This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft File: xyCKi4W8uAfK1kE4VDJjrLIERIs.mft (raw, json) Hash identifier: v3Qucmvu7EPvXv6VlYQXDOw6oSzPD5h6cD/X/vhn2Tc= Subject key identifier: 4A:17:B5:91:90:7A:41:0D:6E:30:5A:E1:96:50:11:CF:1E:AC:4C:87 Authority key identifier: C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B Certificate issuer: /CN=c7208a8b85bcb807cad64138543263acb204448b Certificate serial: 019AF464EDB0453E9152854D99FBC20EC182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft Manifest number: 074F Signing time: Sat 06 Dec 2025 16:00:46 +0000 Manifest this update: Sat 06 Dec 2025 16:00:46 +0000 Manifest next update: Sun 07 Dec 2025 16:00:46 +0000 Files and hashes: 1: vH1JJD9D24fFC1pA8PsnKijiP6M.roa (hash: i0B3P6h6TyOcZqs+27w3JzYg10hL8qvRbmomwjVt9VM=) 2: xyCKi4W8uAfK1kE4VDJjrLIERIs.crl (hash: mQ9D60grVkditCEuTfHxfbte53kMR3dh1F5rDVlE77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ed:b0:45:3e:91:52:85:4d:99:fb:c2:0e:c1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7208a8b85bcb807cad64138543263acb204448b Validity Not Before: Dec 6 16:00:46 2025 GMT Not After : Dec 7 16:00:46 2025 GMT Subject: CN=4a17b591907a410d6e305ae1965011cf1eac4c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:8f:38:4f:60:02:62:23:00:96:8e:58:1c: 21:36:65:68:88:29:cf:26:b6:b9:35:ab:41:d2:a4: a0:db:11:df:94:90:41:4f:4c:57:9c:d1:62:77:91: d1:33:f6:9a:6f:14:ae:6f:8b:c6:b6:d9:23:a6:9f: 6a:2f:e6:e6:c8:6a:0f:a8:3e:66:90:33:ad:26:43: 5b:6b:0f:ca:93:35:31:9b:ab:81:ac:da:83:6d:43: 92:73:4a:cc:2b:f7:0d:ee:e1:11:19:66:14:3a:14: 82:d2:21:29:aa:33:e6:12:bb:63:aa:1a:56:90:8a: fc:1f:03:69:59:a3:d6:e1:8a:a4:9d:83:10:dd:36: 1d:84:0b:a7:d2:8c:8e:5f:08:fd:32:1a:5d:d0:a6: 4a:b1:67:03:42:57:b9:34:3f:5e:2c:98:1c:ad:0e: d3:6b:ca:e2:18:7e:65:88:74:c9:6d:2d:d5:97:48: 98:09:a0:50:da:18:79:99:6d:85:5f:c0:d2:60:6c: d9:9d:62:94:7f:9c:40:18:88:bb:52:50:22:32:b6: 92:f3:ec:3b:de:40:bf:cd:dd:20:9e:99:f9:28:cd: 41:ab:b4:16:e7:8b:94:f5:44:a1:54:3d:39:34:1d: d7:75:72:31:38:ca:8c:0f:e8:50:e9:ec:3c:a4:1a: e6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:B5:91:90:7A:41:0D:6E:30:5A:E1:96:50:11:CF:1E:AC:4C:87 X509v3 Authority Key Identifier: keyid:C7:20:8A:8B:85:BC:B8:07:CA:D6:41:38:54:32:63:AC:B2:04:44:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyCKi4W8uAfK1kE4VDJjrLIERIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/279a3a-e7a0-4065-b6d8-0f6c412cf3df/1/xyCKi4W8uAfK1kE4VDJjrLIERIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:dc:35:43:ea:49:d5:40:36:1a:e2:7b:58:f2:f5:74:d8:ef: