This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json) Hash identifier: C34of6uE6WHRxMRue7mAj0LTF9jJqISPyGKYSOKzu5Y= Subject key identifier: 86:17:80:CB:9D:88:F4:7B:7E:42:99:93:6B:9A:1F:72:C3:4E:90:1E Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Certificate serial: 019AF23F93BFEFF960778D81F167F2043AA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft Manifest number: 13C3 Signing time: Sat 06 Dec 2025 06:00:44 +0000 Manifest this update: Sat 06 Dec 2025 06:00:44 +0000 Manifest next update: Sun 07 Dec 2025 06:00:44 +0000 Files and hashes: 1: L6-VizqbQShaQBu3JV896s_4tGg.roa (hash: 2W7drlEaijHWshfl4DyE1RE1WYGrzJu6Z78yEoBqxmE=) 2: RHZBo8Pr6Q-AwsJ6UMblKavesaU.roa (hash: 0vFm3yhvgBy4kgPfdSeT0wbY5J6zHgZ0B78QJ9Nt4MM=) 3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: QGUiPd4jTkr7z1/42mekKwTUPJE3wms8y8MQJcpTg6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:bf:ef:f9:60:77:8d:81:f1:67:f2:04:3a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1 Validity Not Before: Dec 6 06:00:44 2025 GMT Not After : Dec 7 06:00:44 2025 GMT Subject: CN=861780cb9d88f47b7e4299936b9a1f72c34e901e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:60:dc:d0:63:b7:07:db:f8:03:79:53:3a: 93:af:f4:b1:0c:90:62:f4:09:3e:33:8c:79:be:c2: f4:09:6e:f0:dd:1d:bd:26:97:29:fe:26:07:c1:30: 17:12:24:65:fa:cb:95:da:da:0b:04:d9:91:08:84: 3a:ad:76:14:25:52:58:13:d7:a8:b1:b2:d9:30:7f: 10:65:ac:1f:e1:ec:0b:58:fe:ff:ff:d7:6e:a9:14: 81:30:df:5a:92:3f:5c:53:0a:2a:0f:6d:5e:d3:d3: 3a:54:9c:9a:c4:85:c0:2e:e3:65:7d:84:cd:bf:d3: cd:a6:49:5a:3c:6e:fb:39:73:d6:90:33:30:d7:e2: 4c:d0:6f:8f:f2:e7:55:a8:7c:a8:c7:00:e2:44:f6: e9:ea:23:1f:51:4d:96:f8:cd:ad:ae:f1:3b:c0:eb: 5b:49:67:51:b5:af:44:1e:80:16:19:3f:f2:1b:f6: 4a:b4:6f:43:d3:0f:30:f9:cb:31:9d:8f:2a:b4:41: 92:ae:57:21:e1:3b:00:de:66:5f:8f:21:e6:f1:c9: 97:be:66:76:7c:1d:7a:eb:ca:8f:fb:6e:6d:27:c0: 5c:30:55:b0:25:7d:dc:7f:ef:15:b4:d2:24:06:76: b1:45:dd:c6:35:1b:7b:7d:5f:18:4f:a4:a0:fc:d3: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:17:80:CB:9D:88:F4:7B:7E:42:99:93:6B:9A:1F:72:C3:4E:90:1E X509v3 Authority Key Identifier: keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ac:68:2b:96:4b:a1:46:eb:46:b8:4d:d5:2c:73:cf:58:1f: 21:4e:6f:0f:ae:2a:ff:c3:01:9e:b2:6f:ae:25:8b:51:5c:b8: e7:a7:f8:82:dd:1b:54:6d:bb:8e:40:07:5b:2e:fd:cf:e3:31: 2e:21:9f:8c:c7:57:01:47:aa:92:17:45:af:9a:d8:b9:69:83: 3d:6e:7e:9a:75:2a:9a:e2:2b:a0:50:32:d0:0b:06:3a:42:32: 52:66:3d:82:65:d1:43:a9:bb:d5:14:d3:b0:07:c2:5a:b9:c1: 73:f1:2b:e2:53:67:17:92:08:d6:27:c3:c0:fe:9e:ae:dd:44: 91:d4:5e:f6:92:13:a6:a4:59:f2:0b:8a:e4:15:70:fd:81:42: c3:64:92:08:36:f2:fd:22:3d:45:3b:5f:23:f3:11:34:23:de: 1c:da:d3:db:fe:13:6c:d4:36:89:7f:12:7f:f1:5f:6e:23:f2: a1:41:d9:97:5e:47:35:22:8a:e5:34:33:a2:21:fd:d8:09:ba: a6:00:d7:9f:78:86:be:f8:d1:ad:01:18:38:29:56:08:65:c5: 04:96:a2:86:af:5f:a8:dd:1f:06:89:61:62:93:f2:86:30:10: fd:e3:3d:b5:8a:60:2b:60:ca:07:9f:98:12:a4:86:d4:b5:08: b2:92:cc:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5O/7/lgd42B8WfyBDqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl ZjM2ZDEwHhcNMjUxMjA2MDYwMDQ0WhcNMjUxMjA3MDYwMDQ0WjAzMTEwLwYDVQQD Eyg4NjE3ODBjYjlkODhmNDdiN2U0Mjk5OTM2YjlhMWY3MmMzNGU5MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs1g3NBjtwfb+AN5UzqTr/SxDJBi 9Ak+M4x5vsL0CW7w3R29Jpcp/iYHwTAXEiRl+suV2toLBNmRCIQ6rXYUJVJYE9eo sbLZMH8QZawf4ewLWP7//9duqRSBMN9akj9cUwoqD21e09M6VJyaxIXALuNlfYTN v9PNpklaPG77OXPWkDMw1+JM0G+P8udVqHyoxwDiRPbp6iMfUU2W+M2trvE7wOtb SWdRta9EHoAWGT/yG/ZKtG9D0w8w+csxnY8qtEGSrlch4TsA3mZfjyHm8cmXvmZ2 fB1668qP+25tJ8BcMFWwJX3cf+8VtNIkBnaxRd3GNRt7fV8YT6Sg/NNvOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYXgMudiPR7fkKZk2uaH3LDTpAeMB8GA1UdIwQY MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6xoK5ZL oUbrRrhN1Sxzz1gfIU5vD64q/8MBnrJvriWLUVy456f4gt0bVG27jkAHWy79z+Mx LiGfjMdXAUeqkhdFr5rYuWmDPW5+mnUqmuIroFAy0AsGOkIyUmY9gmXRQ6m71RTT sAfCWrnBc/Er4lNnF5II1ifDwP6ert1EkdRe9pITpqRZ8guK5BVw/YFCw2SSCDby /SI9RTtfI/MRNCPeHNrT2/4TbNQ2iX8Sf/FfbiPyoUHZl15HNSKK5TQzoiH92Am6 pgDXn3iGvvjRrQEYOClWCGXFBJaihq9fqN0fBolhYpPyhjAQ/eM9tYpgK2DKB5+Y EqSG1LUIspLMKg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:41 2025 by rpki-client