This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft File: XlgQVXywZwvJwJM-An6b2CqxVt8.mft (raw, json) Hash identifier: bEqotQQUoilcRweVrUDD7pY1kpZ30jaf8wz/ymYFkK8= Subject key identifier: 31:83:2A:A0:4A:B8:0A:EC:97:21:CD:F0:85:34:F7:15:AC:77:62:78 Authority key identifier: 5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF Certificate issuer: /CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Certificate serial: 019AF23FAA16255C7518ED6C36811F879A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: X3STT9uNWvgpUT8B2LTGrxoI9k0.roa (hash: LPxXWYECEhYhqhJFZtgmdAjXs7SoH+TOKVHj7gJZDp0=) 2: XlgQVXywZwvJwJM-An6b2CqxVt8.crl (hash: EQPq4tQvgb91L2HCbfmucrtb4ZSb4oO9VqoCP2B9wfw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:aa:16:25:5c:75:18:ed:6c:36:81:1f:87:9a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5810557cb0670bc9c0933e027e9bd82ab156df Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=31832aa04ab80aec9721cdf08534f715ac776278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:02:33:6a:b7:85:c5:22:a9:35:43:11:53: c5:9e:ff:08:82:59:27:84:fd:a7:d1:83:f5:8d:3f: 23:f4:64:e6:47:02:c1:5e:ac:56:c6:91:14:a0:31: 10:27:49:f1:5a:dc:7d:64:12:da:f7:ec:2f:5f:c5: 86:16:14:74:34:a9:33:8a:3c:c8:6b:94:15:32:c3: ce:b4:d7:d3:00:05:84:87:e0:8e:0b:70:31:9e:b5: 6e:99:68:86:81:69:40:4e:18:83:4d:e0:6e:03:99: 90:60:fd:0a:d0:a9:e7:9e:48:25:fd:65:39:5a:2c: f1:94:35:7a:49:e5:11:7b:3f:07:77:1f:78:b1:f5: a9:b1:11:50:06:be:21:19:94:c0:59:e2:60:01:08: 3b:f0:44:71:c3:78:1e:4c:3f:02:5e:6a:01:61:99: ab:08:71:20:f3:c2:65:45:b1:81:f6:55:0b:f0:a2: 2a:80:e4:8c:4f:7d:1b:e8:d9:84:4f:51:25:31:0a: 73:da:d9:1c:32:74:02:cb:4c:b4:90:68:98:f9:c5: 5f:78:42:49:44:18:c7:9d:5c:3a:4c:3c:f4:f9:7f: d8:b7:44:a0:68:0d:0d:f5:7f:21:b6:54:b0:fd:54: cd:e2:14:1d:61:9d:4e:29:cb:51:dc:e1:35:d2:f9: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:2A:A0:4A:B8:0A:EC:97:21:CD:F0:85:34:F7:15:AC:77:62:78 X509v3 Authority Key Identifier: keyid:5E:58:10:55:7C:B0:67:0B:C9:C0:93:3E:02:7E:9B:D8:2A:B1:56:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlgQVXywZwvJwJM-An6b2CqxVt8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97c414-3afa-49ee-ab70-a4407a5d321a/1/XlgQVXywZwvJwJM-An6b2CqxVt8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7f:4f:0a:df:c0:34:30:9d:e2:5b:17:78:b2:4b:e3:c7:2d: 9c:1b:d4:90:b4:4a:af:23:18:14:12:14:6c:4f:f6:c1:29:a3: b3:27:b8:0e:08:45:1a:3e:d4:36:a8:b6:98:7a:8e:fb:1e:7a: c6:39:78:f3:6e:96:42:c7:8d:16:fa:c7:af:87:8a:e5:85:61: 72:48:ff:4c:40:df:88:1e:27:9c:c8:e2:62:40:d8:0e:3d:67: 87:df:ae:11:8d:84:d6:cf:d8:a2:08:96:0a:24:d0:54:03:44: f3:91:39:f8:9c:a3:e6:19:71:32:46:00:c3:86:89:55:a4:2a: cb:4c:e7:96:98:27:5c:5c:16:68:6e:58:d9:28:ee:d7:40:11: 83:a3:0d:95:e2:a6:36:68:ee:2f:33:71:6d:be:ac:51:ff:5a: 44:a1:28:19:e7:ff:a4:45:10:b6:7b:bb:03:19:02:b8:4a:5e: c5:52:ac:36:1c:4a:c2:f2:8d:9b:63:f5:f7:f8:ae:ed:a5:a3: eb:c5:35:7e:f9:6a:dd:32:77:a6:3b:1b:70:9b:31:ab:c1:d8: 3e:b8:fb:8f:29:6c:02:d1:47:09:12:dc:9e:e7:9f:cf:4b:94: 2a:b8:21:c6:f3:40:87:d7:2e:bc:b6:6e:1b:b4:af:18:c5:54: 72:54:68:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6oWJVx1GO1sNoEfh5pxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNTgxMDU1N2NiMDY3MGJjOWMwOTMzZTAyN2U5YmQ4MmFi MTU2ZGYwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EygzMTgzMmFhMDRhYjgwYWVjOTcyMWNkZjA4NTM0ZjcxNWFjNzc2Mjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuICM2q3hcUiqTVDEVPFnv8Iglkn hP2n0YP1jT8j9GTmRwLBXqxWxpEUoDEQJ0nxWtx9ZBLa9+wvX8WGFhR0NKkzijzI a5QVMsPOtNfTAAWEh+COC3AxnrVumWiGgWlAThiDTeBuA5mQYP0K0Knnnkgl/WU5 WizxlDV6SeURez8Hdx94sfWpsRFQBr4hGZTAWeJgAQg78ERxw3geTD8CXmoBYZmr CHEg88JlRbGB9lUL8KIqgOSMT30b6NmET1ElMQpz2tkcMnQCy0y0kGiY+cVfeEJJ RBjHnVw6TDz0+X/Yt0SgaA0N9X8htlSw/VTN4hQdYZ1OKctR3OE10vnTLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGDKqBKuArslyHN8IU09xWsd2J4MB8GA1UdIwQY MBaAFF5YEFV8sGcLycCTPgJ+m9gqsVbfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAt YTQ0MDdhNWQzMjFhLzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS85N2M0MTQtM2FmYS00OWVlLWFiNzAtYTQ0MDdhNWQzMjFh LzEvWGxnUVZYeXdad3ZKd0pNLUFuNmIyQ3F4VnQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn9PCt/A NDCd4lsXeLJL48ctnBvUkLRKryMYFBIUbE/2wSmjsye4DghFGj7UNqi2mHqO+x56 xjl4826WQseNFvrHr4eK5YVhckj/TEDfiB4nnMjiYkDYDj1nh9+uEY2E1s/YogiW CiTQVANE85E5+Jyj5hlxMkYAw4aJVaQqy0znlpgnXFwWaG5Y2Sju10ARg6MNleKm NmjuLzNxbb6sUf9aRKEoGef/pEUQtnu7AxkCuEpexVKsNhxKwvKNm2P19/iu7aWj 68U1fvlq3TJ3pjsbcJsxq8HYPrj7jylsAtFHCRLcnuefz0uUKrghxvNAh9cuvLZu G7SvGMVUclRoTg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:18 2025 by rpki-client