This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json) Hash identifier: IbBTWyRFrCPkxxKL3eRbx3yF6EYdRU7p++0bLgf2O5c= Subject key identifier: 7B:0F:1D:BC:34:C6:DA:81:F3:5D:41:C6:6F:D1:3D:62:74:86:85:29 Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Certificate serial: 019AF1D1A9D489BCDB4CADC785C7EF051202 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft Manifest number: 0220 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: Ny6t36A8bR0vmFEw2AdbkIIHyhxI0I2mO5Gj5YxIesE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:d4:89:bc:db:4c:ad:c7:85:c7:ef:05:12:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=7b0f1dbc34c6da81f35d41c66fd13d6274868529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f3:04:7f:22:a0:0c:4c:b0:d4:c8:41:50:36: 20:e2:3d:8f:b9:50:d2:74:b9:f4:ef:58:b2:0b:98: 1c:eb:d1:a6:1a:32:34:6f:a4:bd:f6:91:d4:3c:4d: 21:50:d7:2e:2b:f3:04:98:67:3e:ea:38:46:b8:99: 9b:6e:61:1a:e0:6d:60:e8:88:7d:ea:fc:6b:af:fe: af:3b:de:39:03:a2:d4:6d:da:9b:14:e1:d9:0f:ab: 05:3d:11:e9:4b:e4:89:0f:93:9e:9a:b6:71:a6:c5: 53:ea:86:d2:b9:4f:04:a3:d1:ea:49:06:36:28:20: 5b:40:f1:ad:bd:26:3d:38:38:16:c8:a2:d7:89:ee: 7c:ab:bc:68:b4:2c:d7:fa:e2:ec:d5:4a:be:3e:d3: 38:49:ea:cb:f7:c6:00:54:c1:04:0d:52:98:c8:a5: d6:71:cb:56:51:ae:db:58:1e:c8:7d:e5:9c:32:54: e7:a9:2c:97:c6:0b:01:1e:9c:d5:2e:92:5a:c6:05: ad:7e:9d:0a:fa:cd:21:5b:66:c7:65:4d:b5:76:8b: 66:5e:2f:0a:df:3d:fb:98:f8:01:45:9d:2f:f2:2f: 81:18:20:74:f5:3d:93:6c:a9:44:74:a6:ac:90:16: 99:d4:a3:c7:5d:d4:f8:a9:12:9d:78:4e:6f:25:c6: a6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:1D:BC:34:C6:DA:81:F3:5D:41:C6:6F:D1:3D:62:74:86:85:29 X509v3 Authority Key Identifier: keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:17:1d:f0:5a:0a:fb:ba:a6:68:c8:80:63:fb:06:a2:26: f0:ea:c0:cc:fd:9f:69:69:fa:bd:20:e0:42:2a:54:78:f6:7e: b7:ba:6e:bc:e3:6c:bd:c1:d9:03:8a:3b:2d:37:88:dc:0e:75: 30:72:f2:3f:56:5b:9a:10:ef:05:df:ae:84:ff:db:60:db:14: 06:b5:d9:ac:5f:bf:ab:fc:cd:e2:f1:c4:5b:05:7b:c3:37:ec: ad:89:ee:66:6b:b0:bb:fd:ff:ee:b0:b6:24:c3:04:b8:16:a1: 61:26:e9:d5:ca:23:ef:94:84:6a:95:44:eb:be:ca:16:ac:e1: 68:68:1d:77:d9:10:d0:bb:21:85:69:8e:88:15:e0:5d:46:eb: 41:04:be:82:11:36:1c:57:0c:04:50:f7:ec:c8:bb:4b:03:43: e2:14:8a:52:9c:64:18:91:8e:10:11:4e:1d:ce:41:f8:8f:ed: 8d:ef:ba:27:9b:b0:97:63:17:8c:55:bf:26:6c:fc:c4:f8:39: 01:a3:cb:fb:f9:68:1b:35:29:17:83:57:b9:25:6d:0a:85:05: 36:ce:1e:7c:6d:47:f6:75:aa:2f:b8:58:9d:3d:2d:3e:5e:2a: b6:0e:a4:69:32:bf:f4:44:39:34:29:3b:83:44:26:9d:69:7e: af:b1:f2:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0anUibzbTK3HhcfvBRICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWM1MGIzNGIyYmFmZGM0NmRjNWI3NWQzOWJjMGRkODlh NjhmMmMwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg3YjBmMWRiYzM0YzZkYTgxZjM1ZDQxYzY2ZmQxM2Q2Mjc0ODY4NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PMEfyKgDEyw1MhBUDYg4j2PuVDS dLn071iyC5gc69GmGjI0b6S99pHUPE0hUNcuK/MEmGc+6jhGuJmbbmEa4G1g6Ih9 6vxrr/6vO945A6LUbdqbFOHZD6sFPRHpS+SJD5OemrZxpsVT6obSuU8Eo9HqSQY2 KCBbQPGtvSY9ODgWyKLXie58q7xotCzX+uLs1Uq+PtM4SerL98YAVMEEDVKYyKXW cctWUa7bWB7IfeWcMlTnqSyXxgsBHpzVLpJaxgWtfp0K+s0hW2bHZU21dotmXi8K 3z37mPgBRZ0v8i+BGCB09T2TbKlEdKaskBaZ1KPHXdT4qRKdeE5vJcamUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsPHbw0xtqB811Bxm/RPWJ0hoUpMB8GA1UdIwQY MBaAFF6sULNLK6/cRtxbddObwN2Jpo8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYt NzA1OGYxMWZhYzgyLzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8wZjk3MGYtNmFjMy00MWJjLWI2ZmYtNzA1OGYxMWZhYzgy LzEvWHF4UXMwc3JyOXhHM0Z0MTA1dkEzWW1tanl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNEXHfBa Cvu6pmjIgGP7BqIm8OrAzP2faWn6vSDgQipUePZ+t7puvONsvcHZA4o7LTeI3A51 MHLyP1ZbmhDvBd+uhP/bYNsUBrXZrF+/q/zN4vHEWwV7wzfsrYnuZmuwu/3/7rC2 JMMEuBahYSbp1coj75SEapVE677KFqzhaGgdd9kQ0LshhWmOiBXgXUbrQQS+ghE2 HFcMBFD37Mi7SwND4hSKUpxkGJGOEBFOHc5B+I/tje+6J5uwl2MXjFW/Jmz8xPg5 AaPL+/loGzUpF4NXuSVtCoUFNs4efG1H9nWqL7hYnT0tPl4qtg6kaTK/9EQ5NCk7 g0QmnWl+r7Hyrw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:09 2025 by rpki-client