This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.mft File: XcKN1dDOGOISxpsKAlHp1hVxysY.mft (raw, json) Hash identifier: 1I0gRTeyQPSp/rmchHORiM7i68WMHDhatXqg+Np3k6g= Subject key identifier: 9A:AA:1A:AD:54:85:5F:FA:6E:EB:64:2D:29:D4:46:0F:2E:A5:77:D3 Authority key identifier: 5D:C2:8D:D5:D0:CE:18:E2:12:C6:9B:0A:02:51:E9:D6:15:71:CA:C6 Certificate issuer: /CN=5dc28dd5d0ce18e212c69b0a0251e9d61571cac6 Certificate serial: 019AF24022297A428CECE6436F5B62B01F31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.mft Manifest number: 07 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: 0f_arJoBaLF-XLrzU8EcXTZHmfY.roa (hash: ywtuL9VpnhJkhV8T3hg8KzfDj9nIGXXgCL1jP2eFkdU=) 2: XcKN1dDOGOISxpsKAlHp1hVxysY.crl (hash: oKtxhScER18u/ZGfezGKJ1wc8zINkck2Tg9svfegq5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.mft rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:22:29:7a:42:8c:ec:e6:43:6f:5b:62:b0:1f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc28dd5d0ce18e212c69b0a0251e9d61571cac6 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=9aaa1aad54855ffa6eeb642d29d4460f2ea577d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:46:c2:d7:ec:63:6e:d3:68:26:29:8e:da: f8:72:4f:66:2a:f4:dd:5d:ff:16:c0:7d:85:b5:4c: b8:1b:f6:8e:52:d9:82:77:cd:32:ed:13:ec:e3:80: 23:60:f4:27:c7:05:86:54:da:a2:90:f6:22:2d:1f: 30:0d:ba:a1:d3:ee:22:f3:e3:17:55:81:b7:ca:f2: d7:66:c6:9e:32:8e:f7:14:40:f5:09:16:19:76:0d: 91:06:52:6b:fa:78:c2:5a:85:89:a6:36:3e:e8:13: e7:fd:e4:f3:b5:e0:20:a6:c0:db:7c:cf:f1:45:8d: 61:ce:b4:ae:c0:98:a8:0a:5b:34:40:8d:72:f0:3e: 69:7a:3e:e9:8d:2a:34:9f:78:d5:9e:49:f4:75:24: b7:ae:3e:3f:c5:42:f5:0b:3d:9b:e7:f4:f9:95:08: 54:7f:a0:00:33:56:34:54:b7:98:4e:82:69:0c:b4: 43:e9:89:8b:e2:c4:dd:e1:a6:22:1d:4d:1a:ab:1d: 67:f9:4e:d9:ff:c5:0e:07:9c:a9:b7:dd:7c:b6:d8: d7:02:38:7a:90:1a:a5:cf:9f:a3:4b:44:1a:23:a8: 45:b9:12:d9:66:cd:7c:c0:d9:93:d9:98:76:1f:98: d7:73:af:f6:d0:c4:ff:54:a0:13:7d:95:61:b2:bd: 31:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AA:1A:AD:54:85:5F:FA:6E:EB:64:2D:29:D4:46:0F:2E:A5:77:D3 X509v3 Authority Key Identifier: keyid:5D:C2:8D:D5:D0:CE:18:E2:12:C6:9B:0A:02:51:E9:D6:15:71:CA:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcKN1dDOGOISxpsKAlHp1hVxysY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3256b4-4160-4d14-b44f-241e8fe27381/1/XcKN1dDOGOISxpsKAlHp1hVxysY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:f6:29:87:23:8a:8e:86:45:1c:eb:3a:e3:96:b8:8d:b6:4a: 