This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft File: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft (raw, json) Hash identifier: qyTcvT2eBhAA8DMoI1DhRtaz7ywah6m3E3bGQ4a2PPc= Subject key identifier: 44:3F:F0:EF:33:68:C7:D2:4A:53:94:0C:BB:E0:3D:98:42:2E:CF:F1 Authority key identifier: C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C Certificate issuer: /CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Certificate serial: 019B0E24F78F66A75CBDF056A4FEACEDF7DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft Manifest number: 0226 Signing time: Thu 11 Dec 2025 16:01:02 +0000 Manifest this update: Thu 11 Dec 2025 16:01:02 +0000 Manifest next update: Fri 12 Dec 2025 16:01:02 +0000 Files and hashes: 1: YZ1rgmmdGJTdnaDAgDl2-yE974E.roa (hash: Lb3bg3bm9QZky/VWwidZy1sN1eo2ThSodX/AgWbvOtQ=) 2: _5i050DixZy2EtKOhz8lOMgCfIg.roa (hash: /YfNbDhqCMdFRtH+NtU0vFR+Vi8QHGbG/GrA2aaBEwM=) 3: xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl (hash: 05f/PyzNHFhRCmv4TAnIiuUCbf6hczUKdpisCQ8Z+Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:f7:8f:66:a7:5c:bd:f0:56:a4:fe:ac:ed:f7:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5338efce4494f5b925f0e9af73651c1cbf1e04c Validity Not Before: Dec 11 16:01:02 2025 GMT Not After : Dec 12 16:01:02 2025 GMT Subject: CN=443ff0ef3368c7d24a53940cbbe03d98422ecff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:75:2b:78:12:31:27:59:eb:22:61:f8:95: 3a:91:71:96:64:6b:f3:57:ea:8f:0b:46:d5:4f:a9: 35:04:d2:79:be:40:19:57:d9:9e:3a:4d:f9:c4:20: 0a:f8:d0:74:71:b7:b3:48:69:16:cb:0c:0a:75:1c: 72:08:a3:dd:fc:0a:6f:34:a7:bd:56:d0:24:88:35: 92:6f:46:32:b4:1b:de:73:1d:8f:26:ba:ab:14:6a: 7c:ad:0c:ed:67:b9:9b:b2:5c:88:82:af:2e:92:bd: 79:f8:55:18:ac:df:00:7b:ae:79:69:d9:49:7b:7a: bd:2f:10:e4:cc:3b:06:44:7a:e8:1a:2b:92:e4:9a: 44:cd:c9:56:10:9a:fd:d5:24:aa:7f:5d:90:f6:65: 22:0d:c1:e3:e0:84:4a:44:2b:d1:37:41:51:4f:1b: 9c:74:aa:59:3a:76:80:d6:c3:75:2b:ba:ff:56:84: 54:ba:92:f1:8c:58:34:9f:a7:69:03:7c:c2:e2:97: c9:c6:7f:96:3b:93:46:46:52:a5:e4:ae:06:ea:d4: 66:74:b0:c0:40:83:6c:2a:2f:e5:59:15:78:10:c0: f2:5b:84:3f:45:a6:24:7b:a7:5c:e7:67:a4:6f:04: c5:04:35:99:19:e5:b5:69:1d:df:91:29:b1:dc:bb: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:F0:EF:33:68:C7:D2:4A:53:94:0C:BB:E0:3D:98:42:2E:CF:F1 X509v3 Authority Key Identifier: