This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft File: XcYkXKggiZ1-tBQDAsIQQbXbygY.mft (raw, json) Hash identifier: JhOWvymoo1yue40mF3c7KWKc9XTSnEM2m056Yk/e3o8= Subject key identifier: D9:77:F7:EC:63:9C:56:9C:45:0B:D3:CB:B4:35:38:32:B6:25:F5:2B Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Certificate serial: 019AF23F6925DC245A0D2C14F4F0E161F194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft Manifest number: 074C Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: XcYkXKggiZ1-tBQDAsIQQbXbygY.crl (hash: WjnGpWK0idvvx1CedpBFTTF6EalMD+SD4kQS2kC+qZ4=) 2: p3q-BDwRqsq597BmScWC04Uizbg.roa (hash: vEfpkI+83ThIFnHcYAP8l+1vWWpuU+kEjWNLTSj4mUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:69:25:dc:24:5a:0d:2c:14:f4:f0:e1:61:f1:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=d977f7ec639c569c450bd3cbb4353832b625f52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4d:0f:dc:90:a3:b2:d2:d4:9a:ca:da:1b:8b: 52:2d:ba:60:83:38:35:db:01:60:59:32:40:59:e7: ce:ec:f4:2f:32:d1:87:6a:17:02:cb:60:61:9d:45: 37:04:dd:8a:fe:9d:e1:a6:70:ff:7c:43:09:15:f4: 02:5b:29:d2:58:2d:89:82:53:b9:83:ff:a8:19:24: 7d:9e:1e:db:d9:0a:83:d1:e9:88:cc:ef:49:4b:ba: 43:20:23:41:c3:1f:f6:af:d6:07:3a:4c:7c:5b:23: 5b:df:b4:51:60:a7:80:a8:db:9f:3e:cb:e3:01:d5: 03:82:5d:ab:18:73:13:5a:f5:7f:fa:40:e0:12:d0: 36:ba:d1:68:da:3c:fb:a9:5a:fc:17:a5:eb:be:23: f5:ed:03:68:c5:e4:58:ab:99:cb:55:38:ec:d1:32: 24:22:d0:e5:40:97:4d:a2:27:38:f2:1c:d3:9c:2a: a8:8a:94:a1:c1:7a:71:64:08:92:e0:e1:02:4f:ed: a4:9d:b2:15:30:01:9a:e5:6e:02:fd:98:76:f1:c5: cf:9d:b9:d0:85:a2:85:4c:ec:8f:1e:d5:d5:c2:49: f1:40:1a:4b:c9:ae:17:50:ab:15:58:36:92:a4:ee: ca:ba:92:40:d9:67:19:75:19:7b:20:4a:ed:36:4c: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:F7:EC:63:9C:56:9C:45:0B:D3:CB:B4:35:38:32:B6:25:F5:2B X509v3 Authority Key Identifier: keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:91:fb:a1:19:90:67:2d:af:1e:b2:6d:09:09:55:aa:0f:ee: 00:06:6c:70:34:75:e5:d5:00:15:5a:ff:98:1f:8a:30:14:e2: da:55:7b:ba:ab:18:72:f3:47:b5:0a:e3:f0:4c:29:39:6d:81: 7b:bf:1e:52:aa:f9:d2:de:01:67:02:d4:b5:7d:41:95:9b:92: 68:2c:49:d9:33:9b:49:4c:be:87:61:96:58:3a:68:f8:0b:70: a7:5e:eb:2b:56:ba:c2:a2:e8:f8:2c:80:b8:20:60:25:4d:a4: 54:2a:24:67:8d:2f:9e:84:24:97:9b:1d:6d:64:a1:7f:fa:25: 36:5b:71:cd:a1:41:25:a4:c8:67:39:f6:ab:2a:4d:5e:70:b4: c9:6c:2d:db:45:12:65:bf:9f:ef:43:3a:18:85:2c:9f:4b:68: 7e:44:42:68:95:0b:76:69:f9:5e:b1:53:15:c8:13:8c:fa:90: 6b:e3:44:86:4e:11:7f:86:da:bc:ed:33:52:50:12:e4:96:9a: a3:6b:46:86:5d:e7:ea:8c:bc:52:3b:d0:0a:d5:8f:a0:d2:fb: 60:d4:12:aa:47:fd:d0:22:c7:b9:0a:d8:30:2f:9d:04:2b:bf: 11:89:ba:68:d9:0a:41:34:ce:0a:56:8d:5a:52:17:34:28:22: 34:e1:f2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2kl3CRaDSwU9PDhYfGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk YmNhMDYwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EyhkOTc3ZjdlYzYzOWM1NjljNDUwYmQzY2JiNDM1MzgzMmI2MjVmNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE0P3JCjstLUmsraG4tSLbpggzg1 2wFgWTJAWefO7PQvMtGHahcCy2BhnUU3BN2K/p3hpnD/fEMJFfQCWynSWC2JglO5 g/+oGSR9nh7b2QqD0emIzO9JS7pDICNBwx/2r9YHOkx8WyNb37RRYKeAqNufPsvj AdUDgl2rGHMTWvV/+kDgEtA2utFo2jz7qVr8F6XrviP17QNoxeRYq5nLVTjs0TIk ItDlQJdNoic48hzTnCqoipShwXpxZAiS4OECT+2knbIVMAGa5W4C/Zh28cXPnbnQ haKFTOyPHtXVwknxQBpLya4XUKsVWDaSpO7KupJA2WcZdRl7IErtNkyDmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl39+xjnFacRQvTy7Q1ODK2JfUrMB8GA1UdIwQY MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt MDc0ZWQ3MGI0NjczLzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZH7oRmQ Zy2vHrJtCQlVqg/uAAZscDR15dUAFVr/mB+KMBTi2lV7uqsYcvNHtQrj8EwpOW2B e78eUqr50t4BZwLUtX1BlZuSaCxJ2TObSUy+h2GWWDpo+Atwp17rK1a6wqLo+CyA uCBgJU2kVCokZ40vnoQkl5sdbWShf/olNltxzaFBJaTIZzn2qypNXnC0yWwt20US Zb+f70M6GIUsn0tofkRCaJULdmn5XrFTFcgTjPqQa+NEhk4Rf4bavO0zUlAS5Jaa o2tGhl3n6oy8UjvQCtWPoNL7YNQSqkf90CLHuQrYMC+dBCu/EYm6aNkKQTTOClaN WlIXNCgiNOHyqA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:05 2025 by rpki-client