This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json) Hash identifier: DRDRTTN+rjVJJ9G58f1mYIS5TuusMYVtCIw5NH+gGKM= Subject key identifier: A0:28:8F:11:D9:1F:D3:45:E3:3C:AA:5B:8A:1F:68:A0:B8:7D:4D:4C Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Certificate serial: 019B34569C2DBB2B9FA932E2A94CFC7C021C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft Manifest number: 049E Signing time: Fri 19 Dec 2025 02:00:49 +0000 Manifest this update: Fri 19 Dec 2025 02:00:49 +0000 Manifest next update: Sat 20 Dec 2025 02:00:49 +0000 Files and hashes: 1: 8X4RLASwemcpB7sXIrd5tJXKl_c.roa (hash: Ke6+6gCy+3vyH+phFsmwWndNL+U9vVNYKRn14tnYOss=) 2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: BOOBzdwjxQsKA5IMIPa/zOBOIxE4aNylBZK2r5/xekw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:9c:2d:bb:2b:9f:a9:32:e2:a9:4c:fc:7c:02:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d Validity Not Before: Dec 19 02:00:49 2025 GMT Not After : Dec 20 02:00:49 2025 GMT Subject: CN=a0288f11d91fd345e33caa5b8a1f68a0b87d4d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:81:bc:05:3d:f8:ec:0a:46:48:1a:e5:e1: ee:d3:04:ff:d0:13:75:ff:f4:58:86:c8:03:f4:aa: 72:67:5c:88:8a:38:8a:ed:65:75:b3:0b:ff:b5:97: 1e:53:a8:2e:94:57:07:91:dc:03:38:54:d5:44:3e: 4e:b6:2b:b0:23:39:5e:25:9d:5c:74:a8:52:a1:d7: c3:49:86:56:aa:51:5c:e6:4a:2d:a4:68:42:07:2b: 65:20:29:ae:ab:75:12:04:f9:da:6a:e3:e4:00:1e: 0b:8e:88:a0:94:b6:f0:23:ce:78:24:68:26:ff:39: 75:62:3b:75:e4:5f:aa:c7:62:b0:68:f3:8b:60:13: 2e:1d:b2:a9:45:38:52:b2:c0:07:85:0a:cc:89:42: 2d:f5:b0:5d:a5:97:34:a1:69:23:c5:e8:fa:52:e2: ae:42:71:06:19:54:a7:ca:64:fb:10:d6:ce:61:77: 22:70:9c:f3:3c:7d:4b:81:5b:48:5a:a9:12:40:52: 74:77:d3:7a:45:49:4b:79:ad:d2:34:d2:d6:7a:de: 6c:d1:1b:1b:10:ff:7d:98:b3:5f:f2:a2:a9:ac:1d: a6:22:1d:47:17:64:01:13:a5:a6:57:25:e9:c8:e6: 08:ee:35:c9:1c:a6:a7:79:69:17:7c:f2:1a:ca:89: fd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:28:8F:11:D9:1F:D3:45:E3:3C:AA:5B:8A:1F:68:A0:B8:7D:4D:4C X509v3 Authority Key Identifier: keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:aa:98:b7:08:d1:06:ef:86:8d:f1:2d:aa:04:3c:35:80:fc: 92:16:b1:d8:52:f1:2a:9e:a4:e5:82:e0:1c:90:06:a3:b2:59: ca:93:67:ca:74:af:fd:a3:ae:fc:e3:f4:78:b8:67:e3:30:b6: 28:c9:84:27:0f:a1:70:d4:d7:f9:a3:11:72:d1:ca:cc:83:87: 4c:0b:c8:61:e3:d1:ef:6a:98:8b:b9:42:0f:3d:36:41:6e:e7: a5:e3:fe:ca:3c:c8:e4:b4:56:bd:f5:6b:60:f7:3d:12:65:2f: 20:bb:5e:dc:0f:d7:70:2b:5e:af:6a:51:5c:35:76:89:83:f7: bd:56:89:ee:1b:8e:b0:0f:3f:e0:04:35:3c:5f:e3:f5:4e:34: 58:9a:b6:e5:40:ea:e9:8f:e0:99:07:9e:05:d7:33:9e:6c:2f: 19:15:bc:6f:3b:32:7b:7f:5e:b6:1c:a8:67:81:c9:93:1c:a8: 97:39:b0:a3:85:9a:5e:32:d6:3a:f4:56:63:1a:bb:c1:63:58: 77:94:1d:c6:85:37:29:bb:97:5e:ed:8e:93:2e:e9:2c:54:dd: 73:2a:1e:9e:bc:1d:70:49:df:a7:52:0b:44:d3:f2:f7:97:e8: 76:c9:31:52:37:07:26:fa:b1:ce:37:4b:b3:d8:49:35:3e:ad: 95:a7:f7:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VpwtuyufqTLiqUz8fAIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ1NzM3MjRjYjFjMDk1YjliNjFiMmRmMDVlZTNmYzFh ODcxNmQwHhcNMjUxMjE5MDIwMDQ5WhcNMjUxMjIwMDIwMDQ5WjAzMTEwLwYDVQQD EyhhMDI4OGYxMWQ5MWZkMzQ1ZTMzY2FhNWI4YTFmNjhhMGI4N2Q0ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGiBvAU9+OwKRkga5eHu0wT/0BN1 //RYhsgD9KpyZ1yIijiK7WV1swv/tZceU6gulFcHkdwDOFTVRD5OtiuwIzleJZ1c dKhSodfDSYZWqlFc5kotpGhCBytlICmuq3USBPnaauPkAB4LjoiglLbwI854JGgm /zl1Yjt15F+qx2KwaPOLYBMuHbKpRThSssAHhQrMiUIt9bBdpZc0oWkjxej6UuKu QnEGGVSnymT7ENbOYXcicJzzPH1LgVtIWqkSQFJ0d9N6RUlLea3SNNLWet5s0Rsb EP99mLNf8qKprB2mIh1HF2QBE6WmVyXpyOYI7jXJHKaneWkXfPIayon9EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAojxHZH9NF4zyqW4ofaKC4fU1MMB8GA1UdIwQY MBaAFMYtVzckyxwJW5thst8F7j/BqHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgt ZjY3ZWNjNTg1YmI4LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMmNmMTEtYmYxNC00MjA0LWFmODgtZjY3ZWNjNTg1YmI4 LzEveGkxWE55VExIQWxibTJHeTN3WHVQOEdvY1cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6qYtwjR Bu+GjfEtqgQ8NYD8khax2FLxKp6k5YLgHJAGo7JZypNnynSv/aOu/OP0eLhn4zC2 KMmEJw+hcNTX+aMRctHKzIOHTAvIYePR72qYi7lCDz02QW7npeP+yjzI5LRWvfVr YPc9EmUvILte3A/XcCter2pRXDV2iYP3vVaJ7huOsA8/4AQ1PF/j9U40WJq25UDq 6Y/gmQeeBdcznmwvGRW8bzsye39ethyoZ4HJkxyolzmwo4WaXjLWOvRWYxq7wWNY d5QdxoU3KbuXXu2Oky7pLFTdcyoenrwdcEnfp1ILRNPy95fodskxUjcHJvqxzjdL s9hJNT6tlaf3BQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:15:47 2025 by rpki-client