This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft File: XqFlPhd6opVUAIBcjHW9DWhYOvw.mft (raw, json) Hash identifier: lE4r53W3HMXP6XzIewbRYxhChniC5Xy2WY1nQZ4ChZk= Subject key identifier: 68:B7:98:11:86:59:1A:B8:D7:70:36:B7:1D:C0:DB:2B:EA:A1:A3:25 Authority key identifier: 5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC Certificate issuer: /CN=5ea1653e177aa2955400805c8c75bd0d68583afc Certificate serial: 019B2F301DDEFB6ABC5B2FE72BEAD0179AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft Manifest number: 0C11 Signing time: Thu 18 Dec 2025 02:00:40 +0000 Manifest this update: Thu 18 Dec 2025 02:00:40 +0000 Manifest next update: Fri 19 Dec 2025 02:00:40 +0000 Files and hashes: 1: XqFlPhd6opVUAIBcjHW9DWhYOvw.crl (hash: 8yGrpPE8nrSKCT4OUhhYOtSeLPfcQcLJLQVp+YwKRsM=) 2: pG0gZB0nkw3GnTji0o-IVbuNrD4.roa (hash: viA8g+053tZ6I/BKlBgt30tnVs0+WwkriBcMwHPLKm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:1d:de:fb:6a:bc:5b:2f:e7:2b:ea:d0:17:9a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea1653e177aa2955400805c8c75bd0d68583afc Validity Not Before: Dec 18 02:00:40 2025 GMT Not After : Dec 19 02:00:40 2025 GMT Subject: CN=68b7981186591ab8d77036b71dc0db2beaa1a325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2c:90:50:21:7d:b0:2b:90:07:19:ac:f3:0a: b2:c0:e1:de:7e:1b:5f:41:b0:a8:19:6a:3d:9f:e2: b7:e1:df:ed:73:ff:03:d0:0d:7f:b4:44:60:df:1b: 7e:df:55:41:a7:2b:ef:56:df:47:ac:ec:dd:6b:68: 19:ba:6b:8f:ed:55:0e:6c:52:fb:65:29:be:00:08: e2:86:24:39:48:6e:2f:ce:76:bd:5e:65:94:ad:98: 10:a6:d2:b5:a3:10:a7:0d:79:77:bb:52:f8:1a:12: 09:02:7c:5f:26:a2:c5:29:54:7a:c0:00:fa:95:67: ff:86:74:29:50:1a:80:bf:3c:8b:34:8e:34:1e:e7: b3:93:af:0c:33:c7:e8:4c:13:27:39:5e:67:a1:3e: 39:20:98:2b:9d:15:4c:bc:64:3f:94:15:44:2f:4e: c2:f1:36:bc:25:17:91:87:15:7c:7a:f2:0f:35:94: e7:8f:6a:62:34:ec:a5:ff:17:c3:7a:bb:7d:a7:36: 43:15:63:64:ae:45:3a:4d:08:b0:ce:b9:dc:0a:b1: 14:e0:09:90:cf:4f:f5:a6:ca:32:bb:c4:02:95:38: b6:09:59:cc:2e:a5:b9:07:69:9c:1e:da:a1:04:9e: 21:51:70:d2:9c:52:aa:66:e6:05:8e:63:ef:9e:86: 24:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B7:98:11:86:59:1A:B8:D7:70:36:B7:1D:C0:DB:2B:EA:A1:A3:25 X509v3 Authority Key Identifier: keyid:5E:A1:65:3E:17:7A:A2:95:54:00:80:5C:8C:75:BD:0D:68:58:3A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqFlPhd6opVUAIBcjHW9DWhYOvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a4af15-7fdd-45a4-a172-1df8fa20fa9e/1/XqFlPhd6opVUAIBcjHW9DWhYOvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:89:74:72:1d:a9:47:d1:17:7b:f4:07:59:62:0d:16:be: 