This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json) Hash identifier: vi4d0hngoVu+JGi+vmZsIHbCSOAOC2jAazjJ6VdD/So= Subject key identifier: 51:EE:3F:6B:F7:DF:74:9F:4A:77:7F:93:9F:C7:24:CB:E0:8F:8F:BF Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Certificate serial: 019B3DC7CA7699F61BD475471C6098CE5045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft Manifest number: 07CD Signing time: Sat 20 Dec 2025 22:01:02 +0000 Manifest this update: Sat 20 Dec 2025 22:01:02 +0000 Manifest next update: Sun 21 Dec 2025 22:01:02 +0000 Files and hashes: 1: 16AbDLexWxM7mos0qMmQG31v5Rg.roa (hash: 3u1e4Mqp4DtPhz1Ro9vKRDiTKwkU7uS9FwPKV5J5Ahk=) 2: FnJQovhlbIvUdo0j6O0hr0vUYNM.roa (hash: wBBuOwEzLi1HNHDVjYRKKazRYQG/hq5eug3JUFJ4Ec0=) 3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: E++Gz+o877K61YC+ourj+Okcg7DRiLOK1RgTwZ/M7WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ca:76:99:f6:1b:d4:75:47:1c:60:98:ce:50:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9 Validity Not Before: Dec 20 22:01:02 2025 GMT Not After : Dec 21 22:01:02 2025 GMT Subject: CN=51ee3f6bf7df749f4a777f939fc724cbe08f8fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:4f:f0:6c:90:e5:ac:a9:81:76:19:9f:5d: ea:62:37:7a:cc:b8:4e:81:b2:66:07:e5:7c:6d:ce: 9e:45:4b:77:bb:a8:71:c6:b6:fa:2c:51:dd:b6:84: 97:d5:f8:0d:87:04:e8:79:dc:9c:c9:50:19:7b:e5: a0:7e:17:90:d7:61:78:92:29:be:03:67:8c:06:68: d0:d4:93:8b:dd:b1:d9:7b:84:c8:5b:90:47:0e:9e: 3e:d4:97:ce:87:18:9c:ef:a0:dd:41:e9:31:8c:6b: d7:62:e8:b7:c1:27:0b:fe:c4:ba:a7:76:03:f9:b3: 43:88:f6:f1:0c:8f:1f:ea:7a:f8:10:d8:29:46:a3: 8e:9e:7b:be:44:9e:c0:8b:b3:8e:73:13:67:f5:f8: 97:8a:bd:0c:b2:bb:52:4f:66:5a:86:15:ae:1c:ad: b3:6b:19:28:41:65:bf:5d:e3:47:90:33:9d:5c:20: 3f:74:2c:d0:75:a4:c0:5b:8e:d8:87:94:fb:f7:83: 36:9a:c6:0f:4c:dc:c2:f8:d9:f5:53:2f:e3:66:93: 23:80:fe:07:d8:47:b3:12:f7:5a:38:f9:e2:ee:7c: 0d:01:9d:3e:1c:10:68:8b:1a:00:4c:31:c9:7c:67: 35:d3:97:3d:5f:4e:b1:38:ef:a6:14:c9:fd:93:fd: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:3F:6B:F7:DF:74:9F:4A:77:7F:93:9F:C7:24:CB:E0:8F:8F:BF X509v3 Authority Key Identifier: keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:47:ed:b5:51:25:2a:ce:13:bd:ca:c8:34:1c:e6:7e:52:9b: 4b:cf:b4:32:02:7b:9b:dc:a9:7c:45:95:81:17:57:a2:e1:8f: a3:bb:9a:11:13:e2:6d:d7:bc:38:b9:8e:12:56:fe:5f:d2:d1: dc:59:f2:b8:37:c4:58:aa:10:34:58:79:6c:f8:9e:8f:e1:c6: 96:2e:20:22:4c:9d:c2:aa:d2:e0:a0:33:8f:1f:d3:78:80:26: fb:bf:de:9c:29:b4:44:62:98:c4:35:6d:bd:7d:5b:7e:68:60: 5c:59:c8:c5:fe:9b:ee:46:1e:97:01:e5:c1:f1:f2:c7:d1:28: 7b:98:c9:b6:d9:3d:ba:e5:6b:4a:a0:3e:64:fb:c6:12:e0:29: 48:3c:27:37:b0:51:54:5f:ab:eb:91:ba:45:a7:bf:c2:7a:2d: 18:4d:58:28:81:57:38:1d:4c:4e:fb:c1:c2:a8:15:54:f1:83: 42:13:e7:9c:79:89:0f:2b:0e:1b:c5:5e:82:e3:04:31:22:ef: 02:45:e8:3c:30:73:09:c3:61:0a:82:cf:43:eb:57:99:e8:d1: 08:8e:8a:57:18:bf:9d:9c:44:4e:c6:ac:ab:6b:d8:3f:d1:a2: 3f:58:09:f9:66:1d:60:33:05:43:7a:74:c5:e3:d8:56:92:2d: 60:6f:eb:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8p2mfYb1HVHHGCYzlBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4 YmFjZDkwHhcNMjUxMjIwMjIwMTAyWhcNMjUxMjIxMjIwMTAyWjAzMTEwLwYDVQQD Eyg1MWVlM2Y2YmY3ZGY3NDlmNGE3NzdmOTM5ZmM3MjRjYmUwOGY4ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzNP8GyQ5aypgXYZn13qYjd6zLhO gbJmB+V8bc6eRUt3u6hxxrb6LFHdtoSX1fgNhwToedycyVAZe+WgfheQ12F4kim+ A2eMBmjQ1JOL3bHZe4TIW5BHDp4+1JfOhxic76DdQekxjGvXYui3wScL/sS6p3YD +bNDiPbxDI8f6nr4ENgpRqOOnnu+RJ7Ai7OOcxNn9fiXir0MsrtST2ZahhWuHK2z axkoQWW/XeNHkDOdXCA/dCzQdaTAW47Yh5T794M2msYPTNzC+Nn1Uy/jZpMjgP4H 2EezEvdaOPni7nwNAZ0+HBBoixoATDHJfGc105c9X06xOO+mFMn9k/0lpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHuP2v333SfSnd/k5/HJMvgj4+/MB8GA1UdIwQY MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt MzIxMmI2ODU4NGU5LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5 LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0kfttVEl Ks4TvcrINBzmflKbS8+0MgJ7m9ypfEWVgRdXouGPo7uaERPibde8OLmOElb+X9LR 3FnyuDfEWKoQNFh5bPiej+HGli4gIkydwqrS4KAzjx/TeIAm+7/enCm0RGKYxDVt vX1bfmhgXFnIxf6b7kYelwHlwfHyx9Eoe5jJttk9uuVrSqA+ZPvGEuApSDwnN7BR VF+r65G6Rae/wnotGE1YKIFXOB1MTvvBwqgVVPGDQhPnnHmJDysOG8VeguMEMSLv AkXoPDBzCcNhCoLPQ+tXmejRCI6KVxi/nZxETsasq2vYP9GiP1gJ+WYdYDMFQ3p0 xePYVpItYG/rAw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:46 2025 by rpki-client