This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft File: XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft (raw, json) Hash identifier: cY2RFv59ngl9m0XJauodiKhvvBC85HGeFsRucJgWOOI= Subject key identifier: 19:56:E6:1B:09:DC:FE:DE:72:4C:52:48:44:3E:5D:AB:4E:9C:5C:10 Authority key identifier: 5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75 Certificate issuer: /CN=5c757007aebf00098a800228db1f5930ee66e675 Certificate serial: 019AF209080C16CC14B939FA8DF578749BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft Manifest number: 0767 Signing time: Sat 06 Dec 2025 05:01:09 +0000 Manifest this update: Sat 06 Dec 2025 05:01:09 +0000 Manifest next update: Sun 07 Dec 2025 05:01:09 +0000 Files and hashes: 1: XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl (hash: 3GJlMecrdSVIcd5D6pmfIaeNztmf+dIFDRD0d0kl7JA=) 2: zeSSBsoxeiaEub6sPGDgBihsYlQ.roa (hash: ZJtLDNZbI5epQGziT22ZjYkOk6GcLflWv5h+Gm6/V1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:08:0c:16:cc:14:b9:39:fa:8d:f5:78:74:9b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c757007aebf00098a800228db1f5930ee66e675 Validity Not Before: Dec 6 05:01:09 2025 GMT Not After : Dec 7 05:01:09 2025 GMT Subject: CN=1956e61b09dcfede724c5248443e5dab4e9c5c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:29:a5:b7:34:73:e9:4e:fe:95:27:89:56: df:7e:a0:0f:43:82:75:d8:e5:7f:dd:99:05:2c:b1: ae:08:02:01:49:ee:5c:f4:35:a8:27:2b:65:db:ff: 7a:da:b8:6c:d8:d2:1a:dd:5d:f6:a5:c8:57:ec:37: b3:93:0e:3a:2a:df:eb:b2:15:fd:f9:11:22:90:72: fb:1e:ae:40:8d:82:ff:ca:50:26:f8:fb:29:43:c6: 7a:b4:a0:21:5b:0f:72:2e:f9:7d:0a:d4:f2:07:ce: 84:11:91:80:d2:6a:93:8d:49:da:7b:b0:95:8c:93: 21:15:05:a1:84:70:09:d7:83:96:7e:c2:70:48:e2: 85:b1:00:89:dc:32:5f:f8:1f:e6:88:ee:54:30:47: 1b:c9:e5:91:83:27:ed:0e:22:9d:2a:32:a2:cd:21: d3:d7:49:41:f8:f7:3d:88:15:52:45:40:24:e9:98: f5:0b:79:2a:23:b3:75:b3:88:b5:4d:cd:e1:8f:25: 9c:59:ce:c0:32:e6:c8:16:51:7b:27:5c:1e:86:e3: 67:fb:89:c8:f0:82:16:f3:b8:a8:42:4c:00:8f:3f: f0:49:10:2f:da:83:b1:09:8e:a6:6f:03:9e:5c:11: 20:9e:a1:33:8c:13:58:ff:27:88:a6:41:78:fb:68: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:56:E6:1B:09:DC:FE:DE:72:4C:52:48:44:3E:5D:AB:4E:9C:5C:10 X509v3 Authority Key Identifier: keyid:5C:75:70:07:AE:BF:00:09:8A:80:02:28:DB:1F:59:30:EE:66:E6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHVwB66_AAmKgAIo2x9ZMO5m5nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65aea5-ffef-4278-982e-a7a73194028e/1/XHVwB66_AAmKgAIo2x9ZMO5m5nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ee:19:ff:09:74:2c:94:8c:4f:c6:bb:65:d3:34:b0:87:f7: 