This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft File: XnzrnJMcsXleInriyGR1UTrkkVw.mft (raw, json) Hash identifier: Bq4mMFEOEcXU9h2oQWf23BFHxQ2E3tLV4RwMc0Yav6g= Subject key identifier: 1F:9B:AB:E4:79:AE:6E:83:96:C8:D2:65:21:01:61:8E:E3:99:C8:86 Authority key identifier: 5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C Certificate issuer: /CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Certificate serial: 019AF4656E9DE6280B96CF332663BD9CC58A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:19 +0000 Manifest this update: Sat 06 Dec 2025 16:01:19 +0000 Manifest next update: Sun 07 Dec 2025 16:01:19 +0000 Files and hashes: 1: 8HbLvR_ICovY3JkhN3nLEF6TTpU.roa (hash: yBKFoCIX0xdcJSGT3f5HB8GzFB5vs3wuFhH6HKyoacg=) 2: XnzrnJMcsXleInriyGR1UTrkkVw.crl (hash: sb0XrXDXgvDQBEssyz8hk8pQ0SErpDntWuXNLrfqKSU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6e:9d:e6:28:0b:96:cf:33:26:63:bd:9c:c5:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7ceb9c931cb1795e227ae2c86475513ae4915c Validity Not Before: Dec 6 16:01:19 2025 GMT Not After : Dec 7 16:01:19 2025 GMT Subject: CN=1f9babe479ae6e8396c8d2652101618ee399c886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f6:b6:d1:19:68:c7:fe:7b:f2:21:6d:b7:22: 81:65:cc:08:5c:21:f8:06:ce:c8:da:1d:ed:0a:b2: c4:d2:9a:7d:8b:64:a4:5c:11:f5:55:74:ad:64:40: 84:2f:cb:f8:67:fe:bd:76:ef:05:e9:c9:ac:41:6c: b3:5d:da:18:2b:5d:05:f0:76:a2:3d:d0:3b:6a:35: 16:12:10:ac:07:de:d0:fb:15:05:1f:9e:2b:35:99: ab:41:ba:58:73:45:68:c5:9d:bc:b4:c1:19:1e:7b: 49:fd:f6:52:3b:02:29:12:4e:94:3e:69:e7:e0:c7: e4:5a:0f:85:a8:b4:fd:8d:c3:50:2f:05:f4:16:f1: 26:92:a4:f1:98:27:82:0a:45:ff:4c:db:32:16:2c: 76:bc:b5:13:ee:34:cc:78:3f:e0:fb:fd:33:21:7f: 93:5e:16:9b:b0:60:88:97:06:b8:6c:44:0e:b5:73: f5:00:90:93:f4:5f:17:aa:66:28:41:18:b5:85:3f: f8:94:03:aa:69:dd:0a:22:08:fb:2d:e0:7c:a9:ce: 8a:d7:49:f1:d3:a8:fe:c5:1d:d4:b5:a9:bc:d2:d2: ea:cc:74:2c:c5:f6:cf:77:b9:fe:90:cc:c1:d5:a1: 3c:24:24:bd:f9:0d:1f:c6:51:38:99:e2:62:ac:a3: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9B:AB:E4:79:AE:6E:83:96:C8:D2:65:21:01:61:8E:E3:99:C8:86 X509v3 Authority Key Identifier: keyid:5E:7C:EB:9C:93:1C:B1:79:5E:22:7A:E2:C8:64:75:51:3A:E4:91:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnzrnJMcsXleInriyGR1UTrkkVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/722703-06a7-4fbd-930f-2422abf342ac/1/XnzrnJMcsXleInriyGR1UTrkkVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7f:27:b0:bd:34:89:2b:74:af:39:70:36:ff:6e:df:55:06: