This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft File: X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft (raw, json) Hash identifier: oS8/JffNJKHJVS3XtJf+6tRfx5DZ8Xb7x15wpPGGZJ4= Subject key identifier: EC:BF:4F:F5:EA:1A:5F:86:60:A3:B6:0C:18:A1:E2:6F:60:D0:DB:78 Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39 Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39 Certificate serial: 019AF23FD4432A783B08F632DBE3A41216D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft Manifest number: 0597 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (hash: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=) 2: X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl (hash: Tf2pG/smXbeOg2u1EnNq//Hpvc71PPM2pqy3SaSJzmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:43:2a:78:3b:08:f6:32:db:e3:a4:12:16:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=ecbf4ff5ea1a5f8660a3b60c18a1e26f60d0db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:96:04:f3:34:bc:90:4f:0e:bb:01:b2:9d:6f: 5f:22:5e:57:09:83:9c:2c:e5:99:7c:1c:5b:1d:a9: 86:5f:e5:d6:dc:e7:25:96:a5:8a:b9:7b:13:08:68: 3d:19:0b:28:70:fd:3f:82:49:d8:4c:aa:cd:8e:81: 1d:46:2a:d1:59:63:c6:a3:0f:7a:34:3f:4a:6d:ac: 02:be:6d:9b:bb:c0:7e:3d:df:02:87:5d:dc:b5:0e: 09:27:a7:f4:e2:d8:94:ed:e9:71:59:29:c7:4b:c0: 27:b9:0a:31:4d:22:2b:69:4b:64:53:c0:86:6b:fe: e0:a7:2a:8d:69:44:de:a9:f1:b5:5e:d0:ac:6f:c6: f6:50:7a:85:6b:3b:c8:12:02:12:f1:4a:ca:11:72: 2a:8c:25:e2:4c:f2:52:6d:b4:28:76:bf:aa:b7:9f: 33:5c:91:fa:bd:ae:9c:d7:6c:2b:df:ed:5b:5f:e6: 64:63:aa:a1:9f:3e:7c:fa:f2:6e:78:14:48:98:a0: 47:16:8a:1a:36:d0:ef:76:06:b2:67:63:5d:4c:01: 14:4d:0f:8b:ef:71:2b:40:0f:97:73:fd:42:2d:53: 51:84:f0:72:ea:8e:36:4f:c6:25:34:55:43:59:75: 19:34:b4:32:12:f0:98:c1:49:cd:4f:45:55:df:50: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:4F:F5:EA:1A:5F:86:60:A3:B6:0C:18:A1:E2:6F:60:D0:DB:78 X509v3 Authority Key Identifier: keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:35:27:1b:b6:88:bd:4b:4d:17:ea:95:bf:8c:11:bc:34:9b: b2:c4:c5:3e:89:85:f5:cb:64:8a:a4:eb:7e:3c:5f:85:99:79: 97:a0:7b:77:da:86:8a:91:7d:0d:7d:3c:eb:b4:e7:9d:7a:18: 7d:04:dc:de:3a:af:8f:f5:63:9e:60:30:d8:5f:94:30:40:2e: 23:01:c3:24:6d:7b:c6:d1:fe:e8:44:50:77:df:24:22:72:72: df:8f:13:10:a6:d7:22:fa:31:5d:34:3c:c9:fc:e9:1a:9d:57: 1b:49:4a:e8:f3:09:48:f1:db:ea:92:06:1f:d9:35:7c:f4:5f: f0:cc:ad:32:a0:80:df:d7:06:16:bd:b0:b0:c0:c7:84:1b:76: f2:d1:36:ca:37:3f:fb:5c:b9:94:06:65:6b:13:a9:6d:4c:95: c7:fa:da:67:fb:f0:c1:52:fb:11:e5:af:2c:7d:82:eb:00:55: b5:95:09:e9:af:0c:04:5d:8f:64:c7:42:83:e2:1a:46:8a:89: e0:3b:48:87:56:7f:b3:89:8e:9b:cb:4a:61:26:4a:49:3f:04: fa:91:c1:ac:45:ff:77:67:cd:22:28:26:60:c9:75:c6:f5:12: f2:46:0f:92:c8:80:66:bc:2f:02:01:6b:2d:5d:93:83:f1:f5: 9c:cc:1b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9RDKng7CPYy2+OkEhbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjZlYTgwMjMwN2JjNTNiZmYzY2JiNjNlOWY4MTc5YWM0 YzFlMzkwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhlY2JmNGZmNWVhMWE1Zjg2NjBhM2I2MGMxOGExZTI2ZjYwZDBkYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pYE8zS8kE8OuwGynW9fIl5XCYOc LOWZfBxbHamGX+XW3OcllqWKuXsTCGg9GQsocP0/gknYTKrNjoEdRirRWWPGow96 ND9KbawCvm2bu8B+Pd8Ch13ctQ4JJ6f04tiU7elxWSnHS8AnuQoxTSIraUtkU8CG a/7gpyqNaUTeqfG1XtCsb8b2UHqFazvIEgIS8UrKEXIqjCXiTPJSbbQodr+qt58z XJH6va6c12wr3+1bX+ZkY6qhnz58+vJueBRImKBHFooaNtDvdgayZ2NdTAEUTQ+L 73ErQA+Xc/1CLVNRhPBy6o42T8YlNFVDWXUZNLQyEvCYwUnNT0VV31BkbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOy/T/XqGl+GYKO2DBih4m9g0Nt4MB8GA1UdIwQY MBaAFF/26oAjB7xTv/PLtj6fgXmsTB45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYt NTgzODIzODQ3OTUyLzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYtNTgzODIzODQ3OTUy LzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzUnG7aI vUtNF+qVv4wRvDSbssTFPomF9ctkiqTrfjxfhZl5l6B7d9qGipF9DX0867TnnXoY fQTc3jqvj/VjnmAw2F+UMEAuIwHDJG17xtH+6ERQd98kInJy348TEKbXIvoxXTQ8 yfzpGp1XG0lK6PMJSPHb6pIGH9k1fPRf8MytMqCA39cGFr2wsMDHhBt28tE2yjc/ +1y5lAZlaxOpbUyVx/raZ/vwwVL7EeWvLH2C6wBVtZUJ6a8MBF2PZMdCg+IaRoqJ 4DtIh1Z/s4mOm8tKYSZKST8E+pHBrEX/d2fNIigmYMl1xvUS8kYPksiAZrwvAgFr LV2Tg/H1nMwbpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:16 2025 by rpki-client