This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft File: xqcHk0p2K73zT8AUjyZc4SRXchM.mft (raw, json) Hash identifier: MXBXLd4LYUu43Zsm5A6J5u3mJXka+LbKg90UfeZPaZ4= Subject key identifier: 83:B4:7C:A4:15:74:AB:32:14:A8:0B:B9:9A:EF:51:52:F0:A8:D3:AD Authority key identifier: C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 Certificate issuer: /CN=c6a707934a762bbdf34fc0148f265ce124577213 Certificate serial: 019AF208A5C4C71801F3853F782C91E4CFF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft Manifest number: 0D7B Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: P4yNArORhRajtqPmpQlRZeYbVZ0.roa (hash: ovgY1UfKMguzJWbAh8dinNkUhXWsmPXDNNDIC/A76qQ=) 2: hR41RYuMBKXN5Hx2ppbw_fKnwEs.roa (hash: xBN42LVsiTw0l1r5bKypPkW/0D8ZgYMg2XduaOrWfic=) 3: wmwzHnavsbNneHL_oBiaJZvkaxE.roa (hash: uKd6LFv+jY/CzqKajEjXp9d0rGUr+SNw31zSoDV1LhM=) 4: xqcHk0p2K73zT8AUjyZc4SRXchM.crl (hash: FLpQRnoMBiveDGD/Qd8mY85mpBX5uQFbqj5aMgOUdpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a5:c4:c7:18:01:f3:85:3f:78:2c:91:e4:cf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a707934a762bbdf34fc0148f265ce124577213 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=83b47ca41574ab3214a80bb99aef5152f0a8d3ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:e8:7f:63:cd:87:0c:6a:16:87:7a:cd:a6: c5:d3:19:2f:c8:5e:da:be:5b:43:8e:62:f4:c1:70: ce:7c:61:c6:71:8f:75:2e:5e:e3:59:8d:ed:3a:2d: 52:5e:7e:dd:c6:73:26:20:68:69:e8:0e:b4:7c:95: 5f:ce:c7:2e:1f:b3:c8:3b:31:a4:12:df:61:99:b1: 00:b5:e1:b8:61:35:78:a5:7c:0e:ab:ce:ae:73:10: 19:53:8b:eb:10:c7:0d:ec:2a:06:7e:0a:8d:dc:ef: b7:7a:7e:91:8c:4e:f7:d5:f6:ab:d4:af:c9:70:a9: 7b:6a:34:ae:9d:f5:30:e4:0f:81:a3:b2:0c:7a:8d: 14:0d:34:ad:23:44:b3:cf:55:aa:db:fe:28:c6:6d: 2f:a5:61:fb:4e:57:42:8e:7e:35:ef:4b:f3:4a:a5: a2:1e:42:5f:6e:45:11:a6:99:ee:1a:12:5d:c3:c5: dc:36:6f:d0:f4:df:52:19:06:27:1b:12:ed:99:ae: b4:18:e7:06:23:0e:9e:5b:71:20:41:e3:eb:00:bf: 64:f7:e6:82:a8:a4:1b:9a:e9:b5:07:b9:90:b9:84: ce:5d:93:20:88:12:cb:ed:1c:53:68:8d:7f:41:8a: 91:39:c0:0a:bd:42:26:f2:e7:6f:7b:fe:a2:6e:7e: 42:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B4:7C:A4:15:74:AB:32:14:A8:0B:B9:9A:EF:51:52:F0:A8:D3:AD X509v3 Authority Key Identifier: keyid:C6:A7:07:93:4A:76:2B:BD:F3:4F:C0:14:8F:26:5C:E1:24:57:72:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqcHk0p2K73zT8AUjyZc4SRXchM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/486c96-8e0f-4161-a00e-b8ea18eb75f4/1/xqcHk0p2K73zT8AUjyZc4SRXchM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:09:02:2e:be:9a:2f:81:8e:a8:f3:f1:18:e7:4a:55:0c:d6: 