ec:f5:ae:5e:10:37:64:69:4a:39:05:ed:53:5a:5d:99:d8:49: 95:dc:7b:d9:74:bb:36:4a:7e:27:d9:b5:f0:31:21:64:ca:c7: 6f:ff:07:5f:1a:e4:94:4b:f5:31:38:28:5a:6c:65:a9:1f:78: df:ab:a1:77:23:66:16:20:fe:20:f7:9b:fc:46:e1:10:8b:34: d8:23:86:9b:cd:ac:8d:c3:6b:f1:3e:eb:03:42:d9:23:ba:6e: 8e:1d:8e:79:63:99:ef:d7:9e:14:0a:5a:6b:49:03:73:65:36: 93:d0:48:bf:86:53:fc:31:c0:64:d5:29:cd:c7:dd:07:a9:ac: d4:fb:e0:dd:73:4b:d2:e7:e2:ab:a6:52:96:2a:3a:15:7c:ff: 2a:f6:0c:f5:0a:d5:d4:1c:a4:29:e4:68:77:66:8e:6e:69:9e: c3:cc:be:51:3c:58:f2:30:60:27:76:fc:fc:ea:b6:1d:b7:0b: a7:f1:85:0f:03:b1:e1:9b:bb:32:a2:4e:a5:89:5a:fa:26:d1: c1:eb:ab:7f:e4:45:82:48:06:9c:23:f2:ba:9c:82:c6:79:45: 08:c5:7d:2e:b2:bd:65:fe:7f:8b:6c:8f:00:d7:60:af:64:f8: d6:b4:74:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZW6d5igLls8zJmO9nMWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlN2NlYjljOTMxY2IxNzk1ZTIyN2FlMmM4NjQ3NTUxM2Fl NDkxNWMwHhcNMjUxMjA2MTYwMTE5WhcNMjUxMjA3MTYwMTE5WjAzMTEwLwYDVQQD EygxZjliYWJlNDc5YWU2ZTgzOTZjOGQyNjUyMTAxNjE4ZWUzOTljODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fa20Rlox/578iFttyKBZcwIXCH4 Bs7I2h3tCrLE0pp9i2SkXBH1VXStZECEL8v4Z/69du8F6cmsQWyzXdoYK10F8Hai PdA7ajUWEhCsB97Q+xUFH54rNZmrQbpYc0VoxZ28tMEZHntJ/fZSOwIpEk6UPmnn 4MfkWg+FqLT9jcNQLwX0FvEmkqTxmCeCCkX/TNsyFix2vLUT7jTMeD/g+/0zIX+T XhabsGCIlwa4bEQOtXP1AJCT9F8XqmYoQRi1hT/4lAOqad0KIgj7LeB8qc6K10nx 06j+xR3Utam80tLqzHQsxfbPd7n+kMzB1aE8JCS9+Q0fxlE4meJirKNiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+bq+R5rm6DlsjSZSEBYY7jmciGMB8GA1UdIwQY MBaAFF5865yTHLF5XiJ64shkdVE65JFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYt MjQyMmFiZjM0MmFjLzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS83MjI3MDMtMDZhNy00ZmJkLTkzMGYtMjQyMmFiZjM0MmFj LzEvWG56cm5KTWNzWGxlSW5yaXlHUjFVVHJra1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACX8nsL00 iSt0rzlwNv9u31UG7PWuXhA3ZGlKOQXtU1pdmdhJldx72XS7Nkp+J9m18DEhZMrH b/8HXxrklEv1MTgoWmxlqR9436uhdyNmFiD+IPeb/EbhEIs02COGm82sjcNr8T7r A0LZI7pujh2OeWOZ79eeFApaa0kDc2U2k9BIv4ZT/DHAZNUpzcfdB6ms1Pvg3XNL 0ufiq6ZSlio6FXz/KvYM9QrV1BykKeRod2aObmmew8y+UTxY8jBgJ3b8/Oq2HbcL p/GFDwOx4Zu7MqJOpYla+ibRweurf+RFgkgGnCPyupyCxnlFCMV9LrK9Zf5/i2yP ANdgr2T41rR02A== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:20 2025 by rpki-client