This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft File: xUIOtdlPD6uGLghAQU9DK3heYFQ.mft (raw, json) Hash identifier: eKVVbw6Zp6ij3iPgQg60H5IEu82j34nN7HW/ObilfuQ= Subject key identifier: 44:61:35:6C:7C:3F:06:9B:70:08:37:EF:F6:BC:07:53:DF:FF:36:4A Authority key identifier: C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 Certificate issuer: /CN=c5420eb5d94f0fab862e0840414f432b785e6054 Certificate serial: 019AF35290F01FC8B77A899930F1CE2DEC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft Manifest number: 0576 Signing time: Sat 06 Dec 2025 11:01:05 +0000 Manifest this update: Sat 06 Dec 2025 11:01:05 +0000 Manifest next update: Sun 07 Dec 2025 11:01:05 +0000 Files and hashes: 1: Ta5lPzjSaWOGZmJzb8ldMeucHGI.roa (hash: d1Ea1L5jJ9KIi1NEhEpKqHGMktv6fUL4cljVIHxwf/0=) 2: xUIOtdlPD6uGLghAQU9DK3heYFQ.crl (hash: ECyaOsnlfWQY9Hek72Sd2+rtD7evVCbHAkbhmP99Uqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:90:f0:1f:c8:b7:7a:89:99:30:f1:ce:2d:ec:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5420eb5d94f0fab862e0840414f432b785e6054 Validity Not Before: Dec 6 11:01:05 2025 GMT Not After : Dec 7 11:01:05 2025 GMT Subject: CN=4461356c7c3f069b700837eff6bc0753dfff364a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6f:f5:b2:fa:8c:9a:bf:1c:4b:0a:33:2e:37: 5d:67:d8:76:83:ba:f1:8e:00:19:7c:fe:ba:11:20: a3:ac:70:17:82:70:33:db:6e:7d:56:27:e1:93:1c: ea:c1:31:1d:55:85:9c:f9:e7:01:bc:6f:10:9b:c9: 58:49:fd:23:ce:eb:eb:64:71:05:9c:0e:09:6b:75: a7:d3:b2:d9:ea:29:e3:67:ff:63:f4:7a:5e:f9:b2: 22:81:59:dd:1f:57:80:63:97:99:50:8c:b1:1b:4c: c9:86:45:c3:4f:a8:b2:7c:20:3a:13:e7:fb:41:e1: 50:fe:a3:2b:af:69:ff:2f:db:f8:16:61:ae:11:a8: 89:8a:7e:4a:6a:a3:8e:d3:17:c7:93:92:41:75:7f: e8:a1:76:df:98:b4:8e:c4:0c:da:f5:b2:90:b7:8c: ba:fa:69:5f:32:f1:f2:aa:1d:01:3c:00:ef:ec:06: be:64:2e:30:cd:06:86:c0:5d:98:85:fc:7a:93:94: 30:b8:51:3f:5c:da:c8:0a:33:4e:d7:72:24:a4:49: 32:29:6e:50:3d:73:ef:bf:8f:e3:6f:28:52:70:ae: b7:e5:e6:5b:15:dd:17:89:7b:c9:41:0d:ec:33:21: 8f:bd:1a:a4:fc:ec:ed:20:99:81:d5:63:b3:6c:f6: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:61:35:6C:7C:3F:06:9B:70:08:37:EF:F6:BC:07:53:DF:FF:36:4A X509v3 Authority Key Identifier: keyid:C5:42:0E:B5:D9:4F:0F:AB:86:2E:08:40:41:4F:43:2B:78:5E:60:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUIOtdlPD6uGLghAQU9DK3heYFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/09c538-b260-44ab-9166-4258ee4de91e/1/xUIOtdlPD6uGLghAQU9DK3heYFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:64:87:63:0b:34:90:6c:26:64:00:55:a8:9f:71:a3:87:16: