This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json) Hash identifier: Mh6V8x5UslMixzEUp3efuE3lzkj0hEc3aytuBp1O420= Subject key identifier: EB:F6:71:36:81:76:01:16:75:63:06:34:8A:3A:99:10:1A:27:18:5A Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Certificate serial: 019AF23FBC56538696ABDF9AEF3CCD0223FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft Manifest number: 16D2 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (hash: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=) 2: 6RKo2coVxrYaYfsazfeJ6zvl9Ng.roa (hash: 8Th0uf+/JgP3nER+mq+GyZV+pOLau4+PNBq3EnvOyaA=) 3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: T+9lQbeGrqbYQnJqbbT6R3rvNeg05UeaSdmOgd1cVZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bc:56:53:86:96:ab:df:9a:ef:3c:cd:02:23:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=ebf6713681760116756306348a3a99101a27185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:79:08:86:60:43:4c:b5:1e:c2:05:af:92:e0: dd:3a:96:5c:a7:62:50:7a:97:92:56:8a:d3:7d:4f: 96:7a:e5:1e:5c:9c:d1:2f:8d:c3:25:33:82:c4:6b: ee:94:0b:11:28:70:40:95:a6:f7:f4:81:07:cf:1b: cf:b1:7e:71:b0:16:1b:50:9d:f0:f7:f1:a2:75:70: c3:b5:22:02:77:a7:5d:57:d3:5f:9a:6b:03:c4:eb: 7b:79:96:68:85:57:6e:09:fb:f3:ad:35:75:8b:7f: 9b:aa:45:56:ed:5d:a6:6d:30:9e:8d:10:3d:a3:51: 76:8a:b5:df:53:75:c5:e4:2a:fd:3c:35:b8:1e:fe: 7e:18:84:54:43:88:e4:17:18:cd:ec:a6:23:22:a8: 40:7f:28:14:50:21:cc:cd:87:f3:2f:9f:53:04:92: e8:91:90:e5:dc:71:8b:41:ea:df:35:e2:1a:8b:dc: 33:92:a7:0b:99:a9:ec:a3:c7:83:a6:a9:eb:b9:f5: f2:8f:0e:8a:c3:a6:ea:02:19:32:0a:1b:e5:fd:4b: d3:db:d7:f5:e2:55:91:78:a4:f7:0e:6d:30:8a:fe: 04:d7:0f:4e:df:12:76:50:d9:cb:60:fb:8a:c2:4d: b4:7b:9d:30:f0:6d:da:15:a9:3f:72:65:83:92:48: 94:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:71:36:81:76:01:16:75:63:06:34:8A:3A:99:10:1A:27:18:5A X509v3 Authority Key Identifier: keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cd:13:72:c9:3c:c0:f4:1d:92:23:f6:70:9b:44:55:f0:c9: 98:f9:7b:e9:e7:b4:e1:c2:e4:df:59:49:3f:6b:42:d3:c9:eb: 7c:02:92:79:59:be:8c:c4:97:14:59:af:c7:e7:4c:ec:bf:49: e4:7b:b9:16:79:63:5c:f9:14:81:0a:64:42:45:13:38:6a:0a: 5a:23:b7:28:de:5f:86:30:21:67:10:38:b9:d7:a5:1b:1b:1d: 64:14:a8:34:6b:89:de:a5:5d:87:58:56:64:14:ac:2d:68:a1: f4:bb:1a:98:f9:a1:e8:8e:6c:97:a6:e3:41:12:3f:9c:3c:c6: 02:8f:75:d9:67:ef:d8:f6:42:1d:74:8c:f0:dc:0c:12:9d:d8: 14:78:bd:81:40:82:7c:cf:27:23:4d:75:48:1c:b3:09:63:4d: 81:40:3d:86:86:52:c9:52:83:4f:82:cb:34:86:5f:d4:48:37: ea:5d:0a:46:89:97:16:84:fe:db:a7:85:5d:19:52:29:1d:5e: a4:8e:44:fc:28:4f:ab:88:55:c2:fd:44:53:e4:a1:ea:b8:18: 40:05:35:f7:70:93:e6:38:8d:43:fa:f4:75:65:40:aa:82:6a: 0f:b4:42:4d:31:c9:8d:f1:c3:34:38:ba:d8:8a:c1:09:02:cf: 1b:ca:43:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7xWU4aWq9+a7zzNAiP9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTRhNGU2NTU4YmFiODlkMzZlM2JhMjFjOTVlMmFmZGQ2 OGZiZWEwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EyhlYmY2NzEzNjgxNzYwMTE2NzU2MzA2MzQ4YTNhOTkxMDFhMjcxODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznkIhmBDTLUewgWvkuDdOpZcp2JQ epeSVorTfU+WeuUeXJzRL43DJTOCxGvulAsRKHBAlab39IEHzxvPsX5xsBYbUJ3w 9/GidXDDtSICd6ddV9NfmmsDxOt7eZZohVduCfvzrTV1i3+bqkVW7V2mbTCejRA9 o1F2irXfU3XF5Cr9PDW4Hv5+GIRUQ4jkFxjN7KYjIqhAfygUUCHMzYfzL59TBJLo kZDl3HGLQerfNeIai9wzkqcLmanso8eDpqnrufXyjw6Kw6bqAhkyChvl/UvT29f1 4lWReKT3Dm0wiv4E1w9O3xJ2UNnLYPuKwk20e50w8G3aFak/cmWDkkiUxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv2cTaBdgEWdWMGNIo6mRAaJxhaMB8GA1UdIwQY MBaAFF8UpOZVi6uJ0247ohyV4q/daPvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQt ZGE4MWYwOGY2MDAxLzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTk2Y2ItYzNlMC00OWM2LWFlMzQtZGE4MWYwOGY2MDAx LzEvWHhTazVsV0xxNG5UYmp1aUhKWGlyOTFvLS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM0Tcsk8 wPQdkiP2cJtEVfDJmPl76ee04cLk31lJP2tC08nrfAKSeVm+jMSXFFmvx+dM7L9J 5Hu5FnljXPkUgQpkQkUTOGoKWiO3KN5fhjAhZxA4udelGxsdZBSoNGuJ3qVdh1hW ZBSsLWih9LsamPmh6I5sl6bjQRI/nDzGAo912Wfv2PZCHXSM8NwMEp3YFHi9gUCC fM8nI011SByzCWNNgUA9hoZSyVKDT4LLNIZf1Eg36l0KRomXFoT+26eFXRlSKR1e pI5E/ChPq4hVwv1EU+Sh6rgYQAU193CT5jiNQ/r0dWVAqoJqD7RCTTHJjfHDNDi6 2IrBCQLPG8pDSA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:21 2025 by rpki-client