This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft File: xPLYuhsZIR-p-cDbVRVFEzECzLs.mft (raw, json) Hash identifier: BpmIIHb1AzusxbqzXaiO5PCxf8S9VZhsVKJ7VQtwKqc= Subject key identifier: 9F:83:69:14:DC:A1:2C:40:84:8A:7D:7F:93:C0:13:0B:81:AF:F1:50 Authority key identifier: C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB Certificate issuer: /CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb Certificate serial: 019AF3C04375C7788D4DB8183D859B8F8EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft Manifest number: 15EC Signing time: Sat 06 Dec 2025 13:00:54 +0000 Manifest this update: Sat 06 Dec 2025 13:00:54 +0000 Manifest next update: Sun 07 Dec 2025 13:00:54 +0000 Files and hashes: 1: 1-p8tFLtNjdsD9js8JfdcaeXLbes.roa (hash: SGKnAN0Wd2NDfYevBBpaQsdqn+ofJ6GFHE9Wy8o0+BA=) 2: xPLYuhsZIR-p-cDbVRVFEzECzLs.crl (hash: w9wqDAhiE7r6t6FuKf2IRHK79smQkJSWjXsIwXB4/X8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:43:75:c7:78:8d:4d:b8:18:3d:85:9b:8f:8e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4f2d8ba1b19211fa9f9c0db551545133102ccbb Validity Not Before: Dec 6 13:00:54 2025 GMT Not After : Dec 7 13:00:54 2025 GMT Subject: CN=9f836914dca12c40848a7d7f93c0130b81aff150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2b:44:4a:86:bc:69:db:84:83:82:49:b5:c1: 27:33:99:f8:07:b9:1b:5b:b7:57:10:ab:13:bb:35: 1d:2a:b3:f1:6d:3a:1f:43:53:99:65:20:dd:83:fb: 24:55:99:b3:f4:dd:9b:e8:d2:bf:36:09:12:39:b2: f0:43:63:98:a2:63:14:2e:97:0b:34:88:94:6c:ec: 53:da:cb:b6:e8:66:09:a0:ec:f2:a7:40:9b:5f:54: fd:ae:e9:a8:0f:15:7b:61:41:c6:7b:3e:7f:f9:9c: f0:80:3a:09:1a:28:7d:b6:9d:63:f4:c0:18:6b:f1: 00:34:91:b5:8a:eb:d2:76:32:a1:9f:28:a2:c3:4c: 24:39:56:fd:72:09:8a:6e:62:91:66:61:47:66:88: ec:26:56:6a:8c:70:df:cf:ef:92:74:8e:6e:bc:72: c6:5e:57:de:20:d1:61:22:5b:c6:d6:fc:bc:8f:af: ba:44:50:4b:06:58:28:cf:76:09:5f:b2:a6:42:82: af:f6:d2:92:80:b9:fe:b2:03:5a:f1:a3:8c:4b:aa: a9:8b:f7:ae:ec:95:cd:5d:7b:c6:0d:46:6d:76:c0: 4c:19:38:60:39:68:3c:91:20:b6:05:82:33:c0:11: 20:4e:57:30:30:d4:29:49:13:7d:56:12:40:81:50: c3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:83:69:14:DC:A1:2C:40:84:8A:7D:7F:93:C0:13:0B:81:AF:F1:50 X509v3 Authority Key Identifier: keyid:C4:F2:D8:BA:1B:19:21:1F:A9:F9:C0:DB:55:15:45:13:31:02:CC:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPLYuhsZIR-p-cDbVRVFEzECzLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/xPLYuhsZIR-p-cDbVRVFEzECzLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e5:9d:fa:0b:5d:f9:a5:63:2e:d9:15:1e:ff:6e:51:6c:f2: 