:ca:73:34:dc:59:8d:1c:5a:ba:40:11:bd:67: 9c:f5:32:6e:66:7d:e8:a9:4e:e0:48:80:d1:1b:55:86:de:ec: d5:0a:fa:c8:f7:94:e5:1e:a5:28:c9:01:7b:05:e9:5f:a9:99: e7:29:9e:03:8e:e6:e1:03:e3:fd:f7:45:73:0d:73:31:10:8e: cf:47:39:01:09:a0:b9:c3:7a:a2:00:60:bb:51:66:55:56:44: b4:e1:0f:76:7f:15:ff:a0:64:cd:78:4d:81:f2:d5:80:96:a9: 2c:85:65:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMY73CvIMtVUpwLgs3WwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi Yzk5MjMwHhcNMjUxMjA2MDEwMDM0WhcNMjUxMjA3MDEwMDM0WjAzMTEwLwYDVQQD Eyg2NDgyOGM5NDZkMzUyZTFmZTQ2N2I4ZGFiYmE2MGM5NzhkZTdjMDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWh+tGKy9GIjIPP+ZDkdIthfU5CV GYBMT4MT5lGAUzIO8JN4CDjQC0zPVAvDRmnJ9uRvydeShZTxmsLOUuF/v/1ygIG6 WFBy8bDmew5oGvOwyKJrMBWhrNMKtNGi36DynWFUmhNp7+SN3zjALQqarbP9bJoS DDwcNcB/TFOZaodPktb2HneYz1MfY7rUY4by8DH/Vnpsef+5aWQp7w3c7zNBrxzC aIeegkFP63ve2FwTzjROegiJt5cD5NeDL0eoSGqJQL6hxfc9JcYrqzIFq96MSpdS eXHHkdUTkOAmlzvCxoHkrDyESJM3h2vxolXk7lJCQkH9YmBBx0mWoGJGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSCjJRtNS4f5Ge42rumDJeN58BpMB8GA1UdIwQY MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCyXe7AO 9746MEZcGuGZ1G6vCtVJTIwZfk7pwr36fthTKYDbBwjVkEtQVOqcAWpjEK8azcKV zomM5BpJpgtrUg1pRKsZJZ+FPtNtSIPdtckf90B+dCoTZAjaw4iawNX1jKpTg5qf TqdZpQnr+S/SCA6ElQymKERUKHtBiLs8yxvRB6hDqa0gYSbjLHjsXsI+ZYB2rkLK czTcWY0cWrpAEb1nnPUybmZ96KlO4EiA0RtVht7s1Qr6yPeU5R6lKMkBewXpX6mZ 5ymeA47m4QPj/fdFcw1zMRCOz0c5AQmgucN6ogBgu1FmVVZEtOEPdn8V/6BkzXhN gfLVgJapLIVlsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:47 2025 by rpki-client