This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft File: xT4qugUV7JDRCREGD88pI2123d8.mft (raw, json) Hash identifier: n6MecBooS8y0PTlQ/uQ6YkHECqZbH2EIngRjDfFqdlk= Subject key identifier: 3C:9F:24:AB:3F:E8:8E:56:7C:3F:53:51:50:50:F0:62:13:14:A3:A5 Authority key identifier: C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF Certificate issuer: /CN=c53e2aba0515ec90d10911060fcf29236d76dddf Certificate serial: 019AF163E55D5682CD270AD4D967FFAD57D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft Manifest number: 0F17 Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: f0yhahkLcuZ1yoHAyLMFgYV-0C4.roa (hash: o3wGDB8+TAGkWavLVm8YXjs+gVitRLdf6b5WKa02EC8=) 2: xT4qugUV7JDRCREGD88pI2123d8.crl (hash: 0dEt9QMFS876l4Iqt4RkqKuTsR9nY05g5HFADE/6oa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e5:5d:56:82:cd:27:0a:d4:d9:67:ff:ad:57:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53e2aba0515ec90d10911060fcf29236d76dddf Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=3c9f24ab3fe88e567c3f53515050f0621314a3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:64:5f:73:05:fa:9c:9d:2e:8e:bf:4c:19: 1a:18:10:cb:08:85:45:89:6a:5a:ac:1e:ca:97:b2: ca:4c:1b:9f:08:0e:bb:73:21:10:ad:ed:0e:22:f3: df:4d:1c:29:be:56:d5:2c:1d:a8:c9:d8:3b:56:80: 76:6a:ba:57:72:54:34:f1:00:e4:3b:70:b4:f2:3a: a4:ef:a6:51:92:8a:56:72:85:65:3d:a7:be:b4:84: 2a:a1:b5:b1:ad:51:5b:f5:22:b0:a6:93:4b:76:b6: 36:7f:38:20:5d:ba:51:c0:ae:e4:df:cf:f2:21:83: 46:fe:84:9e:f3:2d:55:3d:eb:eb:0d:a9:27:7e:c0: d0:fc:3e:07:80:82:f2:a9:4b:00:77:42:be:bb:cc: e3:e8:71:e8:74:43:33:31:0e:ed:05:34:0d:23:b7: 26:fb:89:4e:b4:58:b0:5c:16:7e:97:9d:16:ce:67: d7:47:c9:b2:c8:b9:e9:ff:26:2b:19:09:71:7c:10: 4f:44:08:84:7f:57:80:6a:c9:16:85:3f:d6:cf:68: 0e:bf:6b:5c:c8:2d:7d:27:32:63:01:06:17:e2:9a: ff:c0:bd:85:a5:bb:a1:8c:3a:b6:13:1d:cf:c6:62: 8e:6e:39:d9:3b:f9:09:11:f2:cd:59:ec:a3:ea:93: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9F:24:AB:3F:E8:8E:56:7C:3F:53:51:50:50:F0:62:13:14:A3:A5 X509v3 Authority Key Identifier: keyid:C5:3E:2A:BA:05:15:EC:90:D1:09:11:06:0F:CF:29:23:6D:76:DD:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT4qugUV7JDRCREGD88pI2123d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/908a62-f4e0-4985-9e34-12053ade9faf/1/xT4qugUV7JDRCREGD88pI2123d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:f5:40:bc:de:bf:fa:88:3e:e3:12:a8:4c:a6:07:57:a9:59: f0:51:86:12:6d:ec:27:c6:11:92:87:6a:ef:fb:52:86:f2:c9: c2:a1:5e:39:de:70:8b:9b:07:e0:e9:9f:c5:06:00:e2:47:5b: 59:df:55:22:13:f0:18:fd:47:39:ce:bd:b4:2a:7f:8d:1e:22: 1c:c4:3a:20:45:9e:17:9d:54:fa:75:f4:41:43:d0:be:1a:da: a7:54:14:2e:97:c5:5a:bf:4d:11:d2:c0:c1:9e:6a:80:91:9c: 9f:ce:1a:da:aa:25:b8:ab:bd:4f:98:a5:d3:7f:d1:c3:b3:97: 77:b2:dd:4d:57:82:a3:5f:ff:09:87:39:1e:bc:31:6f:37:bd: 40:35:8f:51:5d:cd:bf:3c:28:e3:a2:53:13:6e:97:e0:44:a3: 6c:2d:33:3e:29:84:3e:da:4a:98:6c:fa:0b:24:64:47:8e:71: 86:33:52:76:e1:6d:5f:15:4d:ed:fb:7c:64:24:15:ca:a9:8e: 77:70:91:2f:1f:e4:f6:6a:df:71:91:4d:e9:ab:f2:98:01:fe: 12:47:47:21:ee:05:91:21:56:90:a7:2e:08:0e:25:aa:bb:e2: dd:47:65:dc:30:39:7d:f4:80:49:ef:f6:7d:4b:54:ac:a4:21: fe:e3:2b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+VdVoLNJwrU2Wf/rVfRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2UyYWJhMDUxNWVjOTBkMTA5MTEwNjBmY2YyOTIzNmQ3 NmRkZGYwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EygzYzlmMjRhYjNmZTg4ZTU2N2MzZjUzNTE1MDUwZjA2MjEzMTRhM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7NkX3MF+pydLo6/TBkaGBDLCIVF iWparB7Kl7LKTBufCA67cyEQre0OIvPfTRwpvlbVLB2oydg7VoB2arpXclQ08QDk O3C08jqk76ZRkopWcoVlPae+tIQqobWxrVFb9SKwppNLdrY2fzggXbpRwK7k38/y IYNG/oSe8y1VPevrDaknfsDQ/D4HgILyqUsAd0K+u8zj6HHodEMzMQ7tBTQNI7cm +4lOtFiwXBZ+l50WzmfXR8myyLnp/yYrGQlxfBBPRAiEf1eAaskWhT/Wz2gOv2tc yC19JzJjAQYX4pr/wL2FpbuhjDq2Ex3PxmKObjnZO/kJEfLNWeyj6pOo2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyfJKs/6I5WfD9TUVBQ8GITFKOlMB8GA1UdIwQY MBaAFMU+KroFFeyQ0QkRBg/PKSNtdt3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQt MTIwNTNhZGU5ZmFmLzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85MDhhNjItZjRlMC00OTg1LTllMzQtMTIwNTNhZGU5ZmFm LzEveFQ0cXVnVVY3SkRSQ1JFR0Q4OHBJMjEyM2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafVAvN6/ +og+4xKoTKYHV6lZ8FGGEm3sJ8YRkodq7/tShvLJwqFeOd5wi5sH4OmfxQYA4kdb Wd9VIhPwGP1HOc69tCp/jR4iHMQ6IEWeF51U+nX0QUPQvhrap1QULpfFWr9NEdLA wZ5qgJGcn84a2qoluKu9T5il03/Rw7OXd7LdTVeCo1//CYc5Hrwxbze9QDWPUV3N vzwo46JTE26X4ESjbC0zPimEPtpKmGz6CyRkR45xhjNSduFtXxVN7ft8ZCQVyqmO d3CRLx/k9mrfcZFN6avymAH+EkdHIe4FkSFWkKcuCA4lqrvi3Udl3DA5ffSASe/2 fUtUrKQh/uMrWg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:29 2025 by rpki-client