This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft File: XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft (raw, json) Hash identifier: Vjke4Zz8XZ8dOX6RfcRyxHFvdxVcPIXp7+15BMyNMQ8= Subject key identifier: 0A:C4:F1:B8:DB:AE:9A:82:6C:69:24:6A:FA:3B:42:8B:7F:30:C4:11 Authority key identifier: 5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA Certificate issuer: /CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Certificate serial: 019AF12D94F1112E47F9873D92E5C0A75543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl (hash: XRxRufF/NV1mniTGNTaj5o37sqB0qq0s1BNR6Mh8ZVo=) 2: kGbaK8kiL8hD7pIbiQkRl_8B_YM.roa (hash: Ige6JVtN5a8l5mz2oj2KpBc2hcWUaNAOe9GreksnHjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:94:f1:11:2e:47:f9:87:3d:92:e5:c0:a7:55:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3bb13ae17c9e554e9ceafcfeb48b41417da7ea Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=0ac4f1b8dbae9a826c69246afa3b428b7f30c411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:fd:2b:3f:10:6a:1e:d5:13:96:22:96:fe: 2f:28:c8:de:fb:f4:a1:5e:d3:81:82:8a:bb:3a:e4: 20:b8:c6:59:d6:66:1d:5c:a4:0d:c4:12:b7:b9:5a: 43:e4:86:1f:95:48:8a:7d:ec:f0:ea:07:ba:b7:3c: 23:a6:36:d5:e5:d9:ff:11:00:f1:fb:99:12:ec:03: 86:a6:74:c2:0b:61:2c:46:3f:09:a7:b1:0d:0d:8b: d8:3c:f8:09:b3:90:02:e3:5c:6a:bc:13:35:d0:9f: f8:df:46:3e:91:35:bd:22:c3:02:95:06:bb:a5:03: d8:db:ae:a4:5e:85:c1:b3:c2:f4:94:29:fb:f2:23: 5d:06:90:e1:1f:b1:25:96:11:fc:e1:18:dd:3b:96: 0d:09:11:bc:f8:f1:5a:26:3b:4a:25:7b:15:07:5e: b6:b6:35:35:af:a9:1a:6f:13:8b:96:c9:15:ea:41: 7f:b8:82:69:a3:b8:30:18:bf:16:f3:fa:c7:12:79: b1:8a:ab:ad:e6:53:b2:ca:1c:91:da:70:80:67:67: a9:f7:87:11:9c:ef:96:1c:aa:69:ba:cb:e9:d6:05: 8e:1a:df:da:5d:02:9f:be:35:40:b2:14:ed:32:79: ae:46:78:65:35:e8:3f:ff:e9:12:13:a1:79:ad:5c: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:F1:B8:DB:AE:9A:82:6C:69:24:6A:FA:3B:42:8B:7F:30:C4:11 X509v3 Authority Key Identifier: keyid:5E:3B:B1:3A:E1:7C:9E:55:4E:9C:EA:FC:FE:B4:8B:41:41:7D:A7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XjuxOuF8nlVOnOr8_rSLQUF9p-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c067fe-5660-4a97-8d3f-352004bc2282/1/XjuxOuF8nlVOnOr8_rSLQUF9p-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:89:99:fb:c0:f5:8d:84:71:6c:76:dd:2a:8e:07:6a:1e:1f: 61:72:68:a8:ff:30:00:83:b6:58:94:e0:90:9e:17:eb:38:33: 76:c2:f0:0d:f1:11:aa:8e:70:25:68:1c:69:46:ce:7d:22:cf: 60:30:97:5f:62:81:d6:49:0e:71:e2:27:f0:d8:b3:9b:34:14: fd:e3:1c:bb:dd:a7:82:db:e7:9c:16:47:48:ea:de:ed:ef:86: e8:20:01:c1:08:00:b3:35:0d:46:b9:a5:ee:d3:b8:d0:9a:6f: 5e:c3:7c:1d:5f:63:bc:28:f4:9f:c5:ac:80:c0:51:ea:35:01: c9:50:da:25:c4:93:d6:0a:81:b0:57:bc:39:29:fe:6d:58:d5: 90:42:71:ce:d7:b4:07:3a:dc:a7:93:2f:0f:3d:f3:b7:72:9a: 16:23:49:7c:8b:26:05:bf:6c:5b:c3:c7:a5:7b:a9:00:c0:62: 6e:20:e6:4a:a6:d9:55:03:2c:18:84:f8:89:a1:11:a1:eb:a4: b8:42:af:61:20:a9:34:d0:0b:45:0c:8e:de:62:cf:b9:df:00: ba:d1:bd:4d:e4:70:6d:9a:4a:08:35:fb:9c:da:6c:01:41:cc: 9e:6c:32:5b:2e:3d:b6:0b:77:13:be:ff:07:7a:87:ec:57:8e: db:9b:06:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZTxES5H+Yc9kuXAp1VDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlM2JiMTNhZTE3YzllNTU0ZTljZWFmY2ZlYjQ4YjQxNDE3 ZGE3ZWEwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EygwYWM0ZjFiOGRiYWU5YTgyNmM2OTI0NmFmYTNiNDI4YjdmMzBjNDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLT9Kz8Qah7VE5Yilv4vKMje+/Sh XtOBgoq7OuQguMZZ1mYdXKQNxBK3uVpD5IYflUiKfezw6ge6tzwjpjbV5dn/EQDx +5kS7AOGpnTCC2EsRj8Jp7ENDYvYPPgJs5AC41xqvBM10J/430Y+kTW9IsMClQa7 pQPY266kXoXBs8L0lCn78iNdBpDhH7EllhH84RjdO5YNCRG8+PFaJjtKJXsVB162 tjU1r6kabxOLlskV6kF/uIJpo7gwGL8W8/rHEnmxiqut5lOyyhyR2nCAZ2ep94cR nO+WHKppusvp1gWOGt/aXQKfvjVAshTtMnmuRnhlNeg//+kSE6F5rVzRBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArE8bjbrpqCbGkkavo7Qot/MMQRMB8GA1UdIwQY MBaAFF47sTrhfJ5VTpzq/P60i0FBfafqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2Yt MzUyMDA0YmMyMjgyLzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jMDY3ZmUtNTY2MC00YTk3LThkM2YtMzUyMDA0YmMyMjgy LzEvWGp1eE91RjhubFZPbk9yOF9yU0xRVUY5cC1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYmZ+8D1 jYRxbHbdKo4Hah4fYXJoqP8wAIO2WJTgkJ4X6zgzdsLwDfERqo5wJWgcaUbOfSLP YDCXX2KB1kkOceIn8NizmzQU/eMcu92ngtvnnBZHSOre7e+G6CABwQgAszUNRrml 7tO40JpvXsN8HV9jvCj0n8WsgMBR6jUByVDaJcST1gqBsFe8OSn+bVjVkEJxzte0 Bzrcp5MvDz3zt3KaFiNJfIsmBb9sW8PHpXupAMBibiDmSqbZVQMsGIT4iaERoeuk uEKvYSCpNNALRQyO3mLPud8AutG9TeRwbZpKCDX7nNpsAUHMnmwyWy49tgt3E77/ B3qH7FeO25sGlg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:15 2025 by rpki-client