This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft File: X1B54OWHxH_xTSAhEvTu94sHhJE.mft (raw, json) Hash identifier: doKeWbig+U7dPJay+tdcYgaj85Y6xzqyURGNzzHOnqE= Subject key identifier: 87:EF:27:2C:89:D6:F1:02:F5:A7:8A:F9:F3:C8:86:CD:C5:96:13:05 Authority key identifier: 5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 Certificate issuer: /CN=5f5079e0e587c47ff14d202112f4eef78b078491 Certificate serial: 019AF12E7B06D1BDFC7ABA1C69B2F4CD5CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft Manifest number: 0984 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: X1B54OWHxH_xTSAhEvTu94sHhJE.crl (hash: bhp1LqRsJA0bWVmQH6zm657T9Z5H2DhijOmCKuzGMFs=) 2: uf-arnId1HYZtG_ay-tvYG5euMI.roa (hash: 6r9UIy+WK+zSulidwASGF2T21EGYdiGkhNIvNvh45j8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7b:06:d1:bd:fc:7a:ba:1c:69:b2:f4:cd:5c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f5079e0e587c47ff14d202112f4eef78b078491 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=87ef272c89d6f102f5a78af9f3c886cdc5961305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:13:e9:39:f0:fc:51:9c:97:72:2a:a1:bc: 92:0b:1a:3d:8d:e8:9c:1b:32:30:3e:20:1f:0f:0a: 27:f7:dd:c6:64:af:88:c6:a1:f9:fe:63:69:6b:3f: b1:a1:65:8e:f7:6e:b7:aa:5e:c7:71:72:62:58:8d: 31:5c:85:5c:2b:77:51:50:11:d7:e9:19:15:c7:f6: bb:42:06:d5:af:ed:6d:b7:6f:47:d3:f8:79:6b:66: 41:31:ae:c6:55:9d:9a:cd:b0:32:d7:30:96:5d:4b: bc:0b:b6:0c:dd:6f:3d:6b:43:1c:90:e6:6a:0e:14: b1:b4:4f:c7:e2:85:28:6b:4a:8b:0c:1f:64:ce:d4: 95:66:fc:a7:66:62:f8:02:c4:1d:40:1d:ee:e2:b6: 46:86:4d:4c:8d:2f:be:4c:85:1e:cf:72:7c:ad:2e: 07:0a:44:58:55:7e:8a:75:ad:d1:4c:7f:70:24:a4: 61:6f:d4:20:ef:a7:8a:2b:c2:b3:4c:b7:de:94:f0: be:5f:bd:79:c3:6a:bb:b7:36:d1:7f:d6:76:5d:d7: e4:7a:6e:7d:e9:a9:9e:e5:1a:c4:3d:f3:73:15:33: 44:e1:b2:6a:db:63:a4:d9:f4:18:ce:42:74:9e:eb: 60:a3:76:3d:90:b9:64:05:0e:19:21:cd:28:01:7a: 5b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:EF:27:2C:89:D6:F1:02:F5:A7:8A:F9:F3:C8:86:CD:C5:96:13:05 X509v3 Authority Key Identifier: keyid:5F:50:79:E0:E5:87:C4:7F:F1:4D:20:21:12:F4:EE:F7:8B:07:84:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X1B54OWHxH_xTSAhEvTu94sHhJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e378b2-8864-4710-9674-1fc8f76a806a/1/X1B54OWHxH_xTSAhEvTu94sHhJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:24:37:0c:51:f1:9f:2a:1f:95:aa:98:f5:49:5a:fc:3d:df: d8:6a:50:ab:3b:90:7d:18:6f:7a:b9:62:8e:84:0d:55:db:03: f4:c8:8c:78:c7:9c:09:12:f7:7f:0b:47:8c:1c:d3:91:a6:8c: 29:f1:ee:e0:e2:73:40:38:3c:1e:c2:0f:1b:3b:5b:7e:7b:9d: fc:ef:fa:71:94:5a:21:ba:fe:0f:7b:f3:e9:32:e2:55:6b:ff: bc:36:a3:74:c7:cb:fa:8c:56:05:c1:0b:f3:ab:76:6b:cd:46: b3:3c:26:62:41:c6:db:27:00:f5:0e:cc:95:9a:58:2c:f3:3b: a4:53:f1:0f:96:3c:2d:99:13:4d:39:ad:43:a0:24:5f:51:96: 5f:79:48:d6:a4:47:0c:8f:80:68:26:2b:24:69:09:de:35:9e: 8e:ba:46:c6:30:d8:1a:31:5a:36:0a:b6:c3:79:83:35:a6:c3: e5:bd:07:a0:e6:6f:67:ac:91:15:ae:40:13:db:6f:bc:9d:7f: 92:5e:70:e6:78:68:01:8a:97:9d:12:e1:12:4d:8d:85:08:bb: 04:d8:33:85:01:b8:e3:89:41:c6:7e:8f:0a:53:8f:50:23:75: 27:27:f9:94:b2:0c:3e:9f:6e:90:90:cf:51:e0:72:98:14:e9: 1c:2a:a7:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnsG0b38erocabL0zVy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNTA3OWUwZTU4N2M0N2ZmMTRkMjAyMTEyZjRlZWY3OGIw Nzg0OTEwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg4N2VmMjcyYzg5ZDZmMTAyZjVhNzhhZjlmM2M4ODZjZGM1OTYxMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMsT6Tnw/FGcl3IqobySCxo9jeic GzIwPiAfDwon993GZK+IxqH5/mNpaz+xoWWO9263ql7HcXJiWI0xXIVcK3dRUBHX 6RkVx/a7QgbVr+1tt29H0/h5a2ZBMa7GVZ2azbAy1zCWXUu8C7YM3W89a0MckOZq DhSxtE/H4oUoa0qLDB9kztSVZvynZmL4AsQdQB3u4rZGhk1MjS++TIUez3J8rS4H CkRYVX6Kda3RTH9wJKRhb9Qg76eKK8KzTLfelPC+X715w2q7tzbRf9Z2Xdfkem59 6ame5RrEPfNzFTNE4bJq22Ok2fQYzkJ0nutgo3Y9kLlkBQ4ZIc0oAXpb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfvJyyJ1vEC9aeK+fPIhs3FlhMFMB8GA1UdIwQY MBaAFF9QeeDlh8R/8U0gIRL07veLB4SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQt MWZjOGY3NmE4MDZhLzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lMzc4YjItODg2NC00NzEwLTk2NzQtMWZjOGY3NmE4MDZh LzEvWDFCNTRPV0h4SF94VFNBaEV2VHU5NHNIaEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCQ3DFHx nyoflaqY9Ula/D3f2GpQqzuQfRhverlijoQNVdsD9MiMeMecCRL3fwtHjBzTkaaM KfHu4OJzQDg8HsIPGztbfnud/O/6cZRaIbr+D3vz6TLiVWv/vDajdMfL+oxWBcEL 86t2a81GszwmYkHG2ycA9Q7MlZpYLPM7pFPxD5Y8LZkTTTmtQ6AkX1GWX3lI1qRH DI+AaCYrJGkJ3jWejrpGxjDYGjFaNgq2w3mDNabD5b0HoOZvZ6yRFa5AE9tvvJ1/ kl5w5nhoAYqXnRLhEk2NhQi7BNgzhQG444lBxn6PClOPUCN1Jyf5lLIMPp9ukJDP UeBymBTpHCqn6w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:31 2025 by rpki-client