This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft File: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft (raw, json) Hash identifier: H92Gk0squJt63Lhn6YIe28CPW7lapI2KZQGEcpwt+vM= Subject key identifier: 51:A6:D0:4D:8F:66:61:31:65:68:F4:B0:ED:2B:8F:E7:AA:6A:B6:C7 Authority key identifier: C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 Certificate issuer: /CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Certificate serial: 019B20D0012512B4EF864E9C6CFF9DFD1E43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft Manifest number: 0D79 Signing time: Mon 15 Dec 2025 07:01:01 +0000 Manifest this update: Mon 15 Dec 2025 07:01:01 +0000 Manifest next update: Tue 16 Dec 2025 07:01:01 +0000 Files and hashes: 1: oEWWV1wTRtv4TPDh8KnSbxqUMOo.roa (hash: dy83XA1VuxS8pj9IoqOTnoyqLeOEntH2NHWNFfMk+x4=) 2: xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl (hash: pDLmpNPYzKsE68T12XYXEYHAuGdGuu+tMX0NTApVNfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d0:01:25:12:b4:ef:86:4e:9c:6c:ff:9d:fd:1e:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53f4388aadf0ae4ff5ee7bd37263c9f1e8467c7 Validity Not Before: Dec 15 07:01:01 2025 GMT Not After : Dec 16 07:01:01 2025 GMT Subject: CN=51a6d04d8f6661316568f4b0ed2b8fe7aa6ab6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:50:bb:56:5a:8b:29:02:cf:46:b9:2e:fc:87: cc:9f:d0:f9:b2:f1:17:1e:63:02:7b:cc:f2:2b:ba: 5c:d8:18:20:80:b8:bb:85:e7:2e:c6:52:96:c6:34: a2:60:bb:01:21:39:b1:b5:d8:04:18:a0:53:2f:b4: 54:56:a2:d9:21:36:97:a3:17:99:65:e6:b6:7a:74: ca:7e:dc:36:4b:d5:24:64:fa:2e:8e:98:3b:40:bd: d3:41:c6:0f:75:88:00:2e:23:b9:9f:18:d2:3d:e4: 6f:1b:64:bd:53:29:ae:37:49:b3:08:17:b1:2c:7d: 7d:25:65:11:e0:38:2b:46:d2:52:cf:3f:82:84:f8: a1:24:78:46:54:b8:f5:3b:45:fc:af:24:18:4e:4a: ac:78:7c:62:2c:ee:d9:3d:b2:dd:3d:1a:29:c5:5f: e7:ae:0e:76:48:5e:ba:65:f9:29:bf:54:b1:6c:e8: 88:44:a6:4a:c0:8a:eb:5c:68:e0:e0:64:f0:5d:d3: 0f:9b:cd:11:30:a4:71:30:cb:f3:58:3d:83:0e:3e: fc:8a:52:81:70:0e:22:6d:03:4f:dd:f1:e4:9e:c9: ad:62:73:8f:d3:bf:ee:14:12:4c:68:8a:eb:cb:4d: d4:9a:97:1d:6c:b6:02:3c:08:8f:5c:25:14:77:05: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A6:D0:4D:8F:66:61:31:65:68:F4:B0:ED:2B:8F:E7:AA:6A:B6:C7 X509v3 Authority Key Identifier: