This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json) Hash identifier: cNtMyvv2I1SyJQz+QZrfRDHlrp/bj7sb5aICBh1W+I4= Subject key identifier: 90:20:E0:BF:7C:00:66:2E:A8:A6:E9:82:08:B4:A8:7E:C4:96:25:7E Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f Certificate serial: 019B638BA3DB63526FA5224FDD089F2ED1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 06:00:54 +0000 Manifest this update: Sun 28 Dec 2025 06:00:54 +0000 Manifest next update: Mon 29 Dec 2025 06:00:54 +0000 Files and hashes: 1: H1wKiz5SsZHWgQJv7hF0PlabyfY.roa (hash: 6wfj+F7k71jPfzNN92P8c52KydQsMzI1OT40ddg5oJs=) 2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 5KzFqET0jRj4bR7ZaZSrGx1UxvX/udLH3aUlngeEfLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:a3:db:63:52:6f:a5:22:4f:dd:08:9f:2e:d1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f Validity Not Before: Dec 28 06:00:54 2025 GMT Not After : Dec 29 06:00:54 2025 GMT Subject: CN=9020e0bf7c00662ea8a6e98208b4a87ec496257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:49:26:54:16:16:18:25:1b:32:b0:39:c7: 6c:f4:2c:0b:a6:a2:12:9d:0f:ab:5a:8f:20:7b:59: 69:da:a3:be:21:41:f8:57:f5:40:e3:82:6f:cd:59: 17:7e:4b:04:6b:d3:c9:7f:63:06:c3:22:51:2a:5e: a9:1d:66:16:2f:15:9f:58:d3:c6:21:f0:b6:98:16: 0e:d3:e3:c2:be:65:33:3a:35:f1:ef:12:fe:32:56: 58:45:3a:8a:7b:b2:dc:2c:22:6d:d3:e9:34:d5:74: 11:9a:d8:1d:b9:f4:44:78:26:8d:a8:68:29:90:b8: 97:b1:7c:81:ff:e0:3d:0e:28:12:38:07:b7:38:c9: 5d:d2:e9:1f:f1:76:0f:d8:8a:fc:7d:5b:f2:5f:b5: d9:7a:9f:f2:13:76:d2:5c:79:7d:c6:3d:85:46:c9: f4:ef:ce:91:2c:6a:2c:bb:0c:a0:6d:0a:24:e5:a8: 8f:be:e0:8a:01:78:11:b4:cd:96:03:de:c7:3e:80: f6:7b:e9:f5:63:91:c4:f0:c1:89:f4:07:01:d6:65: 6f:20:7c:7a:d2:61:26:38:46:2b:07:f9:5a:8e:1c: 71:65:24:cf:9f:94:83:2f:8b:ad:a8:4c:8f:ad:6b: e0:ad:0d:d8:93:15:07:b5:49:8d:f3:b4:16:ea:bc: 58:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:E0:BF:7C:00:66:2E:A8:A6:E9:82:08:B4:A8:7E:C4:96:25:7E X509v3 Authority Key Identifier: keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:44:8b:78:e1:0f:14:20:72:02:9b:ac:df:c8:94:36:e3:c3: 7d:29:cb:56:41:5a:36:1d:32:f3:a5:c2:f6:c7:cc:52:b0:9f: 9d:03:1f:1e:df:a9:b8:3d:1e:c0:24:22:fa:ff:18:ee:1a:11: e5:97:9f:84:67:f5:8e:7d:6a:61:b8:d1:a2:a2:89:3a:50:8b: f4:34:02:9f:ae:48:30:68:d3:15:b4:3b:61:49:3c:64:81:ed: 14:ba:79:a2:24:f7:22:6c:70:1c:f9:17:ee:30:a7:36:3f:15: f4:c9:98:d3:ea:86:d7:3f:d8:cf:ea:80:36:6d:e8:52:de:b0: 75:cf:0b:dd:57:96:a8:92:e7:10:42:56:73:32:37:cd:07:4a: b6:1b:1b:d2:f3:1f:05:04:d5:ea:22:3e:4d:ae:60:2b:9f:5b: b6:80:02:5a:be:a6:c0:87:91:f1:f2:b3:f3:b2:36:a5:4c:5e: 07:7e:b8:6d:08:28:e4:e2:98:c5:6c:8c:3b:00:5e:67:9e:d2: 16:9e:60:37:70:80:bd:22:8a:c5:c8:67:ad:e1:3c:65:47:c4: ad:d1:a5:68:a4:1a:08:64:e5:5c:91:a1:81:2d:72:e5:92:9e: 9e:1e:ad:cc:02:6a:a8:f8:62:65:7c:ea:e4:6d:94:1e:5f:14: e9:52:fd:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji6PbY1JvpSJP3QifLtGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMTZiMjk0YjFhNjQ3YmY2ZDY3NjgzYjUxNjE0NDk3ZTc1 MWYyMWYwHhcNMjUxMjI4MDYwMDU0WhcNMjUxMjI5MDYwMDU0WjAzMTEwLwYDVQQD Eyg5MDIwZTBiZjdjMDA2NjJlYThhNmU5ODIwOGI0YTg3ZWM0OTYyNTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGhJJlQWFhglGzKwOcds9CwLpqIS nQ+rWo8ge1lp2qO+IUH4V/VA44JvzVkXfksEa9PJf2MGwyJRKl6pHWYWLxWfWNPG IfC2mBYO0+PCvmUzOjXx7xL+MlZYRTqKe7LcLCJt0+k01XQRmtgdufREeCaNqGgp kLiXsXyB/+A9DigSOAe3OMld0ukf8XYP2Ir8fVvyX7XZep/yE3bSXHl9xj2FRsn0 786RLGosuwygbQok5aiPvuCKAXgRtM2WA97HPoD2e+n1Y5HE8MGJ9AcB1mVvIHx6 0mEmOEYrB/lajhxxZSTPn5SDL4utqEyPrWvgrQ3YkxUHtUmN87QW6rxYnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAg4L98AGYuqKbpggi0qH7EliV+MB8GA1UdIwQY MBaAFF8WspSxpke/bWdoO1FhRJfnUfIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYt YTg4MjcwZjVkMWE5LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZjI3NzctNzdhMS00Yjg0LTkyMWYtYTg4MjcwZjVkMWE5 LzEvWHhheWxMR21SNzl0WjJnN1VXRkVsLWRSOGg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUSLeOEP FCByApus38iUNuPDfSnLVkFaNh0y86XC9sfMUrCfnQMfHt+puD0ewCQi+v8Y7hoR 5ZefhGf1jn1qYbjRoqKJOlCL9DQCn65IMGjTFbQ7YUk8ZIHtFLp5oiT3ImxwHPkX 7jCnNj8V9MmY0+qG1z/Yz+qANm3oUt6wdc8L3VeWqJLnEEJWczI3zQdKthsb0vMf BQTV6iI+Ta5gK59btoACWr6mwIeR8fKz87I2pUxeB364bQgo5OKYxWyMOwBeZ57S Fp5gN3CAvSKKxchnreE8ZUfErdGlaKQaCGTlXJGhgS1y5ZKenh6tzAJqqPhiZXzq 5G2UHl8U6VL9jQ== -----END CERTIFICATE-----Generated at Sun Dec 28 07:29:40 2025 by rpki-client