This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json) Hash identifier: FaBEcyO09WCYoTOLGvSWqGJDrNviXRyArr8L9mUZIuY= Subject key identifier: FD:F4:F7:F5:5A:72:14:A9:35:0B:6A:75:4C:48:C1:E2:42:16:A6:3A Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb Certificate serial: 019B3E6DE358ABA7A1E46A01D5DF8B1E5EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:02:27 +0000 Manifest this update: Sun 21 Dec 2025 01:02:27 +0000 Manifest next update: Mon 22 Dec 2025 01:02:27 +0000 Files and hashes: 1: nywPQh9QP-OhqhIRdI1AR086REo.roa (hash: fyTq9cJsDKGICMb+AhPPiPfngZOBuqPjdSV/9OfNj10=) 2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: ZR5ryXyksenb47CRbiB1xepdIiDUn9nZlqG6UXORPP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e3:58:ab:a7:a1:e4:6a:01:d5:df:8b:1e:5e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb Validity Not Before: Dec 21 01:02:27 2025 GMT Not After : Dec 22 01:02:27 2025 GMT Subject: CN=fdf4f7f55a7214a9350b6a754c48c1e24216a63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:28:05:95:8e:1e:de:61:91:18:be:c5:d5:e0: de:93:81:3e:9e:91:5d:f7:73:93:ea:0c:b2:e6:9c: 68:9c:77:62:68:c0:9e:a5:8c:3e:2c:44:be:cc:8c: 71:42:d0:e1:68:29:d1:78:f3:52:2e:6f:2c:55:2e: 2a:38:e1:aa:d8:e7:f5:fc:64:03:65:5b:7c:5f:5e: 21:8c:f5:fe:68:15:69:62:fb:25:36:ef:27:87:dc: b8:0c:52:04:e2:da:69:38:73:ad:8c:41:54:93:91: 10:db:e2:8d:f4:c2:40:26:e1:01:a9:6c:20:37:9b: fe:ed:c3:f4:7b:08:48:8e:94:91:70:8b:1b:b2:58: 2d:05:d3:f0:d8:f3:9b:7e:85:b4:f5:08:e8:c0:6a: 23:e3:c4:47:3d:10:aa:fe:7c:a0:00:d9:a5:22:40: b9:f3:95:4d:d0:5f:49:fa:f1:28:46:7e:87:fe:15: 9b:1d:be:de:26:63:ee:fc:a6:da:a4:81:2d:bb:55: 7b:5b:0f:18:a8:ff:68:1b:ce:4d:f4:02:ac:b1:5e: 67:02:4f:49:34:4a:0b:32:dd:70:3c:ce:2c:43:76: cf:09:b2:4e:16:ff:03:66:af:28:7c:5d:06:df:67: de:b4:1c:b6:84:ea:5f:e2:2f:88:02:89:da:3b:85: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F4:F7:F5:5A:72:14:A9:35:0B:6A:75:4C:48:C1:E2:42:16:A6:3A X509v3 Authority Key Identifier: keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ef:ec:e8:6f:66:10:11:b0:d3:d1:eb:02:d5:79:5a:1f:5a: 52:8b:a8:5a:e9:d6:fd:63:7d:60:10:bf:53:06:95:a7:f3:17: 87:3e:8e:de:1f:fd:65:a8:c9:43:ad:e7:24:b1:21:6e:e0:e6: 18:c3:d2:7c:e8:c1:58:85:4b:d9:fb:8a:81:47:67:7d:32:0c: ba:8f:90:fe:1c:bf:cc:05:02:fd:b9:45:4f:9c:dd:35:b6:3d: 2d:6a:e3:1a:19:ac:66:15:e3:de:95:68:f5:0f:60:55:f3:ee: 47:3d:84:fd:cf:d9:24:40:75:61:9b:4d:a9:b1:a7:3e:3d:e3: 19:71:8b:2d:82:1f:c6:b5:3f:fb:67:c9:bf:fd:18:b8:50:2f: 41:67:e3:15:1e:18:f5:73:23:fb:b2:3b:a5:21:a3:b5:c8:fb: 16:2d:bd:46:34:d4:b6:44:99:6f:23:fb:49:a1:72:f1:6a:0d: 55:68:d3:58:c0:ab:6c:c2:96:45:79:c2:a4:df:f4:c3:96:5f: 96:f4:af:38:0e:5c:af:14:a9:25:6b:14:a4:74:a4:cb:52:61: 9a:cc:89:e2:0e:58:f7:05:17:1d:23:ae:07:7d:83:36:b3:25: 6f:96:db:59:4a:6e:52:65:60:36:13:54:da:29:84:16:fb:d4: cf:b6:7e:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beNYq6eh5GoB1d+LHl6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZGZlYmFjOGI3NTQ1MTEyMmY5MTRmY2EwMjRlZTFmNTQx N2NhYmIwHhcNMjUxMjIxMDEwMjI3WhcNMjUxMjIyMDEwMjI3WjAzMTEwLwYDVQQD EyhmZGY0ZjdmNTVhNzIxNGE5MzUwYjZhNzU0YzQ4YzFlMjQyMTZhNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+igFlY4e3mGRGL7F1eDek4E+npFd 93OT6gyy5pxonHdiaMCepYw+LES+zIxxQtDhaCnRePNSLm8sVS4qOOGq2Of1/GQD ZVt8X14hjPX+aBVpYvslNu8nh9y4DFIE4tppOHOtjEFUk5EQ2+KN9MJAJuEBqWwg N5v+7cP0ewhIjpSRcIsbslgtBdPw2PObfoW09QjowGoj48RHPRCq/nygANmlIkC5 85VN0F9J+vEoRn6H/hWbHb7eJmPu/KbapIEtu1V7Ww8YqP9oG85N9AKssV5nAk9J NEoLMt1wPM4sQ3bPCbJOFv8DZq8ofF0G32fetBy2hOpf4i+IAonaO4WcfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP309/VachSpNQtqdUxIweJCFqY6MB8GA1UdIwQY MBaAFMbf66yLdUURIvkU/KAk7h9UF8q7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYt MzgwOTFiMTk3NjRiLzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hNjVhNDgtMDkzNS00YTc5LWFjMGYtMzgwOTFiMTk3NjRi LzEveHRfcnJJdDFSUkVpLVJUOG9DVHVIMVFYeXJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu/s6G9m EBGw09HrAtV5Wh9aUouoWunW/WN9YBC/UwaVp/MXhz6O3h/9ZajJQ63nJLEhbuDm GMPSfOjBWIVL2fuKgUdnfTIMuo+Q/hy/zAUC/blFT5zdNbY9LWrjGhmsZhXj3pVo 9Q9gVfPuRz2E/c/ZJEB1YZtNqbGnPj3jGXGLLYIfxrU/+2fJv/0YuFAvQWfjFR4Y 9XMj+7I7pSGjtcj7Fi29RjTUtkSZbyP7SaFy8WoNVWjTWMCrbMKWRXnCpN/0w5Zf lvSvOA5crxSpJWsUpHSky1JhmsyJ4g5Y9wUXHSOuB32DNrMlb5bbWUpuUmVgNhNU 2imEFvvUz7Z+UQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:41 2025 by rpki-client