This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json) Hash identifier: dYuj5cE4r0qNRzEHrDev/BoLlbVic/ofy5WK+S5sk8I= Subject key identifier: 93:5B:05:E8:D6:DB:F5:B2:6A:5E:F3:4D:5B:CD:CA:99:B7:E6:AF:E6 Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Certificate serial: 019B0F6E8DC7132067BCE0EBEF9D0A7DB228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft Manifest number: 07B5 Signing time: Thu 11 Dec 2025 22:01:02 +0000 Manifest this update: Thu 11 Dec 2025 22:01:02 +0000 Manifest next update: Fri 12 Dec 2025 22:01:02 +0000 Files and hashes: 1: 16AbDLexWxM7mos0qMmQG31v5Rg.roa (hash: 3u1e4Mqp4DtPhz1Ro9vKRDiTKwkU7uS9FwPKV5J5Ahk=) 2: FnJQovhlbIvUdo0j6O0hr0vUYNM.roa (hash: wBBuOwEzLi1HNHDVjYRKKazRYQG/hq5eug3JUFJ4Ec0=) 3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: Ld8SXbSJjlyo2GCrittTXxUEHKripbU7dLuq/u6x7oM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:8d:c7:13:20:67:bc:e0:eb:ef:9d:0a:7d:b2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Validity Not Before: Dec 11 22:01:02 2025 GMT Not After : Dec 12 22:01:02 2025 GMT Subject: CN=935b05e8d6dbf5b26a5ef34d5bcdca99b7e6afe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:5c:b2:c3:da:c4:7b:e3:07:3b:85:f1:e0: 83:85:9f:2f:25:78:e5:57:0e:26:1b:d3:02:c0:d6: 9e:ee:ef:db:92:18:d7:ab:63:d0:ee:59:05:84:e4: 7d:c2:25:1e:d8:86:e1:03:ec:c4:17:84:f0:b1:0b: 43:4a:ae:bf:60:27:48:ce:75:96:04:ce:e1:41:3b: 8f:20:d6:77:46:db:90:6f:3c:2d:72:cd:b7:7c:08: 6d:aa:3c:1f:a3:ca:9b:75:24:dd:88:2e:d1:8c:60: 54:c0:d6:3a:9d:c4:e8:63:f2:a1:4f:8b:0a:8d:fa: c7:b8:8a:d4:f7:f0:ce:43:36:fa:45:a4:a6:2f:c8: b6:fe:92:7e:c9:f7:86:4f:d1:3a:1b:df:34:1a:ca: e4:d1:c8:64:a4:30:8f:38:ac:e5:c0:66:40:5b:e8: f3:87:d5:84:44:e9:ac:31:d9:43:96:b4:bc:85:16: e1:ef:37:eb:70:3f:d7:2f:73:fa:c9:3f:85:8e:d8: 53:4c:77:5e:b7:ef:7f:28:df:c4:02:cd:27:bc:e4: 52:8b:67:f1:2a:4a:4e:3b:bd:f5:d1:29:52:1a:74: d3:0e:84:fb:d5:1e:51:19:6f:b8:93:3e:91:6f:93: 27:b0:d9:32:78:e2:58:78:53:0d:90:a5:44:98:2e: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:5B:05:E8:D6:DB:F5:B2:6A:5E:F3:4D:5B:CD:CA:99:B7:E6:AF:E6 X509v3 Authority Key Identifier: keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:af:a9:28:32:48:b3:21:49:d6:bd:23:8e:7f:85:e2:d3:c9: 35:ac:74:b9:52:8b:e5:3b:62:16:24:0e:13:4c:86:f1:d1:5e: 14:72:9b:75:3e:f8:70:52:93:a8:8f:04:62:15:89:64:48:b5: e7:65:8f:05:a5:8f:9d:fb:f7:18:d8:51:1c:5a:1f:ec:b9:a7: dc:6d:93:f9:1e:43:11:c4:bf:67:26:51:f5:c4:ee:fa:30:21: 81:81:89:80:f6:92:fb:45:e3:ba:bc:ae:28:56:f5:e1:d3:28: c6:b0:03:3a:b3:82:c5:c7:ff:ae:7a:e6:09:d3:0b:4f:3d:b5: c9:85:75:5d:b7:51:d7:57:32:1e:1f:6b:29:d2:b6:01:f5:3f: 81:38:12:7e:b9:3e:b4:4a:ac:eb:8f:91:9a:34:14:ca:c2:e0: a1:61:81:4a:4a:15:dd:8c:64:f6:0a:e7:58:3e:4d:89:c3:0a: a3:bd:13:83:53:e6:76:1c:27:57:7b:20:a9:18:e7:34:3b:cd: ac:d4:0e:b3:b8:eb:35:c4:76:f3:3f:61:bf:08:f4:4c:ba:dc: 0d:1b:2d:2a:77:ec:e5:6c:a9:00:1e:88:e5:b2:8e:64:62:63: 0f:0a:6c:ac:0b:f0:9d:d3:27:6a:ed:ee:5e:13:af:c9:f4:8d: 77:93:fa:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbo3HEyBnvODr750KfbIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4 YmFjZDkwHhcNMjUxMjExMjIwMTAyWhcNMjUxMjEyMjIwMTAyWjAzMTEwLwYDVQQD Eyg5MzViMDVlOGQ2ZGJmNWIyNmE1ZWYzNGQ1YmNkY2E5OWI3ZTZhZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGpcssPaxHvjBzuF8eCDhZ8vJXjl Vw4mG9MCwNae7u/bkhjXq2PQ7lkFhOR9wiUe2IbhA+zEF4TwsQtDSq6/YCdIznWW BM7hQTuPINZ3RtuQbzwtcs23fAhtqjwfo8qbdSTdiC7RjGBUwNY6ncToY/KhT4sK jfrHuIrU9/DOQzb6RaSmL8i2/pJ+yfeGT9E6G980Gsrk0chkpDCPOKzlwGZAW+jz h9WEROmsMdlDlrS8hRbh7zfrcD/XL3P6yT+FjthTTHdet+9/KN/EAs0nvORSi2fx KkpOO7310SlSGnTTDoT71R5RGW+4kz6Rb5MnsNkyeOJYeFMNkKVEmC6tgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNbBejW2/Wyal7zTVvNypm35q/mMB8GA1UdIwQY MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5 LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK+pKDJI syFJ1r0jjn+F4tPJNax0uVKL5TtiFiQOE0yG8dFeFHKbdT74cFKTqI8EYhWJZEi1 52WPBaWPnfv3GNhRHFof7Lmn3G2T+R5DEcS/ZyZR9cTu+jAhgYGJgPaS+0Xjuryu KFb14dMoxrADOrOCxcf/rnrmCdMLTz21yYV1XbdR11cyHh9rKdK2AfU/gTgSfrk+ tEqs64+RmjQUysLgoWGBSkoV3Yxk9grnWD5NicMKo70Tg1PmdhwnV3sgqRjnNDvN rNQOs7jrNcR28z9hvwj0TLrcDRstKnfs5WypAB6I5bKOZGJjDwpsrAvwndMnau3u XhOvyfSNd5P6Rg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:22:16 2025 by rpki-client