This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json) Hash identifier: zRinEMBWZuvb5tpL7XSY/uyVmp3nxqBCPqsM5bSVIcQ= Subject key identifier: 1E:1C:10:B7:4A:B5:D5:94:B5:24:16:5B:ED:5B:29:ED:91:35:1E:6B Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Certificate serial: 019B390FA8CB9F15402A11E77E2061C9115A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft Manifest number: 0664 Signing time: Sat 20 Dec 2025 00:01:26 +0000 Manifest this update: Sat 20 Dec 2025 00:01:26 +0000 Manifest next update: Sun 21 Dec 2025 00:01:26 +0000 Files and hashes: 1: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: khBhG59TWfl2MbS2ya5ZAilExM1iYuushxKVfMlXijs=) 2: obe04FJWUoCw7A2AhMGVvIb9Smw.roa (hash: nK6duh1DRPYXoQE/lOIqfECVU8xvobqjI5rqa0zmKYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:a8:cb:9f:15:40:2a:11:e7:7e:20:61:c9:11:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8 Validity Not Before: Dec 20 00:01:26 2025 GMT Not After : Dec 21 00:01:26 2025 GMT Subject: CN=1e1c10b74ab5d594b524165bed5b29ed91351e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:eb:c8:de:3f:74:07:8c:24:4a:15:8e:22: c4:73:4e:a0:18:03:43:05:da:a0:31:fe:e6:ae:f8: 37:4c:8a:f6:b1:6a:1a:32:f0:d3:d9:84:29:af:2f: 4e:9c:44:92:ca:b2:fe:6b:82:2e:54:e1:16:90:27: 6a:c3:1a:36:bc:4e:85:4b:66:54:3d:a3:02:65:82: fb:5f:60:13:27:b7:b4:48:54:47:0c:c3:cb:c9:70: 5f:58:6a:fb:7b:27:cd:27:0b:79:51:e1:37:51:b1: e7:3b:e3:34:1f:e3:1d:e1:19:08:14:66:b2:5e:c4: af:94:92:12:60:ef:4a:2e:2e:c2:96:dc:46:47:aa: 68:9a:1f:ad:60:ff:b7:08:8d:31:87:33:2e:1b:04: e0:a3:8b:62:1f:ca:0f:b8:6f:60:a6:e4:ad:20:db: f8:cd:86:51:3f:6b:6d:56:63:8a:d0:e2:8e:68:7d: 64:21:20:0f:e3:c7:52:61:50:78:8c:b0:2b:6c:7a: 38:21:03:ee:d7:5c:ad:1c:b8:09:85:e4:fa:7a:1e: ae:78:7c:e8:de:d9:af:68:cf:6f:e1:87:fc:5d:80: 40:6f:81:87:8a:38:0b:95:54:97:ac:74:22:f0:e4: 66:15:6b:b3:29:86:92:5a:54:de:90:2f:93:29:6c: d5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:1C:10:B7:4A:B5:D5:94:B5:24:16:5B:ED:5B:29:ED:91:35:1E:6B X509v3 Authority Key Identifier: keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:43:01:35:94:89:99:c5:4d:b5:dc:38:34:93:fb:7f:96:08: 51:63:df:b7:5e:bb:48:ff:40:e5:bc:cd:a2:7c:03:b6:f8:8e: d6:be:c2:d9:ab:a9:ef:7b:9f:00:71:b5:06:ce:c6:ff:af:64: a9:ac:8c:12:1e:64:55:f4:53:4c:d6:5a:69:d8:5c:a4:ac:af: d3:15:a0:e0:f8:ee:96:d9:e1:1a:d6:af:75:82:ec:2a:6b:cf: 2c:de:b7:04:42:bf:cc:be:da:b1:4e:13:b1:6a:19:d9:db:f6: 5f:8c:c5:33:2a:af:5b:47:d0:90:99:f3:99:70:42:f7:01:c8: af:c2:95:46:43:34:95:06:70:48:51:42:ac:00:c3:c0:71:a8: 23:c4:d1:72:a1:23:29:2a:ad:c8:c8:b4:5d:61:c4:43:73:5e: 70:6e:ac:96:36:79:3c:24:68:73:41:b9:df:06:e0:dc:48:fa: 38:03:45:0d:97:42:b8:d8:d6:77:e5:ac:79:53:f5:4e:2a:43: 69:ea:b8:83:18:0a:32:7c:ba:9b:eb:92:83:84:e4:d6:5f:35: 00:8c:8c:de:a3:9a:01:53:91:b1:6c:99:9d:7b:4e:bd:fb:c1: 06:58:1c:0c:f4:72:91:82:41:8f:a0:b3:3e:24:c0:84:f4:c8: ec:21:87:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D6jLnxVAKhHnfiBhyRFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmM2E2YzIxOTQxYzFlMTNiZmZjNGQ0NGQ2MWJkMjU5NWZk ZDhmZTgwHhcNMjUxMjIwMDAwMTI2WhcNMjUxMjIxMDAwMTI2WjAzMTEwLwYDVQQD EygxZTFjMTBiNzRhYjVkNTk0YjUyNDE2NWJlZDViMjllZDkxMzUxZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5LryN4/dAeMJEoVjiLEc06gGAND BdqgMf7mrvg3TIr2sWoaMvDT2YQpry9OnESSyrL+a4IuVOEWkCdqwxo2vE6FS2ZU PaMCZYL7X2ATJ7e0SFRHDMPLyXBfWGr7eyfNJwt5UeE3UbHnO+M0H+Md4RkIFGay XsSvlJISYO9KLi7CltxGR6pomh+tYP+3CI0xhzMuGwTgo4tiH8oPuG9gpuStINv4 zYZRP2ttVmOK0OKOaH1kISAP48dSYVB4jLArbHo4IQPu11ytHLgJheT6eh6ueHzo 3tmvaM9v4Yf8XYBAb4GHijgLlVSXrHQi8ORmFWuzKYaSWlTekC+TKWzVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4cELdKtdWUtSQWW+1bKe2RNR5rMB8GA1UdIwQY MBaAFF86bCGUHB4Tv/xNRNYb0llf3Y/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMt Y2Y4Njk4NzU3ZDM3LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iYTMwYmItYWMwYi00NWEwLTlmMGMtY2Y4Njk4NzU3ZDM3 LzEvWHpwc0laUWNIaE9fX0UxRTFodlNXVl9kai1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEMBNZSJ mcVNtdw4NJP7f5YIUWPft167SP9A5bzNonwDtviO1r7C2aup73ufAHG1Bs7G/69k qayMEh5kVfRTTNZaadhcpKyv0xWg4PjultnhGtavdYLsKmvPLN63BEK/zL7asU4T sWoZ2dv2X4zFMyqvW0fQkJnzmXBC9wHIr8KVRkM0lQZwSFFCrADDwHGoI8TRcqEj KSqtyMi0XWHEQ3NecG6sljZ5PCRoc0G53wbg3Ej6OANFDZdCuNjWd+WseVP1TipD aeq4gxgKMny6m+uSg4Tk1l81AIyM3qOaAVORsWyZnXtOvfvBBlgcDPRykYJBj6Cz PiTAhPTI7CGHmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:48:51 2025 by rpki-client