This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft File: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft (raw, json) Hash identifier: HtyIEPHxF3IeL3McLC5mmApn6zJchUfHvcuZwzv23rE= Subject key identifier: 17:A6:73:05:F4:BA:EC:15:93:57:69:F6:50:A3:BF:F2:D0:F7:24:4F Authority key identifier: C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27 Certificate issuer: /CN=c63be75374678db3a049f6a3ef2afab70d4f6f27 Certificate serial: 019B4701A39F68C4BEAB43FAC70EDE7833A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft Manifest number: 06F9 Signing time: Mon 22 Dec 2025 17:00:48 +0000 Manifest this update: Mon 22 Dec 2025 17:00:48 +0000 Manifest next update: Tue 23 Dec 2025 17:00:48 +0000 Files and hashes: 1: e-ekxZnIJuci57HrEPz7zGue28s.roa (hash: 8H4l0N/E0NCOJoBHvZIBH7Jz+P9G/e+mdO0E4zzVLoo=) 2: xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl (hash: stdz7DgsGERz4vHgDUSCXUqkoTJpMkFXy9SGIY5h5+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:a3:9f:68:c4:be:ab:43:fa:c7:0e:de:78:33:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c63be75374678db3a049f6a3ef2afab70d4f6f27 Validity Not Before: Dec 22 17:00:48 2025 GMT Not After : Dec 23 17:00:48 2025 GMT Subject: CN=17a67305f4baec15935769f650a3bff2d0f7244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:d8:86:1a:7f:2e:f4:0c:a2:59:e3:5a:a5: 7e:89:d4:e8:c6:18:e3:ac:20:c5:bf:46:97:29:25: be:e5:9d:c5:da:f3:c9:ed:81:28:ee:85:5f:10:be: 4f:e4:59:a1:f8:48:2e:0e:ce:8d:3f:04:18:82:16: f2:ef:f7:ae:0d:ac:56:0c:2d:e5:57:17:a6:76:74: 4f:56:53:bb:df:c2:d6:85:f6:c4:e1:4c:9e:b7:42: 3f:7a:31:cd:0e:85:2d:d6:d7:3e:b9:35:7c:de:bd: 40:17:8b:f7:e6:6c:62:40:e1:00:4d:be:62:50:4b: 90:60:cb:c7:82:68:6b:d5:d9:db:f3:80:b4:3e:2a: b9:45:52:a7:7b:52:6e:ac:cf:82:a5:d1:1c:16:ac: 85:62:99:b4:89:52:f5:f0:18:88:f7:93:1a:cb:a2: f5:54:6c:2b:0a:40:b1:50:a7:a1:6f:b9:73:6a:c6: 67:7f:e5:24:df:ee:84:94:df:c3:96:d9:fe:23:de: df:55:3b:9a:ab:2b:23:83:87:59:1e:ab:4a:2d:52: 2f:e6:ec:13:a1:08:fc:88:c9:aa:59:7d:75:80:14: 46:21:6a:dc:be:e1:7c:20:1c:2e:64:59:91:8f:d2: f3:8f:eb:d8:7e:e7:2c:b0:c9:85:32:b2:6c:9c:f5: 1e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A6:73:05:F4:BA:EC:15:93:57:69:F6:50:A3:BF:F2:D0:F7:24:4F X509v3 Authority Key Identifier: keyid:C6:3B:E7:53:74:67:8D:B3:A0:49:F6:A3:EF:2A:FA:B7:0D:4F:6F:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/056677-1a4a-48a6-a92d-6b3b867bd232/1/xjvnU3RnjbOgSfaj7yr6tw1Pbyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:50:b0:c4:be:31:00:c1:d3:25:9d:72:5a:4e:4f:6e:3e:11: 