This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft File: xs-pT2E045YOpfMYhGowzz6SLdc.mft (raw, json) Hash identifier: UpuWUx2/VDPWiaFguEYV84BGlsyMJhqykQrOBtNucEM= Subject key identifier: 3D:15:49:87:A3:3C:53:2F:C4:F6:2C:5E:FB:3A:8B:AA:ED:20:57:A7 Authority key identifier: C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 Certificate issuer: /CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Certificate serial: 019AFAD5AAD388C2A519C9826DF8A689D08A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft Manifest number: 176B Signing time: Sun 07 Dec 2025 22:01:38 +0000 Manifest this update: Sun 07 Dec 2025 22:01:38 +0000 Manifest next update: Mon 08 Dec 2025 22:01:38 +0000 Files and hashes: 1: 5MLAJJhZUqxE0r3U4OzONARKrWM.roa (hash: uzxNaFRQSXU6HSS8pS9HTMaQBaBvl861ChSN96+0v7c=) 2: HR55_v7tU_nk_jRUWYmfJtQR9WA.roa (hash: /dID2iZYF2CUzIicZ7+Z023I6NUW7EvfBXCTVjJ/V0M=) 3: Me2RurdP2NLhCjdqhoeK0mf-VUg.roa (hash: LOxCBjCfnlrjhQuF86hx7twRBwn91CADOctOtx6FzQE=) 4: TCBCoiqsdjtnt0QWg_pGGqcuefY.roa (hash: 2VffKASaJzsixiO8CsFevC9I7clRJaUqZ1jWVGGpfFc=) 5: xs-pT2E045YOpfMYhGowzz6SLdc.crl (hash: 3Wc6Bn4izTMYOAOkj7sEc+ykhUmxiLNIonrKx0b+lbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:d5:aa:d3:88:c2:a5:19:c9:82:6d:f8:a6:89:d0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6cfa94f6134e3960ea5f318846a30cf3e922dd7 Validity Not Before: Dec 7 22:01:38 2025 GMT Not After : Dec 8 22:01:38 2025 GMT Subject: CN=3d154987a33c532fc4f62c5efb3a8baaed2057a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:0b:52:3d:ca:93:73:3b:93:a8:a1:73:e0: b6:ef:b2:e1:ad:13:30:fa:e8:2d:87:a3:ec:99:6d: 4c:02:0a:9d:8a:92:d1:7d:9a:49:0f:b8:d6:16:22: f8:fc:4a:53:d8:1d:63:ef:d7:05:ac:06:b9:6e:13: 95:41:bd:29:6d:cd:85:ed:c3:6d:a9:44:50:d0:2b: 7c:b6:12:fe:37:7a:a4:20:c0:ea:59:57:53:fe:e0: 15:d0:f1:0b:17:4f:57:56:57:20:c1:58:08:a2:bd: 37:b1:bb:8d:5e:8c:35:c7:f5:12:ca:06:06:09:54: 2e:3e:01:20:89:01:35:7b:94:61:fc:1a:be:29:21: 8b:05:a0:4f:49:28:26:51:c0:07:0d:9a:c6:59:93: 92:5e:9f:ce:23:02:a7:80:12:95:08:64:67:e7:61: cb:e1:9f:7a:cc:77:65:34:7b:f2:f4:7d:85:d2:d9: db:3d:76:6c:2e:1b:56:80:5c:b4:cc:45:71:30:1b: 5e:5c:48:42:bd:15:86:87:c7:18:de:17:e9:09:2f: 10:48:4f:43:57:b3:0a:05:32:dc:ee:34:b0:27:1c: 1b:38:54:a4:09:80:91:37:fd:aa:93:63:b8:99:5f: d1:dc:e7:98:a9:5f:d1:28:17:fa:bd:68:fa:01:23: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:15:49:87:A3:3C:53:2F:C4:F6:2C:5E:FB:3A:8B:AA:ED:20:57:A7 X509v3 Authority Key Identifier: