This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft File: xFyYQwiFYolxMHxZtc8kFoIQI3g.mft (raw, json) Hash identifier: AFudP83mVgRHFi+atDaRW2RLKUESU6C8ga2mII0vwwU= Subject key identifier: 11:40:3A:2A:8F:5C:D8:3B:DD:1A:2F:84:4D:4D:8D:A1:DA:76:EC:08 Authority key identifier: C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 Certificate issuer: /CN=c45c98430885628971307c59b5cf241682102378 Certificate serial: 019AF19AC047D3ED0A134E7A8BB4018333BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: jvr-TtmshyO-21Athyko7-oCA0g.roa (hash: YbFNgrbQ4nYeYFpzPZPmunVsALPP8JY0whWvWBRLdqk=) 2: xFyYQwiFYolxMHxZtc8kFoIQI3g.crl (hash: 7zXgLDfBR1qaHwNtgmJN5CMtz0AzsiHnepQXwvLXHao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c0:47:d3:ed:0a:13:4e:7a:8b:b4:01:83:33:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c98430885628971307c59b5cf241682102378 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=11403a2a8f5cd83bdd1a2f844d4d8da1da76ec08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:8f:6e:cc:64:47:a5:ef:9a:3a:67:fd:fb: 8d:a9:22:46:44:c2:44:57:8d:32:cc:31:72:04:53: aa:7e:cb:5a:b6:20:91:b0:38:68:65:b8:90:1d:ed: 80:6f:d3:97:9a:fe:d9:8f:ff:9b:4f:c8:11:7b:60: 51:46:b2:8d:65:b7:8a:d1:5b:fb:46:a1:e1:7d:3d: 4e:fe:bd:c7:1a:84:fd:30:ea:64:72:b1:c0:cc:db: cd:8b:97:e1:40:7c:28:a8:be:ac:85:87:61:0e:ed: 48:95:00:7f:34:37:20:26:4d:4e:5b:16:b7:08:35: 96:43:03:dc:51:5d:13:1b:4a:cc:cc:02:c5:dc:77: 39:80:65:e0:0a:d0:4b:47:de:12:57:49:59:bb:7c: f5:be:51:97:aa:50:22:60:18:7c:26:07:f6:da:94: d7:db:2a:ef:60:f9:6f:dd:da:25:58:6c:00:75:4f: 89:98:9d:a2:7b:21:07:43:d1:6e:90:79:32:35:98: 4c:96:a5:da:8e:38:d4:1c:6c:ff:df:97:87:a8:27: f6:ee:d0:52:de:0f:f2:e6:73:2f:5b:d7:e8:b1:9e: e8:10:0c:12:65:6e:64:5c:c9:cd:de:f2:ac:d7:04: e5:3d:9c:5c:9e:22:70:b7:7c:32:22:ae:64:8b:2f: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:40:3A:2A:8F:5C:D8:3B:DD:1A:2F:84:4D:4D:8D:A1:DA:76:EC:08 X509v3 Authority Key Identifier: keyid:C4:5C:98:43:08:85:62:89:71:30:7C:59:B5:CF:24:16:82:10:23:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFyYQwiFYolxMHxZtc8kFoIQI3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/307c33-38a7-4fda-9a08-9abdca39d4f7/1/xFyYQwiFYolxMHxZtc8kFoIQI3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:77:32:d2:1c:92:f4:0e:4b:18:38:73:95:ad:d3:75:a8: c8:6e:7f:02:1a:e3:aa:d7:42:e1:48:d4:1a:cb:c2:29:11:bd: 48:d5:36:c4:aa:10:a2:a1:5e:b2:60:bd:c6:a8:25:8a:dd:8c: 8b:e5:b7:ed:81:89:13:96:f1:25:8e:04:d1:23:a3:bf:db:60: 1d:9f:b6:a6:1f:67:0c:43:86:1e:10:7b:05:ba:d8:26:35:a0: 58:aa:80:d4:30:02:85:bd:5b:c6:73:21:9a:f9:59:9c:3f:1c: c9:ce:68:35:6e:c8:a2:5c:22:49:d3:bd:c6:63:ee:24:b1:4d: 60:5a:21:af:b2:39:7f:22:dc:3f:f1:a8:1f:5f:f0:32:10:53: 83:e6:75:42:f1:63:af:12:77:63:45:11:37:83:85:e1:c1:58: 36:18:7d:ea:7f:c9:af:a4:ed:e9:6b:a9:3b:08:ae:ae:0a:a1: 0b:68:5e:a9:ee:18:88:dd:80:fa:90:fd:40:87:0e:b8:f2:0a: ec:e2:a8:23:9a:ce:53:46:6c:47:c4:28:d2:89:1c:62:d0:a4: 4a:9a:95:cb:f5:7e:26:0d:c3:30:5c:7e:31:95:98:3e:b6:ca: 35:18:71:c1:42:f2:49:b4:14:73:7b:78:ce:86:19:68:57:36: 17:b9:0f:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsBH0+0KE056i7QBgzO+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM5ODQzMDg4NTYyODk3MTMwN2M1OWI1Y2YyNDE2ODIx MDIzNzgwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EygxMTQwM2EyYThmNWNkODNiZGQxYTJmODQ0ZDRkOGRhMWRhNzZlYzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxg+PbsxkR6Xvmjpn/fuNqSJGRMJE V40yzDFyBFOqfstatiCRsDhoZbiQHe2Ab9OXmv7Zj/+bT8gRe2BRRrKNZbeK0Vv7 RqHhfT1O/r3HGoT9MOpkcrHAzNvNi5fhQHwoqL6shYdhDu1IlQB/NDcgJk1OWxa3 CDWWQwPcUV0TG0rMzALF3Hc5gGXgCtBLR94SV0lZu3z1vlGXqlAiYBh8Jgf22pTX 2yrvYPlv3dolWGwAdU+JmJ2ieyEHQ9FukHkyNZhMlqXajjjUHGz/35eHqCf27tBS 3g/y5nMvW9fosZ7oEAwSZW5kXMnN3vKs1wTlPZxcniJwt3wyIq5kiy9JzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFAOiqPXNg73RovhE1NjaHaduwIMB8GA1UdIwQY MBaAFMRcmEMIhWKJcTB8WbXPJBaCECN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ5WVF3aUZZb2x4TUh4WnRjOGtGb0lRSTNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zMDdjMzMtMzhhNy00ZmRhLTlhMDgt OWFiZGNhMzlkNGY3LzEveEZ5WVF3aUZZb2x4TUh4WnRjOGtGb0lRSTNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zMDdjMzMtMzhhNy00ZmRhLTlhMDgtOWFiZGNhMzlkNGY3 LzEveEZ5WVF3aUZZb2x4TUh4WnRjOGtGb0lRSTNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXh3MtIc kvQOSxg4c5Wt03WoyG5/AhrjqtdC4UjUGsvCKRG9SNU2xKoQoqFesmC9xqglit2M i+W37YGJE5bxJY4E0SOjv9tgHZ+2ph9nDEOGHhB7BbrYJjWgWKqA1DAChb1bxnMh mvlZnD8cyc5oNW7IolwiSdO9xmPuJLFNYFohr7I5fyLcP/GoH1/wMhBTg+Z1QvFj rxJ3Y0URN4OF4cFYNhh96n/Jr6Tt6WupOwiurgqhC2heqe4YiN2A+pD9QIcOuPIK 7OKoI5rOU0ZsR8Qo0okcYtCkSpqVy/V+Jg3DMFx+MZWYPrbKNRhxwULySbQUc3t4 zoYZaFc2F7kP4A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:08 2025 by rpki-client