This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft File: XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft (raw, json) Hash identifier: BbkbWhLo3hqw9hDmo407p5a81kliMDWa51D/Lu+SWGc= Subject key identifier: 2F:33:4B:1A:75:8D:9E:77:81:DC:A0:C8:A1:5A:A0:01:DB:AB:E8:16 Authority key identifier: 5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF Certificate issuer: /CN=5e4098f206850488b72cdde8387c3181c63f8cdf Certificate serial: 019B06D95798EB28044A13CAF3A7461EB9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft Manifest number: 051D Signing time: Wed 10 Dec 2025 06:01:05 +0000 Manifest this update: Wed 10 Dec 2025 06:01:05 +0000 Manifest next update: Thu 11 Dec 2025 06:01:05 +0000 Files and hashes: 1: XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl (hash: dEkdWZmDMQMAWBvwqXPKOOmBihv+vqWV7pCN4N7AzoI=) 2: s-n3Ovf4DLNZiMVmwACfXlwBFQg.roa (hash: +v54HWEZgRWIsiIa+lVD9RDFt4kmB458GN/XYvVzPIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:d9:57:98:eb:28:04:4a:13:ca:f3:a7:46:1e:b9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e4098f206850488b72cdde8387c3181c63f8cdf Validity Not Before: Dec 10 06:01:05 2025 GMT Not After : Dec 11 06:01:05 2025 GMT Subject: CN=2f334b1a758d9e7781dca0c8a15aa001dbabe816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:69:a9:4c:a2:b4:e0:15:b6:69:b7:21:5f: fe:5c:21:93:51:e3:d3:12:01:1d:44:75:92:4f:ca: e1:be:b9:6d:a3:81:93:44:16:5a:ac:02:dd:62:00: b9:a3:8c:48:fe:97:33:55:aa:f6:20:0a:70:92:ee: ac:ff:71:77:e2:cd:0d:3e:5a:1e:f8:5b:ec:02:72: 19:d2:c7:51:3f:ab:6a:92:27:2d:ac:87:e1:b9:03: ae:46:4e:9c:74:70:11:af:c7:32:ea:a7:60:7e:94: 99:15:52:79:0e:3e:04:fa:ec:f9:ef:e7:f8:3e:96: 5a:19:42:2f:0d:45:2b:2f:23:30:01:9b:39:3b:96: 6e:f3:36:93:a5:ac:28:e3:65:34:26:39:03:82:c0: a7:82:8a:67:22:34:9c:08:a0:ff:c7:6e:6e:88:ea: ff:20:2f:0f:c9:04:b5:a0:b0:1a:c5:c3:73:2c:f0: ba:c0:90:2d:3f:46:18:6a:7c:5a:ed:2f:a2:a9:b3: 86:c0:39:55:61:af:ac:12:12:5f:d0:f3:44:a6:07: ee:5e:69:5a:ee:81:3a:be:73:85:e3:e0:c0:42:bb: 92:a3:b3:0a:74:45:59:95:79:40:4e:4f:22:f9:b2: bc:d6:fd:fb:b9:76:c5:cc:8c:67:26:01:87:4e:68: 50:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:33:4B:1A:75:8D:9E:77:81:DC:A0:C8:A1:5A:A0:01:DB:AB:E8:16 X509v3 Authority Key Identifier: keyid:5E:40:98:F2:06:85:04:88:B7:2C:DD:E8:38:7C:31:81:C6:3F:8C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkCY8gaFBIi3LN3oOHwxgcY_jN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/c0b106-6bf1-4660-8aff-9cf87ff1ce5b/1/XkCY8gaFBIi3LN3oOHwxgcY_jN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bc:93:0d:62:7f:c6:d4:9b:02:a7:61:19:e7:5a:9c:17:a1: 