This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json) Hash identifier: hSPyywlkXMELfTWoKe7EHyw7XQLFrLRwISbpkjOS+jM= Subject key identifier: 20:71:E6:EC:0B:2A:0F:21:E3:16:0A:EC:B1:E1:EF:EF:E8:4F:61:09 Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Certificate serial: 019AF19AEA82BE37860DAD846811963411F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft Manifest number: 15AE Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: VnsIEzhd4UJd5pyA_Dc2-bnO2FM.roa (hash: VlwFB7fAgr+iiENhL1pQbq6AXoNzH1bEvRoJP9yVGBU=) 2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: h9u/HY6ieB//Rp0IDmQxhaKjF0b0uQL57TqHNNQOQ4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ea:82:be:37:86:0d:ad:84:68:11:96:34:11:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=2071e6ec0b2a0f21e3160aecb1e1efefe84f6109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f9:db:c7:ae:50:48:24:7d:7c:7c:36:5a:f7: a6:a3:ce:96:80:bd:fb:03:f1:b3:cd:1d:fb:c8:8b: cc:4d:90:d1:e6:60:22:fc:dd:7c:01:55:5a:a5:31: 4c:d9:9d:33:74:9d:6f:8f:c7:fe:35:2b:5f:31:70: 30:91:51:bd:56:68:ca:3c:3a:7e:20:40:01:fb:22: c5:d7:fc:52:af:30:8a:7c:b6:d8:85:93:58:6e:63: 4c:2a:c3:5e:60:97:2c:5c:e3:b4:5b:ca:a0:b0:25: 5e:c1:0f:fb:cf:d1:64:70:f3:05:13:8a:13:46:a8: c9:53:13:eb:c0:3e:d8:6b:cc:31:38:a0:df:a8:da: ae:61:50:bc:61:e5:85:c4:63:73:75:a2:98:ab:68: d6:51:a4:68:1a:85:4d:35:0c:fc:6e:ad:9a:c9:ee: 01:8e:0e:bf:b9:5c:92:5f:ae:64:f4:e9:65:b6:d5: 14:de:7c:6d:33:8c:1e:41:e9:b2:e8:f2:1a:05:dd: 7b:a5:ab:bc:51:4a:b9:90:82:b5:05:09:76:c4:a7: 95:7b:ca:1e:fd:19:a4:89:56:e8:65:8d:15:61:51: d3:49:f5:ab:41:f4:57:5a:4b:af:08:36:54:39:5f: 3d:b0:34:f5:e5:5f:0e:af:51:48:1e:4c:bc:dc:3f: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:E6:EC:0B:2A:0F:21:E3:16:0A:EC:B1:E1:EF:EF:E8:4F:61:09 X509v3 Authority Key Identifier: keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b3:bc:4f:54:e2:2c:0b:da:87:0f:02:ff:7e:9f:8a:8d:92: 55:e4:06:86:68:7e:74:ba:11:95:f1:f7:e5:cc:c2:27:bb:3a: 4b:a2:ac:82:95:9b:96:3a:e2:63:9f:b1:52:1b:53:0d:ba:b8: a1:8a:9d:d2:92:d8:79:46:96:62:ac:50:fe:c1:fa:66:54:15: fb:87:84:1c:1e:49:22:da:0d:5a:1c:36:0c:3d:ab:11:32:eb: f0:b7:93:ae:70:b4:fc:3e:a9:ed:bf:b0:7e:08:ce:46:dc:ce: 71:2e:7d:6f:8c:9a:86:f9:b6:5b:e2:64:dc:2e:bc:e4:83:45: ef:cc:5d:0a:d8:31:c4:7b:68:a3:3c:6c:66:63:ed:7c:ff:e2: ca:e8:30:92:a4:48:4f:af:85:de:0e:42:6c:6b:a9:95:f0:79: 6c:0a:13:74:50:b2:fb:f3:56:88:03:d3:63:c1:21:9b:09:ff: aa:37:f8:27:ce:e0:a7:56:7d:64:bf:eb:3e:1b:9e:e2:08:2a: 3b:be:46:57:50:02:de:9d:c3:3e:8c:64:cc:23:d3:b3:70:2c: a1:ef:e6:37:a5:74:24:09:9e:bb:dc:f6:b1:4e:9f:6d:9a:98: 02:7d:fa:25:52:3c:f9:e1:38:b5:96:1c:55:2c:a9:7e:bd:3d: ef:6d:16:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuqCvjeGDa2EaBGWNBH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj ZmJmYWYwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EygyMDcxZTZlYzBiMmEwZjIxZTMxNjBhZWNiMWUxZWZlZmU4NGY2MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofnbx65QSCR9fHw2Wvemo86WgL37 A/GzzR37yIvMTZDR5mAi/N18AVVapTFM2Z0zdJ1vj8f+NStfMXAwkVG9VmjKPDp+ IEAB+yLF1/xSrzCKfLbYhZNYbmNMKsNeYJcsXOO0W8qgsCVewQ/7z9FkcPMFE4oT RqjJUxPrwD7Ya8wxOKDfqNquYVC8YeWFxGNzdaKYq2jWUaRoGoVNNQz8bq2aye4B jg6/uVySX65k9OllttUU3nxtM4weQemy6PIaBd17pau8UUq5kIK1BQl2xKeVe8oe /RmkiVboZY0VYVHTSfWrQfRXWkuvCDZUOV89sDT15V8Or1FIHky83D/ROQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBx5uwLKg8h4xYK7LHh7+/oT2EJMB8GA1UdIwQY MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1 LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7O8T1Ti LAvahw8C/36fio2SVeQGhmh+dLoRlfH35czCJ7s6S6KsgpWbljriY5+xUhtTDbq4 oYqd0pLYeUaWYqxQ/sH6ZlQV+4eEHB5JItoNWhw2DD2rETLr8LeTrnC0/D6p7b+w fgjORtzOcS59b4yahvm2W+Jk3C685INF78xdCtgxxHtoozxsZmPtfP/iyugwkqRI T6+F3g5CbGuplfB5bAoTdFCy+/NWiAPTY8Ehmwn/qjf4J87gp1Z9ZL/rPhue4ggq O75GV1AC3p3DPoxkzCPTs3Asoe/mN6V0JAmeu9z2sU6fbZqYAn36JVI8+eE4tZYc VSypfr09720WBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:46 2025 by rpki-client