This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft File: x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json) Hash identifier: rvnKMe7Kf0TlQyF8UFZ/rmYINg1aq3HbUWqlaqfXIsM= Subject key identifier: 40:A6:3E:C3:3D:65:A6:B0:B2:82:0C:60:CF:AF:52:37:35:28:A8:43 Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F Certificate issuer: /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f Certificate serial: 019AF19B10563B848EF9AEC2E166F669CEFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=) 2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: EKqPLHlKX6uK1YvRNFa1oltqe6kXp2z3f0TlLMPCHE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:10:56:3b:84:8e:f9:ae:c2:e1:66:f6:69:ce:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=40a63ec33d65a6b0b2820c60cfaf52373528a843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2c:d1:33:64:25:3a:5b:df:c1:31:7a:fc:3b: 99:32:17:da:5a:f0:90:72:24:78:2e:53:38:dd:74: 28:ec:4c:83:a7:9b:56:28:e6:53:93:aa:77:71:b0: ee:24:0c:b0:0c:e0:08:e4:8c:2c:36:26:13:4c:0a: bd:c0:26:91:93:ff:83:36:7b:2a:0b:23:b1:b3:92: 4f:5c:f1:c9:12:43:cb:84:54:4b:d1:b0:33:d9:f9: 3a:45:a2:c7:10:f7:5f:08:e1:0a:df:9c:9a:b8:b6: 09:35:32:f0:d8:f0:e5:64:77:59:45:a5:03:0e:72: 2b:90:f3:b7:f3:11:ec:33:1b:7e:7a:7e:f2:d3:aa: 12:a4:eb:d1:9c:24:48:8e:28:91:eb:65:96:50:5d: 48:38:ba:fa:91:24:4d:2f:5d:5b:b7:79:bb:49:fc: 63:ab:8c:a3:e4:b8:1a:80:cd:2c:bd:69:2c:25:a6: ba:3c:c3:c5:c5:f8:d7:19:1c:5b:5b:98:ed:3d:21: 54:00:f1:bc:50:c7:43:c1:c4:21:de:30:85:70:23: 15:b6:9b:69:f8:63:16:f3:42:85:98:02:40:eb:18: c3:40:3a:74:a1:fd:3a:b9:a9:09:1b:bf:2b:05:ea: 05:08:fc:a1:6c:da:00:46:f6:b3:15:17:a5:15:54: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:3E:C3:3D:65:A6:B0:B2:82:0C:60:CF:AF:52:37:35:28:A8:43 X509v3 Authority Key Identifier: keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6c:6e:98:72:da:9f:a7:0a:37:81:a2:d3:20:4a:ae:0b:e1: 4e:2f:f0:6c:ed:95:a0:a4:eb:00:9f:39:bc:90:ff:fc:fd:ee: 8a:29:b3:f4:a2:72:73:03:34:43:9c:35:b7:32:bd:70:eb:d1: 89:64:3c:f1:e2:77:73:3c:1a:3a:5d:75:8c:9c:90:58:00:9e: 2b:6c:49:25:65:c8:e6:0e:cb:15:8c:68:4c:77:1c:88:a9:7e: f7:68:2d:b7:de:95:61:32:48:b1:fe:91:ee:74:54:bc:cd:86: dc:ba:7f:78:31:04:3d:0b:37:bd:99:31:1c:51:b6:be:a7:16: 18:97:4a:bc:03:b7:af:e8:95:ca:e5:e9:b6:55:c9:17:c0:fd: 59:6e:d6:8e:75:ed:c5:61:49:dc:fc:f9:16:70:fb:bf:5a:02: 2f:b6:d3:eb:ee:7d:b2:65:da:76:ac:e0:d9:08:a7:88:2c:86: 91:4c:5f:6f:75:04:bd:37:c1:38:14:60:16:1c:3f:3f:35:49: 53:46:73:f4:b2:a1:cc:23:75:1b:51:f9:4e:a6:17:c2:40:64: f6:c2:26:51:3b:cd:e4:99:17:85:83:82:73:a9:3b:a5:b5:71: 52:b2:14:c8:9d:63:bb:51:8c:84:10:9b:95:dd:bf:4d:ab:02: b8:56:3c:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxBWO4SO+a7C4Wb2ac76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YWVmMmFiM2YyZTlkOWFjMDFmNzI3ZjczMGFmN2RmMWQw NDE4MGYwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD Eyg0MGE2M2VjMzNkNjVhNmIwYjI4MjBjNjBjZmFmNTIzNzM1MjhhODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SzRM2QlOlvfwTF6/DuZMhfaWvCQ ciR4LlM43XQo7EyDp5tWKOZTk6p3cbDuJAywDOAI5IwsNiYTTAq9wCaRk/+DNnsq CyOxs5JPXPHJEkPLhFRL0bAz2fk6RaLHEPdfCOEK35yauLYJNTLw2PDlZHdZRaUD DnIrkPO38xHsMxt+en7y06oSpOvRnCRIjiiR62WWUF1IOLr6kSRNL11bt3m7Sfxj q4yj5LgagM0svWksJaa6PMPFxfjXGRxbW5jtPSFUAPG8UMdDwcQh3jCFcCMVtptp +GMW80KFmAJA6xjDQDp0of06uakJG78rBeoFCPyhbNoARvazFRelFVTNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECmPsM9ZaawsoIMYM+vUjc1KKhDMB8GA1UdIwQY MBaAFMeu8qs/Lp2awB9yf3MK998dBBgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAt OTJlZDJhMDAwZjFmLzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mMzRmMmItMzY2Mi00MWM0LTgyNzAtOTJlZDJhMDAwZjFm LzEveDY3eXF6OHVuWnJBSDNKX2N3cjMzeDBFR0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmxumHLa n6cKN4Gi0yBKrgvhTi/wbO2VoKTrAJ85vJD//P3uiimz9KJycwM0Q5w1tzK9cOvR iWQ88eJ3czwaOl11jJyQWACeK2xJJWXI5g7LFYxoTHcciKl+92gtt96VYTJIsf6R 7nRUvM2G3Lp/eDEEPQs3vZkxHFG2vqcWGJdKvAO3r+iVyuXptlXJF8D9WW7WjnXt xWFJ3Pz5FnD7v1oCL7bT6+59smXadqzg2QiniCyGkUxfb3UEvTfBOBRgFhw/PzVJ U0Zz9LKhzCN1G1H5TqYXwkBk9sImUTvN5JkXhYOCc6k7pbVxUrIUyJ1ju1GMhBCb ld2/TasCuFY8vw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:26 2025 by rpki-client