This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json) Hash identifier: nS+t5rk1Mifb4uc2IvSyQS10TyXZZTH/cEezevwYESQ= Subject key identifier: 11:FA:4A:76:BF:BD:20:F7:BB:48:D5:27:2F:4A:62:1F:23:E1:2D:37 Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Certificate serial: 019AF38942B648B5AA68E8C27757EC921802 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:50 +0000 Manifest this update: Sat 06 Dec 2025 12:00:50 +0000 Manifest next update: Sun 07 Dec 2025 12:00:50 +0000 Files and hashes: 1: 0vF0gFHCKbav6GbEKyJcrztoM70.roa (hash: 3GJJhs9MQpGvWXk1FqNRB7SXiQvuJwcBJyHinoV355o=) 2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: SZ2yPaUPJa+PIF9rw1LVgWIMddEqdKHlEFzFG63pZgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:42:b6:48:b5:aa:68:e8:c2:77:57:ec:92:18:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195 Validity Not Before: Dec 6 12:00:50 2025 GMT Not After : Dec 7 12:00:50 2025 GMT Subject: CN=11fa4a76bfbd20f7bb48d5272f4a621f23e12d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d8:3a:ea:39:7d:03:ba:a6:bd:75:94:83:1e: c3:be:8f:26:c0:c8:18:a9:b5:b1:3b:df:9f:4d:0f: 08:a3:57:8c:7c:26:72:28:75:26:47:a6:d4:8f:1f: 04:2e:c6:8b:5e:1a:8c:8a:11:b9:49:6d:c0:1c:26: a0:b7:7e:90:b6:f1:3e:da:a6:d7:9d:55:38:51:80: 10:28:fd:70:a6:dd:9f:5d:fb:a9:79:fe:9f:1a:d0: e8:43:94:d1:d7:8e:fa:1b:5b:9b:0a:ad:0f:48:d4: 18:37:cf:37:a8:54:2d:eb:3d:d9:6a:ed:b2:48:b6: 76:84:74:cc:c8:a5:b2:05:30:fc:cb:c5:13:f8:1c: 45:b4:f0:dc:e8:b9:b5:96:cb:28:4c:f6:9a:13:09: 32:cf:9d:7d:5a:8e:19:96:30:c3:01:4c:e8:9a:44: 2c:63:b0:14:e3:7a:88:05:35:fe:51:44:7a:ff:66: 08:9f:58:3f:c2:5a:32:e4:4a:7e:1a:f9:44:19:f5: 67:a3:a5:cd:de:b9:d9:bc:2e:b0:c3:7a:5f:4b:4c: 57:67:de:90:55:e0:de:04:72:39:a1:f1:fb:3f:c6: ef:66:76:84:28:4b:b6:e9:21:7c:52:ea:d3:f4:21: 81:f3:c6:61:53:e7:78:58:54:73:20:f8:ab:3c:14: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FA:4A:76:BF:BD:20:F7:BB:48:D5:27:2F:4A:62:1F:23:E1:2D:37 X509v3 Authority Key Identifier: keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:26:c3:76:2f:e7:2f:5e:10:cc:2a:bf:87:6c:fc:74:f0:5c: 70:94:b3:7e:c3:87:69:9a:40:21:8a:ac:90:dd:d5:f4:c0:6f: 8c:ab:f7:36:17:4d:0e:a7:db:3f:f3:43:ea:9f:5d:e8:7f:a6: 89:7f:c4:08:15:f4:2c:cb:b6:df:f5:23:bd:6a:36:9c:9c:2d: b1:3c:fd:54:d9:f3:eb:e9:1d:ee:48:95:0e:92:62:94:0e:fa: 81:b0:3a:2e:79:bc:95:58:e0:f1:31:76:30:d6:8f:7a:1d:53: 03:18:a0:62:2b:7d:12:f6:c1:f7:f0:60:ca:21:a5:6d:95:46: f7:53:31:ee:89:32:ee:14:77:85:7e:10:58:a5:ca:fd:b3:7e: 60:a4:d4:15:05:0d:b0:5f:c8:cb:18:1d:ec:5e:13:f3:3e:1c: 5e:f2:3d:f9:95:af:31:77:28:c7:0b:f8:1e:70:bf:8b:15:e3: 3c:51:6b:f1:76:6c:3f:a7:64:ff:5e:3c:ef:bd:eb:88:7c:bd: 0e:d7:a5:35:a5:6e:62:57:80:1b:fe:71:6c:12:9e:7c:9a:6a: b3:5d:80:54:ae:8a:6b:86:65:36:6a:9c:21:a0:06:7b:0a:6b: 0a:11:5d:f4:32:b8:fa:89:f7:84:8c:c1:8b:29:5e:5c:30:25: 32:a7:4f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUK2SLWqaOjCd1fskhgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWJkMjZiYzVkODFlZWU5YzhlMWEyZDBkNzhkMTBkYWFl MDgxOTUwHhcNMjUxMjA2MTIwMDUwWhcNMjUxMjA3MTIwMDUwWjAzMTEwLwYDVQQD EygxMWZhNGE3NmJmYmQyMGY3YmI0OGQ1MjcyZjRhNjIxZjIzZTEyZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztg66jl9A7qmvXWUgx7Dvo8mwMgY qbWxO9+fTQ8Io1eMfCZyKHUmR6bUjx8ELsaLXhqMihG5SW3AHCagt36QtvE+2qbX nVU4UYAQKP1wpt2fXfupef6fGtDoQ5TR1476G1ubCq0PSNQYN883qFQt6z3Zau2y SLZ2hHTMyKWyBTD8y8UT+BxFtPDc6Lm1lssoTPaaEwkyz519Wo4ZljDDAUzomkQs Y7AU43qIBTX+UUR6/2YIn1g/wloy5Ep+GvlEGfVno6XN3rnZvC6ww3pfS0xXZ96Q VeDeBHI5ofH7P8bvZnaEKEu26SF8UurT9CGB88ZhU+d4WFRzIPirPBSFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBH6Sna/vSD3u0jVJy9KYh8j4S03MB8GA1UdIwQY MBaAFMRb0mvF2B7unI4aLQ140Q2q4IGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYt ZTQ0N2JlMmFjNjhlLzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC84NzgyOWEtZTMzMi00MjRmLTljNGYtZTQ0N2JlMmFjNjhl LzEveEZ2U2E4WFlIdTZjamhvdERYalJEYXJnZ1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPybDdi/n L14QzCq/h2z8dPBccJSzfsOHaZpAIYqskN3V9MBvjKv3NhdNDqfbP/ND6p9d6H+m iX/ECBX0LMu23/UjvWo2nJwtsTz9VNnz6+kd7kiVDpJilA76gbA6Lnm8lVjg8TF2 MNaPeh1TAxigYit9EvbB9/BgyiGlbZVG91Mx7oky7hR3hX4QWKXK/bN+YKTUFQUN sF/Iyxgd7F4T8z4cXvI9+ZWvMXcoxwv4HnC/ixXjPFFr8XZsP6dk/148773riHy9 DtelNaVuYleAG/5xbBKefJpqs12AVK6Ka4ZlNmqcIaAGewprChFd9DK4+on3hIzB iyleXDAlMqdPVw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:30 2025 by rpki-client