This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: AgNm/fbLmLpkkkCVv0/50YUvxAgxOQMIjOCR+bB2TNk=
Subject key identifier: 41:73:47:66:D9:D8:CE:84:0F:6C:7E:65:B8:F6:69:34:8E:D1:8C:07
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019AE6A949EF3BB77BE4CBB8ECD804BD43BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1761
Signing time: Thu 04 Dec 2025 00:00:45 +0000
Manifest this update: Thu 04 Dec 2025 00:00:45 +0000
Manifest next update: Fri 05 Dec 2025 00:00:45 +0000
Files and hashes: 1: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 9GlHmADwepevBogaf7eqSd961V6UYeCBs+HatZMaE2Q=)
2: YAmmJhyB_h-uP0bt7pChaUBYkG4.roa (hash: 2QWIeh79LiaCKjIcaN8PoKc9z0fkWg1AUVaFtkD8eVc=)
3: zaC0t6T9u1Q0_OY_Bl-7YOJ-dj4.roa (hash: X6PkBgrYQTc2P1TK5XaK7RcCDi2KWFhHLiM0QrA4Z1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 00:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e6:a9:49:ef:3b:b7:7b:e4:cb:b8:ec:d8:04:bd:43:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Dec 4 00:00:45 2025 GMT
Not After : Dec 5 00:00:45 2025 GMT
Subject: CN=41734766d9d8ce840f6c7e65b8f669348ed18c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:37:4a:57:72:21:fc:c2:33:25:9d:c7:0a:
b7:e9:0a:57:c0:3e:54:3d:db:40:80:a6:64:df:ad:
ff:25:c9:26:54:7e:69:b3:1c:e2:21:15:a6:86:0a:
22:c5:e8:c3:c4:73:bb:2d:77:6e:41:a3:20:d7:fd:
5e:29:65:7e:2e:a3:64:66:88:07:39:a8:f6:79:54:
49:ab:59:a1:52:e3:dc:32:5d:c6:a8:f6:9d:32:f9:
92:6e:98:e8:6c:f6:4d:25:5a:1f:7f:29:22:b3:9f:
85:70:9e:71:09:c1:98:4d:ab:64:6e:16:5a:e2:de:
9b:07:65:55:d6:b8:72:10:9c:ae:90:5d:46:60:02:
d8:ab:b1:6d:a2:76:a3:ff:c2:2d:34:fa:50:66:a2:
bb:1a:07:cf:bb:19:1b:f7:cb:de:d7:35:7d:d8:f8:
81:12:81:96:89:49:2a:ac:68:07:bc:08:d9:1e:70:
d0:09:96:b6:d1:2f:69:b4:31:3e:e5:9d:be:5a:e7:
67:a7:3b:cd:54:85:2e:f5:6c:b7:b9:27:d8:50:8d:
9a:31:04:14:94:47:0a:3a:a8:8f:b2:bb:76:7f:98:
e1:63:89:e9:92:2a:d2:51:5e:8f:14:cd:f0:f1:fc:
f0:8a:d9:30:29:93:13:58:62:04:ff:6e:d9:82:05:
95:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:73:47:66:D9:D8:CE:84:0F:6C:7E:65:B8:F6:69:34:8E:D1:8C:07
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:a2:06:42:b2:42:b0:3d:62:ee:49:fe:90:f1:d8:ee:27:
89:2a:2e:f0:36:81:77:02:02:5d:1c:99:2a:44:e1:5a:93:f0:
38:68:16:6d:69:e6:2a:34:c4:57:62:2b:4d:cc:53:c8:1a:3a:
d0:a5:c6:09:c8:d4:59:87:6a:6d:fd:cd:d7:d4:48:7a:02:ad:
c2:a2:59:48:c2:55:d0:93:05:d7:f8:2d:23:65:79:62:ad:60:
00:c4:4c:a3:3a:ba:98:3d:d6:fe:e0:81:26:ce:ea:3f:2d:fe:
9b:4c:77:d2:51:eb:80:4a:ea:9f:40:6c:99:2c:2c:83:38:f1:
8c:a6:2c:00:ed:6d:36:5a:53:43:3c:c4:0e:84:11:81:51:51:
7c:de:bc:4f:a2:22:79:ec:a0:50:06:a9:9f:8d:7e:69:39:1e:
45:e5:36:28:ad:9a:c2:60:88:78:fa:e7:92:16:01:f6:7e:15:
19:80:d5:e0:52:e8:1c:cc:b5:22:5b:0e:5b:1d:ff:d5:4b:7c:
42:a7:f9:15:44:b3:c7:ae:a8:1a:30:0d:de:d6:1f:a9:eb:68:
29:06:51:67:0c:de:b5:86:03:15:48:54:c4:cc:da:c4:7f:d7:
04:8c:0c:6c:64:19:b4:28:90:9e:24:28:9a:66:6d:95:f5:96:
c5:51:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 4 05:18:48 2025 by rpki-client