This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft File: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft (raw, json) Hash identifier: Vj24hmaeWWd5Z+yRewrHDCxoqLC+EguTnVCQcZXXBu4= Subject key identifier: 7C:4A:B4:E4:01:FA:68:D4:B7:E3:BF:89:6D:41:D1:D4:C5:E0:69:C2 Authority key identifier: 5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D Certificate issuer: /CN=5ea68c853810d0320b156844f29317701b58610d Certificate serial: 019AF19B6F6BDF1F2BC4671BCB995030502A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft Manifest number: 0B9F Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl (hash: LYI1/WfAMLtpFLjQ28X2tYAk34jMO3SzHKnbMnSiLGY=) 2: zWctF490hB_hw_nmdFUFC_bPmMM.roa (hash: SsIXLaayVDdukX1So7HtLQgGu/7qBD8U27FPnJFIDDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6f:6b:df:1f:2b:c4:67:1b:cb:99:50:30:50:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea68c853810d0320b156844f29317701b58610d Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=7c4ab4e401fa68d4b7e3bf896d41d1d4c5e069c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:88:0e:1d:6b:8b:67:24:58:8a:96:d3:3f:b2: 9d:cc:69:fc:9c:20:86:7b:fb:d0:c5:d5:41:59:3c: ff:69:07:e8:b8:33:ba:e9:68:28:de:55:3e:04:6c: c8:f0:53:c9:6b:ac:eb:9c:b1:03:ed:5d:67:e9:97: 16:0d:51:20:b3:60:b9:e7:f2:b4:07:64:6d:6d:65: 3e:b9:d6:6a:06:36:a1:00:24:5a:cc:6a:b3:96:7b: cb:3f:4b:3b:91:32:80:af:ae:71:1e:7d:50:7b:57: f5:65:df:6f:46:cc:88:35:5e:9d:d5:32:fe:ba:26: 0d:35:6f:0a:8b:2b:de:74:d4:cf:48:ba:4c:d7:37: c6:6b:23:e6:81:6f:d4:0b:54:2e:d7:78:5b:f8:75: 00:11:40:68:5e:70:19:00:5c:e1:0b:9f:53:4f:ce: 2b:18:70:9e:15:3f:92:50:bb:52:18:05:c0:ad:94: a9:6f:0c:9a:95:3b:b3:57:f2:b8:cf:54:96:4a:c0: 39:05:fb:7b:49:c1:a3:11:92:cb:de:1b:02:85:61: 07:38:57:f7:ff:c9:7f:19:7e:32:f7:04:65:f3:33: 03:36:40:dc:e5:93:88:9d:59:cd:4e:96:f5:89:84: d9:f0:f8:f1:75:88:15:28:6c:50:31:3c:50:02:ad: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:B4:E4:01:FA:68:D4:B7:E3:BF:89:6D:41:D1:D4:C5:E0:69:C2 X509v3 Authority Key Identifier: keyid:5E:A6:8C:85:38:10:D0:32:0B:15:68:44:F2:93:17:70:1B:58:61:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/3e23d7-a3b7-416f-8810-1efa7cf773a0/1/XqaMhTgQ0DILFWhE8pMXcBtYYQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:92:64:a6:01:8c:19:c7:5f:89:93:24:42:72:c3:30:a4:ed: 6e:9b:fd:b3:ea:89:c9:51:ac:b8:1a:b5:c7:e9:1a:6b:24:46: 83:b6:14:2a:ff:20:85:f0:27:a0:b1:79:77:54:a4:06:17:9d: de:0a:59:36:06:a4:39:35:32:d6:44:ef:b9:38:d3:08:cd:e1: 7a:d3:ff:af:ba:ee:bf:7b:a1:45:54:38:8e:10:86:55:bf:db: 32:26:d9:f2:fc:2c:3e:b4:63:ef:20:29:b5:4a:88:9d:3f:40: a0:78:d5:40:25:75:4f:79:86:14:4a:f5:e5:ac:c3:cb:2f:05: a0:72:74:10:7c:df:cd:66:2f:3f:c6:ef:35:30:81:c4:d3:4c: 99:f7:56:a1:b5:41:a2:6f:c9:41:d1:63:d9:ad:78:8a:87:a1: 0c:06:9c:d0:71:c4:fe:79:9a:5e:df:b4:c3:cf:f5:48:43:25: be:24:a2:c2:94:e6:5a:aa:85:c6:fe:45:41:98:c9:5a:49:50: 42:21:6b:ed:bf:f5:8f:74:aa:45:64:91:7c:45:cc:cf:f4:9a: 1e:48:b5:d5:c6:5b:e9:9e:01:15:42:ad:6f:37:22:a2:80:62: 71:5a:27:9c:ac:69:3c:68:68:19:a1:43:ae:5a:93:1e:27:a9: c9:c0:41:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm29r3x8rxGcby5lQMFAqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTY4Yzg1MzgxMGQwMzIwYjE1Njg0NGYyOTMxNzcwMWI1 ODYxMGQwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD Eyg3YzRhYjRlNDAxZmE2OGQ0YjdlM2JmODk2ZDQxZDFkNGM1ZTA2OWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YgOHWuLZyRYipbTP7KdzGn8nCCG e/vQxdVBWTz/aQfouDO66Wgo3lU+BGzI8FPJa6zrnLED7V1n6ZcWDVEgs2C55/K0 B2RtbWU+udZqBjahACRazGqzlnvLP0s7kTKAr65xHn1Qe1f1Zd9vRsyINV6d1TL+ uiYNNW8KiyvedNTPSLpM1zfGayPmgW/UC1Qu13hb+HUAEUBoXnAZAFzhC59TT84r GHCeFT+SULtSGAXArZSpbwyalTuzV/K4z1SWSsA5Bft7ScGjEZLL3hsChWEHOFf3 /8l/GX4y9wRl8zMDNkDc5ZOInVnNTpb1iYTZ8PjxdYgVKGxQMTxQAq3UMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxKtOQB+mjUt+O/iW1B0dTF4GnCMB8GA1UdIwQY MBaAFF6mjIU4ENAyCxVoRPKTF3AbWGENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAt MWVmYTdjZjc3M2EwLzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zZTIzZDctYTNiNy00MTZmLTg4MTAtMWVmYTdjZjc3M2Ew LzEvWHFhTWhUZ1EwRElMRldoRThwTVhjQnRZWVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJJkpgGM GcdfiZMkQnLDMKTtbpv9s+qJyVGsuBq1x+kaayRGg7YUKv8ghfAnoLF5d1SkBhed 3gpZNgakOTUy1kTvuTjTCM3hetP/r7ruv3uhRVQ4jhCGVb/bMibZ8vwsPrRj7yAp tUqInT9AoHjVQCV1T3mGFEr15azDyy8FoHJ0EHzfzWYvP8bvNTCBxNNMmfdWobVB om/JQdFj2a14ioehDAac0HHE/nmaXt+0w8/1SEMlviSiwpTmWqqFxv5FQZjJWklQ QiFr7b/1j3SqRWSRfEXMz/SaHki11cZb6Z4BFUKtbzciooBicVonnKxpPGhoGaFD rlqTHiepycBBJA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:28:00 2025 by rpki-client