This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json) Hash identifier: aKIMps1VcqPzUDRpgpKA3gGLj6/WVuCK4X5AI4eY9Gw= Subject key identifier: 4D:CC:62:0D:49:64:82:B9:18:10:0B:87:F5:FA:34:B3:8D:A1:D9:C8 Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Certificate serial: 019B1012F1DA4B32E2C1321DE8F0365F4D8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 01:00:35 +0000 Manifest this update: Fri 12 Dec 2025 01:00:35 +0000 Manifest next update: Sat 13 Dec 2025 01:00:35 +0000 Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: eq8MnYY+TUJ5EQyxnpJljGU8RZud5uiFMgZ/Scpzzzo=) 2: YpoQb4d2ZirnrI3hA0gBb3h8Ui4.roa (hash: xAwvy1eVXmw515xL9f1ayxKoN3gZJ8WiMBC17Avnw5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:12:f1:da:4b:32:e2:c1:32:1d:e8:f0:36:5f:4d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923 Validity Not Before: Dec 12 01:00:35 2025 GMT Not After : Dec 13 01:00:35 2025 GMT Subject: CN=4dcc620d496482b918100b87f5fa34b38da1d9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:80:1a:87:b9:fd:cd:a8:36:08:9d:ea:d0:b1: 0f:48:2a:03:11:39:c3:00:84:57:55:46:53:5f:5d: b8:69:01:80:f2:f9:fc:f5:20:e0:16:96:ef:8d:9d: ba:cc:af:df:87:2b:15:bc:fd:3a:0c:24:1c:37:23: 13:03:37:e5:fc:67:eb:b2:97:90:41:e5:6e:5a:8a: 1b:f0:8a:c8:1f:1e:c9:ff:33:33:1e:f3:5d:c9:87: 5a:e8:77:29:8a:21:59:6c:86:fb:55:98:35:f3:ed: 5f:29:fb:97:10:21:d9:bd:6d:d4:54:46:fc:9e:af: ae:db:ff:b3:21:55:3d:0e:37:76:f4:01:b8:a4:95: 3b:a2:a5:b6:cb:ec:d0:0f:a1:47:d6:f5:dd:7d:2a: c7:20:8f:86:a3:cb:0f:fc:0d:90:3d:6b:17:f5:d2: 24:04:c5:9b:c4:5c:5b:21:1d:bb:14:29:d4:ee:5f: ca:fc:81:c3:18:ca:a9:43:61:15:a2:79:ed:c7:91: 5d:96:22:bf:6a:64:a9:a2:9c:82:ce:0f:c3:76:06: 74:66:05:95:92:90:ec:48:eb:44:6f:f1:ec:94:80: ab:2b:5e:26:b3:47:5c:9a:a0:dc:22:18:45:56:d9: ed:6d:87:be:9d:90:8b:42:19:e8:98:c6:38:5b:a5: 6d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CC:62:0D:49:64:82:B9:18:10:0B:87:F5:FA:34:B3:8D:A1:D9:C8 X509v3 Authority Key Identifier: keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:be:03:2b:69:f3:30:b8:7f:52:76:bf:26:f0:23:f0:08:6b: 5a:ef:53:87:40:1b:53:8a:58:3b:f5:c8:1d:b7:29:92:5e:1b: cf:12:9c:75:e5:a1:46:51:43:6c:87:5c:5c:c1:84:81:64:39: 7d:d9:73:ff:9a:38:8a:08:95:1d:99:56:f9:02:7a:e2:a3:c8: 6b:1c:a7:66:5c:66:06:1c:55:ee:c4:2b:89:7b:9f:ea:32:6c: f4:7c:28:31:5b:67:cc:89:09:9f:7b:9f:1a:bf:19:c4:49:d9: 2a:4a:b9:d0:17:ce:81:20:5b:31:04:48:bc:ad:9f:cd:b7:02: 39:67:ea:28:1f:38:80:9f:73:6a:98:6b:03:10:86:28:0f:1c: 77:be:3a:ea:28:a5:ae:7c:3c:54:36:d9:05:fa:ea:e3:79:c3: ab:f2:2c:b1:2c:59:37:0c:7d:f3:a1:6d:28:db:9f:e6:40:b0: a1:d6:f3:5f:35:be:47:21:4e:d9:9a:4c:60:8f:52:54:07:32: 55:3f:c1:a8:1d:30:2e:10:ff:57:02:ab:63:6c:79:89:26:88: e7:07:c4:25:50:cc:74:7a:22:a0:9b:1a:43:3e:77:68:8c:48: d6:56:6b:ec:4a:a7:a7:f1:8b:d9:e9:9a:c3:12:d4:0f:5a:7f: a1:4b:4f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEvHaSzLiwTId6PA2X02PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMmM3MTI2YmM4ZjM5MDU2NzQ0ZGUyMTNiMmNlMjZiNzZi Yzk5MjMwHhcNMjUxMjEyMDEwMDM1WhcNMjUxMjEzMDEwMDM1WjAzMTEwLwYDVQQD Eyg0ZGNjNjIwZDQ5NjQ4MmI5MTgxMDBiODdmNWZhMzRiMzhkYTFkOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IAah7n9zag2CJ3q0LEPSCoDETnD AIRXVUZTX124aQGA8vn89SDgFpbvjZ26zK/fhysVvP06DCQcNyMTAzfl/GfrspeQ QeVuWoob8IrIHx7J/zMzHvNdyYda6HcpiiFZbIb7VZg18+1fKfuXECHZvW3UVEb8 nq+u2/+zIVU9Djd29AG4pJU7oqW2y+zQD6FH1vXdfSrHII+Go8sP/A2QPWsX9dIk BMWbxFxbIR27FCnU7l/K/IHDGMqpQ2EVonntx5FdliK/amSpopyCzg/DdgZ0ZgWV kpDsSOtEb/HslICrK14ms0dcmqDcIhhFVtntbYe+nZCLQhnomMY4W6VtFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3MYg1JZIK5GBALh/X6NLONodnIMB8GA1UdIwQY MBaAFF8scSa8jzkFZ0TeITss4mt2vJkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMt ZTYxNWY1NmY3OGIxLzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9mNzZiMWQtNDhjYi00YWIxLTkwZWMtZTYxNWY1NmY3OGIx LzEvWHl4eEpyeVBPUVZuUk40aE95emlhM2E4bVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUr4DK2nz MLh/Una/JvAj8AhrWu9Th0AbU4pYO/XIHbcpkl4bzxKcdeWhRlFDbIdcXMGEgWQ5 fdlz/5o4igiVHZlW+QJ64qPIaxynZlxmBhxV7sQriXuf6jJs9HwoMVtnzIkJn3uf Gr8ZxEnZKkq50BfOgSBbMQRIvK2fzbcCOWfqKB84gJ9zaphrAxCGKA8cd7466iil rnw8VDbZBfrq43nDq/IssSxZNwx986FtKNuf5kCwodbzXzW+RyFO2ZpMYI9SVAcy VT/BqB0wLhD/VwKrY2x5iSaI5wfEJVDMdHoioJsaQz53aIxI1lZr7Eqnp/GL2ema wxLUD1p/oUtP0w== -----END CERTIFICATE-----Generated at Fri Dec 12 02:23:15 2025 by rpki-client