This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft File: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft (raw, json) Hash identifier: Gyyz6nMGXDezrZMaO5MM6NQFqEnXc3EEHGduQDww5k8= Subject key identifier: C5:B1:7E:95:F3:F9:98:70:5A:BE:EC:82:81:C8:7E:E3:C8:0C:10:10 Authority key identifier: 5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 Certificate issuer: /CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Certificate serial: 019AF19B49FCA1FA6730ECC352F6B2A8B9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:17 +0000 Manifest this update: Sat 06 Dec 2025 03:01:17 +0000 Manifest next update: Sun 07 Dec 2025 03:01:17 +0000 Files and hashes: 1: Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl (hash: ImF8VGsjslQUdKDpigHlmnphteB3OBRD11G2CmnjKkU=) 2: bCRc9uQxEBTdq_mIpQMeeuXw3bI.roa (hash: UVWoEpSiUbWJCwz2N/6iz5YS+S24UWKlT6JFJC9rbJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:49:fc:a1:fa:67:30:ec:c3:52:f6:b2:a8:b9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9ed991ee6bc4bb48a8b75011d0481917e0f3f7 Validity Not Before: Dec 6 03:01:17 2025 GMT Not After : Dec 7 03:01:17 2025 GMT Subject: CN=c5b17e95f3f998705abeec8281c87ee3c80c1010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:2b:60:ed:42:da:0a:5c:9b:1a:b9:08:3a: c4:6c:65:cf:f9:fd:02:7a:df:16:e6:22:7c:1d:63: cd:ab:24:85:36:54:67:3b:8d:ff:48:c7:09:5c:6c: fb:91:4d:d5:4c:9d:0e:1e:b9:f6:f6:07:f4:f7:f3: c4:f8:a5:97:91:81:21:2e:63:eb:e8:bc:5f:0a:39: 57:6e:a1:16:b0:1e:ee:65:ce:76:48:4c:50:5b:92: 70:2d:7c:e8:97:9c:1b:06:33:a1:7b:ba:45:51:a1: be:9f:e1:83:a8:43:70:a9:33:3b:bc:15:04:75:ae: 17:ba:78:b2:6f:5b:c5:aa:27:ce:0c:a2:73:a3:88: 50:84:26:e0:29:1f:ca:ae:f4:46:46:9c:03:1b:3b: 2e:6a:46:ba:60:03:9c:93:fb:74:8b:9c:8e:14:70: 8a:b6:9f:d4:6e:ff:20:8e:48:1e:26:57:62:07:b2: 88:0c:f1:19:e5:bc:90:58:2b:3d:81:ad:c8:b2:61: 6f:fc:c1:88:63:0c:da:1b:df:1a:d2:21:e2:25:0a: a6:e2:bc:a2:0a:af:d7:fd:9d:b9:fd:ff:73:a7:ad: 2d:c4:5c:16:f1:c1:d2:cf:96:5e:df:29:5a:06:31: 14:42:aa:bc:28:3d:a4:0c:d5:84:97:ff:43:96:2d: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B1:7E:95:F3:F9:98:70:5A:BE:EC:82:81:C8:7E:E3:C8:0C:10:10 X509v3 Authority Key Identifier: keyid:5E:9E:D9:91:EE:6B:C4:BB:48:A8:B7:50:11:D0:48:19:17:E0:F3:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49e426-90cc-4586-90f4-6cdbc2122749/1/Xp7Zke5rxLtIqLdQEdBIGRfg8_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4e:74:f9:61:20:0a:d5:68:c0:d1:17:7b:4a:ae:1b:a9:34: 25:14:f2:23:6b:fe:39:a3:38:30:5d:b4:34:91:70:5b:b7:98: 76:00:49:13:bd:2f:56:a4:f8:a6:e0:3b:6a:bc:96:af:fc:34: 53:33:41:fa:d9:ff:41:30:e4:bb:72:67:63:40:b2:0b:22:1e: 82:3d:62:46:55:f4:a0:a0:1e:2e:b6:c2:e0:d0:9b:37:f0:8c: 3a:00:80:6d:13:fd:f4:ca:42:fd:32:c3:28:cd:db:4d:e9:32: 95:2b:c5:0b:9c:4a:cd:60:21:09:c1:d2:40:ab:af:5e:42:99: 87:96:03:63:1a:78:51:c0:f9:1a:70:55:71:c4:a5:48:2e:5a: f6:53:33:95:9e:c8:a7:c8:43:93:ba:7d:a4:d9:d7:21:1b:3d: 19:8c:70:42:8e:ff:c7:b5:98:fd:2f:e9:ad:b5:70:6d:85:8c: a0:88:5c:2a:04:35:c8:1f:f9:d9:fc:1c:32:44:f4:4d:29:71: d2:a7:9a:ff:b2:04:79:b7:2a:40:bd:29:93:42:a3:fe:33:fe: 54:21:4b:c6:4d:17:f0:87:f9:3f:46:56:4b:a3:18:83:2d:1a: e1:a5:73:46:41:64:86:96:f6:53:df:5f:b8:a2:86:cb:a5:66: b8:8d:53:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0n8ofpnMOzDUvayqLnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOWVkOTkxZWU2YmM0YmI0OGE4Yjc1MDExZDA0ODE5MTdl MGYzZjcwHhcNMjUxMjA2MDMwMTE3WhcNMjUxMjA3MDMwMTE3WjAzMTEwLwYDVQQD EyhjNWIxN2U5NWYzZjk5ODcwNWFiZWVjODI4MWM4N2VlM2M4MGMxMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu0rYO1C2gpcmxq5CDrEbGXP+f0C et8W5iJ8HWPNqySFNlRnO43/SMcJXGz7kU3VTJ0OHrn29gf09/PE+KWXkYEhLmPr 6LxfCjlXbqEWsB7uZc52SExQW5JwLXzol5wbBjOhe7pFUaG+n+GDqENwqTM7vBUE da4Xuniyb1vFqifODKJzo4hQhCbgKR/KrvRGRpwDGzsuaka6YAOck/t0i5yOFHCK tp/Ubv8gjkgeJldiB7KIDPEZ5byQWCs9ga3IsmFv/MGIYwzaG98a0iHiJQqm4ryi Cq/X/Z25/f9zp60txFwW8cHSz5Ze3ylaBjEUQqq8KD2kDNWEl/9Dli2RLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMWxfpXz+ZhwWr7sgoHIfuPIDBAQMB8GA1UdIwQY MBaAFF6e2ZHua8S7SKi3UBHQSBkX4PP3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQt NmNkYmMyMTIyNzQ5LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OWU0MjYtOTBjYy00NTg2LTkwZjQtNmNkYmMyMTIyNzQ5 LzEvWHA3WmtlNXJ4THRJcUxkUUVkQklHUmZnOF9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY050+WEg CtVowNEXe0quG6k0JRTyI2v+OaM4MF20NJFwW7eYdgBJE70vVqT4puA7aryWr/w0 UzNB+tn/QTDku3JnY0CyCyIegj1iRlX0oKAeLrbC4NCbN/CMOgCAbRP99MpC/TLD KM3bTekylSvFC5xKzWAhCcHSQKuvXkKZh5YDYxp4UcD5GnBVccSlSC5a9lMzlZ7I p8hDk7p9pNnXIRs9GYxwQo7/x7WY/S/prbVwbYWMoIhcKgQ1yB/52fwcMkT0TSlx 0qea/7IEebcqQL0pk0Kj/jP+VCFLxk0X8If5P0ZWS6MYgy0a4aVzRkFkhpb2U99f uKKGy6VmuI1Tkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:50 2025 by rpki-client