This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft File: XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json) Hash identifier: JGCfrSVOGc3RDhFxXeEnYbsj8+LCbsNY6Uo5SpRMerI= Subject key identifier: B6:16:D6:20:65:A8:74:0D:31:5E:2A:A7:64:74:67:B7:3B:AC:5A:34 Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F Certificate issuer: /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Certificate serial: 019AF79D49C23E162596FE878CFDE558FCCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft Manifest number: 1769 Signing time: Sun 07 Dec 2025 07:01:11 +0000 Manifest this update: Sun 07 Dec 2025 07:01:11 +0000 Manifest next update: Mon 08 Dec 2025 07:01:11 +0000 Files and hashes: 1: BF6kk7Ioe_IANLRocL5TB8rFDXg.roa (hash: I9vdVPlJI90+Jqde5mcaJ83frB+5PPL50CTnL2GyUcg=) 2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: hw6nCyKOKJjr8dXfQOqJt6lCrxE7H4RWpdU7ztQEL4I=) 3: ciH-ly2HETPUQCD4TRirLR18GQo.roa (hash: 71uXiXu0mczhWCwGxw73zRSUQufVbuKwkYWRQfbodEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:9d:49:c2:3e:16:25:96:fe:87:8c:fd:e5:58:fc:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f Validity Not Before: Dec 7 07:01:11 2025 GMT Not After : Dec 8 07:01:11 2025 GMT Subject: CN=b616d62065a8740d315e2aa7647467b73bac5a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:57:5e:36:e1:d4:f0:ef:5a:4a:32:b2:5f:e3: 50:7c:92:1c:6f:a1:82:d6:7e:1b:5f:a7:92:a8:a6: 47:c1:ac:a3:39:a4:66:57:a3:f1:0f:d6:c1:42:3f: 6c:f0:2c:e3:4c:61:8f:88:37:59:c4:9a:32:df:c2: b2:b5:f1:a1:a1:18:84:46:2c:2c:43:8d:b4:ee:06: 3c:be:02:f7:7a:c9:bb:5a:2c:4f:76:e2:f4:78:1d: 8f:63:e1:40:26:42:1c:85:be:05:74:f5:d2:48:0d: 77:9e:08:9d:04:fb:bd:10:0a:ab:c8:fe:3a:5b:22: af:86:44:f6:00:e6:49:60:85:29:28:f6:57:85:5f: 55:ab:77:fe:4c:f3:35:56:e6:0c:f6:dd:5f:46:c0: 7e:65:d2:b8:92:56:ee:cc:78:ad:cb:16:43:01:8a: f5:14:5e:d9:0a:64:58:48:3d:5b:8b:00:94:2d:be: 1f:fc:b2:25:b0:6f:7f:4d:58:68:93:38:07:7d:e3: c6:3b:63:b2:53:2b:b4:48:a4:91:5e:52:ef:85:b4: c6:02:15:7d:c9:42:da:bd:34:5c:b5:b2:ac:3f:7d: 08:9a:fb:99:ad:b5:db:66:4d:a5:46:a9:74:6c:71: f5:7d:c8:81:6e:67:7f:fa:ae:33:7e:fe:b1:7e:f1: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:16:D6:20:65:A8:74:0D:31:5E:2A:A7:64:74:67:B7:3B:AC:5A:34 X509v3 Authority Key Identifier: keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a9:39:32:41:2f:5b:86:1b:47:f6:e9:b8:98:c7:fc:1d:8a: 7b:5e:35:52:b1:e7:9d:f3:28:45:8b:1c:c7:2f:0d:d2:c9:57: b0:c8:68:fa:c0:fa:54:52:64:52:de:66:9b:6e:8f:eb:79:b1: 15:45:d8:77:fe:f9:be:b0:6a:31:24:7b:af:d8:c7:a7:7a:2f: bf:8f:75:19:b2:38:66:17:0b:93:ce:e7:6e:0f:91:c7:f8:0c: d9:ac:81:26:49:0b:dc:28:80:55:e3:ab:38:95:7a:42:0a:a1: 73:76:18:95:43:1b:d7:d4:53:5a:6f:92:04:65:ad:31:1c:4e: 74:49:2a:b8:e5:eb:cd:c1:78:56:5e:dd:8a:9c:80:f8:1a:2c: 25:63:6f:9e:db:bd:4d:4c:79:07:0c:79:56:18:05:e6:ea:9d: 13:bb:9e:fc:f0:2d:31:ac:35:8d:d8:90:66:83:36:3a:6e:8f: 76:08:47:08:bf:3e:b5:de:9a:47:85:6e:f4:51:fe:ec:81:f0: 31:a3:2f:2c:01:f6:b3:3b:e4:7f:08:16:c9:88:5b:5a:1a:04: 16:a9:62:b9:5e:ce:72:d8:7f:7a:a5:47:58:ef:85:51:8a:3a: 3e:d6:8b:aa:96:e8:4a:4a:5d:02:be:ff:ba:56:6e:a8:b8:64: 79:24:59:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3nUnCPhYllv6HjP3lWPzKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3 ZjEyMWYwHhcNMjUxMjA3MDcwMTExWhcNMjUxMjA4MDcwMTExWjAzMTEwLwYDVQQD EyhiNjE2ZDYyMDY1YTg3NDBkMzE1ZTJhYTc2NDc0NjdiNzNiYWM1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ldeNuHU8O9aSjKyX+NQfJIcb6GC 1n4bX6eSqKZHwayjOaRmV6PxD9bBQj9s8CzjTGGPiDdZxJoy38KytfGhoRiERiws Q4207gY8vgL3esm7WixPduL0eB2PY+FAJkIchb4FdPXSSA13ngidBPu9EAqryP46 WyKvhkT2AOZJYIUpKPZXhV9Vq3f+TPM1VuYM9t1fRsB+ZdK4klbuzHityxZDAYr1 FF7ZCmRYSD1biwCULb4f/LIlsG9/TVhokzgHfePGO2OyUyu0SKSRXlLvhbTGAhV9 yULavTRctbKsP30ImvuZrbXbZk2lRql0bHH1fciBbmd/+q4zfv6xfvEeRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYW1iBlqHQNMV4qp2R0Z7c7rFo0MB8GA1UdIwQY MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5 LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaak5MkEv W4YbR/bpuJjH/B2Ke141UrHnnfMoRYscxy8N0slXsMho+sD6VFJkUt5mm26P63mx FUXYd/75vrBqMSR7r9jHp3ovv491GbI4ZhcLk87nbg+Rx/gM2ayBJkkL3CiAVeOr OJV6Qgqhc3YYlUMb19RTWm+SBGWtMRxOdEkquOXrzcF4Vl7dipyA+BosJWNvntu9 TUx5Bwx5VhgF5uqdE7ue/PAtMaw1jdiQZoM2Om6PdghHCL8+td6aR4Vu9FH+7IHw MaMvLAH2szvkfwgWyYhbWhoEFqliuV7Octh/eqVHWO+FUYo6PtaLqpboSkpdAr7/ ulZuqLhkeSRZMg== -----END CERTIFICATE-----Generated at Sun Dec 7 10:15:17 2025 by rpki-client