This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json) Hash identifier: SGuDT/OuCjPdwvN6PMvZN6igOBp65p2iU2MdxdmuqQ8= Subject key identifier: 72:39:B6:D2:31:56:B2:90:C4:02:E0:B6:35:75:98:22:A7:7A:96:90 Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68 Certificate serial: 019B5D899EC595A0BC3FF369C50B7583DEA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft Manifest number: 133E Signing time: Sat 27 Dec 2025 02:00:58 +0000 Manifest this update: Sat 27 Dec 2025 02:00:58 +0000 Manifest next update: Sun 28 Dec 2025 02:00:58 +0000 Files and hashes: 1: BSgJK3zd9Y_223mUoTLPcPOstiI.roa (hash: Xk2I33HjNWnCyc+NaAuDhngUeqYXn+K/y09c1v7ieOc=) 2: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: wowEA1bjTCfDyvkeKnaT5/bNA1Ali/UB/UwUuzRjoF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:9e:c5:95:a0:bc:3f:f3:69:c5:0b:75:83:de:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68 Validity Not Before: Dec 27 02:00:58 2025 GMT Not After : Dec 28 02:00:58 2025 GMT Subject: CN=7239b6d23156b290c402e0b635759822a77a9690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f9:dd:06:6a:29:df:68:7a:d3:54:a8:f0:68: 85:95:6d:1d:03:1c:a1:41:2c:47:78:66:cb:02:c3: 33:b3:80:a9:8c:c7:10:6f:8a:d2:b0:0c:e9:0c:16: 62:c3:77:9c:c8:58:28:2c:6d:d6:fb:d7:aa:b4:3b: 3b:90:8a:b6:cb:f1:6c:19:19:78:8b:29:bf:18:a3: f4:ae:9a:ee:b2:cc:83:e7:1a:90:9d:9e:0d:bb:b9: 63:b2:5b:20:1a:c9:bb:31:6c:a0:2b:dc:ae:3e:be: 4f:b2:7e:88:fe:95:6b:8a:5d:12:76:18:8b:6f:e0: 80:22:fc:99:be:f1:a5:a1:0d:9b:ef:a4:0e:4c:96: c6:3b:69:f5:b2:91:ad:93:8a:ea:37:2f:8d:77:be: 57:4c:99:3f:d7:45:6f:12:4d:12:71:d8:b3:08:55: 64:5b:24:c9:37:55:7a:31:ca:8b:b2:be:00:61:4d: 26:e4:8f:2f:80:d0:33:57:8a:6b:ed:ad:9d:fe:bb: 90:d9:dd:bc:e4:a0:70:fb:2f:17:aa:16:96:0f:49: ef:dc:21:d1:c7:fc:58:b6:ed:ac:f2:2f:61:ab:84: 71:5c:cf:43:11:6d:6f:20:7e:ec:1b:8b:04:ea:c6: 08:51:7f:0e:44:10:a6:b5:d7:63:a6:7e:5e:42:37: 1e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:39:B6:D2:31:56:B2:90:C4:02:E0:B6:35:75:98:22:A7:7A:96:90 X509v3 Authority Key Identifier: keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:d8:53:fc:77:51:d8:cb:d4:b1:2e:24:b8:eb:88:44:ed:2c: a7:57:c7:1f:d7:65:58:94:9e:bf:2e:0c:ba:9a:58:5f:44:5d: 02:c0:52:f9:06:be:fa:85:b1:56:92:66:b0:40:9a:53:c9:fb: 5f:d0:98:59:44:2c:ef:c9:34:85:4e:ea:d0:a3:27:a6:6d:1a: 23:a8:3a:ab:70:e3:2e:a9:16:f6:32:41:a6:7a:ee:13:74:20: c2:5f:0b:fc:4d:6a:ec:2d:71:2f:b5:0e:c4:47:34:82:58:1a: ab:f6:24:14:09:3b:e8:50:b7:6b:88:0c:a1:39:3c:d7:46:23: ac:4a:d0:1e:19:7b:98:5c:16:95:d3:e1:10:32:2c:a0:15:a9: 03:2d:1e:7d:f0:52:7c:c6:2c:de:01:e9:18:7e:f4:8f:98:a0: cc:5e:89:12:5c:d3:38:92:26:86:58:1c:ba:b1:d1:16:b9:3e: 15:ed:96:78:f3:16:fd:58:0d:42:5c:b0:41:4d:fc:c0:34:ea: 6a:86:f8:b4:4c:4e:ca:f1:0d:5f:a2:f5:8a:b5:05:84:6e:32: 2c:58:0c:cc:b0:2f:a8:ca:f4:a2:6f:7d:ed:ca:d1:e1:6d:66: d7:1e:35:5a:80:30:94:41:f5:76:ca:e7:3e:a7:b4:43:f9:6a: ec:8e:28:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiZ7FlaC8P/NpxQt1g96pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZWU5NjNmODJhMGZiMDg2NmQ0MjU1M2IzMzc4NTk3ZDlm M2VmNjgwHhcNMjUxMjI3MDIwMDU4WhcNMjUxMjI4MDIwMDU4WjAzMTEwLwYDVQQD Eyg3MjM5YjZkMjMxNTZiMjkwYzQwMmUwYjYzNTc1OTgyMmE3N2E5NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPndBmop32h601So8GiFlW0dAxyh QSxHeGbLAsMzs4CpjMcQb4rSsAzpDBZiw3ecyFgoLG3W+9eqtDs7kIq2y/FsGRl4 iym/GKP0rprussyD5xqQnZ4Nu7ljslsgGsm7MWygK9yuPr5Psn6I/pVril0SdhiL b+CAIvyZvvGloQ2b76QOTJbGO2n1spGtk4rqNy+Nd75XTJk/10VvEk0ScdizCFVk WyTJN1V6McqLsr4AYU0m5I8vgNAzV4pr7a2d/ruQ2d285KBw+y8XqhaWD0nv3CHR x/xYtu2s8i9hq4RxXM9DEW1vIH7sG4sE6sYIUX8ORBCmtddjpn5eQjceAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHI5ttIxVrKQxALgtjV1mCKnepaQMB8GA1UdIwQY MBaAFMXulj+CoPsIZtQlU7M3hZfZ8+9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAt ZGI1YWE1NzdjM2FmLzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84M2QyNDYtNzQwZC00YjAxLTkwMjAtZGI1YWE1NzdjM2Fm LzEveGU2V1A0S2ctd2htMUNWVHN6ZUZsOW56NzJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa9hT/HdR 2MvUsS4kuOuIRO0sp1fHH9dlWJSevy4MuppYX0RdAsBS+Qa++oWxVpJmsECaU8n7 X9CYWUQs78k0hU7q0KMnpm0aI6g6q3DjLqkW9jJBpnruE3Qgwl8L/E1q7C1xL7UO xEc0glgaq/YkFAk76FC3a4gMoTk810YjrErQHhl7mFwWldPhEDIsoBWpAy0effBS fMYs3gHpGH70j5igzF6JElzTOJImhlgcurHRFrk+Fe2WePMW/VgNQlywQU38wDTq aob4tExOyvENX6L1irUFhG4yLFgMzLAvqMr0om997crR4W1m1x41WoAwlEH1dsrn Pqe0Q/lq7I4oRQ== -----END CERTIFICATE-----Generated at Sat Dec 27 10:05:02 2025 by rpki-client