This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json) Hash identifier: 90CByFEyCLp+UKODqaSgVwoCpvJdSiL6KDQHJ9kMkts= Subject key identifier: 07:93:E1:F4:EE:05:35:0D:C5:20:D8:BD:02:6D:D8:FC:52:84:29:AE Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a Certificate serial: 019AF5AE4B78AA627F71CB8C8BE976C2A568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 22:00:31 +0000 Manifest this update: Sat 06 Dec 2025 22:00:31 +0000 Manifest next update: Sun 07 Dec 2025 22:00:31 +0000 Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: uo3tXI/CaSDd52LnqqKAcjoAbULAD1xj3rpjay8DYQE=) 2: ZL3E7Adz2UxGlx__ehEXq17MBJk.roa (hash: eyCT9Oq7LBXIn9/dNlFO4JQgfNKfcXzeYyZGwsbG9dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:4b:78:aa:62:7f:71:cb:8c:8b:e9:76:c2:a5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a Validity Not Before: Dec 6 22:00:31 2025 GMT Not After : Dec 7 22:00:31 2025 GMT Subject: CN=0793e1f4ee05350dc520d8bd026dd8fc528429ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:94:0b:d7:7c:d7:00:f8:53:ab:25:b4:f2: 88:f9:e2:e8:30:de:12:f0:c6:82:14:37:bd:e7:13: db:76:f8:33:41:c7:23:37:34:82:d4:7d:27:56:1c: 93:6f:4b:18:37:04:aa:c1:db:e6:68:45:48:71:1c: 29:de:61:b7:f3:6c:1d:cc:bd:5c:54:87:b4:ad:90: 27:55:7b:b2:90:f2:ea:33:f2:df:50:2e:7e:ef:62: 8d:0b:68:b6:a4:7b:9a:4a:4f:da:02:87:33:7a:00: 1f:20:be:ef:bb:57:a2:d2:ba:e9:c2:b0:d7:49:ae: 19:a6:14:36:07:b1:12:2d:3c:41:ed:d6:7c:36:16: a9:e1:bb:f4:06:2e:b4:f6:c0:49:46:e1:d6:7b:45: 75:ed:e5:99:f9:4f:21:f5:df:e9:a3:dc:b8:93:4d: 8e:9f:bd:9e:ef:4c:64:f6:75:14:dc:4c:37:94:d1: b2:1b:97:99:ec:76:af:07:4f:0b:f9:82:e2:19:3c: fc:36:41:ed:a6:e5:10:66:a7:c4:26:08:a3:43:ec: 7b:5f:f5:8b:1a:d4:90:c2:a6:1a:91:13:5d:57:58: b8:88:40:11:bb:30:09:3d:f8:81:46:46:e1:69:19: 14:11:5d:d0:4c:d7:7a:52:ab:d3:9a:36:5c:59:59: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:93:E1:F4:EE:05:35:0D:C5:20:D8:BD:02:6D:D8:FC:52:84:29:AE X509v3 Authority Key Identifier: keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:99:c4:96:a6:de:fa:2e:37:9a:45:be:ef:c6:f9:38:c6:77: d5:23:0f:ac:6d:79:1d:60:e0:08:f3:c9:4c:4b:ed:e2:69:04: be:f6:51:70:fd:b4:03:f5:05:5f:71:89:94:32:90:66:28:92: f4:09:23:84:36:88:af:e0:07:7e:6a:b3:62:5c:29:1e:3c:12: c0:57:66:7b:46:ff:34:e8:8b:d9:c7:27:db:39:be:fd:4d:82: f3:e8:b0:cc:dc:c0:ee:94:e4:fa:13:c7:ba:1a:06:d5:73:15: 55:23:8b:21:27:29:95:b7:ed:ae:76:25:e3:f8:ec:4c:a7:60: e2:fd:fa:00:43:ef:7d:b9:46:c5:33:4e:e7:b4:15:ae:0a:95: 29:58:1e:eb:b4:c1:9a:4a:af:57:ba:41:99:45:e2:c6:8b:be: 53:4f:cc:1a:e8:ba:ad:59:48:db:cc:97:fb:fd:65:a3:dc:21: bf:47:18:69:69:ca:c4:4a:1c:d9:01:a2:0a:62:dd:fe:f0:86: 92:64:11:df:66:93:db:a8:ee:ff:93:a5:0c:ca:ab:95:ed:07: 19:96:6d:9d:36:e8:e2:fc:df:14:1e:2b:90:57:85:f5:18:7f: 22:5c:e8:b5:56:61:d7:10:c0:5b:1d:20:2a:db:73:dd:44:aa: 59:61:c6:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rkt4qmJ/ccuMi+l2wqVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZmZmMjU3OGEwZTYyMTVkYzYwZTJkYTk0NmYzMGQyNWM2 M2NkNmEwHhcNMjUxMjA2MjIwMDMxWhcNMjUxMjA3MjIwMDMxWjAzMTEwLwYDVQQD EygwNzkzZTFmNGVlMDUzNTBkYzUyMGQ4YmQwMjZkZDhmYzUyODQyOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNKUC9d81wD4U6sltPKI+eLoMN4S 8MaCFDe95xPbdvgzQccjNzSC1H0nVhyTb0sYNwSqwdvmaEVIcRwp3mG382wdzL1c VIe0rZAnVXuykPLqM/LfUC5+72KNC2i2pHuaSk/aAoczegAfIL7vu1ei0rrpwrDX Sa4ZphQ2B7ESLTxB7dZ8Nhap4bv0Bi609sBJRuHWe0V17eWZ+U8h9d/po9y4k02O n72e70xk9nUU3Ew3lNGyG5eZ7HavB08L+YLiGTz8NkHtpuUQZqfEJgijQ+x7X/WL GtSQwqYakRNdV1i4iEARuzAJPfiBRkbhaRkUEV3QTNd6UqvTmjZcWVkA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeT4fTuBTUNxSDYvQJt2PxShCmuMB8GA1UdIwQY MBaAFF7/8leKDmIV3GDi2pRvMNJcY81qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3Nzgt YjY5NzkwN2ZmZGM4LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83OWQxYTEtMDkxYy00MDM5LTg3NzgtYjY5NzkwN2ZmZGM4 LzEvWHZfeVY0b09ZaFhjWU9MYWxHOHcwbHhqeldvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgpnElqbe +i43mkW+78b5OMZ31SMPrG15HWDgCPPJTEvt4mkEvvZRcP20A/UFX3GJlDKQZiiS 9AkjhDaIr+AHfmqzYlwpHjwSwFdme0b/NOiL2ccn2zm+/U2C8+iwzNzA7pTk+hPH uhoG1XMVVSOLIScplbftrnYl4/jsTKdg4v36AEPvfblGxTNO57QVrgqVKVge67TB mkqvV7pBmUXixou+U0/MGui6rVlI28yX+/1lo9whv0cYaWnKxEoc2QGiCmLd/vCG kmQR32aT26ju/5OlDMqrle0HGZZtnTbo4vzfFB4rkFeF9Rh/IlzotVZh1xDAWx0g Kttz3USqWWHGgA== -----END CERTIFICATE-----Generated at Sun Dec 7 06:01:12 2025 by rpki-client