This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json) Hash identifier: xMZV/0iaB3DdGxo8neaMbidxVXh4b2HcqTrnyRWd/ZY= Subject key identifier: 7E:EB:EF:78:96:96:73:17:23:11:E1:E9:FF:3B:A4:ED:10:D2:3E:F2 Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Certificate serial: 019AF19B018B0D8B9824674B8B6552DD0CCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft Manifest number: 14CE Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 60HEsBaMqcn-eIgLR5xlDOKT3H4.roa (hash: 92TWLG+yrUdSGxzPqHvt67q91xHgIIuyd/z6PMj19WQ=) 2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: 5lzysyx0Tm3o7OGXYKaL37lt6W2YnEXveZHZ0cdmLcw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:01:8b:0d:8b:98:24:67:4b:8b:65:52:dd:0c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=7eebef78969673172311e1e9ff3ba4ed10d23ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:5a:b8:82:c4:9d:f3:1d:c2:52:a1:bc:bd: 0b:47:b8:5f:be:79:fd:6d:b8:3f:4c:d8:88:98:06: a8:e3:53:10:f5:bc:41:e8:bf:b3:3a:7e:ac:e2:7c: a6:eb:2a:d5:99:2d:27:d6:93:3c:6f:74:94:02:51: 34:36:39:64:37:57:05:f0:ca:da:d1:98:7a:8a:c9: 61:a9:4f:47:fe:c8:f7:7d:63:99:e7:39:98:e3:97: 1f:b4:cd:ce:8e:ec:06:f5:a9:96:83:7f:44:ba:67: 99:38:c4:9d:e0:3d:97:98:84:3b:30:bb:67:0f:cf: 3d:fa:36:7a:84:11:dc:1a:f3:5b:cb:08:13:01:43: 4c:88:00:bd:88:75:da:1f:eb:25:21:f0:51:cd:ee: bc:c7:ca:cc:d6:30:6c:a7:f0:53:3a:54:55:a9:b7: 11:3b:c0:5e:38:a1:a3:cf:97:00:07:25:ea:4b:51: 47:1e:85:d0:bf:59:bf:a5:f3:d5:bb:3d:61:fc:a0: c4:95:4a:19:04:db:32:ae:df:ee:69:de:c1:33:45: b4:fd:43:b8:14:8e:db:c0:02:71:38:c9:1d:05:06: 55:4b:75:20:0e:bd:63:c7:64:a3:63:bb:8a:e3:76: 67:d5:d5:a5:46:a8:93:8f:31:7c:a9:0a:d1:08:44: a3:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:EF:78:96:96:73:17:23:11:E1:E9:FF:3B:A4:ED:10:D2:3E:F2 X509v3 Authority Key Identifier: keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3a:28:15:81:f2:a8:99:87:26:1a:31:85:b2:b9:81:b7:49: 57:45:70:8f:54:ac:cf:9f:bb:b5:d2:5d:eb:53:00:41:2b:46: 03:e6:3f:66:9e:7b:1a:6c:ce:c0:20:ce:39:3d:83:db:8e:44: 0e:43:fa:d2:b0:06:9e:2e:cb:10:ae:0b:38:cb:8d:21:5d:9d: 4f:f8:10:93:af:17:d4:67:16:29:7a:0b:89:fc:e2:d9:95:01: 77:fc:75:9d:44:79:33:e5:cf:7b:0b:67:7a:8f:bc:b2:53:16: 01:29:c9:96:a7:30:35:12:7f:2a:76:06:29:95:87:65:1a:75: fc:e7:06:d7:f0:64:35:16:38:15:60:94:9a:61:74:c6:62:9f: eb:28:80:6e:c8:e3:74:f1:97:c6:19:6b:94:69:9f:6c:8d:c6: ee:8e:39:bb:18:46:f0:e3:49:bf:c5:a2:e2:cb:22:2b:d4:f9: 6f:1a:09:a9:28:8c:08:04:0a:9a:10:a9:87:62:6a:c6:bd:27: 1e:f8:b2:94:e2:95:77:0b:d2:9f:50:4d:58:30:e1:58:2b:64: c7:f6:ae:3b:26:11:af:3d:51:bc:50:ea:03:a3:b1:97:6c:43: 5a:74:6f:8b:87:b1:e6:33:ed:6e:bf:5b:c3:1f:d0:47:20:20: e9:b4:44:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwGLDYuYJGdLi2VS3QzOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTY5NzE2ZDBhZTY0MDY4NzAzMTQwYWEzNzMwZTM3ODhm ZGQ0YzYwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg3ZWViZWY3ODk2OTY3MzE3MjMxMWUxZTlmZjNiYTRlZDEwZDIzZWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdhauILEnfMdwlKhvL0LR7hfvnn9 bbg/TNiImAao41MQ9bxB6L+zOn6s4nym6yrVmS0n1pM8b3SUAlE0NjlkN1cF8Mra 0Zh6islhqU9H/sj3fWOZ5zmY45cftM3OjuwG9amWg39EumeZOMSd4D2XmIQ7MLtn D889+jZ6hBHcGvNbywgTAUNMiAC9iHXaH+slIfBRze68x8rM1jBsp/BTOlRVqbcR O8BeOKGjz5cAByXqS1FHHoXQv1m/pfPVuz1h/KDElUoZBNsyrt/uad7BM0W0/UO4 FI7bwAJxOMkdBQZVS3UgDr1jx2SjY7uK43Zn1dWlRqiTjzF8qQrRCESjawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7r73iWlnMXIxHh6f87pO0Q0j7yMB8GA1UdIwQY MBaAFMYWlxbQrmQGhwMUCqNzDjeI/dTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2Yt MDQyNDQ2YjcwZmIxLzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80MDA2ODUtZjQ4ZS00YWI5LThlM2YtMDQyNDQ2YjcwZmIx LzEveGhhWEZ0Q3VaQWFIQXhRS28zTU9ONGo5MU1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTooFYHy qJmHJhoxhbK5gbdJV0Vwj1Ssz5+7tdJd61MAQStGA+Y/Zp57GmzOwCDOOT2D245E DkP60rAGni7LEK4LOMuNIV2dT/gQk68X1GcWKXoLifzi2ZUBd/x1nUR5M+XPewtn eo+8slMWASnJlqcwNRJ/KnYGKZWHZRp1/OcG1/BkNRY4FWCUmmF0xmKf6yiAbsjj dPGXxhlrlGmfbI3G7o45uxhG8ONJv8Wi4ssiK9T5bxoJqSiMCAQKmhCph2Jqxr0n HviylOKVdwvSn1BNWDDhWCtkx/auOyYRrz1RvFDqA6Oxl2xDWnRvi4ex5jPtbr9b wx/QRyAg6bREww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:28 2025 by rpki-client