This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft File: X3UgMVHTsj7My2T1IPtCVJhgz_A.mft (raw, json) Hash identifier: dcKNcvueAK6a2kJeGFApZfbNQnvARvlPTGpJ5nruLHw= Subject key identifier: 71:D7:19:F7:FA:08:BE:C1:63:4D:C4:DE:B3:DA:80:BD:03:8D:07:6E Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0 Certificate serial: 019B4324EBEAE80398E897BA5138BBCDF433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft Manifest number: 1238 Signing time: Sun 21 Dec 2025 23:00:51 +0000 Manifest this update: Sun 21 Dec 2025 23:00:51 +0000 Manifest next update: Mon 22 Dec 2025 23:00:51 +0000 Files and hashes: 1: X3UgMVHTsj7My2T1IPtCVJhgz_A.crl (hash: sISK/KksM8o78gwBhEDfEt6gMzTy30QEwD52r1NqkqM=) 2: jCidCoQkb9m_tYCwbsjakuBhgIs.roa (hash: jOA4Ka8w8nTlTA322uZQYTOcTgRSM76k9RTxieaFemI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:eb:ea:e8:03:98:e8:97:ba:51:38:bb:cd:f4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0 Validity Not Before: Dec 21 23:00:51 2025 GMT Not After : Dec 22 23:00:51 2025 GMT Subject: CN=71d719f7fa08bec1634dc4deb3da80bd038d076e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f9:cd:f2:53:27:4b:b8:d8:e4:5e:2d:56:74: d4:9e:d6:ac:05:eb:df:25:8f:f2:cc:4f:e3:38:b0: f3:51:eb:32:3d:7b:80:67:ae:ff:e8:40:f0:b7:a7: 71:d4:6b:e4:7f:fd:9c:19:7c:94:34:77:4a:bf:47: 59:08:2a:d8:d1:18:7f:2b:ce:a8:e7:6d:19:37:26: a6:e0:99:bf:98:16:50:2f:51:e3:6d:ae:18:ea:ac: 2a:64:7b:80:09:97:f1:4f:5e:a0:33:b9:c0:51:7f: 24:61:a0:d1:a5:c3:3c:b9:1b:aa:94:af:12:db:30: d3:f6:af:fa:fc:6e:9f:41:7f:e8:7a:d5:30:8c:06: 69:58:15:0b:3d:00:ce:cd:c3:d2:c3:17:4b:ac:da: b6:92:0e:05:fc:69:65:d3:18:39:eb:ef:6d:00:7d: aa:00:a1:63:c2:55:e2:53:78:d9:95:27:76:fe:e4: dc:cd:2f:23:6c:ba:16:73:80:08:14:2d:b8:6e:c3: 0a:e0:fb:f5:b7:e4:35:56:ec:91:bd:3a:4a:46:15: bb:7a:14:56:a0:ae:99:1f:0d:f3:90:1e:fc:f1:1b: 35:c0:a6:45:34:2e:f0:77:22:fd:0d:0b:66:4a:61: 06:56:ea:56:67:b9:6c:f1:d4:9c:62:d0:22:00:ec: d2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D7:19:F7:FA:08:BE:C1:63:4D:C4:DE:B3:DA:80:BD:03:8D:07:6E X509v3 Authority Key Identifier: keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6c:48:66:5b:ea:d9:a0:b8:a9:4e:12:a8:5a:f9:1a:6c:cb: 85:3c:b8:d2:85:0f:45:5e:7a:a6:17:4b:58:0e:a4:77:fe:67: 98:8b:51:4d:15:ef:40:f8:32:93:ac:3e:33:d9:c5:5d:ba:45: f9:5d:64:1a:2d:11:ec:84:8c:f1:f5:98:29:b3:43:62:62:bb: 7c:89:89:0c:7a:f0:6f:36:d2:e3:68:93:85:f4:6b:61:22:6f: 55:9b:9b:bf:35:33:77:1d:84:4d:3b:51:f8:09:8b:e3:42:de: 96:24:9b:18:24:47:46:5f:4c:1e:9f:23:b3:01:91:c4:74:d2: 17:81:e2:53:e4:51:c3:05:7c:a9:ea:10:25:0d:b8:d3:3b:de: be:21:88:94:0d:a1:0c:24:18:3d:fd:68:5f:48:9c:b2:d5:eb: b5:23:8a:f0:5f:d6:3e:c3:14:5c:c3:81:06:11:b9:f9:0a:d9: d4:85:95:7d:a6:56:c4:ac:52:c8:99:b9:94:13:23:96:bf:32: 29:56:59:b9:12:fb:6c:79:9d:eb:89:4f:a9:ea:1a:00:52:3b: 3b:f3:46:46:7a:2c:54:4c:fe:3a:7a:ee:1c:51:28:d0:c1:1a: bf:6a:bc:ad:d1:5e:07:ae:ef:a3:fc:6c:8b:ec:77:29:a1:bf: ea:75:e8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJOvq6AOY6Je6UTi7zfQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzUyMDMxNTFkM2IyM2VjY2NiNjRmNTIwZmI0MjU0OTg2 MGNmZjAwHhcNMjUxMjIxMjMwMDUxWhcNMjUxMjIyMjMwMDUxWjAzMTEwLwYDVQQD Eyg3MWQ3MTlmN2ZhMDhiZWMxNjM0ZGM0ZGViM2RhODBiZDAzOGQwNzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvnN8lMnS7jY5F4tVnTUntasBevf JY/yzE/jOLDzUesyPXuAZ67/6EDwt6dx1Gvkf/2cGXyUNHdKv0dZCCrY0Rh/K86o 520ZNyam4Jm/mBZQL1Hjba4Y6qwqZHuACZfxT16gM7nAUX8kYaDRpcM8uRuqlK8S 2zDT9q/6/G6fQX/oetUwjAZpWBULPQDOzcPSwxdLrNq2kg4F/Gll0xg56+9tAH2q AKFjwlXiU3jZlSd2/uTczS8jbLoWc4AIFC24bsMK4Pv1t+Q1VuyRvTpKRhW7ehRW oK6ZHw3zkB788Rs1wKZFNC7wdyL9DQtmSmEGVupWZ7ls8dScYtAiAOzSwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHXGff6CL7BY03E3rPagL0DjQduMB8GA1UdIwQY MBaAFF91IDFR07I+zMtk9SD7QlSYYM/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgt MDlkZDRjMjhiMWU0LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgtMDlkZDRjMjhiMWU0 LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2xIZlvq 2aC4qU4SqFr5GmzLhTy40oUPRV56phdLWA6kd/5nmItRTRXvQPgyk6w+M9nFXbpF +V1kGi0R7ISM8fWYKbNDYmK7fImJDHrwbzbS42iThfRrYSJvVZubvzUzdx2ETTtR +AmL40LeliSbGCRHRl9MHp8jswGRxHTSF4HiU+RRwwV8qeoQJQ240zveviGIlA2h DCQYPf1oX0icstXrtSOK8F/WPsMUXMOBBhG5+QrZ1IWVfaZWxKxSyJm5lBMjlr8y KVZZuRL7bHmd64lPqeoaAFI7O/NGRnosVEz+OnruHFEo0MEav2q8rdFeB67vo/xs i+x3KaG/6nXobA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:57:39 2025 by rpki-client