keyid:C5:33:8E:FC:E4:49:4F:5B:92:5F:0E:9A:F7:36:51:C1:CB:F1:E0:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/7c4e32-6c20-41c1-a85f-fdd3a815abb8/1/xTOO_ORJT1uSXw6a9zZRwcvx4Ew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:37:53:4b:2c:2b:9e:ce:97:46:12:94:3a:9f:93:da:ef:bf: df:51:2d:4e:f2:fb:ff:a6:7c:4c:a2:38:d3:3e:a6:5a:dc:94: a2:76:09:59:cc:d9:2a:c7:bd:7e:91:cb:99:6b:bc:66:90:c3: 05:97:a3:3d:28:a8:89:7f:a3:be:88:37:00:d0:7c:06:bf:31: 98:d7:ad:7f:08:9f:30:1e:b7:d8:0d:8a:5c:cc:ab:4a:f5:36: f3:51:ca:6f:86:79:d0:5e:d0:e4:03:72:f5:76:4b:80:ad:52: 6a:a8:ed:1d:21:bb:a7:65:f9:07:dc:ec:3d:c2:6e:53:b7:c2: 86:ab:93:2e:a4:40:c2:f0:28:13:91:72:48:61:16:31:1b:70: b9:b9:15:b8:19:04:3d:3e:28:b5:9c:ff:75:b9:4e:5e:59:9c: 8e:7e:c7:b3:7a:b7:33:97:83:6e:c3:ac:71:8e:21:52:88:7b: ab:65:6e:51:38:31:f9:76:35:c1:8d:be:7c:3a:04:00:f4:84: 64:02:9a:2d:b2:ad:4f:3d:3b:af:34:3d:fc:ad:e6:5a:b3:e0: 53:70:30:0a:11:f0:9a:91:6a:15:fe:eb:8c:c9:fe:3f:c7:6a: 33:ba:15:43:e0:54:0f:88:c5:ab:dc:36:e7:9c:ea:49:4a:6e: 7c:7a:32:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJPePZqdcvfBWpP6s7ffeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MzM4ZWZjZTQ0OTRmNWI5MjVmMGU5YWY3MzY1MWMxY2Jm MWUwNGMwHhcNMjUxMjExMTYwMTAyWhcNMjUxMjEyMTYwMTAyWjAzMTEwLwYDVQQD Eyg0NDNmZjBlZjMzNjhjN2QyNGE1Mzk0MGNiYmUwM2Q5ODQyMmVjZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xN1K3gSMSdZ6yJh+JU6kXGWZGvz V+qPC0bVT6k1BNJ5vkAZV9meOk35xCAK+NB0cbezSGkWywwKdRxyCKPd/ApvNKe9 VtAkiDWSb0YytBvecx2PJrqrFGp8rQztZ7mbslyIgq8ukr15+FUYrN8Ae655adlJ e3q9LxDkzDsGRHroGiuS5JpEzclWEJr91SSqf12Q9mUiDcHj4IRKRCvRN0FRTxuc dKpZOnaA1sN1K7r/VoRUupLxjFg0n6dpA3zC4pfJxn+WO5NGRlKl5K4G6tRmdLDA QINsKi/lWRV4EMDyW4Q/RaYke6dc52ekbwTFBDWZGeW1aR3fkSmx3Lvi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQ/8O8zaMfSSlOUDLvgPZhCLs/xMB8GA1UdIwQY MBaAFMUzjvzkSU9bkl8Omvc2UcHL8eBMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYt ZmRkM2E4MTVhYmI4LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS83YzRlMzItNmMyMC00MWMxLWE4NWYtZmRkM2E4MTVhYmI4 LzEveFRPT19PUkpUMXVTWHc2YTl6WlJ3Y3Z4NEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizdTSywr ns6XRhKUOp+T2u+/31EtTvL7/6Z8TKI40z6mWtyUonYJWczZKse9fpHLmWu8ZpDD BZejPSioiX+jvog3ANB8Br8xmNetfwifMB632A2KXMyrSvU281HKb4Z50F7Q5ANy 9XZLgK1SaqjtHSG7p2X5B9zsPcJuU7fChquTLqRAwvAoE5FySGEWMRtwubkVuBkE PT4otZz/dblOXlmcjn7Hs3q3M5eDbsOscY4hUoh7q2VuUTgx+XY1wY2+fDoEAPSE ZAKaLbKtTz07rzQ9/K3mWrPgU3AwChHwmpFqFf7rjMn+P8dqM7oVQ+BUD4jFq9w2 55zqSUpufHoyeQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:24:42 2025 by rpki-client