This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft File: xpHzRaUDy4yKneQn6IEu__IbIrU.mft (raw, json) Hash identifier: XaprCljIBYdpF9WPkQZ3KfaUEj2xb0LQUhWEQKk4moU= Subject key identifier: 03:A1:1A:5D:8B:06:3A:D7:8D:0C:A4:68:62:EE:F5:00:97:D9:00:9A Authority key identifier: C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 Certificate issuer: /CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Certificate serial: 019AF1643B04DB7EF73CE11402633644DE01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft Manifest number: 05A8 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: 3Gbnet98ld2uF50D7YCjLTfkMpA.roa (hash: VXqXm4z6E41hAlJYaZsYhRtFw5yW6/XPRFTdwUW8xG4=) 2: sE_yBIBHGOP00_8ICipXACLmvpc.roa (hash: FyBE1dNPqJ1LeCxUv53xtEACyPL7Fifk2VrXCbMm6MU=) 3: xpHzRaUDy4yKneQn6IEu__IbIrU.crl (hash: 3RAl0Lvb1dp/BgKFVIiiz/6WyHeHcedzYe5jK9ghFCA=) 4: y8rUqaqv7ENTk3dMoJ53cbPWsS4.roa (hash: xuqlNaZw0JfK1zeCz1wuG1Q98hbdJatlBMg2l2xV/d8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3b:04:db:7e:f7:3c:e1:14:02:63:36:44:de:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c691f345a503cb8c8a9de427e8812efff21b22b5 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=03a11a5d8b063ad78d0ca46862eef50097d9009a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:60:39:ca:84:a3:7e:12:9c:bd:2c:99:b9: 7f:bc:e1:bc:90:da:fe:81:8c:80:3b:5b:e6:0a:db: 3f:af:a8:9e:93:85:fd:ec:41:a1:05:82:8b:00:dc: 55:0d:c0:ef:2a:8a:ae:39:27:c7:d7:88:df:17:a7: fc:22:e4:09:44:a4:0f:4d:96:e1:cd:0c:5d:4a:63: 12:bc:a9:46:04:af:0e:4b:05:03:60:ab:1c:43:d4: 55:d6:15:6b:f5:81:c6:36:97:55:dc:a8:51:4e:18: 31:c6:16:b1:4a:7d:93:0c:65:ba:93:e3:23:c3:a3: bd:9a:94:35:ea:8b:80:20:41:d9:e1:a5:55:c6:97: de:a1:aa:31:e2:e4:95:7f:ee:d6:11:d0:05:48:35: ef:5d:01:92:6a:54:b4:97:56:f4:d8:ed:a5:06:83: 73:bc:67:70:43:72:de:8f:7b:8f:20:79:98:8c:db: 1a:a9:64:50:7f:dc:64:36:34:ce:33:2e:57:3c:5c: 9d:6e:9b:cd:a4:81:9a:a8:41:29:ac:77:3d:67:98: 0c:01:c6:28:d4:97:be:47:7d:28:eb:55:b7:20:03: 35:69:f5:2b:ba:5c:b1:95:a1:18:bb:e9:03:b4:cb: 40:bf:3a:61:6f:05:a8:bc:70:06:ba:0d:44:34:35: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A1:1A:5D:8B:06:3A:D7:8D:0C:A4:68:62:EE:F5:00:97:D9:00:9A X509v3 Authority Key Identifier: keyid:C6:91:F3:45:A5:03:CB:8C:8A:9D:E4:27:E8:81:2E:FF:F2:1B:22:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpHzRaUDy4yKneQn6IEu__IbIrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/19e6e2-c2a1-4ebc-ba5a-e7caf5e5bcba/1/xpHzRaUDy4yKneQn6IEu__IbIrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f9:b3:e8:f8:5a:92:ca:c9:4d:9c:2e:8d:9c:20:d9:c8:3c: