This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json) Hash identifier: lmjDVv14NCoPSqa/n1Mg9weO6d0WeoHai8/5CyeBLI0= Subject key identifier: B8:E2:25:22:B3:6C:82:EF:63:3D:74:F1:EF:CD:1F:39:F8:FE:E0:5D Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Certificate serial: 019B2551C745DA41CA92BC1C5E1CF338FE0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft Manifest number: 17A6 Signing time: Tue 16 Dec 2025 04:01:14 +0000 Manifest this update: Tue 16 Dec 2025 04:01:14 +0000 Manifest next update: Wed 17 Dec 2025 04:01:14 +0000 Files and hashes: 1: 76YLPrhx6YZ6wPUnxx4hhghh_yA.roa (hash: 9g4sgttXIK8h4MyA93dVripngZ6JdbGVj8k/XjqSGOA=) 2: ECOt3z1NgPTTiGfJC8hmlqy13dg.roa (hash: 2IviD3r/uB/k918FKny3w/vkHS8wscxR1RbMyeQtND4=) 3: KcNtrkXfWD4wgCwB7qLlqtvzcgg.roa (hash: z81PUb/8yP4dJX4BJ7raGDXpDYCTPlJci2iLGLvRqnQ=) 4: MZ6xYFtxdQrHBhvq9x4yDITh6r4.roa (hash: qbK/ZmO17AT20ukIyQfbqqvKJQudIBqu9g/K4Rno+qc=) 5: PimO5b5KbIpbyY6X7dBeo4nzGfo.roa (hash: XRrn0aWk97wVb/B9B+cfXVdA4L+ijYSy1XLqIddxODg=) 6: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: vbhwpsceTN96qNoXi2tkS0gxJweQe+qavxbCS3up3FA=) 7: dAdZzACFODUgOStSGNWzLcf_RU0.roa (hash: AuswbLeeu00V33aPeFjcxTD6yo2ZnZ2hSutV4u44TPo=) 8: vOFudBdxiFDJEx5NtI5aOWe6eqk.roa (hash: rXSYCj9ZLLh7ARQq1thJ8aZq2AITX7EKqS+sq0c+r5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:c7:45:da:41:ca:92:bc:1c:5e:1c:f3:38:fe:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695 Validity Not Before: Dec 16 04:01:14 2025 GMT Not After : Dec 17 04:01:14 2025 GMT Subject: CN=b8e22522b36c82ef633d74f1efcd1f39f8fee05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:21:fb:93:42:72:19:f1:9e:e0:d3:83:33:fa: 38:9d:f4:77:2a:b7:fb:8c:a0:61:8e:7b:72:71:b4: 78:f1:68:9b:40:82:d0:48:b8:8f:6c:f4:d3:8f:95: af:10:0e:45:05:f0:e6:3a:db:3f:c8:9e:ef:8a:6f: 5e:36:01:13:54:3e:6a:c6:17:d6:48:60:43:97:39: f0:35:06:98:02:6c:12:ab:e5:bc:07:d9:58:86:5b: 86:0d:d4:d4:5e:91:fa:fa:f0:50:f6:2f:63:de:53: b3:e6:af:e5:6e:80:b0:7d:e7:55:2a:3a:f8:8f:09: d8:f5:8f:98:74:61:9b:e6:c7:5e:3a:9a:fe:82:b8: 5f:2f:2a:93:eb:84:ae:5e:4f:96:ac:ea:a6:74:77: 2b:ab:1e:98:53:83:36:3a:08:4e:0c:92:9d:e1:f2: 7a:33:3b:10:6f:54:e2:7e:a1:a4:96:da:e3:22:b2: e2:24:83:7e:5d:3d:dd:6a:0d:3a:7a:38:29:bc:36: 6b:93:fd:06:24:da:2d:b8:28:92:07:68:23:62:9e: c5:52:98:cd:dd:c5:ca:89:14:99:d2:ce:e6:12:c3: 77:65:09:8e:e9:9b:69:3e:13:ef:88:e4:fa:b4:ac: 76:d8:8f:83:fc:0f:8e:1e:1a:6b:74:a4:8d:59:cd: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E2:25:22:B3:6C:82:EF:63:3D:74:F1:EF:CD:1F:39:F8:FE:E0:5D