This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft File: x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft (raw, json) Hash identifier: 7jWqKekPgtjBoyzhDGsXhDFt0GjSaRVEWawYQLm4DJ0= Subject key identifier: A4:61:BA:9B:BD:EC:E5:79:BB:5F:B4:A5:50:D5:51:71:F9:9F:9B:59 Authority key identifier: C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A Certificate issuer: /CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Certificate serial: 019B650CC1797053E52B712DFD83DA6DD852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft Manifest number: 26 Signing time: Sun 28 Dec 2025 13:01:33 +0000 Manifest this update: Sun 28 Dec 2025 13:01:33 +0000 Manifest next update: Mon 29 Dec 2025 13:01:33 +0000 Files and hashes: 1: Q2DLWLGDEaWiiNckO3xm2gTZMxc.roa (hash: fu6puCFSXOhmvdstgYFNniwp8CQNss2JS4c7MbUiXmA=) 2: x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl (hash: wrQAaB1GRBGurOdc1ZV+UDkqYICs7RzGN3U8AUpoa/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0c:c1:79:70:53:e5:2b:71:2d:fd:83:da:6d:d8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7cba981ce58a10edd2c99801e043ad804a85f9a Validity Not Before: Dec 28 13:01:33 2025 GMT Not After : Dec 29 13:01:33 2025 GMT Subject: CN=a461ba9bbdece579bb5fb4a550d55171f99f9b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:d3:a5:e4:20:e2:3f:35:82:a0:9f:b4:c1: 6f:82:0e:8b:98:5f:2a:fd:96:64:63:75:f2:07:12: c1:f2:d4:49:9e:6f:5a:74:39:d3:51:0f:45:ec:68: 19:a9:5c:7d:33:65:04:b5:90:ad:8c:ba:5f:04:4d: 77:93:25:25:63:c2:e0:4e:e7:90:b8:68:31:44:c6: 7e:5f:c6:ab:76:00:29:68:2e:e9:18:da:b0:25:57: b5:a1:88:3e:1c:43:3d:07:03:91:7d:32:b5:c9:fd: ff:9c:bc:f5:ea:b8:3a:34:98:8d:dc:8a:de:1f:ed: a6:c6:73:64:28:be:76:eb:14:18:17:f5:53:50:71: cb:ee:46:61:3e:30:c0:8c:ff:36:ed:f3:37:e3:2f: 71:f2:63:89:ca:6d:ed:53:91:d0:54:b1:a3:17:e7: 1f:d9:2f:af:74:fb:39:ce:c3:83:07:37:f2:1b:5a: 0a:67:c8:aa:ec:5c:57:9b:08:63:6a:ec:77:5a:01: e0:e0:32:e9:37:c3:14:68:2f:89:51:52:fc:58:22: f6:f5:c4:8f:68:d8:1b:ac:9b:0a:f6:d0:28:c6:52: b3:72:59:03:c9:51:ca:8e:54:22:ed:7d:8f:ae:37: 6f:be:28:b7:64:bc:53:2e:b9:34:3b:30:07:75:cf: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:BA:9B:BD:EC:E5:79:BB:5F:B4:A5:50:D5:51:71:F9:9F:9B:59 X509v3 Authority Key Identifier: keyid:C7:CB:A9:81:CE:58:A1:0E:DD:2C:99:80:1E:04:3A:D8:04:A8:5F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8upgc5YoQ7dLJmAHgQ62ASoX5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cd289-d16e-4604-b54a-d9a1bf10c57f/1/x8upgc5YoQ7dLJmAHgQ62ASoX5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:cc:eb:ad:6e:d0:e7:5d:6a:49:d0:60:c1:5d:6d:92:8b:69: 