This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json) Hash identifier: P10WqW3vPL1Q/r4aPJ6PGUq7MENTqZQ2b6ELHSSFyG4= Subject key identifier: 60:8C:AF:5B:7E:0B:8B:CD:8F:11:D1:96:7F:9C:FA:C5:C3:F6:55:65 Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f Certificate serial: 019AF19BA7E1C98EF31BBF3703098850AD33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=) 2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: LyLwcb3GH4ltltK7M5xqhupWbS0HpV8uY93vajmoNjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a7:e1:c9:8e:f3:1b:bf:37:03:09:88:50:ad:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=608caf5b7e0b8bcd8f11d1967f9cfac5c3f65565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:23:18:a9:47:b2:6c:74:b1:a1:66:9d:0c: 9c:5c:4b:01:ae:53:66:73:63:59:b5:9e:c1:64:2f: 01:0d:ee:02:89:d8:cc:42:be:e9:f2:26:c6:5c:19: d4:a4:a0:d3:b3:57:a3:dc:7a:55:d5:2d:27:1c:a6: 0b:d5:1a:93:ef:71:10:58:49:1b:23:21:d1:e3:c0: 9e:be:58:2e:f6:0a:02:2f:71:60:9b:c5:aa:b1:da: 07:8d:86:ec:75:b6:45:6e:8c:8f:78:06:43:92:3a: f3:46:f1:da:f0:e5:a9:ad:ea:fe:7d:ba:72:4f:49: 4f:5b:5b:25:1d:73:e9:ee:66:2d:ac:15:32:cc:db: 55:11:4b:ab:3e:46:c5:5d:40:39:20:45:f3:c3:58: ab:fe:ed:3e:af:01:8a:da:1c:f4:96:d7:82:f3:28: d3:64:79:48:a0:c4:81:8d:a0:5e:f9:e2:c2:28:e4: e6:b0:57:86:28:ea:f1:b3:dd:75:90:27:9b:6a:fd: 1a:7a:aa:6f:cc:4d:98:09:8b:91:16:e1:1b:19:4f: 1a:07:4b:6d:ab:02:ef:cc:a5:67:54:09:07:a0:37: 88:83:08:42:aa:f4:82:50:e4:a6:2f:7a:f7:15:b3: 22:68:e4:b5:89:48:03:14:71:b6:e8:2b:29:36:d5: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:AF:5B:7E:0B:8B:CD:8F:11:D1:96:7F:9C:FA:C5:C3:F6:55:65 X509v3 Authority Key Identifier: keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a9:af:fc:93:53:4a:88:24:78:87:6d:eb:97:fc:fb:2b:da: 15:a9:af:ec:db:cd:94:bc:46:e9:37:22:7c:d1:e4:19:63:55: 14:22:ec:04:45:cc:e2:ea:45:57:0e:3f:b2:90:7c:d9:5a:92: eb:47:b7:f9:06:4e:f2:a0:0e:8a:c1:50:25:8c:e1:0b:a3:35: 09:ba:ed:3a:81:e2:73:a0:b9:15:e5:81:41:bf:ac:b5:c7:c3: b8:bc:60:11:ff:7e:a4:0e:4d:a6:e7:83:aa:0d:ec:c4:44:0b: c9:8c:ac:f7:31:93:8c:51:c8:ea:3e:25:75:1a:66:30:41:00: 97:dc:25:91:68:82:64:f4:19:fd:88:da:e1:7f:aa:3f:54:55: 8a:2a:14:44:c5:9a:2d:17:93:7c:51:c8:26:12:e3:74:fc:03: 10:77:4b:08:82:8c:60:ce:86:82:7d:7e:bf:e4:6b:18:f6:fc: 9b:a2:f4:9f:99:e7:6f:6d:a4:35:1f:01:a6:d8:ea:50:97:b8: b0:6c:2d:5f:68:b8:4b:0f:bd:fc:67:00:cd:2f:24:39:86:68: e2:7c:75:f7:7a:f2:ae:58:7b:98:fb:08:ac:69:b0:be:23:a9: a7:e3:fa:53:fe:a2:16:8f:69:0e:0b:de:76:d2:fc:7c:6a:e0: 99:ed:89:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6fhyY7zG783AwmIUK0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1 MWYyMWYwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg2MDhjYWY1YjdlMGI4YmNkOGYxMWQxOTY3ZjljZmFjNWMzZjY1NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsswjGKlHsmx0saFmnQycXEsBrlNm c2NZtZ7BZC8BDe4CidjMQr7p8ibGXBnUpKDTs1ej3HpV1S0nHKYL1RqT73EQWEkb IyHR48Cevlgu9goCL3Fgm8WqsdoHjYbsdbZFboyPeAZDkjrzRvHa8OWprer+fbpy T0lPW1slHXPp7mYtrBUyzNtVEUurPkbFXUA5IEXzw1ir/u0+rwGK2hz0lteC8yjT ZHlIoMSBjaBe+eLCKOTmsFeGKOrxs911kCebav0aeqpvzE2YCYuRFuEbGU8aB0tt qwLvzKVnVAkHoDeIgwhCqvSCUOSmL3r3FbMiaOS1iUgDFHG26CspNtWtbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCMr1t+C4vNjxHRln+c+sXD9lVlMB8GA1UdIwQY MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5 LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKmv/JNT SogkeIdt65f8+yvaFamv7NvNlLxG6TcifNHkGWNVFCLsBEXM4upFVw4/spB82VqS 60e3+QZO8qAOisFQJYzhC6M1CbrtOoHic6C5FeWBQb+stcfDuLxgEf9+pA5NpueD qg3sxEQLyYys9zGTjFHI6j4ldRpmMEEAl9wlkWiCZPQZ/Yja4X+qP1RViioURMWa LReTfFHIJhLjdPwDEHdLCIKMYM6Ggn1+v+RrGPb8m6L0n5nnb22kNR8BptjqUJe4 sGwtX2i4Sw+9/GcAzS8kOYZo4nx193ryrlh7mPsIrGmwviOpp+P6U/6iFo9pDgve dtL8fGrgme2J3A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:32 2025 by rpki-client