This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft File: xHqEBhZxYD3cKujuqcrVHudarsY.mft (raw, json) Hash identifier: N2ozOcKAF5Q4C3wvXErEWZ9lPURS2Kg+xCz/eZfJ0hE= Subject key identifier: 18:0E:D3:A0:2A:AE:A6:42:AC:DC:87:DD:47:6C:9D:E1:F9:D7:BD:CB Authority key identifier: C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6 Certificate issuer: /CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6 Certificate serial: 019AF50AC45DA395B379E1A92A36FA138EE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:54 +0000 Manifest this update: Sat 06 Dec 2025 19:01:54 +0000 Manifest next update: Sun 07 Dec 2025 19:01:54 +0000 Files and hashes: 1: 1G_BWf-F8T8J8X8N9NNB4K_YYMY.roa (hash: kKD9/wMia+gnqXI1OLYz+C+9k0a7eBZ1ba1nm7Hyp0A=) 2: xHqEBhZxYD3cKujuqcrVHudarsY.crl (hash: 6n9YifQ2LZPrlWxhE1o3dk2zbIf3cMAeWnPMtQ8yZp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:c4:5d:a3:95:b3:79:e1:a9:2a:36:fa:13:8e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c47a84061671603ddc2ae8eea9cad51ee75aaec6 Validity Not Before: Dec 6 19:01:54 2025 GMT Not After : Dec 7 19:01:54 2025 GMT Subject: CN=180ed3a02aaea642acdc87dd476c9de1f9d7bdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d3:2f:6a:61:59:e1:9f:0a:cb:72:42:21:53: cf:6c:2e:e6:34:75:5c:47:65:4d:1d:3f:8e:64:dd: f8:1f:b2:0d:55:2f:05:1d:1a:fa:02:ac:1c:9a:27: b6:85:c0:08:b7:42:6b:d6:19:1d:a3:41:99:47:e5: fa:39:f0:e1:26:0e:c9:44:93:a7:38:3a:48:68:89: 44:52:a4:e5:17:85:e7:f8:ab:99:d1:80:5f:1c:32: 57:03:f8:4b:d8:98:44:b5:20:22:29:33:f9:63:a6: 33:69:a2:ea:4e:81:1f:a9:14:74:90:d1:cd:3f:d8: 21:f9:6b:6d:fe:a4:a8:c0:0f:a4:66:ae:17:b3:f9: 89:92:33:df:a0:97:f2:e3:a3:90:42:13:70:4c:e0: c4:98:cc:20:49:66:9c:f6:13:80:13:bc:75:fc:47: 24:c6:30:d2:0c:78:62:86:0a:f0:6a:4e:05:0b:5f: 66:76:04:3f:0c:f2:01:df:83:4a:2c:6b:8a:53:a9: 79:7a:9b:aa:8b:9d:47:0f:62:63:77:be:95:96:13: 17:e6:e1:69:96:1a:42:eb:f2:fb:85:6a:7f:44:3d: e7:b8:56:8b:46:fd:c9:dc:df:5b:6e:c7:6d:1a:ca: da:07:9c:18:ab:ff:69:5f:2f:2d:f7:f6:c4:47:97: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:0E:D3:A0:2A:AE:A6:42:AC:DC:87:DD:47:6C:9D:E1:F9:D7:BD:CB X509v3 Authority Key Identifier: keyid:C4:7A:84:06:16:71:60:3D:DC:2A:E8:EE:A9:CA:D5:1E:E7:5A:AE:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHqEBhZxYD3cKujuqcrVHudarsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/53f252-f3fe-467a-bccf-b291f97b7096/1/xHqEBhZxYD3cKujuqcrVHudarsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:c3:c6:b8:ae:52:91:85:3b:08:59:d0:d8:b9:29:fe:3c:af: