This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json) Hash identifier: EkurUnnd0u5p/7Q1VGgde3WmKz4rObqUL/jfoGiCdKw= Subject key identifier: 73:E6:A7:9E:B8:0F:CD:08:5A:30:6B:14:60:71:D9:03:BA:72:9E:4C Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b Certificate serial: 019AF1D19BB50075AB4FB822BEF0415F8170 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: Edf4BRC_SQM6caxUC9bnztO-Qtw.roa (hash: jrSFQj+uOrtwJVK8tmCsyrdBIOLOL0+D+bgHO+lUMkU=) 2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: zppzUf9QR1ipRQjJ5CEihFc9eVL1JIIViX4aaJnGWKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9b:b5:00:75:ab:4f:b8:22:be:f0:41:5f:81:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=73e6a79eb80fcd085a306b146071d903ba729e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:34:31:f8:be:8e:3b:53:cc:23:35:a0:4f: 5d:3f:d0:f5:f7:ce:14:fc:d8:62:5b:d5:df:5e:e8: 85:4d:b8:7d:78:a5:03:96:eb:f5:36:b8:a1:44:5e: 11:12:54:f3:be:67:f2:1d:6c:04:80:d3:61:0e:ca: bc:f8:3a:f5:cf:0a:81:0a:df:17:ac:d4:2c:08:98: 42:66:64:f4:7f:f6:81:91:0a:d5:f1:be:0e:9b:a5: 63:72:c7:79:61:2b:fc:d2:86:1f:d2:75:2a:3b:10: bc:07:63:68:0e:4e:48:59:de:86:94:19:c6:77:b6: dd:d2:92:4e:19:f4:ab:0a:b8:05:e7:15:0a:b3:f4: 4f:00:4d:49:3f:16:50:b3:fc:0c:42:64:c9:ed:96: 21:78:2a:ec:85:a0:6d:4e:b9:92:72:0d:5e:e4:c7: c1:71:83:9d:fd:fb:77:33:49:e9:b4:00:5e:55:ab: 94:62:35:ac:ec:cf:6a:84:92:63:0a:57:62:c9:16: f4:1b:88:2a:ef:ce:6c:aa:6a:1d:0b:44:d0:3a:09: 1a:ef:f6:14:25:5b:c0:f4:34:de:9d:16:f0:ea:db: 23:94:96:92:4c:a2:e8:7d:3c:92:56:2b:b5:4a:fa: 95:a7:aa:cd:91:83:0c:2a:8b:e1:22:9c:71:51:f3: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E6:A7:9E:B8:0F:CD:08:5A:30:6B:14:60:71:D9:03:BA:72:9E:4C X509v3 Authority Key Identifier: keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6f:fe:73:8e:3a:60:8c:a5:d2:15:03:9e:d3:7a:da:60:e3: e1:f9:d6:1e:66:7c:6a:33:fe:cc:9d:d9:81:2f:48:d6:28:ba: 3d:5d:67:20:b9:cf:77:4f:13:43:9b:6b:19:28:66:8c:89:4f: f1:d8:23:4e:dc:63:ff:d2:ed:5a:05:ba:bb:d3:07:4e:a4:78: 35:a5:41:98:2a:e2:71:6a:35:d3:8d:17:00:5b:a9:e8:03:ba: e2:ba:cf:20:cc:34:db:a6:9f:d2:93:4b:f6:b6:4a:87:98:74: 01:85:47:9f:fc:2c:ab:f1:89:22:2e:46:b1:6d:ce:40:a7:d5: 52:43:e9:8d:c0:72:3a:c1:a8:0b:35:3e:1c:b6:d5:d3:dd:4f: 08:c2:59:18:29:a3:28:65:5a:39:0f:85:eb:71:2d:b8:f3:6a: 04:3b:0b:bf:2f:28:61:21:ec:c7:81:78:fe:e7:8d:a9:36:c6: 8d:6e:e5:c4:75:32:b5:63:19:7b:e3:2e:8b:cd:44:5a:c9:df: 43:8c:5a:ae:7c:c7:dc:70:43:2b:19:de:21:3e:fe:13:70:4a: 4f:95:cf:c5:cd:df:1d:6e:15:4f:83:4d:3c:69:38:d9:c2:ad: ee:58:de:c5:fc:60:14:ef:b1:8b:a2:58:54:7b:12:24:08:e0: fd:40:bd:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zu1AHWrT7givvBBX4FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NTdjMTlmNmM3MmQ4OTAwYzRkODllYzdhYmIzNWQ0ZmE5 MjExNGIwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg3M2U2YTc5ZWI4MGZjZDA4NWEzMDZiMTQ2MDcxZDkwM2JhNzI5ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwg0Mfi+jjtTzCM1oE9dP9D1984U /NhiW9XfXuiFTbh9eKUDluv1NrihRF4RElTzvmfyHWwEgNNhDsq8+Dr1zwqBCt8X rNQsCJhCZmT0f/aBkQrV8b4Om6Vjcsd5YSv80oYf0nUqOxC8B2NoDk5IWd6GlBnG d7bd0pJOGfSrCrgF5xUKs/RPAE1JPxZQs/wMQmTJ7ZYheCrshaBtTrmScg1e5MfB cYOd/ft3M0nptABeVauUYjWs7M9qhJJjCldiyRb0G4gq785sqmodC0TQOgka7/YU JVvA9DTenRbw6tsjlJaSTKLofTySViu1SvqVp6rNkYMMKovhIpxxUfNbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPmp564D80IWjBrFGBx2QO6cp5MMB8GA1UdIwQY MBaAFMVXwZ9sctiQDE2J7Hq7NdT6khFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3Mzgt MzkwNDZiNGE5MTcwLzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lNzM5ODgtYzFjMi00MDhmLWI3MzgtMzkwNDZiNGE5MTcw LzEveFZmQm4yeHkySkFNVFluc2VyczExUHFTRVVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm/+c446 YIyl0hUDntN62mDj4fnWHmZ8ajP+zJ3ZgS9I1ii6PV1nILnPd08TQ5trGShmjIlP 8dgjTtxj/9LtWgW6u9MHTqR4NaVBmCricWo1040XAFup6AO64rrPIMw026af0pNL 9rZKh5h0AYVHn/wsq/GJIi5GsW3OQKfVUkPpjcByOsGoCzU+HLbV091PCMJZGCmj KGVaOQ+F63EtuPNqBDsLvy8oYSHsx4F4/ueNqTbGjW7lxHUytWMZe+Mui81EWsnf Q4xarnzH3HBDKxneIT7+E3BKT5XPxc3fHW4VT4NNPGk42cKt7ljexfxgFO+xi6JY VHsSJAjg/UC9sQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:11 2025 by rpki-client