This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json) Hash identifier: sEo/okydTdZX32L8KSzVQS2jhQ795LJksJWsX3IemgM= Subject key identifier: D7:33:4D:FD:DB:88:DA:37:FE:F3:55:47:F2:43:DF:A3:1D:D3:E4:96 Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Certificate serial: 019AF1D21E3CF51604711714919A7BFC376F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=) 2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: 3esiKy9H5hgjAJmdXN1D6J7ToJ2jHr6c8GB45fgbiLg=) 3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1e:3c:f5:16:04:71:17:14:91:9a:7b:fc:37:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=d7334dfddb88da37fef35547f243dfa31dd3e496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:07:4b:c9:aa:f2:c0:d7:78:a4:e9:33:9a: 07:97:bf:69:36:be:1d:de:8d:d8:c4:17:31:cf:9f: fe:bb:c2:9e:aa:c9:05:6e:6b:4f:58:67:63:e0:60: 5a:39:f0:d0:f6:ae:cf:08:1f:b1:e5:a0:8c:ea:b9: d0:20:04:67:a2:73:0f:38:61:21:6f:7a:2e:65:44: 9f:d9:dd:96:32:c4:1e:18:46:5f:0f:38:de:60:20: f1:1b:f0:08:35:7e:1c:78:06:39:67:f4:da:c5:38: 8b:50:0f:07:db:94:b3:16:1a:f5:e6:c3:6f:6d:86: 6b:ab:43:51:35:1a:f9:0f:d6:d7:65:6a:a0:ed:2a: 8e:64:b2:eb:48:82:10:54:1a:ae:96:63:d0:19:e4: e0:bf:c3:99:96:ae:11:c7:e7:b3:97:d7:86:e5:c1: 8b:18:4f:22:60:dc:30:cc:b8:47:1d:1a:1c:4f:90: eb:8d:44:f9:e4:c5:cf:9a:ec:45:e9:d1:19:17:9c: 0a:6c:a9:5b:1b:84:41:ed:e8:a8:f1:6c:cd:4f:ef: 17:23:d2:af:89:59:6e:a7:16:08:e0:d7:c5:43:d4: 35:59:c6:03:f2:55:87:c6:79:6b:a2:8b:61:b6:d0: 6e:2a:b5:4c:f7:a1:f7:e0:09:18:ac:1f:c1:5e:96: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:33:4D:FD:DB:88:DA:37:FE:F3:55:47:F2:43:DF:A3:1D:D3:E4:96 X509v3 Authority Key Identifier: keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c8:f7:03:65:5b:37:2c:e0:46:40:97:87:d6:f5:22:b2:a3: 4a:6f:a5:08:73:86:71:e8:fc:fe:97:32:0a:5f:e1:be:98:24: ec:89:22:47:9f:5d:67:b6:5c:b6:df:54:15:12:c1:35:6a:4a: f2:eb:9f:1e:ff:a3:f4:3a:10:a5:7e:f4:4c:1c:5c:2f:7c:40: dd:70:de:b5:10:1d:62:ef:50:ed:27:76:55:82:17:28:8d:9e: 1b:c2:5f:2e:16:e5:59:65:f1:f4:c7:0b:b4:ab:63:2d:a4:25: 3b:74:7a:c7:af:73:b3:36:9e:4f:68:d0:3d:0e:e7:ce:98:38: 30:73:79:6f:6e:45:84:95:06:bc:e3:94:a0:36:e0:e2:29:67: 19:6d:ce:45:20:9a:2e:aa:ab:a1:0d:77:37:ca:f5:f1:1e:b2: d5:85:30:dc:79:e0:48:05:56:62:43:90:e8:4d:3d:a5:30:c5: 67:e2:80:fa:87:7f:d0:c3:ef:19:7c:62:9c:18:69:16:8b:59: 2b:7d:31:1f:e0:c9:0b:af:0a:e0:a9:64:39:15:5c:08:0e:fb: 45:d7:d3:e0:b2:16:62:1e:29:52:8d:73:8a:01:9b:5c:b0:0b: 2d:db:4b:94:16:6b:03:dd:ea:24:d9:b8:21:a0:67:24:61:f4: cc:51:2f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h489RYEcRcUkZp7/DdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3 ZjEyMWYwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD EyhkNzMzNGRmZGRiODhkYTM3ZmVmMzU1NDdmMjQzZGZhMzFkZDNlNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ioHS8mq8sDXeKTpM5oHl79pNr4d 3o3YxBcxz5/+u8KeqskFbmtPWGdj4GBaOfDQ9q7PCB+x5aCM6rnQIARnonMPOGEh b3ouZUSf2d2WMsQeGEZfDzjeYCDxG/AINX4ceAY5Z/TaxTiLUA8H25SzFhr15sNv bYZrq0NRNRr5D9bXZWqg7SqOZLLrSIIQVBqulmPQGeTgv8OZlq4Rx+ezl9eG5cGL GE8iYNwwzLhHHRocT5DrjUT55MXPmuxF6dEZF5wKbKlbG4RB7eio8WzNT+8XI9Kv iVlupxYI4NfFQ9Q1WcYD8lWHxnlroothttBuKrVM96H34AkYrB/BXpaYGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNczTf3biNo3/vNVR/JD36Md0+SWMB8GA1UdIwQY MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5 LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMj3A2Vb NyzgRkCXh9b1IrKjSm+lCHOGcej8/pcyCl/hvpgk7IkiR59dZ7Zctt9UFRLBNWpK 8uufHv+j9DoQpX70TBxcL3xA3XDetRAdYu9Q7Sd2VYIXKI2eG8JfLhblWWXx9McL tKtjLaQlO3R6x69zszaeT2jQPQ7nzpg4MHN5b25FhJUGvOOUoDbg4ilnGW3ORSCa LqqroQ13N8r18R6y1YUw3HngSAVWYkOQ6E09pTDFZ+KA+od/0MPvGXxinBhpFotZ K30xH+DJC68K4KlkORVcCA77RdfT4LIWYh4pUo1zigGbXLALLdtLlBZrA93qJNm4 IaBnJGH0zFEvBw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:09 2025 by rpki-client