This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json) Hash identifier: x1oR489ZRDIspMg9Ly54nbyZVATUmUeGVBVzyAstmm0= Subject key identifier: 08:05:C9:A1:79:82:55:78:AE:80:A7:E7:40:49:72:3B:6D:8D:A1:49 Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb Certificate serial: 019AF6F8F66804C1627FD3B1F89490BBD088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft Manifest number: 1766 Signing time: Sun 07 Dec 2025 04:01:42 +0000 Manifest this update: Sun 07 Dec 2025 04:01:42 +0000 Manifest next update: Mon 08 Dec 2025 04:01:42 +0000 Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=) 2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: q39gYfKObZyo56yNfjJVtg5frRq09qiZ8Nqilr3Lnj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:f6:68:04:c1:62:7f:d3:b1:f8:94:90:bb:d0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb Validity Not Before: Dec 7 04:01:42 2025 GMT Not After : Dec 8 04:01:42 2025 GMT Subject: CN=0805c9a179825578ae80a7e74049723b6d8da149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b3:5b:9f:a1:9f:bd:5b:03:8f:fd:d3:79:74: ff:f3:56:2e:66:8e:85:e5:e3:e6:26:78:46:11:d5: 1b:d5:dd:ea:15:1e:fe:92:2d:bf:10:63:65:28:93: 72:25:26:85:81:2b:0e:5f:56:b7:1a:67:f8:e1:eb: 5e:ec:a6:bd:d2:50:8e:e3:5f:b6:fe:98:cc:67:a4: ce:ab:98:07:c8:db:bd:d7:eb:a6:93:8c:d5:c1:42: f8:a8:67:87:3d:fe:47:b9:b8:ab:75:4d:c4:58:8f: 9c:6e:34:56:db:c9:a7:16:ed:2e:df:d0:ed:6a:6a: 8a:d5:99:66:22:c7:5a:25:26:6c:a6:19:0d:91:67: fb:f8:c7:41:54:4d:ab:4c:fd:50:6d:00:b4:f7:ff: 6f:7f:c9:3a:bc:5a:f5:6f:e8:30:1a:bc:c4:af:48: 1f:a0:6c:e3:9e:3a:61:81:83:28:a2:43:99:c8:8d: 16:bf:f8:7f:19:47:38:67:37:e1:a9:e4:e8:be:38: 21:9b:b6:f9:a1:da:ba:15:3c:ea:a3:19:98:aa:c8: 78:84:17:18:c2:5e:9e:e9:29:84:3d:95:84:ff:3a: 55:13:31:36:48:c3:ac:35:f8:34:9e:b4:2d:11:b7: 89:20:b5:b3:3b:22:f1:cd:df:1c:97:38:f7:67:0c: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:C9:A1:79:82:55:78:AE:80:A7:E7:40:49:72:3B:6D:8D:A1:49 X509v3 Authority Key Identifier: keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2b:0b:90:d8:38:a8:3b:c5:b8:14:6f:56:f8:34:7e:62:6b: c0:53:05:3a:e5:b3:d0:12:52:5d:22:91:dc:0d:3a:82:1c:f5: 72:e9:27:08:d7:21:cb:f4:04:7d:0f:c9:c1:6f:68:24:de:6a: 1b:9f:03:ae:ec:bd:9d:0b:b2:92:7f:df:5c:04:a8:e6:78:75: ec:6c:8f:f2:35:6b:f8:19:85:86:03:6a:00:aa:7f:58:4d:e7: 47:3e:10:8c:5f:be:53:52:14:05:72:a5:1b:75:d2:5b:31:e9: f4:86:65:2c:a9:3e:30:99:5a:d0:61:62:de:96:c0:e8:1a:86: ba:74:03:9b:2f:39:fe:5c:15:b8:7f:54:15:32:11:11:fa:82: e5:fc:39:93:31:ec:d4:83:82:26:2e:4b:4c:3d:48:7c:1f:69: 32:26:28:2c:57:56:81:18:ea:1d:b0:2b:22:c8:2a:5e:b6:ad: 26:47:25:7b:24:7a:0e:ae:70:7c:d1:c8:4b:6b:42:ca:c9:10: 0e:c3:e4:3c:f3:4c:3d:fd:46:87:41:14:77:09:e8:28:5b:59: d2:8d:0f:44:5f:c9:eb:ac:c3:18:b6:9d:45:8c:ed:2e:66:17: 75:01:6e:ef:df:40:c1:ca:5e:17:c2:f7:81:a5:5c:70:ca:74: 6a:89:b9:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+PZoBMFif9Ox+JSQu9CIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx N2NhYmIwHhcNMjUxMjA3MDQwMTQyWhcNMjUxMjA4MDQwMTQyWjAzMTEwLwYDVQQD EygwODA1YzlhMTc5ODI1NTc4YWU4MGE3ZTc0MDQ5NzIzYjZkOGRhMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprNbn6GfvVsDj/3TeXT/81YuZo6F 5ePmJnhGEdUb1d3qFR7+ki2/EGNlKJNyJSaFgSsOX1a3Gmf44ete7Ka90lCO41+2 /pjMZ6TOq5gHyNu91+umk4zVwUL4qGeHPf5HubirdU3EWI+cbjRW28mnFu0u39Dt amqK1ZlmIsdaJSZsphkNkWf7+MdBVE2rTP1QbQC09/9vf8k6vFr1b+gwGrzEr0gf oGzjnjphgYMookOZyI0Wv/h/GUc4ZzfhqeTovjghm7b5odq6FTzqoxmYqsh4hBcY wl6e6SmEPZWE/zpVEzE2SMOsNfg0nrQtEbeJILWzOyLxzd8clzj3Zwz0kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAgFyaF5glV4roCn50BJcjttjaFJMB8GA1UdIwQY MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSsLkNg4 qDvFuBRvVvg0fmJrwFMFOuWz0BJSXSKR3A06ghz1cuknCNchy/QEfQ/JwW9oJN5q G58Druy9nQuykn/fXASo5nh17GyP8jVr+BmFhgNqAKp/WE3nRz4QjF++U1IUBXKl G3XSWzHp9IZlLKk+MJla0GFi3pbA6BqGunQDmy85/lwVuH9UFTIREfqC5fw5kzHs 1IOCJi5LTD1IfB9pMiYoLFdWgRjqHbArIsgqXratJkcleyR6Dq5wfNHIS2tCyskQ DsPkPPNMPf1Gh0EUdwnoKFtZ0o0PRF/J66zDGLadRYztLmYXdQFu799AwcpeF8L3 gaVccMp0aom5OQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:00:10 2025 by rpki-client