This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft File: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft (raw, json) Hash identifier: 16KxixxxjXFJXSfizM2LNF3041x86jWc7TUtUQNhYec= Subject key identifier: 3B:66:1F:51:C5:12:12:97:54:F1:31:A8:D1:8F:6B:01:42:20:05:99 Authority key identifier: 5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 Certificate issuer: /CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Certificate serial: 019AF1D2480AAABE1B5726C1A8FB2434BC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: 9OuhXfETInOXikMAHDgNmyTRYEU.roa (hash: eIv/UzfTlkAylqHyvhIg1kk0aW1IEfgfDL/qT3P5S8w=) 2: XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl (hash: 8BiPSnBbx5BahcSkTk3kM6QGz28iy+8T60Cgp2FKDoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:48:0a:aa:be:1b:57:26:c1:a8:fb:24:34:bc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dcc2f7d790a8300a7dd3519e0fb887fa4de0260 Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=3b661f51c512129754f131a8d18f6b0142200599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:b1:26:62:0e:16:3d:ca:e9:11:0b:40:1f: 69:07:73:3f:81:48:05:61:0e:b0:4d:8f:5d:fc:40: cc:91:27:87:05:90:8a:80:70:ea:e0:16:24:10:ac: e1:9e:ca:6d:03:9b:93:36:99:9d:53:75:21:de:33: 5a:70:55:13:26:c2:ef:c1:31:f9:e6:bb:8d:8f:44: 60:58:39:a0:c5:15:d2:97:16:7b:94:02:b2:09:53: 6f:6e:96:ab:3a:ce:80:32:e6:1e:75:a7:15:7f:50: ef:1a:8c:cc:c2:36:bd:41:63:5a:58:53:f7:03:5c: 27:d6:f0:c6:b8:1d:19:1b:9e:b8:9c:9e:07:5f:ad: ec:f8:96:7a:12:1e:e9:fb:90:30:ee:f1:c0:7e:74: 46:4e:47:3b:ea:7b:a0:36:a7:6e:2b:6f:34:6a:48: 18:3f:84:29:a8:a6:a1:22:86:9b:7c:2e:06:7b:a7: 74:35:4d:5e:47:60:ca:ea:e1:a4:d2:d1:6d:30:43: 67:88:b8:da:52:86:48:70:02:d4:63:cc:66:ac:98: f1:b0:4c:f3:ef:30:bd:c7:29:42:d2:69:a0:2c:44: 27:09:6e:01:28:cf:0a:23:22:63:d8:f9:7a:ad:5c: c9:e5:20:71:89:55:13:d1:f5:e3:d7:a1:54:02:a0: 1f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:66:1F:51:C5:12:12:97:54:F1:31:A8:D1:8F:6B:01:42:20:05:99 X509v3 Authority Key Identifier: keyid:5D:CC:2F:7D:79:0A:83:00:A7:DD:35:19:E0:FB:88:7F:A4:DE:02:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cd4798-b7b7-4b66-948a-bf71449d97dd/1/XcwvfXkKgwCn3TUZ4PuIf6TeAmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:8e:7f:f4:88:af:19:3e:09:48:4b:b6:e0:eb:63:10:24:f6: 4c:f3:fc:53:48:f9:3d:66:48:66:71:d6:b4:0c:ee:67:27:ee: 77:ef:80:bf:45:18:79:4f:77:b3:fd:16:50:c4:1d:e0:90:57: b4:30:bd:c3:bc:f8:6f:9a:9c:fb:e2:6a:0a:6c:5e:66:fc:0b: db:04:67:a6:ea:55:1e:1c:68:aa:cc:96:3f:bd:32:3f:8a:a7: 1e:33:27:47:c3:56:7e:6f:3d:f9:58:50:9b:6c:ea:17:94:12: 05:63:e6:25:22:28:3b:16:a1:e1:d5:a0:97:28:43:e5:1a:ab: 39:a0:28:a1:0c:ef:6f:21:c1:e7:52:06:0e:58:7f:c8:c5:36: 42:ee:b9:69:c4:dd:9d:d1:44:93:ae:76:f9:05:bd:0a:38:3f: 3b:fa:03:75:62:66:5d:90:c4:f1:56:f6:9f:13:ec:fd:8d:a9: cf:99:f3:18:ea:31:59:06:ae:73:a1:7d:66:51:f3:ee:73:5b: 01:15:7b:c2:37:9c:ac:18:5f:89:64:1d:45:74:fe:5b:bc:9d: 6c:9a:14:8a:66:7f:bf:e7:00:e9:fb:e5:b1:49:e0:07:cf:84: a4:08:48:40:11:08:fb:bb:5a:2a:65:1c:56:f9:04:68:18:8c: 4d:fd:a2:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kgKqr4bVybBqPskNLxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkY2MyZjdkNzkwYTgzMDBhN2RkMzUxOWUwZmI4ODdmYTRk ZTAyNjAwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD EygzYjY2MWY1MWM1MTIxMjk3NTRmMTMxYThkMThmNmIwMTQyMjAwNTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOuxJmIOFj3K6RELQB9pB3M/gUgF YQ6wTY9d/EDMkSeHBZCKgHDq4BYkEKzhnsptA5uTNpmdU3Uh3jNacFUTJsLvwTH5 5ruNj0RgWDmgxRXSlxZ7lAKyCVNvbparOs6AMuYedacVf1DvGozMwja9QWNaWFP3 A1wn1vDGuB0ZG564nJ4HX63s+JZ6Eh7p+5Aw7vHAfnRGTkc76nugNqduK280akgY P4QpqKahIoabfC4Ge6d0NU1eR2DK6uGk0tFtMENniLjaUoZIcALUY8xmrJjxsEzz 7zC9xylC0mmgLEQnCW4BKM8KIyJj2Pl6rVzJ5SBxiVUT0fXj16FUAqAf8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtmH1HFEhKXVPExqNGPawFCIAWZMB8GA1UdIwQY MBaAFF3ML315CoMAp901GeD7iH+k3gJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEt YmY3MTQ0OWQ5N2RkLzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jZDQ3OTgtYjdiNy00YjY2LTk0OGEtYmY3MTQ0OWQ5N2Rk LzEvWGN3dmZYa0tnd0NuM1RVWjRQdUlmNlRlQW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN45/9Iiv GT4JSEu24OtjECT2TPP8U0j5PWZIZnHWtAzuZyfud++Av0UYeU93s/0WUMQd4JBX tDC9w7z4b5qc++JqCmxeZvwL2wRnpupVHhxoqsyWP70yP4qnHjMnR8NWfm89+VhQ m2zqF5QSBWPmJSIoOxah4dWglyhD5RqrOaAooQzvbyHB51IGDlh/yMU2Qu65acTd ndFEk652+QW9Cjg/O/oDdWJmXZDE8Vb2nxPs/Y2pz5nzGOoxWQauc6F9ZlHz7nNb ARV7wjecrBhfiWQdRXT+W7ydbJoUimZ/v+cA6fvlsUngB8+EpAhIQBEI+7taKmUc VvkEaBiMTf2ihQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:26 2025 by rpki-client