01:35:7d:89:7b:c4:99:af:f3:bf:e9:72:97:d3:de:1b:c6:d3: 65:94:d3:58:69:fd:bd:31:b6:be:99:25:f8:47:50:e5:d6:82: f3:4c:9c:97:62:b6:a7:24:70:3d:f3:b9:2a:60:ba:7f:e9:89: cb:6f:ba:a7:f7:1f:e2:c7:48:c1:60:88:cb:ba:c6:74:0f:00: 66:df:fa:1d:b3:a8:e9:28:0d:8f:86:d7:4e:16:26:0b:6c:4d: 9f:d8:7c:aa:70:6d:c7:9b:28:f6:b4:f5:c7:db:d5:bd:68:52: 05:23:8b:5d:28:11:e8:fc:4d:4a:38:f7:7a:25:af:e2:3a:c8: 4f:29:b5:a7:bd:40:b6:b2:1d:aa:e5:c1:e4:01:87:59:ed:b7: be:bc:04:8c:f4:78:41:5e:09:54:89:52:0c:ca:fb:4f:40:94: a7:54:91:6f:07:75:d0:7f:92:c1:de:ca:b3:f3:ce:be:b4:58: 6f:2d:57:3f:db:e4:b6:9e:68:8d:29:e7:2b:ac:76:08:3b:ae: 63:52:6e:f1:77:f2:c0:df:e2:57:39:4c:1d:f4:62:fd:55:19: ae:33:94:79:38:22:47:64:6c:53:01:5e:b5:64:0d:56:ff:22: 4c:0c:62:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAaOfaMS+q0P6xw7eeDOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2M2JlNzUzNzQ2NzhkYjNhMDQ5ZjZhM2VmMmFmYWI3MGQ0 ZjZmMjcwHhcNMjUxMjIyMTcwMDQ4WhcNMjUxMjIzMTcwMDQ4WjAzMTEwLwYDVQQD EygxN2E2NzMwNWY0YmFlYzE1OTM1NzY5ZjY1MGEzYmZmMmQwZjcyNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFPYhhp/LvQMolnjWqV+idToxhjj rCDFv0aXKSW+5Z3F2vPJ7YEo7oVfEL5P5Fmh+EguDs6NPwQYghby7/euDaxWDC3l VxemdnRPVlO738LWhfbE4Uyet0I/ejHNDoUt1tc+uTV83r1AF4v35mxiQOEATb5i UEuQYMvHgmhr1dnb84C0Piq5RVKne1JurM+CpdEcFqyFYpm0iVL18BiI95May6L1 VGwrCkCxUKehb7lzasZnf+Uk3+6ElN/Dltn+I97fVTuaqysjg4dZHqtKLVIv5uwT oQj8iMmqWX11gBRGIWrcvuF8IBwuZFmRj9Lzj+vYfucssMmFMrJsnPUesQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBemcwX0uuwVk1dp9lCjv/LQ9yRPMB8GA1UdIwQY MBaAFMY751N0Z42zoEn2o+8q+rcNT28nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQt NmIzYjg2N2JkMjMyLzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wNTY2NzctMWE0YS00OGE2LWE5MmQtNmIzYjg2N2JkMjMy LzEveGp2blUzUm5qYk9nU2Zhajd5cjZ0dzFQYnljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFCwxL4x AMHTJZ1yWk5Pbj4RATV9iXvEma/zv+lyl9PeG8bTZZTTWGn9vTG2vpkl+EdQ5daC 80ycl2K2pyRwPfO5KmC6f+mJy2+6p/cf4sdIwWCIy7rGdA8AZt/6HbOo6SgNj4bX ThYmC2xNn9h8qnBtx5so9rT1x9vVvWhSBSOLXSgR6PxNSjj3eiWv4jrITym1p71A trIdquXB5AGHWe23vrwEjPR4QV4JVIlSDMr7T0CUp1SRbwd10H+Swd7Ks/POvrRY by1XP9vktp5ojSnnK6x2CDuuY1Ju8XfywN/iVzlMHfRi/VUZrjOUeTgiR2RsUwFe tWQNVv8iTAxiBw== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:08 2025 by rpki-client