This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json) Hash identifier: FPqUBUCDJrtOQ5iYAFbC0SPYapRH7Lu4dF4nQF+8A+s= Subject key identifier: 15:F3:35:28:9A:6E:E9:E4:A7:F1:8C:FE:10:A1:50:40:BE:60:71:F6 Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Certificate serial: 019AF3C06D606A5CC7D0319D0AFC0767A50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 13:01:05 +0000 Manifest this update: Sat 06 Dec 2025 13:01:05 +0000 Manifest next update: Sun 07 Dec 2025 13:01:05 +0000 Files and hashes: 1: MkBFGKrOUFJR_PtFzbIm_0Kt8Os.roa (hash: MWAGOdYdWLQQEq03DBK0C/7h2rvKgHmATNjHLt1oAQQ=) 2: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: g6Fb19a3bgbGmN6A/mI3fc98VK3LhsTGTdIAQL8vBbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:6d:60:6a:5c:c7:d0:31:9d:0a:fc:07:67:a5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142 Validity Not Before: Dec 6 13:01:05 2025 GMT Not After : Dec 7 13:01:05 2025 GMT Subject: CN=15f335289a6ee9e4a7f18cfe10a15040be6071f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:24:83:ac:67:52:3a:1a:31:1c:83:53:9a: 4e:05:c2:f5:cd:87:97:3f:f4:fa:07:5b:09:10:fe: 87:9f:89:39:64:13:bf:21:c6:b1:15:64:b3:9f:8b: 72:f6:81:78:ed:8a:2e:53:30:d4:41:fb:4e:c6:a7: d0:53:ed:ec:dc:af:f0:fc:1b:89:84:6a:6c:5e:79: 20:30:17:25:1f:76:3c:3e:6d:d1:3f:96:b6:4d:94: 99:41:da:d2:4c:d6:44:2d:52:37:f5:ae:89:d2:a7: a5:6b:40:db:7d:3a:af:88:db:c2:c7:70:3a:cb:cf: 7e:1d:df:14:5f:25:c2:01:04:87:a6:bb:e2:bb:2b: c2:39:fb:c6:a5:4b:ae:fb:5c:72:32:63:05:8f:60: f7:fb:7d:3a:4e:53:38:b2:93:07:b8:8e:29:e0:09: 25:9e:eb:87:49:31:39:4b:f3:57:f5:64:b3:f8:d0: 2d:a0:b6:52:0a:ed:98:19:6a:4f:8a:a6:41:ac:98: 57:7b:3f:14:1f:ac:8d:37:3a:54:d3:ce:bf:11:6d: 00:2a:a7:da:f8:4a:8e:cd:ac:1f:78:d2:15:a3:3e: a9:37:bf:2d:82:f5:97:62:13:e8:59:56:51:02:23: e7:5a:d2:10:84:35:88:c8:6e:67:d2:4d:43:44:15: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:35:28:9A:6E:E9:E4:A7:F1:8C:FE:10:A1:50:40:BE:60:71:F6 X509v3 Authority Key Identifier: keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:85:81:71:6a:64:d2:4c:59:5d:4a:60:66:11:81:93:cc:38: 4a:de:39:2b:98:ff:e0:01:44:48:04:36:9d:a9:72:0e:92:3b: d4:93:5b:0b:cb:fa:89:73:3a:aa:7f:3f:4d:e9:4c:19:e6:5d: 30:b6:47:96:67:08:b0:fa:7a:cf:27:23:67:1c:cf:79:0c:16: 21:cc:a7:53:21:9c:e3:05:d5:34:58:54:3f:8c:84:c1:9e:7e: 22:8a:ef:2b:17:61:98:56:8a:46:98:03:a2:a4:0f:d8:ff:ca: 42:33:49:86:00:7a:51:93:d8:ba:c0:ca:a3:ca:12:b0:7a:f3: e2:dc:b4:bc:db:a0:30:82:d7:4a:d4:96:c4:5b:fa:90:b9:39: 90:cb:bd:be:58:19:9a:7f:ff:b9:16:98:da:44:32:c7:fd:90: ba:c7:38:1b:f7:66:d1:d6:ea:37:83:19:93:22:b2:1c:e2:4c: 21:47:c3:9c:9c:70:aa:60:7f:94:62:c5:c2:9b:e6:e0:98:e5: 89:47:62:d1:97:67:3e:a2:6a:19:cb:4a:44:25:3b:e8:af:ee: b6:ea:59:c9:9a:c9:cc:5f:d5:2f:f1:69:58:26:49:7d:06:29: 20:21:2e:54:71:b8:6f:5a:7b:c2:4d:4a:0a:fe:01:79:13:88: fa:0d:25:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwG1galzH0DGdCvwHZ6ULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODNjMzk3NmNmMDBlNDJjYmVkNTM5MjRjNGE4NjU1NmJk NzAxNDIwHhcNMjUxMjA2MTMwMTA1WhcNMjUxMjA3MTMwMTA1WjAzMTEwLwYDVQQD EygxNWYzMzUyODlhNmVlOWU0YTdmMThjZmUxMGExNTA0MGJlNjA3MWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNUkg6xnUjoaMRyDU5pOBcL1zYeX P/T6B1sJEP6Hn4k5ZBO/IcaxFWSzn4ty9oF47YouUzDUQftOxqfQU+3s3K/w/BuJ hGpsXnkgMBclH3Y8Pm3RP5a2TZSZQdrSTNZELVI39a6J0qela0DbfTqviNvCx3A6 y89+Hd8UXyXCAQSHprviuyvCOfvGpUuu+1xyMmMFj2D3+306TlM4spMHuI4p4Akl nuuHSTE5S/NX9WSz+NAtoLZSCu2YGWpPiqZBrJhXez8UH6yNNzpU086/EW0AKqfa +EqOzawfeNIVoz6pN78tgvWXYhPoWVZRAiPnWtIQhDWIyG5n0k1DRBV3bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXzNSiabunkp/GM/hChUEC+YHH2MB8GA1UdIwQY MBaAFF+Dw5ds8A5Cy+1TkkxKhlVr1wFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEt OWMzZWZmYWYyYWYyLzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iYzU5YWQtYWNjYS00MWQyLWJhYTEtOWMzZWZmYWYyYWYy LzEvWDRQRGwyendEa0xMN1ZPU1RFcUdWV3ZYQVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYWBcWpk 0kxZXUpgZhGBk8w4St45K5j/4AFESAQ2nalyDpI71JNbC8v6iXM6qn8/TelMGeZd MLZHlmcIsPp6zycjZxzPeQwWIcynUyGc4wXVNFhUP4yEwZ5+IorvKxdhmFaKRpgD oqQP2P/KQjNJhgB6UZPYusDKo8oSsHrz4ty0vNugMILXStSWxFv6kLk5kMu9vlgZ mn//uRaY2kQyx/2Qusc4G/dm0dbqN4MZkyKyHOJMIUfDnJxwqmB/lGLFwpvm4Jjl iUdi0ZdnPqJqGctKRCU76K/utupZyZrJzF/VL/FpWCZJfQYpICEuVHG4b1p7wk1K Cv4BeROI+g0lsA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:09 2025 by rpki-client