f7:bc:f7:5b:da:04:68:67:4d:51:ec:6a:39:af:63:5a:08:83: cd:3c:21:1c:e8:87:9b:57:9e:c7:bc:5f:89:d6:5e:05:ee:03: 73:ea:e9:f7:63:d0:09:8c:b4:1c:c8:59:b6:bc:7f:a1:61:b3: c4:9f:47:5c:ec:5e:ad:39:b8:67:ea:dd:0c:ae:cb:82:c1:79: f8:ee:46:77:0d:33:b6:c6:9a:80:32:30:b2:54:fa:57:06:24: cb:3d:5a:1a:32:95:cc:7c:6b:4e:74:23:9c:0d:15:41:e8:67: b3:ce:d3:66:25:53:fc:cc:90:9a:54:18:00:83:9f:eb:95:d5: e3:61:6b:f2:94:ef:f5:bf:d4:ff:4e:8c:bf:04:b2:8c:c6:49: f1:60:95:0b:d3:c5:09:e5:ff:7a:6b:89:ad:cd:3e:c2:48:63: 44:01:9e:18:cc:57:11:8b:d0:42:e9:0c:03:ef:da:20:37:a1: 9f:4c:63:d0:77:06:89:d7:2d:95:88:a0:fc:00:8b:92:00:62: 66:13:38:f1:6f:a4:60:0b:32:e5:02:cd:da:79:c6:81:3b:8c: c5:ce:3f:78:2f:9c:93:d5:26:38:e9:5f:85:82:72:11:85:2c: 2d:18:08:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpDwH8i3eomZMPHOLewpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NDIwZWI1ZDk0ZjBmYWI4NjJlMDg0MDQxNGY0MzJiNzg1 ZTYwNTQwHhcNMjUxMjA2MTEwMTA1WhcNMjUxMjA3MTEwMTA1WjAzMTEwLwYDVQQD Eyg0NDYxMzU2YzdjM2YwNjliNzAwODM3ZWZmNmJjMDc1M2RmZmYzNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2/1svqMmr8cSwozLjddZ9h2g7rx jgAZfP66ESCjrHAXgnAz2259VifhkxzqwTEdVYWc+ecBvG8Qm8lYSf0jzuvrZHEF nA4Ja3Wn07LZ6injZ/9j9Hpe+bIigVndH1eAY5eZUIyxG0zJhkXDT6iyfCA6E+f7 QeFQ/qMrr2n/L9v4FmGuEaiJin5KaqOO0xfHk5JBdX/ooXbfmLSOxAza9bKQt4y6 +mlfMvHyqh0BPADv7Aa+ZC4wzQaGwF2Yhfx6k5QwuFE/XNrICjNO13IkpEkyKW5Q PXPvv4/jbyhScK635eZbFd0XiXvJQQ3sMyGPvRqk/OztIJmB1WOzbPZwHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERhNWx8PwabcAg37/a8B1Pf/zZKMB8GA1UdIwQY MBaAFMVCDrXZTw+rhi4IQEFPQyt4XmBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYt NDI1OGVlNGRlOTFlLzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wOWM1MzgtYjI2MC00NGFiLTkxNjYtNDI1OGVlNGRlOTFl LzEveFVJT3RkbFBENnVHTGdoQVFVOURLM2hlWUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWSHYws0 kGwmZABVqJ9xo4cW97z3W9oEaGdNUexqOa9jWgiDzTwhHOiHm1eex7xfidZeBe4D c+rp92PQCYy0HMhZtrx/oWGzxJ9HXOxerTm4Z+rdDK7LgsF5+O5Gdw0ztsaagDIw slT6VwYkyz1aGjKVzHxrTnQjnA0VQehns87TZiVT/MyQmlQYAIOf65XV42Fr8pTv 9b/U/06MvwSyjMZJ8WCVC9PFCeX/emuJrc0+wkhjRAGeGMxXEYvQQukMA+/aIDeh n0xj0HcGidctlYig/ACLkgBiZhM48W+kYAsy5QLN2nnGgTuMxc4/eC+ck9UmOOlf hYJyEYUsLRgInw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:05 2025 by rpki-client