This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft File: xCKHxoRY-YDKm3w21h9q9YZGSyg.mft (raw, json) Hash identifier: bfiecA0NWvKA1fH23tVgeiVd8MZX8DB85mbclpOIZ/Q= Subject key identifier: 52:6C:79:10:B1:FB:1A:43:5C:8C:4D:71:43:5A:C3:6A:91:25:BC:11 Authority key identifier: C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 Certificate issuer: /CN=c42287c68458f980ca9b7c36d61f6af586464b28 Certificate serial: 019AF2ADD377A0C9DB9869396F098ADA3E1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: 8Y6XKuO-_q-eZcd8PYJP4ppiukg.roa (hash: yAyB9mAE7fWNNJ4M45GAzvUfCPqHWuDqtJYIq1FJlDc=) 2: xCKHxoRY-YDKm3w21h9q9YZGSyg.crl (hash: U8avdoQi0h9EDaMJeGncobvjftoL4bONHFz9vcTKUs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d3:77:a0:c9:db:98:69:39:6f:09:8a:da:3e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42287c68458f980ca9b7c36d61f6af586464b28 Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=526c7910b1fb1a435c8c4d71435ac36a9125bc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:0a:2e:38:c5:d2:fa:ba:56:a0:2a:60:8c: ab:bd:3f:25:f5:a3:7e:6b:8e:d5:c7:e7:3b:02:a3: 42:9e:1b:8e:0e:05:70:74:d6:ee:e1:2c:5f:27:05: 50:60:7e:47:6b:e6:76:92:7d:10:d9:6c:00:a0:92: 92:2c:55:b5:ed:76:f4:72:66:90:3c:41:17:60:b1: 59:1f:44:b1:db:f4:ec:6d:25:36:71:9c:74:08:41: d5:37:c7:b5:a7:51:53:ae:16:05:08:f7:ff:1a:d5: 25:9b:a4:f4:ce:b5:aa:42:d1:45:e5:03:d6:b4:71: 24:94:3d:ae:30:08:62:9b:37:e9:15:2c:48:5d:4f: 00:2f:42:cd:4f:bd:d7:14:68:0f:b0:56:4c:30:13: ee:bd:d9:09:e6:0a:b1:49:66:d7:a0:c1:d2:2c:27: a9:a2:27:fb:de:23:09:99:9f:fd:58:96:f8:a0:9f: 6f:ef:c6:08:bb:56:97:d4:f8:99:a4:b4:db:c4:c5: d6:de:1e:66:ba:e9:9f:0a:67:43:51:bd:ee:4e:e6: ff:54:c7:95:47:37:22:93:8f:66:3f:f7:1c:30:4e: 68:62:70:fe:ee:5c:94:2b:fa:6a:a6:93:19:c6:9d: b2:a3:b8:df:2b:0c:ac:45:b9:19:c8:da:c1:f7:57: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6C:79:10:B1:FB:1A:43:5C:8C:4D:71:43:5A:C3:6A:91:25:BC:11 X509v3 Authority Key Identifier: keyid:C4:22:87:C6:84:58:F9:80:CA:9B:7C:36:D6:1F:6A:F5:86:46:4B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCKHxoRY-YDKm3w21h9q9YZGSyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/45f3bc-93c8-4bb9-8d4c-b12d7f892f5b/1/xCKHxoRY-YDKm3w21h9q9YZGSyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:05:3c:05:cc:75:33:39:a4:d5:2a:0b:65:c2:20:86:f9:da: 04:11:5d:2f:f9:06:1a:51:0f:b5:d1:b9:93:69:ee:a2:2b:85: 5a:ad:8b:86:02:d6:13:48:1b:c4:2d:da:46:16:2b:07:5c:04: ab:b2:cf:a8:75:6c:b1:91:2a:f7:a3:47:2e:bb:19:21:f4:76: 4d:f2:5f:98:66:34:92:7b:63:e6:38:17:a3:41:81:75:6b:40: 7d:f0:8d:49:43:39:90:ad:e7:e2:ff:78:b6:ad:85:fb:7a:0e: 1b:a6:e3:aa:90:47:24:35:46:68:c8:2b:27:ea:37:8a:2e:6d: 97:b0:85:3b:83:ad:15:64:eb:f7:4e:d9:76:62:13:91:e2:f7: 70:5d:f0:f3:a8:b4:90:54:e1:b2:d8:2e:0a:49:e5:82:0f:ab: c4:f3:f7:63:4d:62:04:b6:c0:d7:36:f0:c0:ba:cb:6c:a9:b2: 56:a0:2f:32:1f:f9:e6:e4:00:09:6f:f8:64:c7:71:f8:b6:71: 00:5e:de:4b:af:15:51:02:7d:c2:2c:67:72:c8:db:28:70:e3: 6c:fb:32:a8:2f:07:7a:ce:a6:c2:4e:e2:f6:fc:72:a4:88:15: 60:3d:55:5d:fe:f8:b4:e4:1a:c6:d0:ea:cc:60:f3:6b:c2:45: b6:68:3b:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdN3oMnbmGk5bwmK2j4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MjI4N2M2ODQ1OGY5ODBjYTliN2MzNmQ2MWY2YWY1ODY0 NjRiMjgwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD Eyg1MjZjNzkxMGIxZmIxYTQzNWM4YzRkNzE0MzVhYzM2YTkxMjViYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUwKLjjF0vq6VqAqYIyrvT8l9aN+ a47Vx+c7AqNCnhuODgVwdNbu4SxfJwVQYH5Ha+Z2kn0Q2WwAoJKSLFW17Xb0cmaQ PEEXYLFZH0Sx2/TsbSU2cZx0CEHVN8e1p1FTrhYFCPf/GtUlm6T0zrWqQtFF5QPW tHEklD2uMAhimzfpFSxIXU8AL0LNT73XFGgPsFZMMBPuvdkJ5gqxSWbXoMHSLCep oif73iMJmZ/9WJb4oJ9v78YIu1aX1PiZpLTbxMXW3h5muumfCmdDUb3uTub/VMeV Rzcik49mP/ccME5oYnD+7lyUK/pqppMZxp2yo7jfKwysRbkZyNrB91dHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJseRCx+xpDXIxNcUNaw2qRJbwRMB8GA1UdIwQY MBaAFMQih8aEWPmAypt8NtYfavWGRksoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMt YjEyZDdmODkyZjViLzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy80NWYzYmMtOTNjOC00YmI5LThkNGMtYjEyZDdmODkyZjVi LzEveENLSHhvUlktWURLbTN3MjFoOXE5WVpHU3lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAU8Bcx1 Mzmk1SoLZcIghvnaBBFdL/kGGlEPtdG5k2nuoiuFWq2LhgLWE0gbxC3aRhYrB1wE q7LPqHVssZEq96NHLrsZIfR2TfJfmGY0kntj5jgXo0GBdWtAffCNSUM5kK3n4v94 tq2F+3oOG6bjqpBHJDVGaMgrJ+o3ii5tl7CFO4OtFWTr907ZdmITkeL3cF3w86i0 kFThstguCknlgg+rxPP3Y01iBLbA1zbwwLrLbKmyVqAvMh/55uQACW/4ZMdx+LZx AF7eS68VUQJ9wixncsjbKHDjbPsyqC8Hes6mwk7i9vxypIgVYD1VXf74tOQaxtDq zGDza8JFtmg7hg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:27 2025 by rpki-client