3e:0a:94:5d:8e:c1:68:8b:cb:d9:5b:c9:ca:1f:52:f2:99:53: 17:17:4f:24:e0:fc:89:df:66:63:10:5e:70:7d:6d:95:c4:db: d5:3f:62:a5:09:5a:07:d4:a4:ec:eb:d2:91:18:50:bd:5c:1c: a9:f2:28:98:36:93:ae:69:17:f2:b7:b1:a8:5a:76:fc:dc:6e: d5:84:e8:eb:df:c7:36:59:8d:db:f4:3b:d9:24:a8:50:d0:12: bd:ae:82:e6:2b:f9:90:20:b8:e1:24:c0:d8:c5:dc:2a:b6:62: 46:b3:f8:52:5f:67:ba:9a:9b:fe:31:8d:b8:04:d0:9e:ec:d8: 08:bc:d7:9f:a0:67:3d:b2:e1:1f:13:42:3e:d2:bb:96:ec:73: 94:ba:50:81:0c:7f:0f:f6:7f:a7:fb:f5:fc:dd:0c:14:a9:78: f7:e3:19:e9:7a:22:3f:31:b3:c6:2d:1f:a7:c8:b8:70:ed:fb: 7f:33:8c:20:da:03:80:f1:e9:b6:ab:fc:1a:40:01:d2:e3:15: 72:8b:f3:96:e0:c6:cc:08:cc:f9:6b:11:82:b0:bc:ca:50:2f: 8c:be:b2:0f:d8:55:dd:3d:0e:ed:44:43:c6:35:da:33:ad:9c: 6d:25:39:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKXExxgB84U/eCyR5M/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTcwNzkzNGE3NjJiYmRmMzRmYzAxNDhmMjY1Y2UxMjQ1 NzcyMTMwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD Eyg4M2I0N2NhNDE1NzRhYjMyMTRhODBiYjk5YWVmNTE1MmYwYThkM2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXbof2PNhwxqFod6zabF0xkvyF7a vltDjmL0wXDOfGHGcY91Ll7jWY3tOi1SXn7dxnMmIGhp6A60fJVfzscuH7PIOzGk Et9hmbEAteG4YTV4pXwOq86ucxAZU4vrEMcN7CoGfgqN3O+3en6RjE731far1K/J cKl7ajSunfUw5A+Bo7IMeo0UDTStI0Szz1Wq2/4oxm0vpWH7TldCjn4170vzSqWi HkJfbkURppnuGhJdw8XcNm/Q9N9SGQYnGxLtma60GOcGIw6eW3EgQePrAL9k9+aC qKQbmum1B7mQuYTOXZMgiBLL7RxTaI1/QYqROcAKvUIm8udve/6ibn5CLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIO0fKQVdKsyFKgLuZrvUVLwqNOtMB8GA1UdIwQY MBaAFManB5NKdiu980/AFI8mXOEkV3ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUt YjhlYTE4ZWI3NWY0LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi80ODZjOTYtOGUwZi00MTYxLWEwMGUtYjhlYTE4ZWI3NWY0 LzEveHFjSGswcDJLNzN6VDhBVWp5WmM0U1JYY2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwkCLr6a L4GOqPPxGOdKVQzWPgqUXY7BaIvL2VvJyh9S8plTFxdPJOD8id9mYxBecH1tlcTb 1T9ipQlaB9Sk7OvSkRhQvVwcqfIomDaTrmkX8rexqFp2/Nxu1YTo69/HNlmN2/Q7 2SSoUNASva6C5iv5kCC44STA2MXcKrZiRrP4Ul9nupqb/jGNuATQnuzYCLzXn6Bn PbLhHxNCPtK7luxzlLpQgQx/D/Z/p/v1/N0MFKl49+MZ6XoiPzGzxi0fp8i4cO37 fzOMINoDgPHptqv8GkAB0uMVcovzluDGzAjM+WsRgrC8ylAvjL6yD9hV3T0O7URD xjXaM62cbSU5VA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:31 2025 by rpki-client