This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json) Hash identifier: fhC83emG5byWhKt0OSQaZuKGEFMVev1CwDuQVfHGaIs= Subject key identifier: BB:22:AE:4F:BE:FA:6B:7A:AC:F0:B3:F7:42:FB:85:00:57:30:D5:8F Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Certificate serial: 019AF50BC9CDB43D389CCB14B751A13968C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft Manifest number: 0340 Signing time: Sat 06 Dec 2025 19:03:01 +0000 Manifest this update: Sat 06 Dec 2025 19:03:01 +0000 Manifest next update: Sun 07 Dec 2025 19:03:01 +0000 Files and hashes: 1: X7HkSzc73grEKj4u4ebonuY_N3k.roa (hash: OyEQG3xPXjnpnin1BNjI7sPjB8DI9jWlTT019Ki3K7k=) 2: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: eAMq3+tR/2WonSb0aKJGLMSJGYoRgKHDPhARjEHhc8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:c9:cd:b4:3d:38:9c:cb:14:b7:51:a1:39:68:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17 Validity Not Before: Dec 6 19:03:01 2025 GMT Not After : Dec 7 19:03:01 2025 GMT Subject: CN=bb22ae4fbefa6b7aacf0b3f742fb85005730d58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:d9:db:3f:96:b1:b0:f3:40:f2:9a:e7:2c: f7:26:e9:ba:0c:6f:f4:7c:fc:13:80:d4:a8:23:f8: 35:d2:d8:ae:29:8d:fb:b8:86:3f:99:cd:73:34:a3: 01:b6:ae:b0:68:a5:27:58:6b:db:a2:31:91:ad:96: e5:30:54:29:95:8d:5a:c6:1d:10:10:fb:b0:95:ea: c1:ee:b0:91:03:59:f8:23:f2:b2:1b:82:3c:5b:6d: e7:7d:cb:3d:81:c8:ee:fb:d1:87:39:91:48:51:fb: fa:b0:26:ab:1e:02:94:08:be:f8:04:30:b9:c6:86: bf:d6:ac:d2:91:59:e1:f2:01:9b:27:fa:41:83:f0: e2:a0:b1:c2:1c:ea:1f:a1:5c:e4:2c:4d:8b:73:48: 2f:c5:6b:0a:4c:ac:a4:3d:31:e4:db:68:25:fc:dc: 55:a7:71:31:de:9e:81:03:ee:34:99:6b:b9:0a:aa: bf:ff:03:b2:6e:10:6b:bf:0a:e7:e8:92:cb:ef:a2: 86:f2:04:66:01:0e:af:61:c1:57:90:00:31:07:f5: d3:cd:50:d6:33:c0:38:64:38:b3:4b:5c:cf:11:82: 4a:62:ab:c9:f1:77:12:ce:25:38:25:0f:36:14:9a: d7:23:ac:14:a2:b1:b9:ba:48:47:48:c9:39:44:91: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:22:AE:4F:BE:FA:6B:7A:AC:F0:B3:F7:42:FB:85:00:57:30:D5:8F X509v3 Authority Key Identifier: keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:9c:9a:92:cf:46:bf:91:04:c4:47:a1:6f:c9:a5:b4:ac:05: c6:15:28:24:aa:38:89:bd:ad:36:bb:9f:cf:0a:b4:92:50:6d: 42:38:4b:d4:92:1e:03:6f:17:01:2d:d3:62:0e:02:c1:51:62: 91:64:c5:bd:72:89:df:57:e1:ca:e1:86:03:ed:a2:ec:f1:4b: fe:43:95:d7:ee:96:68:68:8d:e8:7d:f7:73:8c:2e:26:4a:e7: a1:6c:26:85:28:78:3f:53:75:5a:2b:0c:3f:d5:54:bb:e9:da: af:81:26:b9:c0:58:cd:66:db:04:5d:70:d1:5e:1b:c8:64:c4: 17:ca:b7:a8:6a:84:ea:f4:66:be:cb:fc:53:1e:af:02:84:ac: 18:ae:11:b2:25:12:37:92:57:13:04:0f:48:32:c0:9b:55:e4: 56:80:10:39:ba:ce:35:6d:d3:48:34:76:ac:84:e6:fd:58:bd: 29:3e:06:3b:0a:7c:0d:63:63:0a:1b:ab:c4:4c:79:10:5d:67: 2c:d7:24:59:a4:f3:e0:54:b9:fa:44:85:71:d9:95:76:8d:bf: 34:42:46:da:a7:46:39:94:f0:32:4e:2b:84:70:89:fc:18:21: fd:33:94:02:c7:2f:8f:01:41:35:c4:6f:01:ab:fc:ca:96:15: a3:de:90:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C8nNtD04nMsUt1GhOWjFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZjllODU2ZjA0OTVjODQ5MGQ1MTI0ZThjZmJhZjA4ZDcw ZGZiMTcwHhcNMjUxMjA2MTkwMzAxWhcNMjUxMjA3MTkwMzAxWjAzMTEwLwYDVQQD EyhiYjIyYWU0ZmJlZmE2YjdhYWNmMGIzZjc0MmZiODUwMDU3MzBkNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslbZ2z+WsbDzQPKa5yz3Jum6DG/0 fPwTgNSoI/g10tiuKY37uIY/mc1zNKMBtq6waKUnWGvbojGRrZblMFQplY1axh0Q EPuwlerB7rCRA1n4I/KyG4I8W23nfcs9gcju+9GHOZFIUfv6sCarHgKUCL74BDC5 xoa/1qzSkVnh8gGbJ/pBg/DioLHCHOofoVzkLE2Lc0gvxWsKTKykPTHk22gl/NxV p3Ex3p6BA+40mWu5Cqq//wOybhBrvwrn6JLL76KG8gRmAQ6vYcFXkAAxB/XTzVDW M8A4ZDizS1zPEYJKYqvJ8XcSziU4JQ82FJrXI6wUorG5ukhHSMk5RJGe4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsirk+++mt6rPCz90L7hQBXMNWPMB8GA1UdIwQY MBaAFF356FbwSVyEkNUSToz7rwjXDfsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAt ZTFlYTQ1M2M1MjU3LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8xM2RjMzgtMmU3NS00YjA3LWJlZjAtZTFlYTQ1M2M1MjU3 LzEvWGZub1Z2QkpYSVNRMVJKT2pQdXZDTmNOLXhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJyaks9G v5EExEehb8mltKwFxhUoJKo4ib2tNrufzwq0klBtQjhL1JIeA28XAS3TYg4CwVFi kWTFvXKJ31fhyuGGA+2i7PFL/kOV1+6WaGiN6H33c4wuJkrnoWwmhSh4P1N1WisM P9VUu+nar4EmucBYzWbbBF1w0V4byGTEF8q3qGqE6vRmvsv8Ux6vAoSsGK4RsiUS N5JXEwQPSDLAm1XkVoAQObrONW3TSDR2rITm/Vi9KT4GOwp8DWNjChurxEx5EF1n LNckWaTz4FS5+kSFcdmVdo2/NEJG2qdGOZTwMk4rhHCJ/Bgh/TOUAscvjwFBNcRv Aav8ypYVo96QIg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:37 2025 by rpki-client