X509v3 Authority Key Identifier: keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:63:6d:5b:89:0b:ca:2b:9a:50:8b:78:af:e3:f4:cd:39:cb: 27:b8:52:13:1e:99:36:38:df:ab:c7:08:4f:c9:82:7a:78:fb: fa:77:0b:b3:a5:be:d4:9a:a9:06:94:88:87:56:58:58:79:4b: 14:be:aa:28:79:dc:82:20:2d:92:3e:c1:d3:b2:1d:d0:d0:09: b4:14:6c:b3:2f:12:e3:7e:6f:7c:f9:fe:1f:41:77:2e:59:1e: 12:25:94:89:49:8d:03:3a:9d:70:d0:e0:a2:0c:e2:53:be:7a: 2a:6a:99:48:a9:f8:fd:0d:8b:15:57:ee:21:42:f5:54:9e:38: c7:53:69:5a:cd:cb:03:93:ed:8e:90:c4:97:e5:5e:61:14:eb: 14:99:53:52:73:3a:d7:b5:c1:30:d3:5a:5d:2f:cb:a8:44:19: ed:ca:18:f3:bc:91:8d:74:d2:72:d9:89:25:7f:d3:7f:97:64: 5e:a0:44:1d:ff:53:32:81:ac:fd:51:8d:45:9d:71:bc:07:67: d5:29:cd:56:af:8d:f4:6e:a9:67:ee:5d:47:d5:fa:ca:39:69: 15:6e:36:a7:40:c8:5a:49:3a:ee:21:75:23:01:95:bd:f4:ff: 3e:46:82:52:6d:d5:30:c9:9d:fe:aa:57:51:0a:c8:fc:65:7e: 02:42:52:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUcdF2kHKkrwcXhzzOP4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZjQ1MDFiNzU1MDAyZDkxNDNlOGZhNjczNjgxNWU5ZjBm OTM2OTUwHhcNMjUxMjE2MDQwMTE0WhcNMjUxMjE3MDQwMTE0WjAzMTEwLwYDVQQD EyhiOGUyMjUyMmIzNmM4MmVmNjMzZDc0ZjFlZmNkMWYzOWY4ZmVlMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiH7k0JyGfGe4NODM/o4nfR3Krf7 jKBhjntycbR48WibQILQSLiPbPTTj5WvEA5FBfDmOts/yJ7vim9eNgETVD5qxhfW SGBDlznwNQaYAmwSq+W8B9lYhluGDdTUXpH6+vBQ9i9j3lOz5q/lboCwfedVKjr4 jwnY9Y+YdGGb5sdeOpr+grhfLyqT64SuXk+WrOqmdHcrqx6YU4M2OghODJKd4fJ6 MzsQb1TifqGkltrjIrLiJIN+XT3dag06ejgpvDZrk/0GJNotuCiSB2gjYp7FUpjN 3cXKiRSZ0s7mEsN3ZQmO6ZtpPhPviOT6tKx22I+D/A+OHhprdKSNWc1oxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjiJSKzbILvYz108e/NHzn4/uBdMB8GA1UdIwQY MBaAFFz0UBt1UALZFD6PpnNoFenw+TaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUt NjBjZjlhYjFiMTNlLzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jMWNhMDctOTY1OC00NDQ2LThjYjUtNjBjZjlhYjFiMTNl LzEvWFBSUUczVlFBdGtVUG8tbWMyZ1Y2ZkQ1TnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWNtW4kL yiuaUIt4r+P0zTnLJ7hSEx6ZNjjfq8cIT8mCenj7+ncLs6W+1JqpBpSIh1ZYWHlL FL6qKHncgiAtkj7B07Id0NAJtBRssy8S435vfPn+H0F3LlkeEiWUiUmNAzqdcNDg ogziU756KmqZSKn4/Q2LFVfuIUL1VJ44x1NpWs3LA5PtjpDEl+VeYRTrFJlTUnM6 17XBMNNaXS/LqEQZ7coY87yRjXTSctmJJX/Tf5dkXqBEHf9TMoGs/VGNRZ1xvAdn 1SnNVq+N9G6pZ+5dR9X6yjlpFW42p0DIWkk67iF1IwGVvfT/PkaCUm3VMMmd/qpX UQrI/GV+AkJS5g== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:08 2025 by rpki-client