This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json) Hash identifier: uhRqSJ3I8FqZIHBuiI8bn2xftb1Co5GYfbgIT/NX1sQ= Subject key identifier: 02:14:E4:47:BE:2D:28:61:C0:96:7D:7A:F8:A2:88:A9:5B:ED:5C:E0 Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f Certificate serial: 019B2F6761A71A950D5DAF66292BC9490767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:01:02 +0000 Manifest this update: Thu 18 Dec 2025 03:01:02 +0000 Manifest next update: Fri 19 Dec 2025 03:01:02 +0000 Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=) 2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: BN4OEA7tSm89LLCBCaR2h0AzxGAedqR59/AmDxOEVdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:61:a7:1a:95:0d:5d:af:66:29:2b:c9:49:07:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f Validity Not Before: Dec 18 03:01:02 2025 GMT Not After : Dec 19 03:01:02 2025 GMT Subject: CN=0214e447be2d2861c0967d7af8a288a95bed5ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:b9:54:07:2b:aa:92:f3:3d:0e:e1:de:df: 78:72:63:bc:ef:ef:7a:47:b7:11:a8:8d:ce:8d:ae: 3b:4e:b5:14:40:dd:87:26:ea:d9:85:c9:4c:bc:6f: 51:f5:6b:55:37:78:db:78:c6:20:a2:c0:3f:71:a4: f2:f7:eb:0f:60:cf:a4:69:42:c4:54:8f:c6:ad:a5: dc:46:3a:44:25:04:76:f6:43:63:d0:d9:1c:82:6a: ff:1c:4a:55:30:3b:d3:72:16:5a:07:6d:9b:b1:b3: 95:72:66:57:43:1c:22:78:9f:12:17:74:d2:1f:c6: 67:a2:cc:8d:6b:0e:bb:a4:b6:ce:14:99:4c:db:d6: 0a:dd:1b:bd:8c:bc:c9:90:eb:e8:67:27:de:7e:e4: 66:a9:21:17:5c:a8:79:e7:b1:00:8a:56:be:12:cf: 29:3a:2f:88:67:0e:f9:a4:a4:b3:6d:84:d9:ac:2d: ed:53:e2:60:a5:a7:1a:96:60:43:13:2f:09:ed:9a: 0e:6d:1c:67:8d:e1:dd:fc:7e:e2:8b:6e:09:e9:86: e7:86:d8:9d:b1:f7:ef:e4:0c:96:94:2b:ea:81:4a: a9:31:81:e8:13:31:10:a2:16:cc:11:97:a9:c8:f3: 2b:94:86:b4:2f:b8:ee:80:d6:48:b4:33:fa:d9:f9: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:E4:47:BE:2D:28:61:C0:96:7D:7A:F8:A2:88:A9:5B:ED:5C:E0 X509v3 Authority Key Identifier: keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:fa:9c:1a:f0:96:42:de:85:d4:b8:a3:20:c4:8c:82:d1:2d: 51:3f:01:01:ae:b3:80:60:a9:01:38:27:af:58:e7:61:9d:9a: dc:6f:9d:cc:f8:10:18:c3:5a:3e:a3:69:61:98:eb:c9:7a:52: 01:87:10:bb:2e:e1:ed:c8:e8:d7:d7:e7:46:27:16:fb:cb:31: b2:20:8d:9c:3e:2d:14:a2:a5:08:dd:f4:99:a8:34:63:1d:17: 9d:cf:0e:cb:cc:24:f3:d4:79:7b:9a:f8:86:1b:e1:74:d2:4d: bf:a8:18:26:98:40:2c:79:16:5d:76:8f:11:29:78:03:1e:2e: 53:23:2b:49:18:78:5d:02:e4:4d:57:9e:7c:50:88:c1:96:fc: d8:84:a0:87:bc:6f:3c:7e:1e:6f:37:16:ea:2a:23:63:b2:96: 8b:5b:59:3d:11:f0:39:cb:21:ac:74:9c:c4:15:7d:e1:a5:ec: 97:71:45:6e:0b:ba:1b:94:ea:50:2c:cb:26:8d:09:9a:6e:a2: 2e:d0:0f:00:46:cf:ac:d0:1d:c0:26:39:18:f1:16:96:1d:3e: a7:94:3f:8c:7d:1d:e1:ad:44:b9:60:3c:bd:2c:33:45:ab:0c: 8a:c1:0e:d0:cb:78:74:11:e0:68:00:cc:da:78:9c:98:f0:a6: 57:17:a1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ2GnGpUNXa9mKSvJSQdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1 MWYyMWYwHhcNMjUxMjE4MDMwMTAyWhcNMjUxMjE5MDMwMTAyWjAzMTEwLwYDVQQD EygwMjE0ZTQ0N2JlMmQyODYxYzA5NjdkN2FmOGEyODhhOTViZWQ1Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qC5VAcrqpLzPQ7h3t94cmO87+96 R7cRqI3Oja47TrUUQN2HJurZhclMvG9R9WtVN3jbeMYgosA/caTy9+sPYM+kaULE VI/GraXcRjpEJQR29kNj0Nkcgmr/HEpVMDvTchZaB22bsbOVcmZXQxwieJ8SF3TS H8ZnosyNaw67pLbOFJlM29YK3Ru9jLzJkOvoZyfefuRmqSEXXKh557EAila+Es8p Oi+IZw75pKSzbYTZrC3tU+JgpacalmBDEy8J7ZoObRxnjeHd/H7ii24J6Ybnhtid sffv5AyWlCvqgUqpMYHoEzEQohbMEZepyPMrlIa0L7jugNZItDP62flcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIU5Ee+LShhwJZ9eviiiKlb7VzgMB8GA1UdIwQY MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5 LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/qcGvCW Qt6F1LijIMSMgtEtUT8BAa6zgGCpATgnr1jnYZ2a3G+dzPgQGMNaPqNpYZjryXpS AYcQuy7h7cjo19fnRicW+8sxsiCNnD4tFKKlCN30mag0Yx0Xnc8Oy8wk89R5e5r4 hhvhdNJNv6gYJphALHkWXXaPESl4Ax4uUyMrSRh4XQLkTVeefFCIwZb82ISgh7xv PH4ebzcW6iojY7KWi1tZPRHwOcshrHScxBV94aXsl3FFbgu6G5TqUCzLJo0Jmm6i LtAPAEbPrNAdwCY5GPEWlh0+p5Q/jH0d4a1EuWA8vSwzRasMisEO0Mt4dBHgaADM 2nicmPCmVxehhQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:42:08 2025 by rpki-client