This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json) Hash identifier: MQIiMwsEA9OYW0BvLJ+AgtVeJmOfJ2zDtW9rIGZ8qIk= Subject key identifier: 5A:9D:17:EB:15:22:81:E9:C2:51:C4:76:04:68:D6:74:2F:13:4C:2D Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Certificate serial: 019AF276523AE064851AFE1F8EFB2C00C340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft Manifest number: 07A6 Signing time: Sat 06 Dec 2025 07:00:31 +0000 Manifest this update: Sat 06 Dec 2025 07:00:31 +0000 Manifest next update: Sun 07 Dec 2025 07:00:31 +0000 Files and hashes: 1: 16AbDLexWxM7mos0qMmQG31v5Rg.roa (hash: 3u1e4Mqp4DtPhz1Ro9vKRDiTKwkU7uS9FwPKV5J5Ahk=) 2: FnJQovhlbIvUdo0j6O0hr0vUYNM.roa (hash: wBBuOwEzLi1HNHDVjYRKKazRYQG/hq5eug3JUFJ4Ec0=) 3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: HXiwzaC7aU6/LimnOxYSZZxC30pcSMtis/CncPaahNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:52:3a:e0:64:85:1a:fe:1f:8e:fb:2c:00:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Validity Not Before: Dec 6 07:00:31 2025 GMT Not After : Dec 7 07:00:31 2025 GMT Subject: CN=5a9d17eb152281e9c251c4760468d6742f134c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:7c:3e:62:a8:1b:4c:6d:ce:c3:a8:00:d1: 47:3d:ac:07:6a:07:d9:0e:79:cb:28:60:ee:b3:b6: 0e:65:3d:a2:dc:f7:65:39:e6:33:53:3d:33:5a:0c: 16:d2:56:15:fc:0a:fa:53:80:5a:40:84:f3:4d:20: 12:ea:8c:d7:62:6f:f3:35:12:3d:95:b9:ff:21:4f: 8f:6e:4b:df:de:6f:73:e2:58:e3:8e:31:56:96:08: 01:2c:6f:1b:d1:85:ce:5c:5b:31:8a:6f:69:6b:78: f6:97:95:fa:68:38:d1:f1:a7:cb:f3:8f:f4:c6:60: d8:d6:1b:57:a8:0d:a4:d5:a5:99:bf:06:aa:12:43: ea:7a:f7:89:e6:89:04:c5:3c:af:c4:89:fb:20:36: d6:8f:ad:ab:c1:f0:c1:84:8f:73:20:b6:00:f4:f8: 32:39:32:40:04:78:78:a6:b8:d0:bc:4e:a2:f9:6d: 03:49:68:f8:a2:c7:8b:80:7a:9b:bf:03:05:8b:90: 41:0c:ef:a3:2d:10:22:98:ea:38:13:da:ea:9a:51: 83:8f:e5:24:f7:6c:b2:db:a8:68:a7:92:11:74:df: 61:68:57:80:9a:f1:72:0f:cb:e1:9e:23:4a:7a:d3: b9:3f:95:ba:44:b4:08:cb:5e:1c:1f:10:3b:94:e0: c5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9D:17:EB:15:22:81:E9:C2:51:C4:76:04:68:D6:74:2F:13:4C:2D X509v3 Authority Key Identifier: keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:06:38:2e:05:82:65:a6:02:01:f1:d6:34:ff:ea:48:d1:fc: cd:b3:ae:08:92:cd:fc:64:3e:d3:51:5f:c1:ff:20:93:5b:22: 8a:9c:85:7b:68:28:c8:ba:11:f6:95:33:73:eb:a0:44:f2:af: b8:56:a6:f7:64:a7:c3:1a:93:55:44:0f:c6:61:cb:ba:8a:57: d5:64:bc:57:88:6f:aa:a2:88:a5:6b:a6:2d:3f:b6:ed:96:a6: 63:31:9d:6b:0d:22:13:3b:0c:db:45:bb:94:e1:3f:3f:d2:58: ff:3b:99:68:13:a9:bc:1a:c2:8b:a5:79:af:f1:6a:18:d7:50: 13:99:24:db:75:47:ab:69:4a:45:23:6b:f7:c0:76:fd:02:bd: d9:be:3b:79:b3:36:52:ee:8f:fd:50:87:41:27:0a:ff:67:19: 02:9f:2e:5c:63:fd:9a:96:88:b1:ab:55:59:f3:74:3f:10:85: 31:e0:61:4a:0c:c4:11:26:9c:ae:f3:e2:62:da:a2:75:cc:bf: ef:99:75:22:2a:ea:1e:5b:a1:4f:ba:a6:72:3a:ad:32:8f:6b: f7:97:e8:86:3f:94:ff:98:67:08:54:2b:04:cf:0a:7d:5a:3c: db:09:4c:a2:ce:72:48:50:44:54:cc:7e:89:7e:49:b8:f8:3b: 9a:61:6e:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlI64GSFGv4fjvssAMNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4 YmFjZDkwHhcNMjUxMjA2MDcwMDMxWhcNMjUxMjA3MDcwMDMxWjAzMTEwLwYDVQQD Eyg1YTlkMTdlYjE1MjI4MWU5YzI1MWM0NzYwNDY4ZDY3NDJmMTM0YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvil8PmKoG0xtzsOoANFHPawHagfZ DnnLKGDus7YOZT2i3PdlOeYzUz0zWgwW0lYV/Ar6U4BaQITzTSAS6ozXYm/zNRI9 lbn/IU+Pbkvf3m9z4ljjjjFWlggBLG8b0YXOXFsxim9pa3j2l5X6aDjR8afL84/0 xmDY1htXqA2k1aWZvwaqEkPqeveJ5okExTyvxIn7IDbWj62rwfDBhI9zILYA9Pgy OTJABHh4prjQvE6i+W0DSWj4oseLgHqbvwMFi5BBDO+jLRAimOo4E9rqmlGDj+Uk 92yy26hop5IRdN9haFeAmvFyD8vhniNKetO5P5W6RLQIy14cHxA7lODFbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqdF+sVIoHpwlHEdgRo1nQvE0wtMB8GA1UdIwQY MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5 LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwY4LgWC ZaYCAfHWNP/qSNH8zbOuCJLN/GQ+01Ffwf8gk1siipyFe2goyLoR9pUzc+ugRPKv uFam92SnwxqTVUQPxmHLuopX1WS8V4hvqqKIpWumLT+27ZamYzGdaw0iEzsM20W7 lOE/P9JY/zuZaBOpvBrCi6V5r/FqGNdQE5kk23VHq2lKRSNr98B2/QK92b47ebM2 Uu6P/VCHQScK/2cZAp8uXGP9mpaIsatVWfN0PxCFMeBhSgzEESacrvPiYtqidcy/ 75l1IirqHluhT7qmcjqtMo9r95fohj+U/5hnCFQrBM8KfVo82wlMos5ySFBEVMx+ iX5JuPg7mmFuUg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:58 2025 by rpki-client