2c:3f:73:59:6f:f3:55:ab:fc:d6:85:4b:4a:e4:2b:6d:8e:74: 2f:47:4f:23:3c:b8:cd:21:f4:38:e0:d5:83:fe:ce:1a:bc:9f: 97:1b:8f:65:41:30:4d:c7:5f:42:48:86:05:3c:f6:45:a3:12: eb:48:fc:6a:96:ec:16:c1:ef:50:7e:0c:f1:5e:6b:c7:79:b8: ff:93:f7:a6:6b:78:9c:c0:96:1d:bd:7a:82:65:10:95:f9:88: 5a:12:d9:a0:fe:5c:0a:b2:fa:8a:48:c9:03:5e:a4:3d:bb:84: ad:48:d5:a5:63:6a:7f:ac:9f:5e:1f:37:2f:f7:67:e4:22:06: 98:78:ee:1b:be:44:9a:dd:65:98:de:f5:ae:ce:eb:be:ae:40: 52:14:20:ca:6a:67:78:f4:cd:70:44:85:a9:c6:25:4d:97:b6: ad:75:72:71:a4:72:7e:f6:9f:07:3a:9a:f5:f1:41:05:d9:c4: 17:52:b7:86:e2:22:3d:a3:14:7a:3e:9c:6f:24:d9:2d:72:42: f7:57:65:59:a6:75:fc:14:37:f2:3c:d2:c7:12:39:58:ba:11: 55:db:7a:25:5c:95:e9:ad:2c:d9:0e:21:c8:a5:33:75:0f:7c: 4a:ff:13:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMB3e+2q8Wy/nK+rQF5rWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTE2NTNlMTc3YWEyOTU1NDAwODA1YzhjNzViZDBkNjg1 ODNhZmMwHhcNMjUxMjE4MDIwMDQwWhcNMjUxMjE5MDIwMDQwWjAzMTEwLwYDVQQD Eyg2OGI3OTgxMTg2NTkxYWI4ZDc3MDM2YjcxZGMwZGIyYmVhYTFhMzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CyQUCF9sCuQBxms8wqywOHefhtf QbCoGWo9n+K34d/tc/8D0A1/tERg3xt+31VBpyvvVt9HrOzda2gZumuP7VUObFL7 ZSm+AAjihiQ5SG4vzna9XmWUrZgQptK1oxCnDXl3u1L4GhIJAnxfJqLFKVR6wAD6 lWf/hnQpUBqAvzyLNI40Huezk68MM8foTBMnOV5noT45IJgrnRVMvGQ/lBVEL07C 8Ta8JReRhxV8evIPNZTnj2piNOyl/xfDert9pzZDFWNkrkU6TQiwzrncCrEU4AmQ z0/1psoyu8QClTi2CVnMLqW5B2mcHtqhBJ4hUXDSnFKqZuYFjmPvnoYk3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi3mBGGWRq413A2tx3A2yvqoaMlMB8GA1UdIwQY MBaAFF6hZT4XeqKVVACAXIx1vQ1oWDr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzIt MWRmOGZhMjBmYTllLzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hNGFmMTUtN2ZkZC00NWE0LWExNzItMWRmOGZhMjBmYTll LzEvWHFGbFBoZDZvcFZVQUlCY2pIVzlEV2hZT3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFaJdHId qUfRF3v0B1liDRa+LD9zWW/zVav81oVLSuQrbY50L0dPIzy4zSH0OODVg/7OGryf lxuPZUEwTcdfQkiGBTz2RaMS60j8apbsFsHvUH4M8V5rx3m4/5P3pmt4nMCWHb16 gmUQlfmIWhLZoP5cCrL6ikjJA16kPbuErUjVpWNqf6yfXh83L/dn5CIGmHjuG75E mt1lmN71rs7rvq5AUhQgympnePTNcESFqcYlTZe2rXVycaRyfvafBzqa9fFBBdnE F1K3huIiPaMUej6cbyTZLXJC91dlWaZ1/BQ38jzSxxI5WLoRVdt6JVyV6a0s2Q4h yKUzdQ98Sv8TcA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:29 2025 by rpki-client