64:8f:22:44:ff:f3:3f:66:5f:8e:97:b5:98:ee:13:b5:d1:9f: c3:4e:c3:f6:ba:20:10:0d:ab:c5:b1:35:78:e0:69:a2:ca:30: 09:d2:80:91:2b:60:01:d7:ed:00:3c:09:b0:24:6a:98:f1:15: c3:0d:a0:d2:0d:40:dd:86:e2:af:5d:2e:56:93:69:9d:2f:3c: 68:b2:d7:ef:e6:ef:f5:c6:72:57:a8:33:cc:2c:b6:be:29:44: 8a:1d:18:d5:c1:49:15:24:82:b9:e5:94:7c:53:5a:3c:7e:20: b5:86:f8:ad:6c:f5:68:bf:3d:22:9c:68:6d:13:3e:db:d2:07: 8a:12:6d:1b:f2:37:f3:fc:ef:c7:72:bb:2e:5c:a8:b6:5d:17: d2:d8:ad:90:9c:ac:6b:da:2c:44:37:3c:06:1f:f1:f1:f4:c7: e8:17:f0:16:66:12:a0:f0:c9:c1:14:05:46:5d:87:52:d2:27: 67:1f:b5:82:59:84:a6:d2:02:4e:b3:73:fe:50:52:d8:66:d5: a9:a8:9d:bd:c0:13:d4:c1:0c:54:3a:dc:7f:6b:8d:b0:98:65: 07:ab:12:50:b5:60:1b:6e:cc:a9:93:f3:2a:cd:ca:d2:bd:c0: b5:55:00:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDMF5cFPlK3Et/YPabdhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3Y2JhOTgxY2U1OGExMGVkZDJjOTk4MDFlMDQzYWQ4MDRh ODVmOWEwHhcNMjUxMjI4MTMwMTMzWhcNMjUxMjI5MTMwMTMzWjAzMTEwLwYDVQQD EyhhNDYxYmE5YmJkZWNlNTc5YmI1ZmI0YTU1MGQ1NTE3MWY5OWY5YjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhPTpeQg4j81gqCftMFvgg6LmF8q /ZZkY3XyBxLB8tRJnm9adDnTUQ9F7GgZqVx9M2UEtZCtjLpfBE13kyUlY8LgTueQ uGgxRMZ+X8ardgApaC7pGNqwJVe1oYg+HEM9BwORfTK1yf3/nLz16rg6NJiN3Ire H+2mxnNkKL526xQYF/VTUHHL7kZhPjDAjP827fM34y9x8mOJym3tU5HQVLGjF+cf 2S+vdPs5zsODBzfyG1oKZ8iq7FxXmwhjaux3WgHg4DLpN8MUaC+JUVL8WCL29cSP aNgbrJsK9tAoxlKzclkDyVHKjlQi7X2Prjdvvii3ZLxTLrk0OzAHdc9nTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRhupu97OV5u1+0pVDVUXH5n5tZMB8GA1UdIwQY MBaAFMfLqYHOWKEO3SyZgB4EOtgEqF+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEt ZDlhMWJmMTBjNTdmLzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Y2QyODktZDE2ZS00NjA0LWI1NGEtZDlhMWJmMTBjNTdm LzEveDh1cGdjNVlvUTdkTEptQUhnUTYyQVNvWDVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8zrrW7Q 511qSdBgwV1tkotpZI8iRP/zP2Zfjpe1mO4TtdGfw07D9rogEA2rxbE1eOBposow CdKAkStgAdftADwJsCRqmPEVww2g0g1A3Ybir10uVpNpnS88aLLX7+bv9cZyV6gz zCy2vilEih0Y1cFJFSSCueWUfFNaPH4gtYb4rWz1aL89IpxobRM+29IHihJtG/I3 8/zvx3K7Llyotl0X0titkJysa9osRDc8Bh/x8fTH6BfwFmYSoPDJwRQFRl2HUtIn Zx+1glmEptICTrNz/lBS2GbVqaidvcAT1MEMVDrcf2uNsJhlB6sSULVgG27MqZPz Ks3K0r3AtVUAxQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:20:48 2025 by rpki-client