This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft File: sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft (raw, json) Hash identifier: 2bHjpD0nhqGTBZo1Bf8GjsMih4qb481uOpcVU7KaHcU= Subject key identifier: 8A:33:4B:69:61:83:A4:93:EF:CD:F7:00:9A:B9:01:FD:42:A7:FD:D4 Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019AF352A116B8A34EACE85F6D325249C99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft Manifest number: C7 Signing time: Sat 06 Dec 2025 11:01:09 +0000 Manifest this update: Sat 06 Dec 2025 11:01:09 +0000 Manifest next update: Sun 07 Dec 2025 11:01:09 +0000 Files and hashes: 1: 96LYebW41F9cWbiRR3tXv_5JTlA.roa (hash: E9I1sWzxYkdu6eno5OeViMQO2tf/PXjG/rZzNUHedvQ=) 2: qXbxlLviK9DJSOPQYHU6ZWE-Sa4.roa (hash: QbsyxqNuQBIITsu3wvPWziWsrz31D70A9kksDR3tVno=) 3: sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl (hash: 35mUjZoSDtZ98EDD4CG5kV0Ec71WJ2X416VJBNT1vOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a1:16:b8:a3:4e:ac:e8:5f:6d:32:52:49:c9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Dec 6 11:01:09 2025 GMT Not After : Dec 7 11:01:09 2025 GMT Subject: CN=8a334b696183a493efcdf7009ab901fd42a7fdd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:64:34:b1:a0:5f:dd:3e:9d:fd:be:6c:0a: b2:c7:f3:c2:a1:9c:71:9c:fc:a8:1e:92:49:c1:cc: eb:a1:96:8a:40:38:cf:cc:6a:ba:c3:ce:4e:de:3d: a4:5d:bd:90:f6:7c:79:19:00:d5:96:ad:2f:6c:42: 39:fa:41:68:45:4a:7c:14:d0:24:11:8f:ff:9c:47: 5b:8c:6d:fc:7d:d4:40:75:5c:ee:a3:9a:c0:41:c1: ef:7a:e4:d5:9d:60:20:cf:1a:d5:93:b5:b5:3a:87: 07:b5:f1:cc:eb:e9:bb:89:f1:b7:0f:e4:5c:3a:1d: f1:40:25:a3:c5:d8:22:93:16:79:52:cb:80:61:e4: 1e:be:6b:53:42:cb:70:ee:a4:67:c3:0a:0d:6f:ba: b6:d4:2b:ad:29:81:a9:fb:50:40:e4:88:95:0b:8c: de:82:e6:0c:de:44:03:8a:40:0d:78:43:93:29:38: e3:b2:b1:63:63:ea:e8:57:2e:e6:bb:79:63:c3:7b: 24:d8:b1:da:2f:b4:56:a9:19:e7:ba:d1:98:ca:00: bf:cc:da:93:a9:dc:bf:e5:7e:57:3d:99:4f:5c:4a: 2f:ce:51:78:79:88:e6:56:c5:38:af:ec:12:b3:3a: 72:48:e3:e8:5e:90:f2:87:a3:5b:4f:71:2c:61:df: ff:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:4B:69:61:83:A4:93:EF:CD:F7:00:9A:B9:01:FD:42:A7:FD:D4 X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e5:04:ff:92:f3:fd:dc:97:6b:aa:db:db:fd:1a:dc:c8:e5: 15:3f:08:64:dc:30:bb:5e:45:6b:4b:cf:25:b7:41:3f:7c:07: 89:5d:9f:1d:36:51:a0:1f:b3:a4:6f:28:5e:8d:27:12:8c:04: 08:08:27:5b:b7:17:45:e2:82:85:c4:ab:7d:5e:42:91:a2:c7: 06:09:9c:80:6f:f9:8f:0c:7f:d8:cd:04:8b:05:58:bb:c6:60: cc:c0:ae:e4:58:fc:29:89:c5:b7:39:a1:e6:f0:49:c2:16:dd: 0c:69:65:d7:40:35:81:3f:8e:7d:16:53:77:dc:47:bf:08:ba: e8:20:19:ec:a0:49:0c:01:15:df:53:33:3f:7c:8d:37:cf:e9: 41:fc:ed:03:4c:34:84:f4:45:4f:cc:64:c7:cb:cd:9a:85:3e: 7b:c8:46:a9:ff:11:e3:c4:36:b8:34:97:4c:ae:b6:5e:d6:ee: 96:da:47:33:b3:25:f2:4d:a8:47:32:59:62:4b:39:ba:b9:0d: 8d:b7:1e:05:e7:12:7a:7d:95:4c:dc:29:5b:71:e5:b7:da:ef: 8d:a1:12:f5:41:76:31:c4:69:6f:36:70:27:7f:d7:74:1f:4f: b6:26:9d:d7:85:81:1e:ad:63:d9:fe:c6:97:ea:b0:a1:fd:f8: 35:f1:c3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqEWuKNOrOhfbTJSScmcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjUxMjA2MTEwMTA5WhcNMjUxMjA3MTEwMTA5WjAzMTEwLwYDVQQD Eyg4YTMzNGI2OTYxODNhNDkzZWZjZGY3MDA5YWI5MDFmZDQyYTdmZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UNkNLGgX90+nf2+bAqyx/PCoZxx nPyoHpJJwczroZaKQDjPzGq6w85O3j2kXb2Q9nx5GQDVlq0vbEI5+kFoRUp8FNAk EY//nEdbjG38fdRAdVzuo5rAQcHveuTVnWAgzxrVk7W1OocHtfHM6+m7ifG3D+Rc Oh3xQCWjxdgikxZ5UsuAYeQevmtTQstw7qRnwwoNb7q21CutKYGp+1BA5IiVC4ze guYM3kQDikANeEOTKTjjsrFjY+roVy7mu3ljw3sk2LHaL7RWqRnnutGYygC/zNqT qdy/5X5XPZlPXEovzlF4eYjmVsU4r+wSszpySOPoXpDyh6NbT3EsYd//wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIozS2lhg6ST7833AJq5Af1Cp/3UMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOUE/5Lz /dyXa6rb2/0a3MjlFT8IZNwwu15Fa0vPJbdBP3wHiV2fHTZRoB+zpG8oXo0nEowE CAgnW7cXReKChcSrfV5CkaLHBgmcgG/5jwx/2M0EiwVYu8ZgzMCu5Fj8KYnFtzmh 5vBJwhbdDGll10A1gT+OfRZTd9xHvwi66CAZ7KBJDAEV31MzP3yNN8/pQfztA0w0 hPRFT8xkx8vNmoU+e8hGqf8R48Q2uDSXTK62XtbultpHM7Ml8k2oRzJZYks5urkN jbceBecSen2VTNwpW3Hlt9rvjaES9UF2McRpbzZwJ3/XdB9Ptiad14WBHq1j2f7G l+qwof34NfHDTg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:52 2025 by rpki-client