65:11:12:28:28:1f:ac:47:01:30:23:27:73:6b:d1:71:80:dc: 03:a2:ae:a0:e6:3e:e1:21:0b:23:5e:09:7d:16:7c:be:fa:9b: 33:aa:4b:ba:66:0f:2d:92:28:f3:5d:a3:3d:0a:c4:64:bb:1a: 71:e4:61:a7:09:66:33:5c:27:c4:bf:6f:51:38:7d:95:28:af: 4a:7e:28:e6:b7:fc:a8:2e:45:44:ff:5e:3e:ff:e8:cb:8b:94: db:a9:02:48:eb:e6:b2:bb:7a:87:06:4f:66:4d:68:fe:36:dd: f1:d8:65:44:70:aa:6c:e2:88:0f:89:71:23:b2:5a:09:12:f3: 1b:a1:58:31:d9:bd:dd:70:24:49:62:69:42:b8:6d:11:e1:7e: a6:6b:c1:35:26:7d:14:f0:89:29:23:2d:ed:52:25:ea:04:d4: 81:5b:26:32:f9:8f:a1:d4:0c:a3:99:d6:e9:25:20:1b:02:ec: dc:b4:b3:91:b7:7c:c6:97:58:60:4e:6d:08:29:e2:68:6c:f7: 8d:02:e7:63:b4:f0:e3:cc:d6:db:73:45:ed:9d:06:3d:fa:e7: 9e:64:a1:77:15:ee:68:52:9e:1b:f6:01:8e:7d:7c:8d:8e:90: 07:74:fb:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwEN1x3iNTbgYPYWbj47IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZjJkOGJhMWIxOTIxMWZhOWY5YzBkYjU1MTU0NTEzMzEw MmNjYmIwHhcNMjUxMjA2MTMwMDU0WhcNMjUxMjA3MTMwMDU0WjAzMTEwLwYDVQQD Eyg5ZjgzNjkxNGRjYTEyYzQwODQ4YTdkN2Y5M2MwMTMwYjgxYWZmMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCtESoa8aduEg4JJtcEnM5n4B7kb W7dXEKsTuzUdKrPxbTofQ1OZZSDdg/skVZmz9N2b6NK/NgkSObLwQ2OYomMULpcL NIiUbOxT2su26GYJoOzyp0CbX1T9rumoDxV7YUHGez5/+ZzwgDoJGih9tp1j9MAY a/EANJG1iuvSdjKhnyiiw0wkOVb9cgmKbmKRZmFHZojsJlZqjHDfz++SdI5uvHLG XlfeINFhIlvG1vy8j6+6RFBLBlgoz3YJX7KmQoKv9tKSgLn+sgNa8aOMS6qpi/eu 7JXNXXvGDUZtdsBMGThgOWg8kSC2BYIzwBEgTlcwMNQpSRN9VhJAgVDDNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+DaRTcoSxAhIp9f5PAEwuBr/FQMB8GA1UdIwQY MBaAFMTy2LobGSEfqfnA21UVRRMxAsy7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmIt YzVlZWU1N2VkMmU2LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9lOGMyYmQtOThmYS00YmRmLTgwYmItYzVlZWU1N2VkMmU2 LzEveFBMWXVoc1pJUi1wLWNEYlZSVkZFekVDekxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+Wd+gtd +aVjLtkVHv9uUWzyZRESKCgfrEcBMCMnc2vRcYDcA6KuoOY+4SELI14JfRZ8vvqb M6pLumYPLZIo812jPQrEZLsaceRhpwlmM1wnxL9vUTh9lSivSn4o5rf8qC5FRP9e Pv/oy4uU26kCSOvmsrt6hwZPZk1o/jbd8dhlRHCqbOKID4lxI7JaCRLzG6FYMdm9 3XAkSWJpQrhtEeF+pmvBNSZ9FPCJKSMt7VIl6gTUgVsmMvmPodQMo5nW6SUgGwLs 3LSzkbd8xpdYYE5tCCniaGz3jQLnY7Tw48zW23NF7Z0GPfrnnmShdxXuaFKeG/YB jn18jY6QB3T7oQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:19:47 2025 by rpki-client