cc:24:a2:d5:82:7b:be:bf:84:92:9e:74:6c:dc:e0:40:19:d4: d8:c8:ec:69:da:42:51:c2:66:49:59:a7:c3:bc:fe:b0:af:0c: 56:f5:7e:c8:c4:da:1d:df:98:fb:42:15:fd:c3:ca:06:c9:f2: a8:5f:d7:96:c3:c2:84:33:55:cb:a1:ac:26:e9:f3:b1:4c:9a: ab:4a:c2:f8:a2:ad:fc:ca:23:26:38:61:a6:75:de:b9:55:82: 12:42:14:f2:a8:c3:ba:04:99:a6:e1:52:40:87:50:1a:28:6c: 8e:5b:8d:21:a5:ee:5a:07:e1:64:fd:a5:7d:27:a4:23:22:dc: c3:07:4f:6f:71:47:dd:95:de:a2:d4:8a:cf:81:aa:76:81:0d: b2:ec:d7:11:2d:89:f1:81:ce:bf:76:e3:4f:e1:c3:2b:3a:79: cc:db:46:16:b5:7a:29:a8:ea:73:09:cc:49:39:44:a2:01:a4: 5a:36:b1:db:37:f7:a6:63:99:ab:0b:59:12:df:b8:2f:48:ce: af:32:93:1c:0a:ae:59:41:db:7f:2a:fb:75:28:9d:32:87:ea: 37:71:86:21:dd:b5:95:bf:36:a3:55:d2:70:53:78:e6:65:52: 24:3f:e0:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDsE2373POEUAmM2RN4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OTFmMzQ1YTUwM2NiOGM4YTlkZTQyN2U4ODEyZWZmZjIx YjIyYjUwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD EygwM2ExMWE1ZDhiMDYzYWQ3OGQwY2E0Njg2MmVlZjUwMDk3ZDkwMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplpgOcqEo34SnL0smbl/vOG8kNr+ gYyAO1vmCts/r6iek4X97EGhBYKLANxVDcDvKoquOSfH14jfF6f8IuQJRKQPTZbh zQxdSmMSvKlGBK8OSwUDYKscQ9RV1hVr9YHGNpdV3KhRThgxxhaxSn2TDGW6k+Mj w6O9mpQ16ouAIEHZ4aVVxpfeoaox4uSVf+7WEdAFSDXvXQGSalS0l1b02O2lBoNz vGdwQ3Lej3uPIHmYjNsaqWRQf9xkNjTOMy5XPFydbpvNpIGaqEEprHc9Z5gMAcYo 1Je+R30o61W3IAM1afUrulyxlaEYu+kDtMtAvzphbwWovHAGug1ENDV0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOhGl2LBjrXjQykaGLu9QCX2QCaMB8GA1UdIwQY MBaAFMaR80WlA8uMip3kJ+iBLv/yGyK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEt ZTdjYWY1ZTViY2JhLzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8xOWU2ZTItYzJhMS00ZWJjLWJhNWEtZTdjYWY1ZTViY2Jh LzEveHBIelJhVUR5NHlLbmVRbjZJRXVfX0liSXJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefmz6Pha ksrJTZwujZwg2cg8zCSi1YJ7vr+Ekp50bNzgQBnU2MjsadpCUcJmSVmnw7z+sK8M VvV+yMTaHd+Y+0IV/cPKBsnyqF/XlsPChDNVy6GsJunzsUyaq0rC+KKt/MojJjhh pnXeuVWCEkIU8qjDugSZpuFSQIdQGihsjluNIaXuWgfhZP2lfSekIyLcwwdPb3FH 3ZXeotSKz4GqdoENsuzXES2J8YHOv3bjT+HDKzp5zNtGFrV6KajqcwnMSTlEogGk Wjax2zf3pmOZqwtZEt+4L0jOrzKTHAquWUHbfyr7dSidMofqN3GGId21lb82o1XS cFN45mVSJD/glw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:53 2025 by rpki-client