6b:f1:7b:15:14:c5:67:31:cc:45:8e:87:56:63:49:e9:3d:53: 4c:6b:af:72:91:78:9f:3d:02:82:59:be:da:26:7a:89:b4:27: 25:40:3a:3f:14:b3:b6:ef:79:25:74:93:b2:f4:ae:86:fd:52: 42:c7:73:63:f8:89:d6:90:8d:1d:a4:33:81:97:04:97:60:e3: b8:65:a5:9d:c0:2f:01:e5:d9:d3:51:8f:5a:1d:dd:26:6b:c6: 8d:a0:0e:f4:2a:02:34:12:df:93:e1:ed:28:a4:16:b4:e2:45: 2a:95:b0:27:91:7f:6f:0e:40:89:46:45:ae:c5:1f:f1:fc:f5: f2:6e:b4:af:a5:26:d8:05:82:d2:f8:10:3d:91:f1:3b:a5:ca: 1e:29:ca:d4:36:26:18:cf:70:d7:17:c2:26:05:73:80:16:55: c2:8d:d1:be:3c:ed:03:d0:4c:42:42:8b:26:69:7f:af:69:a4: 2b:50:77:77:71:5a:de:8f:f7:5c:cc:84:44:4e:1b:bb:6f:37: 8a:dd:eb:8c:6c:94:22:89:aa:f9:cb:2f:57:ff:4b:86:24:2d: bd:0b:a6:73:93:8e:fa:df:db:69:ad:35:23:dc:a6:f9:d2:f8: 68:e4:a5:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQgMFswUuTn6jfV4dJvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzU3MDA3YWViZjAwMDk4YTgwMDIyOGRiMWY1OTMwZWU2 NmU2NzUwHhcNMjUxMjA2MDUwMTA5WhcNMjUxMjA3MDUwMTA5WjAzMTEwLwYDVQQD EygxOTU2ZTYxYjA5ZGNmZWRlNzI0YzUyNDg0NDNlNWRhYjRlOWM1YzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsskppbc0c+lO/pUniVbffqAPQ4J1 2OV/3ZkFLLGuCAIBSe5c9DWoJytl2/962rhs2NIa3V32pchX7Dezkw46Kt/rshX9 +REikHL7Hq5AjYL/ylAm+PspQ8Z6tKAhWw9yLvl9CtTyB86EEZGA0mqTjUnae7CV jJMhFQWhhHAJ14OWfsJwSOKFsQCJ3DJf+B/miO5UMEcbyeWRgyftDiKdKjKizSHT 10lB+Pc9iBVSRUAk6Zj1C3kqI7N1s4i1Tc3hjyWcWc7AMubIFlF7J1wehuNn+4nI 8IIW87ioQkwAjz/wSRAv2oOxCY6mbwOeXBEgnqEzjBNY/yeIpkF4+2i41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlW5hsJ3P7eckxSSEQ+XatOnFwQMB8GA1UdIwQY MBaAFFx1cAeuvwAJioACKNsfWTDuZuZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUt YTdhNzMxOTQwMjhlLzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82NWFlYTUtZmZlZi00Mjc4LTk4MmUtYTdhNzMxOTQwMjhl LzEvWEhWd0I2Nl9BQW1LZ0FJbzJ4OVpNTzVtNW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+4Z/wl0 LJSMT8a7ZdM0sIf3a/F7FRTFZzHMRY6HVmNJ6T1TTGuvcpF4nz0Cglm+2iZ6ibQn JUA6PxSztu95JXSTsvSuhv1SQsdzY/iJ1pCNHaQzgZcEl2DjuGWlncAvAeXZ01GP Wh3dJmvGjaAO9CoCNBLfk+HtKKQWtOJFKpWwJ5F/bw5AiUZFrsUf8fz18m60r6Um 2AWC0vgQPZHxO6XKHinK1DYmGM9w1xfCJgVzgBZVwo3RvjztA9BMQkKLJml/r2mk K1B3d3Fa3o/3XMyERE4bu283it3rjGyUIomq+csvV/9LhiQtvQumc5OO+t/baa01 I9ym+dL4aOSlrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:20 2025 by rpki-client