This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json) Hash identifier: 3PvzYQuaOUjk/JNDASKx/1TsgXrIkQ4HISt/3Eoqrbo= Subject key identifier: F2:F4:F3:57:B0:19:F1:C1:7C:33:96:CD:FF:B3:46:B5:33:04:BB:6C Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Certificate serial: 019AF49BEC2A720AFDDD0CFA518112C6BE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft Manifest number: 047D Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=) 2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: 3j1xgO02LbJybeqY3K9rZag7vV+qz7uOQ/L1fkbeVm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ec:2a:72:0a:fd:dd:0c:fa:51:81:12:c6:be:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=f2f4f357b019f1c17c3396cdffb346b53304bb6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:e5:37:e7:7f:cd:18:d0:8e:97:83:65:c8: a3:e4:22:7d:60:b7:8e:79:e3:f6:27:67:fd:fc:ce: 3a:f5:16:59:76:1d:2f:c9:4a:0c:e1:ff:b2:14:0f: a0:63:49:3f:93:3b:3b:b4:f3:69:86:b1:94:ea:08: 1d:63:62:4b:e7:b3:64:10:1a:e3:38:67:ce:50:25: 79:f7:1e:12:96:9d:29:65:49:8b:f2:28:76:ff:4f: c6:2e:04:b7:b7:fb:79:43:6e:2c:48:f2:3c:2e:cc: fb:e5:3c:a5:4f:f7:ed:51:44:53:b3:92:5f:16:a7: 01:a9:45:0d:e9:5d:ba:92:1f:59:73:c1:bb:22:d1: d0:9f:6b:2f:25:2d:66:bd:48:84:17:c4:8d:76:af: d6:9f:e9:d0:03:7c:bf:05:6b:19:b2:ec:98:f6:2c: 19:b5:d7:7c:ea:b6:01:e9:ca:19:0a:04:67:f7:f5: 72:10:2a:72:1d:a8:5e:dc:c9:b5:be:e2:93:8f:d4: 62:8b:d3:67:17:e4:86:c8:86:9d:b4:72:f3:95:3f: 8b:dc:3d:7d:46:a2:08:b5:30:83:6d:de:da:7e:2c: 04:77:0b:6d:08:16:87:0a:d6:44:59:5c:9a:e7:bf: 6e:83:0e:34:68:fe:58:f0:72:af:39:0a:47:f2:cb: e4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F4:F3:57:B0:19:F1:C1:7C:33:96:CD:FF:B3:46:B5:33:04:BB:6C X509v3 Authority Key Identifier: keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:74:98:09:ec:24:53:32:0a:de:cf:1e:34:cc:f4:8d:d3:02: b4:83:89:ab:fa:53:16:5d:ae:3a:b5:8a:c4:72:f1:08:22:51: 89:5b:51:32:3d:28:c1:ff:68:9d:4f:28:40:19:54:a3:59:a2: 7f:0c:2e:b4:de:13:11:4d:15:e7:8b:52:25:39:8c:29:60:e5: e1:1d:b0:b8:32:eb:8d:39:d3:b8:84:12:6c:a1:b2:24:77:d7: 4b:e7:3a:cb:e4:24:cc:68:60:8e:83:26:1f:75:cc:d0:48:3a: 65:5c:86:94:bc:87:aa:59:8b:a2:58:3c:4a:24:a6:b8:51:1a: cb:bd:60:5c:57:f3:36:3c:b9:37:dc:e4:a4:4b:9e:83:41:4d: ea:62:60:67:92:59:5a:9b:dc:f5:54:bd:46:3f:62:b0:4f:61: af:89:f7:34:d5:21:d5:c8:0b:df:f1:72:4d:76:ca:52:22:98: 07:69:9a:0c:af:e1:44:e7:b8:41:5a:ed:f3:5c:33:cf:36:4c: fa:8d:a1:13:05:9c:6d:6c:88:a6:de:8d:14:ce:dd:18:06:84: 13:c4:af:fb:bd:b7:22:9c:2b:91:96:f7:f3:e4:14:9e:bb:2c: 54:15:f3:80:0a:fa:9f:51:5f:f4:fc:87:5f:93:09:7f:a3:d5: d0:f5:01:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+wqcgr93Qz6UYESxr5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ1NzM3MjRjYjFjMDk1YjliNjFiMmRmMDVlZTNmYzFh ODcxNmQwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD EyhmMmY0ZjM1N2IwMTlmMWMxN2MzMzk2Y2RmZmIzNDZiNTMzMDRiYjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr57lN+d/zRjQjpeDZcij5CJ9YLeO eeP2J2f9/M469RZZdh0vyUoM4f+yFA+gY0k/kzs7tPNphrGU6ggdY2JL57NkEBrj OGfOUCV59x4Slp0pZUmL8ih2/0/GLgS3t/t5Q24sSPI8Lsz75TylT/ftUURTs5Jf FqcBqUUN6V26kh9Zc8G7ItHQn2svJS1mvUiEF8SNdq/Wn+nQA3y/BWsZsuyY9iwZ tdd86rYB6coZCgRn9/VyECpyHahe3Mm1vuKTj9Rii9NnF+SGyIadtHLzlT+L3D19 RqIItTCDbd7afiwEdwttCBaHCtZEWVya579ugw40aP5Y8HKvOQpH8svkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL081ewGfHBfDOWzf+zRrUzBLtsMB8GA1UdIwQY MBaAFMYtVzckyxwJW5thst8F7j/BqHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgt ZjY3ZWNjNTg1YmI4LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgtZjY3ZWNjNTg1YmI4 LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXSYCewk UzIK3s8eNMz0jdMCtIOJq/pTFl2uOrWKxHLxCCJRiVtRMj0owf9onU8oQBlUo1mi fwwutN4TEU0V54tSJTmMKWDl4R2wuDLrjTnTuIQSbKGyJHfXS+c6y+QkzGhgjoMm H3XM0Eg6ZVyGlLyHqlmLolg8SiSmuFEay71gXFfzNjy5N9zkpEueg0FN6mJgZ5JZ Wpvc9VS9Rj9isE9hr4n3NNUh1cgL3/FyTXbKUiKYB2maDK/hROe4QVrt81wzzzZM +o2hEwWcbWyIpt6NFM7dGAaEE8Sv+723IpwrkZb38+QUnrssVBXzgAr6n1Ff9PyH X5MJf6PV0PUB8w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:58:23 2025 by rpki-client