keyid:C6:CF:A9:4F:61:34:E3:96:0E:A5:F3:18:84:6A:30:CF:3E:92:2D:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs-pT2E045YOpfMYhGowzz6SLdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/959e03-78fc-4589-acde-f9a43709d00b/1/xs-pT2E045YOpfMYhGowzz6SLdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f5:43:0c:9d:ff:29:28:eb:d1:e6:c8:57:57:03:4a:60:d1: 97:db:ee:2d:1a:b5:1e:77:f5:6c:6e:c7:95:ba:9c:5f:5a:8e: c6:38:e4:1f:99:b6:d6:c9:1d:ec:bf:97:3c:bc:e3:56:cf:56: a7:9d:5a:67:87:56:c6:c6:fd:a7:c4:e0:65:81:f7:7b:42:7d: 34:2a:7b:3e:4e:32:f5:fa:71:20:db:52:fd:62:80:d9:95:a8: 32:a7:bc:4c:9c:88:f2:11:31:6b:59:d5:56:bd:a5:b5:41:c3: a4:b3:8c:bb:df:64:ec:b1:50:b9:9a:9d:88:8e:7f:d2:e0:f8: dd:08:b0:6f:12:35:e7:6f:a6:bf:e8:41:f4:f6:d9:0f:f3:fd: 79:64:ab:d8:c6:44:76:11:35:c0:af:e4:ec:4a:2a:5a:8e:9a: fb:0d:f1:80:62:1e:ac:69:d1:43:62:61:75:91:48:f0:30:10: be:ce:12:69:26:21:41:3f:04:b6:2e:0e:3b:dd:00:82:f0:bb: 69:19:7e:a7:26:5d:33:53:b8:ec:d2:34:4f:7e:08:85:1a:55: 66:4a:dc:5c:a1:17:18:f8:29:ea:a4:6a:87:ef:c7:e8:79:a0: db:12:85:e0:9a:f6:48:64:ea:34:eb:2e:8b:7d:b0:a2:4d:93: 84:74:e2:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr61arTiMKlGcmCbfimidCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Y2ZhOTRmNjEzNGUzOTYwZWE1ZjMxODg0NmEzMGNmM2U5 MjJkZDcwHhcNMjUxMjA3MjIwMTM4WhcNMjUxMjA4MjIwMTM4WjAzMTEwLwYDVQQD EygzZDE1NDk4N2EzM2M1MzJmYzRmNjJjNWVmYjNhOGJhYWVkMjA1N2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxoLUj3Kk3M7k6ihc+C277LhrRMw +ugth6PsmW1MAgqdipLRfZpJD7jWFiL4/EpT2B1j79cFrAa5bhOVQb0pbc2F7cNt qURQ0Ct8thL+N3qkIMDqWVdT/uAV0PELF09XVlcgwVgIor03sbuNXow1x/USygYG CVQuPgEgiQE1e5Rh/Bq+KSGLBaBPSSgmUcAHDZrGWZOSXp/OIwKngBKVCGRn52HL 4Z96zHdlNHvy9H2F0tnbPXZsLhtWgFy0zEVxMBteXEhCvRWGh8cY3hfpCS8QSE9D V7MKBTLc7jSwJxwbOFSkCYCRN/2qk2O4mV/R3OeYqV/RKBf6vWj6ASO4wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0VSYejPFMvxPYsXvs6i6rtIFenMB8GA1UdIwQY MBaAFMbPqU9hNOOWDqXzGIRqMM8+ki3XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUt ZjlhNDM3MDlkMDBiLzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NTllMDMtNzhmYy00NTg5LWFjZGUtZjlhNDM3MDlkMDBi LzEveHMtcFQyRTA0NVlPcGZNWWhHb3d6ejZTTGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/VDDJ3/ KSjr0ebIV1cDSmDRl9vuLRq1Hnf1bG7HlbqcX1qOxjjkH5m21skd7L+XPLzjVs9W p51aZ4dWxsb9p8TgZYH3e0J9NCp7Pk4y9fpxINtS/WKA2ZWoMqe8TJyI8hExa1nV Vr2ltUHDpLOMu99k7LFQuZqdiI5/0uD43QiwbxI152+mv+hB9PbZD/P9eWSr2MZE dhE1wK/k7EoqWo6a+w3xgGIerGnRQ2JhdZFI8DAQvs4SaSYhQT8Eti4OO90AgvC7 aRl+pyZdM1O47NI0T34IhRpVZkrcXKEXGPgp6qRqh+/H6Hmg2xKF4Jr2SGTqNOsu i32wok2ThHTiVw== -----END CERTIFICATE-----Generated at Mon Dec 8 01:24:02 2025 by rpki-client