This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft File: X017eQ8_STQyjhKaLd5N10qj4T4.mft (raw, json) Hash identifier: dpikUcPGB1J6hMdzyfmNvcZfw++H1SLVbNt2MDpsCEI= Subject key identifier: B9:0A:B5:67:C9:46:79:E5:90:78:DF:55:72:F0:FA:2C:CE:E6:AB:87 Authority key identifier: 5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E Certificate issuer: /CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e Certificate serial: 019AF16454AA634D6814D34D40944F2AC6B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft Manifest number: 01DE Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: X017eQ8_STQyjhKaLd5N10qj4T4.crl (hash: 9G7qEa/OdICnUgal35EnRKXJFheChbuz9+Q7ksJualc=) 2: oF0UnfdG9SgR1YrjEvyyzHdI2NQ.roa (hash: C+won2ayhOZhVuYFZ85jDDGUEWPlmXvRmRnHCUNjIgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:54:aa:63:4d:68:14:d3:4d:40:94:4f:2a:c6:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4d7b790f3f4934328e129a2dde4dd74aa3e13e Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=b90ab567c94679e59078df5572f0fa2ccee6ab87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:aa:0e:81:e1:98:cc:bc:b7:21:82:43:b4:3e: 09:bb:52:9f:71:c7:e8:54:a2:24:f6:cf:49:4f:cf: 0a:d2:84:75:2f:fb:87:cb:fe:6f:e5:ac:76:97:9b: ef:03:66:0b:d1:d5:20:18:24:41:58:35:29:b3:f7: 01:bb:0c:8b:95:91:32:39:7a:2f:be:69:c7:a2:37: 06:cb:13:53:c2:84:fd:99:49:22:e3:1b:b0:34:34: 26:00:b9:5f:18:df:58:12:01:92:7d:f2:e5:62:fa: d6:9c:0c:99:7d:e7:c0:60:29:92:de:1b:2b:da:56: 17:78:8b:5d:b3:69:d5:2d:3f:ea:01:16:c3:4d:29: 0b:e6:d1:b7:19:3c:83:76:93:64:07:f2:49:65:0f: d8:b2:bf:bb:ca:99:01:59:86:d1:d2:8e:4f:18:a4: c9:3d:b4:bd:0e:87:c1:13:91:89:b8:8e:08:4a:39: 50:0d:cb:a8:1f:ef:8b:cb:11:99:31:52:6f:f6:64: a4:50:2c:87:c6:e1:0a:eb:49:cb:8f:ab:8f:0f:89: 11:54:4d:72:9e:ac:32:ce:e0:4e:2d:c5:70:a0:5a: 41:2a:9e:5b:34:d9:93:86:9f:86:cd:23:09:fa:11: 14:b3:61:a5:3c:9a:c5:98:ed:c0:3c:eb:c7:04:ee: 2d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:B5:67:C9:46:79:E5:90:78:DF:55:72:F0:FA:2C:CE:E6:AB:87 X509v3 Authority Key Identifier: keyid:5F:4D:7B:79:0F:3F:49:34:32:8E:12:9A:2D:DE:4D:D7:4A:A3:E1:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X017eQ8_STQyjhKaLd5N10qj4T4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9b6016-1424-4188-ae62-7d54927445f6/1/X017eQ8_STQyjhKaLd5N10qj4T4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:b2:95:54:70:5f:d9:ac:79:ba:f0:e6:5c:fe:8a:59:96: ae:0f:c2:f9:9f:24:2a:5d:57:fd:2d:af:2c:ba:9b:d0:e2:ae: 22:77:53:71:1f:e7:d4:48:4e:23:20:00:ff:66:b0:73:ac:89: 10:62:d0:2b:ed:48:75:c5:2d:84:2b:be:41:cd:d5:83:3c:26: 92:7b:c8:34:8c:64:05:6b:5f:71:d7:45:bd:4a:90:98:13:9f: 77:3f:7a:c6:49:ac:fc:5a:73:c5:8b:7c:5f:20:52:f5:2f:4a: 53:88:06:5d:d1:f7:9f:c5:3a:86:2f:b0:51:0e:ac:f6:46:f7: de:f9:77:49:4f:c2:25:61:84:b4:41:2f:02:76:89:f1:71:41: 1e:1b:d7:25:4c:2f:84:a9:e2:e2:b6:b9:c9:56:69:a1:bf:32: 04:8e:51:ea:07:ea:46:a3:6b:c2:b6:f4:14:89:05:ac:eb:9e: be:2a:98:d0:01:c8:93:df:20:82:d9:ef:84:82:cf:9d:df:de: c3:91:ab:6d:a5:cd:e4:7b:6d:f5:f7:68:52:ca:4f:75:4d:6f: 82:84:6d:f5:e7:4e:f2:b8:df:66:73:0b:08:9f:47:5f:52:bd: c0:8f:61:0d:19:8c:01:ca:df:d7:3d:f5:af:ad:d3:fe:8a:02: a4:08:99:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFSqY01oFNNNQJRPKsayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGQ3Yjc5MGYzZjQ5MzQzMjhlMTI5YTJkZGU0ZGQ3NGFh M2UxM2UwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EyhiOTBhYjU2N2M5NDY3OWU1OTA3OGRmNTU3MmYwZmEyY2NlZTZhYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKoOgeGYzLy3IYJDtD4Ju1Kfccfo VKIk9s9JT88K0oR1L/uHy/5v5ax2l5vvA2YL0dUgGCRBWDUps/cBuwyLlZEyOXov vmnHojcGyxNTwoT9mUki4xuwNDQmALlfGN9YEgGSffLlYvrWnAyZfefAYCmS3hsr 2lYXeItds2nVLT/qARbDTSkL5tG3GTyDdpNkB/JJZQ/Ysr+7ypkBWYbR0o5PGKTJ PbS9DofBE5GJuI4ISjlQDcuoH++LyxGZMVJv9mSkUCyHxuEK60nLj6uPD4kRVE1y nqwyzuBOLcVwoFpBKp5bNNmThp+GzSMJ+hEUs2GlPJrFmO3APOvHBO4tBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkKtWfJRnnlkHjfVXLw+izO5quHMB8GA1UdIwQY MBaAFF9Ne3kPP0k0Mo4Smi3eTddKo+E+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjIt N2Q1NDkyNzQ0NWY2LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85YjYwMTYtMTQyNC00MTg4LWFlNjItN2Q1NDkyNzQ0NWY2 LzEvWDAxN2VROF9TVFF5amhLYUxkNU4xMHFqNFQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFCylVRw X9msebrw5lz+ilmWrg/C+Z8kKl1X/S2vLLqb0OKuIndTcR/n1EhOIyAA/2awc6yJ EGLQK+1IdcUthCu+Qc3VgzwmknvINIxkBWtfcddFvUqQmBOfdz96xkms/FpzxYt8 XyBS9S9KU4gGXdH3n8U6hi+wUQ6s9kb33vl3SU/CJWGEtEEvAnaJ8XFBHhvXJUwv hKni4ra5yVZpob8yBI5R6gfqRqNrwrb0FIkFrOueviqY0AHIk98ggtnvhILPnd/e w5GrbaXN5Htt9fdoUspPdU1vgoRt9edO8rjfZnMLCJ9HX1K9wI9hDRmMAcrf1z31 r63T/ooCpAiZHw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:23 2025 by rpki-client