This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json) Hash identifier: wcjb6nV0qjLyC5OKMTgWrVMAuRVnnHbnsB/mSZcTvto= Subject key identifier: 58:97:A8:8E:68:8B:A5:CA:B9:0D:7A:67:1A:0D:6A:CA:C6:E1:23:8A Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Certificate serial: 019B59776288AA71004307EABA600CEB93D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft Manifest number: 20 Signing time: Fri 26 Dec 2025 07:02:34 +0000 Manifest this update: Fri 26 Dec 2025 07:02:34 +0000 Manifest next update: Sat 27 Dec 2025 07:02:34 +0000 Files and hashes: 1: Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa (hash: fu6puCFSXOhmvdstgYFNniwp8CQNss2JS4c7MbUiXmA=) 2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: 7IVxqDiTrMPJZV/WOMah573mLDkRXAOanhueibycBfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:62:88:aa:71:00:43:07:ea:ba:60:0c:eb:93:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Validity Not Before: Dec 26 07:02:34 2025 GMT Not After : Dec 27 07:02:34 2025 GMT Subject: CN=5897a88e688ba5cab90d7a671a0d6acac6e1238a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:4b:2e:21:55:39:e2:a8:c8:59:78:fc:42: 5a:a9:08:22:9a:df:dc:52:96:04:f2:a9:88:e5:24: 28:8a:fb:b2:d7:3c:f8:9c:0b:55:16:b1:09:4b:29: 33:4f:a6:64:b9:ad:3d:28:39:fd:47:5c:70:bb:42: 55:b3:53:af:f9:89:8e:33:eb:0a:99:54:ca:e6:bd: af:1b:4f:9e:5f:b7:08:3c:17:78:a0:cb:73:6c:36: 81:a3:2a:df:63:45:b1:77:ef:75:cf:1b:46:ab:4e: 3d:9f:bb:72:7c:de:dd:2b:0f:f7:f1:2b:27:d2:ea: bc:a7:b3:95:96:27:2e:eb:09:e9:c4:83:8c:4a:e4: ef:06:c0:a5:28:0b:a0:44:92:27:aa:8f:81:6f:8e: ef:31:70:dd:a9:67:35:3e:21:6c:fb:93:ee:e4:48: 9f:94:f3:36:2f:f8:19:69:06:b9:45:a0:f0:03:46: 7a:0f:76:b4:df:66:24:a8:73:86:10:08:03:07:ce: c1:f8:c4:01:db:82:60:9f:d1:80:13:97:19:28:b6: 57:05:97:69:c4:d4:5f:7a:03:db:27:ba:5b:d8:5e: 40:a2:34:51:91:7d:11:60:85:2e:a5:47:77:dc:88: 2a:30:ab:6a:b0:8e:98:e5:85:32:4e:a8:aa:b2:62: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:A8:8E:68:8B:A5:CA:B9:0D:7A:67:1A:0D:6A:CA:C6:E1:23:8A X509v3 Authority Key Identifier: keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:78:f8:60:cc:33:9a:db:cd:1a:85:12:00:2e:6f:71:53:b1: d6:22:d7:5b:0d:46:a4:4f:14:39:7a:fc:c0:fc:05:d4:f1:32: de:7f:52:18:0c:18:2f:8e:69:09:07:43:d8:01:30:52:1c:1e: df:cc:26:d8:ac:b6:3c:88:2b:6c:12:9b:a3:4a:1a:49:58:94: 07:15:36:90:6f:a4:8a:a8:d0:6e:cb:be:04:04:61:44:ff:e7: cd:5b:4a:98:32:35:23:c9:c9:a9:36:3b:e8:a3:07:30:9b:d7: 4f:45:81:9b:3e:29:28:49:0f:09:72:0b:00:b8:6d:3d:49:4c: 75:93:c4:58:80:55:7f:a5:96:16:2b:8c:b3:72:4b:93:1d:34: 94:e4:70:98:dd:0e:1a:89:32:b5:d5:70:06:56:91:83:c7:19: 1c:af:d3:61:e6:4a:57:1d:11:11:5a:9b:a0:89:1a:f4:3f:68: 8a:b1:39:37:90:85:ce:48:79:06:42:b9:14:ff:ec:30:e2:9d: 7e:c3:e0:9f:b4:59:c1:a2:f4:e6:d2:96:d2:e3:05:57:91:62: 96:74:d9:30:d3:fc:0a:10:54:0b:64:13:0b:4c:43:99:ba:31: be:67:bc:93:82:87:ad:2e:80:da:aa:c5:43:2e:57:3b:e7:8e: 5d:7a:54:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd2KIqnEAQwfqumAM65PVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Y2JhOTgxY2U1OGExMGVkZDJjOTk4MDFlMDQzYWQ4MDRh ODVmOWEwHhcNMjUxMjI2MDcwMjM0WhcNMjUxMjI3MDcwMjM0WjAzMTEwLwYDVQQD Eyg1ODk3YTg4ZTY4OGJhNWNhYjkwZDdhNjcxYTBkNmFjYWM2ZTEyMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocRLLiFVOeKoyFl4/EJaqQgimt/c UpYE8qmI5SQoivuy1zz4nAtVFrEJSykzT6Zkua09KDn9R1xwu0JVs1Ov+YmOM+sK mVTK5r2vG0+eX7cIPBd4oMtzbDaBoyrfY0Wxd+91zxtGq049n7tyfN7dKw/38Ssn 0uq8p7OVlicu6wnpxIOMSuTvBsClKAugRJInqo+Bb47vMXDdqWc1PiFs+5Pu5Eif lPM2L/gZaQa5RaDwA0Z6D3a032YkqHOGEAgDB87B+MQB24Jgn9GAE5cZKLZXBZdp xNRfegPbJ7pb2F5AojRRkX0RYIUupUd33IgqMKtqsI6Y5YUyTqiqsmLOsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiXqI5oi6XKuQ16ZxoNasrG4SOKMB8GA1UdIwQY MBaAFMfLqYHOWKEO3SyZgB4EOtgEqF+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEt ZDlhMWJmMTBjNTdmLzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEtZDlhMWJmMTBjNTdm LzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXj4YMwz mtvNGoUSAC5vcVOx1iLXWw1GpE8UOXr8wPwF1PEy3n9SGAwYL45pCQdD2AEwUhwe 38wm2Ky2PIgrbBKbo0oaSViUBxU2kG+kiqjQbsu+BARhRP/nzVtKmDI1I8nJqTY7 6KMHMJvXT0WBmz4pKEkPCXILALhtPUlMdZPEWIBVf6WWFiuMs3JLkx00lORwmN0O GokytdVwBlaRg8cZHK/TYeZKVx0REVqboIka9D9oirE5N5CFzkh5BkK5FP/sMOKd fsPgn7RZwaL05tKW0uMFV5FilnTZMNP8ChBUC2QTC0xDmboxvme8k4KHrS6A2qrF Qy5XO+eOXXpU4A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:38 2025 by rpki-client