This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json) Hash identifier: g35bFWS4FXAfwwwoYDNiGELAYHmfm1F3FNbFNMOtEfQ= Subject key identifier: 9C:17:60:EE:87:4E:EA:5B:5E:E9:2F:72:BC:4F:BC:F5:5C:87:D1:1F Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf Certificate serial: 019AF164297498890869C3845A91819F98A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 2b0K2kcuXFqvwDh4JrumzgV+oyqNwKOEbC+rQXCFQT0=) 2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:74:98:89:08:69:c3:84:5a:91:81:9f:98:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=9c1760ee874eea5b5ee92f72bc4fbcf55c87d11f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:02:31:af:89:18:3c:00:33:b8:4d:24:77: bf:d5:35:cd:53:eb:1d:bb:9b:bc:a1:18:f0:cc:fc: 7d:64:ec:22:91:d5:64:41:34:c3:a9:25:de:26:ca: 69:b7:96:af:ac:df:df:6d:62:7d:90:12:1f:35:a0: 84:b5:2a:72:6a:46:50:a3:71:23:ae:d3:6b:cd:a5: 2f:69:94:87:de:a7:9a:65:14:4c:11:46:b7:93:d2: f5:db:f0:a4:3d:5d:c5:8f:6e:95:34:a7:ac:c3:2f: de:49:80:8d:e5:9f:73:33:79:87:b9:23:39:aa:1a: 00:5f:fc:7a:da:64:e5:ae:a3:c3:2b:74:2f:ce:0c: 5c:71:6f:dc:87:ca:b5:e1:f2:2d:d8:b3:44:bf:cc: c0:81:87:92:48:e1:0e:97:59:23:b0:35:bd:50:2e: 6f:a1:71:7c:06:04:12:45:74:41:8d:36:1e:46:7c: 7e:30:6a:be:bf:92:8c:06:0f:2e:70:88:81:47:cf: c1:5b:23:5e:96:9d:75:54:79:2a:cc:81:01:e0:0c: 42:26:30:de:d3:3c:1e:6e:78:5b:d1:57:75:6e:fd: b9:4b:e5:f7:2a:33:25:98:1a:06:6f:6e:40:7e:5b: b5:61:43:c7:f5:02:c0:4a:57:5c:48:80:9a:c6:91: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:60:EE:87:4E:EA:5B:5E:E9:2F:72:BC:4F:BC:F5:5C:87:D1:1F X509v3 Authority Key Identifier: keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:14:d4:46:de:02:91:cb:6f:b8:c3:4d:7b:c1:f3:e0:49:4f: f6:0b:8c:bb:50:1b:0c:81:9d:9a:09:5e:95:b2:dc:b1:fd:6e: f0:79:33:b8:bc:f3:c8:cf:9f:b9:41:b7:ec:ef:6f:aa:c0:d9: 4a:40:37:c5:e8:ce:a9:94:f7:f0:e6:87:39:e4:e4:6b:cb:35: 60:9a:f6:ab:d0:78:48:54:cd:62:c1:e5:84:93:66:2a:e8:3a: de:6d:aa:a3:45:73:77:f6:f2:50:67:2a:a3:6f:8a:59:b7:c3: ff:16:5f:73:36:dc:1c:10:51:62:e6:a8:7a:0d:72:70:ef:98: 41:4b:35:d4:44:a5:be:75:33:fb:d7:7a:f9:90:83:21:25:9a: 20:7b:f4:20:48:af:a0:5f:1d:20:23:f4:3c:19:21:ec:16:6b: c8:c9:21:59:37:0f:ba:e3:f7:98:47:94:00:19:dc:97:f3:f3: 96:15:36:bd:6c:28:a4:4d:af:34:fd:3b:ee:9a:b4:6f:d5:e8: db:5e:bd:af:5c:f5:3b:21:03:38:67:ad:5e:3a:2d:41:dc:a1: 93:65:c6:0c:45:eb:a0:40:93:f2:36:8e:68:e1:c2:a4:68:2e: da:8e:34:aa:6f:67:e1:6c:a3:ad:6f:c0:64:8b:4a:29:c9:05: 90:54:a6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCl0mIkIacOEWpGBn5ihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw ODRmZGYwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD Eyg5YzE3NjBlZTg3NGVlYTViNWVlOTJmNzJiYzRmYmNmNTVjODdkMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbkCMa+JGDwAM7hNJHe/1TXNU+sd u5u8oRjwzPx9ZOwikdVkQTTDqSXeJsppt5avrN/fbWJ9kBIfNaCEtSpyakZQo3Ej rtNrzaUvaZSH3qeaZRRMEUa3k9L12/CkPV3Fj26VNKeswy/eSYCN5Z9zM3mHuSM5 qhoAX/x62mTlrqPDK3QvzgxccW/ch8q14fIt2LNEv8zAgYeSSOEOl1kjsDW9UC5v oXF8BgQSRXRBjTYeRnx+MGq+v5KMBg8ucIiBR8/BWyNelp11VHkqzIEB4AxCJjDe 0zwebnhb0Vd1bv25S+X3KjMlmBoGb25Aflu1YUPH9QLASldcSICaxpEWZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwXYO6HTupbXukvcrxPvPVch9EfMB8GA1UdIwQY MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxTURt4C kctvuMNNe8Hz4ElP9guMu1AbDIGdmglelbLcsf1u8HkzuLzzyM+fuUG37O9vqsDZ SkA3xejOqZT38OaHOeTka8s1YJr2q9B4SFTNYsHlhJNmKug63m2qo0Vzd/byUGcq o2+KWbfD/xZfczbcHBBRYuaoeg1ycO+YQUs11ESlvnUz+9d6+ZCDISWaIHv0IEiv oF8dICP0PBkh7BZryMkhWTcPuuP3mEeUABncl/PzlhU2vWwopE2vNP077pq0b9Xo 2169r1z1OyEDOGetXjotQdyhk2XGDEXroECT8jaOaOHCpGgu2o40qm9n4WyjrW/A ZItKKckFkFSmrQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:16 2025 by rpki-client