This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json) Hash identifier: UBTxaHt0rdIM/9cElqwXrDvcTcejknL00xkImFaCGLI= Subject key identifier: 33:E5:C8:13:67:84:84:E1:4A:28:1F:F5:CC:6A:42:C9:83:52:94:AE Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1 Certificate serial: 019AF31B6F77FEE321CF8DF6AEAD2B03FE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft Manifest number: 0657 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: 9tEl5jFrNSXsCYofc7NSx1FP1cI.roa (hash: 6vzM759erZPF8I3ZTPpySL3vdchhdENpuyLGkTDqiA0=) 2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: ITN9VXZQLPps1j9K+VWbFJJblj3lhLzxHzVge5GsgMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6f:77:fe:e3:21:cf:8d:f6:ae:ad:2b:03:fe:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1 Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=33e5c813678484e14a281ff5cc6a42c9835294ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8b:ff:3b:46:1e:81:8c:6f:f7:5f:e4:cb:d4: b7:b3:b6:71:56:cd:45:28:37:e8:55:34:13:09:8c: c9:29:64:88:88:98:91:d4:3e:b5:86:e5:f1:a0:36: 2c:c1:2b:88:c2:98:cb:53:e1:3a:f9:c3:16:cf:ef: f8:96:47:57:f9:49:02:29:00:ec:63:7f:16:2e:ac: fe:49:5f:30:ab:ed:ec:90:ac:75:3e:7a:cc:57:89: 98:c1:89:71:d4:69:02:7e:e7:68:6f:20:1f:95:c5: 0c:8a:95:1d:be:63:ff:84:57:9a:0e:50:84:dc:f5: a8:fa:b8:91:15:c8:e0:e3:e7:9c:fe:21:67:41:57: 1c:3d:19:38:08:ba:cc:e4:3f:c5:88:bc:60:6f:66: c8:21:fe:3f:f8:5b:ae:91:19:00:2c:42:ff:15:93: 61:d3:4d:99:70:c5:f7:ad:e5:c7:7a:ff:fc:a3:99: 60:7b:57:61:82:86:e4:26:05:8c:aa:0b:1d:b3:a2: 55:be:c0:ac:dc:b2:5f:7e:4c:45:9e:c9:19:6c:93: 18:3b:df:54:49:ed:00:9f:44:29:b7:85:22:21:b9: a0:03:f1:d2:e0:9f:e8:39:a9:50:7a:9b:90:76:4a: 49:98:6f:ff:87:9b:20:36:ed:4a:73:1c:92:1c:c9: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E5:C8:13:67:84:84:E1:4A:28:1F:F5:CC:6A:42:C9:83:52:94:AE X509v3 Authority Key Identifier: keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:33:d2:56:d1:d8:8e:77:02:76:53:92:0c:06:a1:70:17:5d: 27:ad:54:c5:a7:ca:80:f2:e4:af:b6:36:be:23:25:8e:78:fb: 1d:90:70:f4:a0:91:a6:2f:2e:4a:8a:df:51:98:d5:d3:2c:31: dc:6c:95:9c:36:09:1e:d0:58:aa:1e:de:af:4a:6c:fe:f2:24: e5:bc:ae:a2:71:88:52:d3:07:54:ab:2f:ef:c3:a2:5b:b6:08: 48:ed:11:0e:27:dd:00:06:17:f7:b1:b9:99:e9:74:14:97:c0: c0:26:aa:82:fb:a3:e7:c7:5d:a0:6f:0d:7f:2f:0a:ba:25:9e: ec:39:35:d8:1b:96:80:40:88:93:65:d2:de:0d:08:9e:d7:a9: 72:c3:25:c4:8e:7a:dd:b6:77:27:f9:ff:b5:a2:89:d9:cf:3a: 79:ef:f9:89:44:4d:e3:84:4a:82:c1:d8:22:7c:60:1a:55:22: d1:62:c4:7f:ad:75:ce:1d:54:f0:f0:80:6a:99:91:23:d5:f4: bb:5a:a1:5e:59:34:bf:99:43:07:64:5d:64:95:56:a1:f5:b3: 3b:8c:22:f7:0e:3e:8f:6c:60:7c:b2:63:bd:3a:d7:a7:cf:ca: 75:da:21:63:dd:95:15:26:d0:c8:51:fa:99:05:d5:ee:4a:1b: 17:c3:c6:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG293/uMhz432rq0rA/5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NzZiYTBjMDk4ZGM0NzIxODYyMjNjOTFlN2RlZjUyMTZl MjM5ZjEwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD EygzM2U1YzgxMzY3ODQ4NGUxNGEyODFmZjVjYzZhNDJjOTgzNTI5NGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Yv/O0YegYxv91/ky9S3s7ZxVs1F KDfoVTQTCYzJKWSIiJiR1D61huXxoDYswSuIwpjLU+E6+cMWz+/4lkdX+UkCKQDs Y38WLqz+SV8wq+3skKx1PnrMV4mYwYlx1GkCfudobyAflcUMipUdvmP/hFeaDlCE 3PWo+riRFcjg4+ec/iFnQVccPRk4CLrM5D/FiLxgb2bIIf4/+FuukRkALEL/FZNh 002ZcMX3reXHev/8o5lge1dhgobkJgWMqgsds6JVvsCs3LJffkxFnskZbJMYO99U Se0An0Qpt4UiIbmgA/HS4J/oOalQepuQdkpJmG//h5sgNu1KcxySHMncrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPlyBNnhIThSigf9cxqQsmDUpSuMB8GA1UdIwQY MBaAFMV2ugwJjcRyGGIjyR5971IW4jnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMt MzJlZTQ1OGE2MzQ4LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi85ZDYyZDQtZDAzMy00NmU5LWJmZDMtMzJlZTQ1OGE2MzQ4 LzEveFhhNkRBbU54SElZWWlQSkhuM3ZVaGJpT2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzPSVtHY jncCdlOSDAahcBddJ61UxafKgPLkr7Y2viMljnj7HZBw9KCRpi8uSorfUZjV0ywx 3GyVnDYJHtBYqh7er0ps/vIk5byuonGIUtMHVKsv78OiW7YISO0RDifdAAYX97G5 mel0FJfAwCaqgvuj58ddoG8Nfy8KuiWe7Dk12BuWgECIk2XS3g0IntepcsMlxI56 3bZ3J/n/taKJ2c86ee/5iURN44RKgsHYInxgGlUi0WLEf611zh1U8PCAapmRI9X0 u1qhXlk0v5lDB2RdZJVWofWzO4wi9w4+j2xgfLJjvTrXp8/KddohY92VFSbQyFH6 mQXV7kobF8PGfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:25 2025 by rpki-client