This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft File: Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json) Hash identifier: iEV8YqtRBHPIlhQFc3sQQk9J0sUpeSFn3mduAj+qEwM= Subject key identifier: B2:AF:6A:BF:EB:6A:6E:65:3C:3A:30:73:CE:73:C2:D2:51:C6:8C:59 Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 Certificate issuer: /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Certificate serial: 019B3D59E28DD6041C69B283A41A9F7BA860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft Manifest number: 0C2E Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: fbhk850+vZa2KVyQJd7m6qvSMSSuOGLUS4a1a4nwgJ0=) 2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e2:8d:d6:04:1c:69:b2:83:a4:1a:9f:7b:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515 Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=b2af6abfeb6a6e653c3a3073ce73c2d251c68c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:32:0e:75:32:93:d1:27:1e:f9:ac:13:8f:3e: bd:a6:9f:88:d6:3c:b2:70:aa:8e:d6:6b:50:51:e5: 2a:6e:86:28:88:0e:94:8c:e1:11:07:d1:c3:30:15: 66:19:33:95:7f:13:7a:e3:e3:87:6f:1a:19:67:06: b9:55:a0:bd:7c:89:b4:da:99:3f:3a:34:69:93:4d: 95:03:95:fd:f0:0e:85:15:1f:ab:ca:82:80:a1:7f: 06:b2:95:a3:b9:fd:da:4d:84:11:28:52:fe:ca:d3: d6:5f:ad:50:16:7c:80:0b:e0:40:f8:59:da:e8:46: 54:5a:b5:49:b1:71:a4:5d:d8:68:f3:81:85:ef:d5: 9b:2e:c3:32:97:2c:56:28:ae:f6:6d:c7:a4:d0:bc: 94:fc:3c:93:22:52:c3:b8:af:2d:51:d9:88:e0:54: 9c:7f:e4:55:4a:bf:c3:36:87:a9:92:e1:2d:1e:55: 2f:eb:63:ed:c0:9c:aa:47:6c:6c:80:3b:31:e6:24: df:8a:89:c9:d4:5a:05:5c:00:86:2f:5f:1e:9a:54: 45:81:6a:c9:80:79:f2:f0:1a:7c:ff:c7:36:84:25: 3c:1c:06:e3:82:94:d7:ee:c7:a0:18:8e:33:7b:d9: 13:53:5a:c5:76:6b:af:80:d1:ef:b5:e1:c6:ec:45: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AF:6A:BF:EB:6A:6E:65:3C:3A:30:73:CE:73:C2:D2:51:C6:8C:59 X509v3 Authority Key Identifier: keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:16:57:6f:ce:90:3f:92:f2:92:95:b5:2d:0e:80:cc:69:76: a0:c0:1b:47:f4:5c:e5:91:b5:5b:81:4d:f2:cc:36:52:6f:7a: 46:75:1c:61:df:04:ed:48:6e:a6:da:32:0e:cb:ca:d9:2e:d3: 66:2a:b3:6d:97:14:9f:87:89:bb:86:a9:07:23:c1:48:cf:1b: 11:9a:2e:e5:15:38:06:31:50:9c:24:da:1b:db:26:73:54:b3: c6:6f:8f:36:cd:53:2a:6a:a6:8f:31:da:12:6c:6c:75:f7:5c: 0b:1d:e5:83:e0:5a:70:e2:6a:dc:28:28:d7:90:94:36:2f:4b: 36:34:40:ab:d1:24:59:62:1b:bf:3a:1c:48:a4:54:d4:1f:8d: 62:82:20:c2:8a:11:0b:77:18:f5:79:2c:82:3a:2d:17:28:38: fa:4e:d4:43:e7:ef:60:8a:b6:41:02:e6:3e:9d:9a:55:ba:44: 26:2c:56:1d:3f:5c:b4:e0:a6:1a:49:54:97:33:ef:d5:cb:6f: b6:18:77:12:9b:2c:52:39:d5:b4:9f:d9:40:42:6d:98:cc:d0: 50:7d:55:1b:b4:72:aa:04:87:51:fd:d6:7f:54:06:69:3b:8b: 1f:10:27:af:94:df:b1:86:b6:78:63:1f:71:4e:a0:a9:cd:c8: 32:9b:f3:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeKN1gQcabKDpBqfe6hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTg5ZGFmNjRmYWRiZGQ1MzQ4ZjdkZDIyNmVjYzlmZWZj MDQ1MTUwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EyhiMmFmNmFiZmViNmE2ZTY1M2MzYTMwNzNjZTczYzJkMjUxYzY4YzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTIOdTKT0Sce+awTjz69pp+I1jyy cKqO1mtQUeUqboYoiA6UjOERB9HDMBVmGTOVfxN64+OHbxoZZwa5VaC9fIm02pk/ OjRpk02VA5X98A6FFR+ryoKAoX8GspWjuf3aTYQRKFL+ytPWX61QFnyAC+BA+Fna 6EZUWrVJsXGkXdho84GF79WbLsMylyxWKK72bcek0LyU/DyTIlLDuK8tUdmI4FSc f+RVSr/DNoepkuEtHlUv62PtwJyqR2xsgDsx5iTfionJ1FoFXACGL18emlRFgWrJ gHny8Bp8/8c2hCU8HAbjgpTX7segGI4ze9kTU1rFdmuvgNHvteHG7EU4VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKvar/ram5lPDowc85zwtJRxoxZMB8GA1UdIwQY MBaAFF6Yna9k+tvdU0j33SJuzJ/vwEUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEt ODhiMjM4ZTViYjgwLzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDg4MWQtZWE5Zi00NTNmLWJiNTEtODhiMjM4ZTViYjgw LzEvWHBpZHIyVDYyOTFUU1BmZEltN01uLV9BUlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxZXb86Q P5LykpW1LQ6AzGl2oMAbR/Rc5ZG1W4FN8sw2Um96RnUcYd8E7UhuptoyDsvK2S7T ZiqzbZcUn4eJu4apByPBSM8bEZou5RU4BjFQnCTaG9smc1Szxm+PNs1TKmqmjzHa EmxsdfdcCx3lg+BacOJq3Cgo15CUNi9LNjRAq9EkWWIbvzocSKRU1B+NYoIgwooR C3cY9XksgjotFyg4+k7UQ+fvYIq2QQLmPp2aVbpEJixWHT9ctOCmGklUlzPv1ctv thh3EpssUjnVtJ/ZQEJtmMzQUH1VG7RyqgSHUf3Wf1QGaTuLHxAnr5TfsYa2eGMf cU6gqc3IMpvz4g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:54 2025 by rpki-client