This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json) Hash identifier: ZOJ6Sbf/gpoe1yXNa2EH/BRjsjoLadfnznSpVSUKaMs= Subject key identifier: 5F:CE:4A:1B:D0:AA:7B:F0:5B:F6:02:9B:7B:10:B7:51:18:B1:BA:AE Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Certificate serial: 019AF23FE39D64F17D964B74EF65075F6BD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft Manifest number: 0697 Signing time: Sat 06 Dec 2025 06:01:04 +0000 Manifest this update: Sat 06 Dec 2025 06:01:04 +0000 Manifest next update: Sun 07 Dec 2025 06:01:04 +0000 Files and hashes: 1: 3EU0oyFeuVgyRfJv8cphRhidY_4.roa (hash: uUVRINmwKIXEw7WBi5QJ2PuB8r4TwtW/ERy1bKhXTs0=) 2: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: 2lpXg+CjAlE4aVj4PAYO7IxPDOZ38zkaTgbitpdgXd4=) 3: z8EvHyxXFy9jjv9R0JxJLEvy2D4.roa (hash: sXJWZt8I6k1zbSOq8kLHcxqJ9ibbT5w1l4T6edD/QLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e3:9d:64:f1:7d:96:4b:74:ef:65:07:5f:6b:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a Validity Not Before: Dec 6 06:01:04 2025 GMT Not After : Dec 7 06:01:04 2025 GMT Subject: CN=5fce4a1bd0aa7bf05bf6029b7b10b75118b1baae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:6f:4b:bd:f9:c4:25:2e:a8:5f:20:ac:6b: 2b:a7:55:85:ed:b8:d7:69:1f:c9:77:c6:2e:2d:6d: 16:04:58:ed:8b:d5:7c:b7:a7:12:dd:b0:a6:c2:d8: 9c:16:f6:4a:6d:39:63:c1:af:4d:96:ee:86:e0:0c: 8d:12:21:12:8b:da:8f:5c:67:70:ed:74:f4:af:9f: 94:cb:6c:7f:d3:aa:71:f8:99:34:f0:21:26:11:7d: 5b:99:af:a3:7f:4f:d6:ca:c2:6c:a4:26:60:eb:4f: ce:e5:74:ce:ca:52:7c:d8:a9:23:b7:21:2f:d3:72: 8a:1d:3c:bd:1e:79:f4:5c:e0:1f:1d:e6:51:5b:2c: 6e:32:fe:d5:cb:a5:33:1c:ab:5a:a8:01:7c:fd:84: 40:f4:3d:f4:32:d1:f6:18:15:6e:b2:32:e5:95:5e: d8:c5:15:b8:4c:a1:16:6c:14:e7:3a:1d:49:e8:12: 70:05:d3:1b:c5:5f:c8:a3:20:b4:9c:75:96:75:12: 25:26:fc:f0:7b:91:5d:ee:d5:35:43:70:e4:ca:54: be:35:99:20:ff:96:59:20:4e:f1:42:b4:d4:02:44: f9:4e:9b:f4:71:a3:01:37:25:4f:b8:d6:30:ef:00: 75:1c:61:04:bc:86:ee:70:fe:1a:21:7d:16:25:c4: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CE:4A:1B:D0:AA:7B:F0:5B:F6:02:9B:7B:10:B7:51:18:B1:BA:AE X509v3 Authority Key Identifier: keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8d:c3:5c:6d:f4:3a:e1:8d:21:41:8f:3d:68:75:27:87:85: 7a:7a:09:d8:e2:15:3a:c6:f2:d1:3a:f5:0e:28:7c:4c:13:a0: b8:95:26:76:00:78:5a:0c:7e:63:f7:a5:56:6e:6a:6d:16:3e: 23:23:12:ce:51:f9:54:95:56:da:3d:4e:99:0f:d6:0b:ef:9b: 4a:18:28:32:0f:f7:86:87:4b:a9:17:b3:2b:c3:aa:fa:dd:c6: 4f:bf:d2:f3:eb:56:2a:6f:75:f5:6a:08:f9:1f:78:cf:ba:c4: 90:12:d7:7b:e6:02:bc:d0:ff:9b:c7:35:94:4c:ca:80:06:ff: da:33:0f:68:59:0a:55:ac:08:9b:73:18:39:ce:ed:73:24:11: 57:fc:4b:c6:4c:51:8a:92:1a:c7:49:61:03:43:c6:e9:77:3c: 01:a3:31:11:5f:f9:54:64:81:f7:2b:72:55:a5:3c:24:5c:dd: 4d:60:57:c8:7d:d7:a1:7c:91:5b:b3:44:83:84:80:79:9a:53: 02:99:d8:f1:e7:92:fa:14:95:ea:6c:fb:54:3f:1c:f7:fe:53: 04:b0:68:b8:34:0b:8f:91:54:21:f2:9c:bf:14:38:af:69:d4: f0:28:06:52:47:61:ac:60:12:12:23:a0:c1:24:f4:35:f6:1c: 86:a2:38:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+OdZPF9lkt072UHX2vSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMDY2ZGU5ODI5Yjc2MWVkY2UxNzFlOGVhM2M1OTM1ZTQ0 ZjRlOWEwHhcNMjUxMjA2MDYwMTA0WhcNMjUxMjA3MDYwMTA0WjAzMTEwLwYDVQQD Eyg1ZmNlNGExYmQwYWE3YmYwNWJmNjAyOWI3YjEwYjc1MTE4YjFiYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2advS735xCUuqF8grGsrp1WF7bjX aR/Jd8YuLW0WBFjti9V8t6cS3bCmwticFvZKbTljwa9Nlu6G4AyNEiESi9qPXGdw 7XT0r5+Uy2x/06px+Jk08CEmEX1bma+jf0/WysJspCZg60/O5XTOylJ82KkjtyEv 03KKHTy9Hnn0XOAfHeZRWyxuMv7Vy6UzHKtaqAF8/YRA9D30MtH2GBVusjLllV7Y xRW4TKEWbBTnOh1J6BJwBdMbxV/IoyC0nHWWdRIlJvzwe5Fd7tU1Q3DkylS+NZkg /5ZZIE7xQrTUAkT5Tpv0caMBNyVPuNYw7wB1HGEEvIbucP4aIX0WJcQ4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/OShvQqnvwW/YCm3sQt1EYsbquMB8GA1UdIwQY MBaAFF4GbemCm3Ye3OFx6Oo8WTXkT06aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjIt NDc1YWRmM2FhN2IxLzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYWM5YzQtZjliYi00NmQ0LWJiNjItNDc1YWRmM2FhN2Ix LzEvWGdadDZZS2JkaDdjNFhIbzZqeFpOZVJQVHBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdI3DXG30 OuGNIUGPPWh1J4eFenoJ2OIVOsby0Tr1Dih8TBOguJUmdgB4Wgx+Y/elVm5qbRY+ IyMSzlH5VJVW2j1OmQ/WC++bShgoMg/3hodLqRezK8Oq+t3GT7/S8+tWKm919WoI +R94z7rEkBLXe+YCvND/m8c1lEzKgAb/2jMPaFkKVawIm3MYOc7tcyQRV/xLxkxR ipIax0lhA0PG6Xc8AaMxEV/5VGSB9ytyVaU8JFzdTWBXyH3XoXyRW7NEg4SAeZpT ApnY8eeS+hSV6mz7VD8c9/5TBLBouDQLj5FUIfKcvxQ4r2nU8CgGUkdhrGASEiOg wST0NfYchqI40g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:26 2025 by rpki-client