b3:8f:fd:5e:f8:99:d1:e0:50:b7:8c:a4:75:1a:60:b8:c6:71: 1a:c7:66:6c:9a:6c:82:4d:6b:09:1b:a3:24:6f:11:cd:46:f7: e8:db:26:37:60:51:89:6a:e6:27:eb:ba:75:dd:e7:e6:42:d4: 57:ec:36:3c:ab:dd:d2:78:14:7e:80:81:86:ec:a0:4d:01:02: 76:a1:2b:13:be:fe:4f:74:78:65:6c:06:e4:70:9e:be:40:18: a0:56:4b:f8:a9:85:c0:e7:5a:97:83:50:7d:ce:33:1f:e9:d3: e3:4c:42:8b:04:4a:64:92:f9:c1:ee:34:9e:02:2e:3f:a5:ec: 3d:b5:c8:8d:15:65:77:6a:af:3e:28:8f:72:17:58:d9:07:26: f8:ae:f8:5c:20:e4:ab:8d:a5:6d:d2:0b:92:9c:4a:3b:73:3d: b1:a7:aa:5c:83:84:8c:15:55:95:62:56:45:fd:6d:20:de:cc: de:15:cc:d4:e8:39:6f:87:1b:45:08:1d:c0:b2:68:56:7a:d5: e2:af:f9:f0:4b:cc:ed:7a:51:11:f8:10:bf:72:9f:3d:ff:04: 72:94:8e:f6:56:c7:98:33:c1:f4:fa:0f:b6:ac:c1:18:01:aa: f6:bf:b1:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CsRdo5WzeeGpKjb6E47mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0N2E4NDA2MTY3MTYwM2RkYzJhZThlZWE5Y2FkNTFlZTc1 YWFlYzYwHhcNMjUxMjA2MTkwMTU0WhcNMjUxMjA3MTkwMTU0WjAzMTEwLwYDVQQD EygxODBlZDNhMDJhYWVhNjQyYWNkYzg3ZGQ0NzZjOWRlMWY5ZDdiZGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNMvamFZ4Z8Ky3JCIVPPbC7mNHVc R2VNHT+OZN34H7INVS8FHRr6Aqwcmie2hcAIt0Jr1hkdo0GZR+X6OfDhJg7JRJOn ODpIaIlEUqTlF4Xn+KuZ0YBfHDJXA/hL2JhEtSAiKTP5Y6YzaaLqToEfqRR0kNHN P9gh+Wtt/qSowA+kZq4Xs/mJkjPfoJfy46OQQhNwTODEmMwgSWac9hOAE7x1/Eck xjDSDHhihgrwak4FC19mdgQ/DPIB34NKLGuKU6l5epuqi51HD2Jjd76VlhMX5uFp lhpC6/L7hWp/RD3nuFaLRv3J3N9bbsdtGsraB5wYq/9pXy8t9/bER5fHIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgO06AqrqZCrNyH3UdsneH5173LMB8GA1UdIwQY MBaAFMR6hAYWcWA93Cro7qnK1R7nWq7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2Yt YjI5MWY5N2I3MDk2LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC81M2YyNTItZjNmZS00NjdhLWJjY2YtYjI5MWY5N2I3MDk2 LzEveEhxRUJoWnhZRDNjS3VqdXFjclZIdWRhcnNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMPGuK5S kYU7CFnQ2Lkp/jyvs4/9XviZ0eBQt4ykdRpguMZxGsdmbJpsgk1rCRujJG8RzUb3 6NsmN2BRiWrmJ+u6dd3n5kLUV+w2PKvd0ngUfoCBhuygTQECdqErE77+T3R4ZWwG 5HCevkAYoFZL+KmFwOdal4NQfc4zH+nT40xCiwRKZJL5we40ngIuP6XsPbXIjRVl d2qvPiiPchdY2Qcm+K74XCDkq42lbdILkpxKO3M9saeqXIOEjBVVlWJWRf1tIN7M 3hXM1Og5b4cbRQgdwLJoVnrV4q/58EvM7XpREfgQv3KfPf8EcpSO9lbHmDPB9PoP tqzBGAGq9r+x4w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:31 2025 by rpki-client