c8:d6:bb:56:2c:e5:af:22:9d:bd:aa:4d:e5:a9:36:2e:59:50: 73:60:5a:d7:83:5c:68:d1:a2:35:5e:12:9f:d2:05:aa:18:81: 8d:60:f6:3d:47:67:f2:78:53:2c:95:77:9d:a4:35:47:9b:dd: eb:cf:6a:75:5b:72:5e:0a:88:b8:eb:53:f4:2c:92:76:3d:32: 40:9a:36:d0:61:50:d2:34:7b:1e:b4:9d:2f:95:81:ee:ad:7f: 32:d8:e5:46:44:96:e0:fc:47:7d:de:be:c3:73:a3:4c:da:ba: bc:d0:23:bb:5d:bb:c6:73:62:d4:ea:26:df:a8:dc:d0:c1:df: 7a:75:7a:65:d1:4d:f9:f2:c0:8c:eb:b9:6c:bb:67:cd:2f:48: a8:2d:09:59:8d:e1:12:f2:a4:5e:3c:8b:38:f9:e8:5c:f4:b4: 11:32:2a:d3:43:6e:23:02:bc:8f:aa:69:6b:99:aa:12:bc:fd: bd:fb:a1:0c:4c:c4:8e:e7:74:2f:e1:cc:d1:b4:8b:f5:62:ce: 97:fe:98:9b:1d:33:ea:42:f3:23:3a:aa:15:26:42:e3:ae:ab: c8:79:44:fb:0b:95:d1:f7:45:12:69:3d:78:1a:39:68:36:8b: 00:b9:82:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZO2wRT6RUoVNmfvCDsGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3MjA4YThiODViY2I4MDdjYWQ2NDEzODU0MzI2M2FjYjIw NDQ0OGIwHhcNMjUxMjA2MTYwMDQ2WhcNMjUxMjA3MTYwMDQ2WjAzMTEwLwYDVQQD Eyg0YTE3YjU5MTkwN2E0MTBkNmUzMDVhZTE5NjUwMTFjZjFlYWM0Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1aPOE9gAmIjAJaOWBwhNmVoiCnP Jra5NatB0qSg2xHflJBBT0xXnNFid5HRM/aabxSub4vGttkjpp9qL+bmyGoPqD5m kDOtJkNbaw/KkzUxm6uBrNqDbUOSc0rMK/cN7uERGWYUOhSC0iEpqjPmErtjqhpW kIr8HwNpWaPW4YqknYMQ3TYdhAun0oyOXwj9Mhpd0KZKsWcDQle5ND9eLJgcrQ7T a8riGH5liHTJbS3Vl0iYCaBQ2hh5mW2FX8DSYGzZnWKUf5xAGIi7UlAiMraS8+w7 3kC/zd0gnpn5KM1Bq7QW54uU9UShVD05NB3XdXIxOMqMD+hQ6ew8pBrmEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoXtZGQekENbjBa4ZZQEc8erEyHMB8GA1UdIwQY MBaAFMcgiouFvLgHytZBOFQyY6yyBESLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgt MGY2YzQxMmNmM2RmLzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNzlhM2EtZTdhMC00MDY1LWI2ZDgtMGY2YzQxMmNmM2Rm LzEveHlDS2k0Vzh1QWZLMWtFNFZESmpyTElFUklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtw1Q+pJ 1UA2GuJ7WPL1dNjvyNa7VizlryKdvapN5ak2LllQc2Ba14NcaNGiNV4Sn9IFqhiB jWD2PUdn8nhTLJV3naQ1R5vd689qdVtyXgqIuOtT9CySdj0yQJo20GFQ0jR7HrSd L5WB7q1/MtjlRkSW4PxHfd6+w3OjTNq6vNAju127xnNi1Oom36jc0MHfenV6ZdFN +fLAjOu5bLtnzS9IqC0JWY3hEvKkXjyLOPnoXPS0ETIq00NuIwK8j6ppa5mqErz9 vfuhDEzEjud0L+HM0bSL9WLOl/6Ymx0z6kLzIzqqFSZC466ryHlE+wuV0fdFEmk9 eBo5aDaLALmCTA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:24 2025 by rpki-client