This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft File: XcoX_I054EPqdpryi1SMnTmDHSE.mft (raw, json) Hash identifier: +NNGVzFkjRQhttigyxrdtfESjm/0NEFj+NrYtq+4Le0= Subject key identifier: D2:CE:C9:A5:7D:65:31:05:B7:07:D6:38:E3:E9:74:F9:C1:47:23:2B Authority key identifier: 5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 Certificate issuer: /CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Certificate serial: 019AF208DCAE1474E9D15F628E398277366F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft Manifest number: 1385 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: XcoX_I054EPqdpryi1SMnTmDHSE.crl (hash: Xly97nU8t1rrL3ilmUSM4EXWgg38s/3QkiMhx04bWIA=) 2: oIZ02qxSrn-sBAlD-BOS1FyNBNQ.roa (hash: cCTxbjFQb4NeoVd9wETrGZr+in35PRv0+f/LrpWLJEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:dc:ae:14:74:e9:d1:5f:62:8e:39:82:77:36:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dca17fc8d39e043ea769af28b548c9d39831d21 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=d2cec9a57d653105b707d638e3e974f9c147232b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dd:b2:c5:62:75:e7:8a:a5:66:c7:59:1e:10: 12:67:b4:c1:f4:25:52:58:3a:98:14:ab:8b:75:04: fb:78:19:81:1a:fa:d4:be:97:2f:23:7a:e5:97:77: bb:94:51:02:a0:95:e2:e6:8a:cc:ea:0e:39:9d:e4: b5:90:a9:0a:1c:23:8f:2c:c5:f8:66:ed:95:28:61: 29:fb:20:e3:f5:50:92:dc:65:65:6c:9a:8f:72:48: 19:23:5f:4e:1a:b2:3c:e7:91:cf:24:69:11:08:f3: c0:01:5f:31:c7:5d:3c:68:66:38:c6:95:b6:05:30: 61:c1:c9:d8:58:32:e4:c2:4f:5b:e6:39:92:ee:fb: 6d:d1:8e:1f:f0:3f:59:d7:12:9c:fa:08:9e:08:a2: d0:44:5a:52:52:57:e3:9e:4f:4d:c8:b5:2a:bf:81: 13:f9:c8:ef:83:54:59:2f:47:73:66:9a:48:d5:3e: da:77:6a:60:81:c6:3c:7e:da:fe:53:5a:c0:56:ca: e4:61:8c:f5:ca:b1:fc:30:52:b1:13:6e:43:f3:09: ac:39:9e:29:a4:a7:04:c8:88:90:1b:1c:58:0e:40: a7:c2:07:04:c0:ed:6d:d2:15:ca:7f:9b:33:b4:fb: 22:c8:03:bd:71:96:5e:23:f3:30:ad:1b:48:02:13: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CE:C9:A5:7D:65:31:05:B7:07:D6:38:E3:E9:74:F9:C1:47:23:2B X509v3 Authority Key Identifier: keyid:5D:CA:17:FC:8D:39:E0:43:EA:76:9A:F2:8B:54:8C:9D:39:83:1D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcoX_I054EPqdpryi1SMnTmDHSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/8d939f-87a6-496f-9008-656dbc2f2436/1/XcoX_I054EPqdpryi1SMnTmDHSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9c:e1:21:6a:f7:cb:bb:0f:fb:14:0b:f7:53:76:f9:e5:af: 98:0a:c9:db:87:09:91:3e:70:e2:57:50:a8:da:c0:df:14:ac: f2:d0:32:65:cb:7a:79:c0:9f:7c:74:6e:90:ac:ec:27:5e:f6: e7:be:19:e5:73:1a:44:9f:20:f0:f3:01:f0:00:f5:de:f0:b1: 9c:03:3e:05:ac:48:84:b3:06:09:f0:ec:3f:a6:d2:5c:5f:ff: b8:d7:73:2d:fb:95:dc:3a:c4:89:54:07:f4:21:a1:51:b3:0f: ff:6c:d3:dd:d5:37:6d:54:ba:66:02:92:a6:0c:65:22:d8:6b: 0f:06:ee:2f:b7:db:00:c3:33:c4:56:b4:7f:78:7a:5e:03:99: 18:56:57:47:7a:c9:a2:39:0a:39:3d:76:00:c7:4a:ce:51:e5: fc:ee:80:ec:1f:e9:ab:65:48:09:3c:3b:1e:2a:67:0d:81:d2: 62:3d:72:e9:86:32:da:be:2b:ef:1a:4a:49:c4:d8:4b:28:fe: 2d:d4:96:ec:22:70:26:03:ea:8f:f5:b5:e1:a0:54:15:23:7e: 6c:91:bb:52:b7:d1:ba:ed:ac:7c:03:8d:2e:1c:6d:92:f2:23: c1:9c:6e:40:e2:56:19:f7:34:83:dd:2d:b7:a7:af:fa:99:11: 1f:1e:f8:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNyuFHTp0V9ijjmCdzZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2ExN2ZjOGQzOWUwNDNlYTc2OWFmMjhiNTQ4YzlkMzk4 MzFkMjEwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhkMmNlYzlhNTdkNjUzMTA1YjcwN2Q2MzhlM2U5NzRmOWMxNDcyMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx92yxWJ154qlZsdZHhASZ7TB9CVS WDqYFKuLdQT7eBmBGvrUvpcvI3rll3e7lFECoJXi5orM6g45neS1kKkKHCOPLMX4 Zu2VKGEp+yDj9VCS3GVlbJqPckgZI19OGrI855HPJGkRCPPAAV8xx108aGY4xpW2 BTBhwcnYWDLkwk9b5jmS7vtt0Y4f8D9Z1xKc+gieCKLQRFpSUlfjnk9NyLUqv4ET +cjvg1RZL0dzZppI1T7ad2pggcY8ftr+U1rAVsrkYYz1yrH8MFKxE25D8wmsOZ4p pKcEyIiQGxxYDkCnwgcEwO1t0hXKf5sztPsiyAO9cZZeI/MwrRtIAhMXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLOyaV9ZTEFtwfWOOPpdPnBRyMrMB8GA1UdIwQY MBaAFF3KF/yNOeBD6naa8otUjJ05gx0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgt NjU2ZGJjMmYyNDM2LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS84ZDkzOWYtODdhNi00OTZmLTkwMDgtNjU2ZGJjMmYyNDM2 LzEvWGNvWF9JMDU0RVBxZHByeWkxU01uVG1ESFNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZzhIWr3 y7sP+xQL91N2+eWvmArJ24cJkT5w4ldQqNrA3xSs8tAyZct6ecCffHRukKzsJ172 574Z5XMaRJ8g8PMB8AD13vCxnAM+BaxIhLMGCfDsP6bSXF//uNdzLfuV3DrEiVQH 9CGhUbMP/2zT3dU3bVS6ZgKSpgxlIthrDwbuL7fbAMMzxFa0f3h6XgOZGFZXR3rJ ojkKOT12AMdKzlHl/O6A7B/pq2VICTw7HipnDYHSYj1y6YYy2r4r7xpKScTYSyj+ LdSW7CJwJgPqj/W14aBUFSN+bJG7UrfRuu2sfAONLhxtkvIjwZxuQOJWGfc0g90t t6ev+pkRHx74Hg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:50 2025 by rpki-client