09:4e:bf:ac:8a:96:9d:ae:d9:6d:d6:fa:0c:85:d7:87:78:1f: 91:e5:8d:23:5c:7e:67:01:03:41:6b:a8:3a:82:99:54:16:b2: e4:7f:d6:d9:83:46:80:4a:a4:0f:67:40:0f:e1:81:65:7b:ac: af:5d:5e:d8:77:b3:70:9c:7b:2f:91:d7:9a:46:cd:21:91:a7: 94:34:71:31:c0:d3:45:51:c0:bd:e3:88:1c:9a:4b:19:c4:59: 98:70:4e:86:c4:ff:ea:e0:f6:11:79:f9:5a:05:e6:74:e4:e2: eb:1d:b6:90:b2:f1:9a:53:ed:2d:51:b5:77:f7:fa:bc:1e:40: 0e:fd:bb:5b:bd:eb:73:25:2c:8d:71:f5:52:9c:9d:1c:58:df: a2:ae:70:bf:13:d8:de:73:bd:99:6f:3c:a8:f5:9f:07:3e:1d: 8b:ef:cf:1e:8e:2e:e8:63:db:2a:dc:d3:f1:d3:a9:1b:05:5d: 7f:32:b4:d8:61:ab:31:08:e7:3e:31:c7:13:92:80:b6:fb:6d: 91:7d:51:2a:87:00:cc:10:67:d4:e3:9f:c5:8d:b5:18:0e:78: 3a:d3:34:7b:12:fa:15:e4:46:ed:30:f9:c8:4a:7e:fc:6b:e6: f0:3f:f4:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsG2VeY6ygEShPK86dGHrm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDA5OGYyMDY4NTA0ODhiNzJjZGRlODM4N2MzMTgxYzYz ZjhjZGYwHhcNMjUxMjEwMDYwMTA1WhcNMjUxMjExMDYwMTA1WjAzMTEwLwYDVQQD EygyZjMzNGIxYTc1OGQ5ZTc3ODFkY2EwYzhhMTVhYTAwMWRiYWJlODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+xpqUyitOAVtmm3IV/+XCGTUePT EgEdRHWST8rhvrlto4GTRBZarALdYgC5o4xI/pczVar2IApwku6s/3F34s0NPloe +FvsAnIZ0sdRP6tqkictrIfhuQOuRk6cdHARr8cy6qdgfpSZFVJ5Dj4E+uz57+f4 PpZaGUIvDUUrLyMwAZs5O5Zu8zaTpawo42U0JjkDgsCngopnIjScCKD/x25uiOr/ IC8PyQS1oLAaxcNzLPC6wJAtP0YYanxa7S+iqbOGwDlVYa+sEhJf0PNEpgfuXmla 7oE6vnOF4+DAQruSo7MKdEVZlXlATk8i+bK81v37uXbFzIxnJgGHTmhQ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8zSxp1jZ53gdygyKFaoAHbq+gWMB8GA1UdIwQY MBaAFF5AmPIGhQSItyzd6Dh8MYHGP4zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYt OWNmODdmZjFjZTViLzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9jMGIxMDYtNmJmMS00NjYwLThhZmYtOWNmODdmZjFjZTVi LzEvWGtDWThnYUZCSWkzTE4zb09Id3hnY1lfak44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7yTDWJ/ xtSbAqdhGedanBehCU6/rIqWna7Zbdb6DIXXh3gfkeWNI1x+ZwEDQWuoOoKZVBay 5H/W2YNGgEqkD2dAD+GBZXusr11e2HezcJx7L5HXmkbNIZGnlDRxMcDTRVHAveOI HJpLGcRZmHBOhsT/6uD2EXn5WgXmdOTi6x22kLLxmlPtLVG1d/f6vB5ADv27W73r cyUsjXH1UpydHFjfoq5wvxPY3nO9mW88qPWfBz4di+/PHo4u6GPbKtzT8dOpGwVd fzK02GGrMQjnPjHHE5KAtvttkX1RKocAzBBn1OOfxY21GA54OtM0exL6FeRG7TD5 yEp+/Gvm8D/0cw== -----END CERTIFICATE-----Generated at Wed Dec 10 08:51:06 2025 by rpki-client