This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json) Hash identifier: lXFj9D+1scBEHHGcXh7uAJieeiGmnPlJT+8OoJLa6xc= Subject key identifier: B3:82:BC:F2:A2:8B:73:19:37:38:9F:61:7B:1E:B5:09:22:A8:99:D4 Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Certificate serial: 019AF5AEEFE975D8E1535FE6258FD99FFE18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft Manifest number: 0F24 Signing time: Sat 06 Dec 2025 22:01:13 +0000 Manifest this update: Sat 06 Dec 2025 22:01:13 +0000 Manifest next update: Sun 07 Dec 2025 22:01:13 +0000 Files and hashes: 1: AJZHmYeOjA6WzhCmkrG9-Q9R6e0.roa (hash: 2w9YT9FL9nWS9KMiSVT8Wf4Dme3XTUtS7KQ1r9kXdzY=) 2: IrihvyoC5WVtLyMsMa-SiimzVD4.roa (hash: jGXp7eSTl1p8h9SmYiq1Qn2/jPZ9ZUDFjn3K5+ZYCZI=) 3: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: gPSm9yF/qvgOBv8l8R2EXHqP1Vvx2xH94oAMJHfq+Jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:ef:e9:75:d8:e1:53:5f:e6:25:8f:d9:9f:fe:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de Validity Not Before: Dec 6 22:01:13 2025 GMT Not After : Dec 7 22:01:13 2025 GMT Subject: CN=b382bcf2a28b731937389f617b1eb50922a899d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:25:ab:52:3a:9a:db:8c:36:45:a5:ab:49:af: b7:72:89:b8:db:a1:77:b5:3d:71:b6:46:f3:f5:9d: 56:2a:20:ce:55:26:1e:85:a5:34:b8:b7:88:b4:08: 5f:ae:82:81:22:a6:d8:4a:71:1e:2d:c3:c5:a2:0d: 96:62:1c:a8:e5:5b:58:51:8e:c7:0f:64:a5:f3:d5: cf:06:70:19:97:54:01:d6:90:c6:a8:4b:92:66:e0: 6b:72:90:c9:7a:63:40:1b:e1:55:0d:cb:94:74:15: 4f:ff:5f:51:2c:a1:10:ed:2f:10:f7:8e:25:bb:d7: 7b:27:72:0c:00:30:03:7f:b0:69:37:f7:4a:75:d3: 94:9f:38:46:cd:cc:76:5b:5d:06:9d:b7:46:4c:0d: 0f:01:06:24:74:6d:1d:2b:eb:c1:7a:43:5c:da:b5: b6:1a:a2:67:70:76:7b:46:8b:f2:d5:3c:73:f5:79: df:84:c2:53:67:00:e8:fc:0c:cf:3a:6a:eb:6c:7e: 07:2e:5b:4c:ea:91:47:ad:fc:9e:2b:c9:9e:8b:8f: 4a:cf:41:83:fb:ca:1e:58:be:48:08:2d:40:fb:55: a7:f7:aa:c9:b8:bf:bf:5c:1e:9d:99:a1:b8:b0:c6: c9:f7:e2:fa:6d:91:d4:94:32:1c:d8:71:c8:11:22: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:82:BC:F2:A2:8B:73:19:37:38:9F:61:7B:1E:B5:09:22:A8:99:D4 X509v3 Authority Key Identifier: keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:aa:15:60:bd:d8:b3:fb:8b:f4:7e:cd:fa:49:85:7c:9b:fa: b5:1c:57:fa:e1:76:a0:b0:bd:cc:92:72:f1:81:22:eb:8f:3d: 96:d8:f1:bc:2b:c0:30:b3:6b:77:4e:97:3d:51:f4:da:21:33: 5a:fd:0f:89:92:7b:85:e1:39:68:ef:b6:2b:2d:6a:82:f7:d3: 29:2f:41:c2:7c:a8:55:f7:22:f1:dd:da:98:00:84:a5:44:c1: 04:cb:b4:9a:0b:30:64:75:b1:fd:9e:35:0f:78:9a:65:ce:91: 7c:57:79:e7:9d:9d:62:9c:ee:ef:56:e2:91:b4:29:7d:49:11: e8:6b:f2:1d:ae:fe:41:63:ea:b9:49:22:23:ff:cd:64:5b:93: b9:da:d6:a7:e5:f0:92:c6:6d:30:08:c6:01:52:81:9e:35:b6: 53:07:65:e3:ae:e3:4e:8c:71:65:5c:b9:2b:2c:0f:9e:72:2f: fd:b8:f2:de:c7:9a:a6:f0:7b:a4:f6:26:7f:96:fc:18:fd:d9: dd:2d:86:3f:ca:03:ef:12:a0:b1:b0:67:47:ad:eb:af:a4:c8: 54:03:f7:9e:21:0b:aa:a6:d3:b9:5c:5c:34:15:ff:99:b3:00: 51:58:55:31:0a:c8:dc:15:c5:52:b6:17:df:f2:2f:1a:11:48: 99:7c:25:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ru/pddjhU1/mJY/Zn/4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzQwMWYzMmNkMjgxNjk5ZmJlNGRjZjNiYjUwMmE2M2Ey YTYwZGUwHhcNMjUxMjA2MjIwMTEzWhcNMjUxMjA3MjIwMTEzWjAzMTEwLwYDVQQD EyhiMzgyYmNmMmEyOGI3MzE5MzczODlmNjE3YjFlYjUwOTIyYTg5OWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriWrUjqa24w2RaWrSa+3com426F3 tT1xtkbz9Z1WKiDOVSYehaU0uLeItAhfroKBIqbYSnEeLcPFog2WYhyo5VtYUY7H D2Sl89XPBnAZl1QB1pDGqEuSZuBrcpDJemNAG+FVDcuUdBVP/19RLKEQ7S8Q944l u9d7J3IMADADf7BpN/dKddOUnzhGzcx2W10GnbdGTA0PAQYkdG0dK+vBekNc2rW2 GqJncHZ7Rovy1Txz9XnfhMJTZwDo/AzPOmrrbH4HLltM6pFHrfyeK8mei49Kz0GD +8oeWL5ICC1A+1Wn96rJuL+/XB6dmaG4sMbJ9+L6bZHUlDIc2HHIESK2kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOCvPKii3MZNzifYXsetQkiqJnUMB8GA1UdIwQY MBaAFF50AfMs0oFpn75Nzzu1AqY6KmDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgt ZjYwNzBhNGFkODNhLzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xODg5OTQtMmQ0MC00YzQ4LWJhODgtZjYwNzBhNGFkODNh LzEvWG5RQjh5elNnV21mdmszUE83VUNwam9xWU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6oVYL3Y s/uL9H7N+kmFfJv6tRxX+uF2oLC9zJJy8YEi6489ltjxvCvAMLNrd06XPVH02iEz Wv0PiZJ7heE5aO+2Ky1qgvfTKS9BwnyoVfci8d3amACEpUTBBMu0mgswZHWx/Z41 D3iaZc6RfFd5552dYpzu71bikbQpfUkR6GvyHa7+QWPquUkiI//NZFuTudrWp+Xw ksZtMAjGAVKBnjW2Uwdl467jToxxZVy5KywPnnIv/bjy3seapvB7pPYmf5b8GP3Z 3S2GP8oD7xKgsbBnR63rr6TIVAP3niELqqbTuVxcNBX/mbMAUVhVMQrI3BXFUrYX 3/IvGhFImXwlHA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:16 2025 by rpki-client