keyid:C5:3F:43:88:AA:DF:0A:E4:FF:5E:E7:BD:37:26:3C:9F:1E:84:67:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ab55ce-75ff-439b-bcb5-dda350b11f02/1/xT9DiKrfCuT_Xue9NyY8nx6EZ8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:b8:59:0e:57:7a:97:0b:35:e3:90:16:22:43:74:6f:53:6a: 64:8b:1a:84:50:4a:0f:76:9e:f0:a1:1c:54:69:ba:b9:c6:14: 1c:bc:40:00:c0:ee:95:b6:47:90:45:08:23:4c:21:d9:c8:d6: 60:b4:6b:ee:e5:70:44:50:7c:08:e7:15:12:19:a2:62:c3:72: 5c:6a:61:af:e4:b0:ed:3f:f6:20:e8:15:11:b8:1e:dc:f0:a7: 3c:cc:49:cf:d4:02:d1:07:d7:0f:52:32:d3:d0:61:96:0d:57: 4e:0d:80:2e:b4:c0:f0:ec:90:d8:3f:6a:e8:8e:79:6d:95:92: 85:0f:0e:6e:53:e6:c7:a4:6d:39:70:3b:7a:7d:55:dd:7f:66: 6e:10:41:05:28:e3:8a:4a:d0:c4:4c:91:6f:d7:9f:f9:14:cf: eb:bb:5a:eb:df:c5:69:d6:e2:d9:78:15:4c:9c:72:d6:6d:b9: 8a:a0:98:30:a1:91:34:4d:ce:7f:20:d5:06:93:f6:cf:e7:0c: 9e:46:42:59:45:bf:10:0d:d4:d0:31:8f:75:c7:c8:9c:12:4e: a2:03:18:9c:0f:13:73:bc:a3:e5:0d:02:b9:12:ab:2c:1b:bd: f3:b4:65:4a:04:79:0f:58:4a:ed:d8:83:6a:fa:24:cd:24:11: 73:e3:9c:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsg0AElErTvhk6cbP+d/R5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2Y0Mzg4YWFkZjBhZTRmZjVlZTdiZDM3MjYzYzlmMWU4 NDY3YzcwHhcNMjUxMjE1MDcwMTAxWhcNMjUxMjE2MDcwMTAxWjAzMTEwLwYDVQQD Eyg1MWE2ZDA0ZDhmNjY2MTMxNjU2OGY0YjBlZDJiOGZlN2FhNmFiNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lC7VlqLKQLPRrku/IfMn9D5svEX HmMCe8zyK7pc2BgggLi7hecuxlKWxjSiYLsBITmxtdgEGKBTL7RUVqLZITaXoxeZ Zea2enTKftw2S9UkZPoujpg7QL3TQcYPdYgALiO5nxjSPeRvG2S9UymuN0mzCBex LH19JWUR4DgrRtJSzz+ChPihJHhGVLj1O0X8ryQYTkqseHxiLO7ZPbLdPRopxV/n rg52SF66Zfkpv1SxbOiIRKZKwIrrXGjg4GTwXdMPm80RMKRxMMvzWD2DDj78ilKB cA4ibQNP3fHknsmtYnOP07/uFBJMaIrry03UmpcdbLYCPAiPXCUUdwUfPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGm0E2PZmExZWj0sO0rj+eqarbHMB8GA1UdIwQY MBaAFMU/Q4iq3wrk/17nvTcmPJ8ehGfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUt ZGRhMzUwYjExZjAyLzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hYjU1Y2UtNzVmZi00MzliLWJjYjUtZGRhMzUwYjExZjAy LzEveFQ5RGlLcmZDdVRfWHVlOU55WThueDZFWjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN7hZDld6 lws145AWIkN0b1NqZIsahFBKD3ae8KEcVGm6ucYUHLxAAMDulbZHkEUII0wh2cjW YLRr7uVwRFB8COcVEhmiYsNyXGphr+Sw7T/2IOgVEbge3PCnPMxJz9QC0QfXD1Iy 09Bhlg1XTg2ALrTA8OyQ2D9q6I55bZWShQ8OblPmx6RtOXA7en1V3X9mbhBBBSjj ikrQxEyRb9ef+RTP67ta69/Fadbi2XgVTJxy1m25iqCYMKGRNE3OfyDVBpP2z+cM nkZCWUW/EA3U0DGPdcfInBJOogMYnA8Tc7yj5Q0CuRKrLBu987RlSgR5D1hK7diD avokzSQRc+OcuQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:16:55 2025 by rpki-client