20:ee:e1:84:97:02:39:ef:6a:f9:01:c1:04:6c:b4:43:a1:46: 72:5f:29:d3:35:c2:24:27:b2:56:10:5d:ef:83:b1:29:51:31: dd:84:d6:52:d4:9f:6c:e8:19:b3:25:83:77:56:57:39:04:fe: e8:b1:0e:e0:f0:79:5f:62:ce:9c:90:73:79:20:0a:c3:fb:f0: c4:16:00:c5:98:46:52:42:57:92:e0:82:a4:d9:63:18:ba:c9: 63:21:70:71:bb:d3:53:00:6b:1c:c5:86:c3:85:66:b0:d6:00: 84:d7:89:ef:bc:ff:3b:1f:f4:6c:c9:18:02:ef:36:53:67:93: 5d:7a:69:1d:1a:3a:77:a2:9e:32:45:e1:2d:54:cf:77:e2:e2: ee:e3:93:7f:fc:e5:28:6b:43:a1:73:88:37:0a:4b:dd:14:bd: 1e:e0:1c:b1:97:b9:3e:a0:01:8a:ff:ea:6d:51:e4:50:9a:fa: 4d:53:aa:03:08:57:ec:22:ca:9f:2b:af:fb:a2:84:e6:4c:84: 00:82:6b:a1:da:7a:ba:f1:3f:b1:6f:24:93:ea:a5:2e:4c:8c: 1b:50:62:07:3b:85:ef:98:37:3f:81:0f:bb:f3:47:8d:9e:93: 02:15:d2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCIpekKM7OZDb1tisB8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzI4ZGQ1ZDBjZTE4ZTIxMmM2OWIwYTAyNTFlOWQ2MTU3 MWNhYzYwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD Eyg5YWFhMWFhZDU0ODU1ZmZhNmVlYjY0MmQyOWQ0NDYwZjJlYTU3N2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G1GwtfsY27TaCYpjtr4ck9mKvTd Xf8WwH2FtUy4G/aOUtmCd80y7RPs44AjYPQnxwWGVNqikPYiLR8wDbqh0+4i8+MX VYG3yvLXZsaeMo73FED1CRYZdg2RBlJr+njCWoWJpjY+6BPn/eTzteAgpsDbfM/x RY1hzrSuwJioCls0QI1y8D5pej7pjSo0n3jVnkn0dSS3rj4/xUL1Cz2b5/T5lQhU f6AAM1Y0VLeYToJpDLRD6YmL4sTd4aYiHU0aqx1n+U7Z/8UOB5ypt918ttjXAjh6 kBqlz5+jS0QaI6hFuRLZZs18wNmT2Zh2H5jXc6/20MT/VKATfZVhsr0xhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJqqGq1UhV/6butkLSnURg8upXfTMB8GA1UdIwQY MBaAFF3CjdXQzhjiEsabCgJR6dYVccrGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNLTjFkRE9HT0lTeHBzS0FsSHAxaFZ4eXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMjU2YjQtNDE2MC00ZDE0LWI0NGYt MjQxZThmZTI3MzgxLzEvWGNLTjFkRE9HT0lTeHBzS0FsSHAxaFZ4eXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8zMjU2YjQtNDE2MC00ZDE0LWI0NGYtMjQxZThmZTI3Mzgx LzEvWGNLTjFkRE9HT0lTeHBzS0FsSHAxaFZ4eXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/YphyOK joZFHOs645a4jbZKIO7hhJcCOe9q+QHBBGy0Q6FGcl8p0zXCJCeyVhBd74OxKVEx 3YTWUtSfbOgZsyWDd1ZXOQT+6LEO4PB5X2LOnJBzeSAKw/vwxBYAxZhGUkJXkuCC pNljGLrJYyFwcbvTUwBrHMWGw4VmsNYAhNeJ77z/Ox/0bMkYAu82U2eTXXppHRo6 d6KeMkXhLVTPd+Li7uOTf/zlKGtDoXOINwpL3RS9HuAcsZe5PqABiv/qbVHkUJr6 TVOqAwhX7CLKnyuv+6KE5kyEAIJrodp6uvE/sW8kk+qlLkyMG1BiBzuF75g3P4EP u/NHjZ6TAhXSMg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:44 2025 by rpki-client