This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json) Hash identifier: EzCLH6IOdgPoqXyPrxV1B4BnlkbfNNtL9zQtC1Ere9o= Subject key identifier: E3:89:1E:7D:B7:E2:37:D9:4A:24:9D:0A:B4:73:C7:3B:A9:2B:F9:F5 Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7 Certificate serial: 019B2E8B5E5F6761DDBB77CADC0393C2180C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft Manifest number: 0649 Signing time: Wed 17 Dec 2025 23:00:44 +0000 Manifest this update: Wed 17 Dec 2025 23:00:44 +0000 Manifest next update: Thu 18 Dec 2025 23:00:44 +0000 Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=) 2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=) 3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: E6hcagg1fr3ZgzpH6z7uSVJzt7LT0QOFCgNSWP1Tslg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:5e:5f:67:61:dd:bb:77:ca:dc:03:93:c2:18:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7 Validity Not Before: Dec 17 23:00:44 2025 GMT Not After : Dec 18 23:00:44 2025 GMT Subject: CN=e3891e7db7e237d94a249d0ab473c73ba92bf9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:bf:4c:a1:ae:57:3d:6d:53:ad:de:66:c6: 30:71:15:bf:80:00:9d:9a:a5:b2:17:c3:bf:12:0b: 6d:67:0b:48:6b:95:ec:11:3f:6d:d5:ce:6b:a3:7f: 9c:38:7e:6d:f6:b1:52:95:9a:2f:e7:40:e7:46:29: 65:5b:7e:f9:85:82:67:69:34:5a:6e:db:c8:0e:27: 5e:01:b5:83:0e:02:6a:42:c5:ce:c0:20:ee:a0:e9: 9a:b8:84:74:89:f2:f3:78:5b:4a:7c:7c:a6:ce:27: 9b:5d:ab:ac:e3:39:e6:7f:2d:e0:5d:ca:f2:e0:49: 18:cd:f8:d6:9e:3e:21:a7:70:48:22:fa:b2:2c:8c: 14:fa:bf:47:4b:bb:4a:41:23:23:25:83:5f:23:00: f1:0c:1f:69:1e:dd:24:12:4c:0c:8e:f3:c0:24:1c: 54:8b:d7:39:bf:e8:84:5b:b8:6a:0e:ee:73:0d:0d: a5:89:55:55:4d:dd:2e:22:1d:09:8c:c0:a6:df:1f: 9c:5f:37:77:12:8a:4e:ac:4f:8c:c5:9f:92:3c:f8: 50:71:31:7a:e4:76:ab:80:7c:bf:73:5b:57:92:8b: b0:c7:af:c8:5a:23:ff:b2:c6:44:2b:1d:4e:45:2a: f2:af:4d:38:15:75:79:ba:00:6b:b0:e4:ac:77:ed: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:89:1E:7D:B7:E2:37:D9:4A:24:9D:0A:B4:73:C7:3B:A9:2B:F9:F5 X509v3 Authority Key Identifier: keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e4:d3:20:be:bf:6a:64:ae:50:ae:9a:69:80:74:b3:ec:7a: 94:ed:f5:4a:c5:9a:03:86:ff:40:76:61:92:84:01:9e:73:00: 19:59:6d:30:f6:67:e7:42:6b:a1:d3:a9:66:47:87:af:fd:e3: 0a:50:7f:c7:a8:56:9a:3f:41:2b:1c:c5:59:e6:ac:e6:9e:ca: 3e:31:87:34:f2:e4:f7:a8:42:3c:42:0e:45:f5:6d:ee:09:6d: 14:4c:71:c9:5e:76:60:92:ef:94:0c:df:06:df:70:35:8d:a7: 14:7e:83:1b:a7:6b:f3:9c:23:7b:76:e6:fc:bd:d7:73:ae:4b: 79:83:51:2e:9a:da:f3:a9:5e:b3:14:4f:fd:fc:b7:28:47:ad: 23:e2:ba:3f:c0:28:a5:84:96:00:cf:6d:24:e7:f0:1e:e5:d1: 60:a1:3f:83:9e:3c:bc:81:fd:16:77:b4:87:0e:3c:ef:c0:99: 54:f3:51:36:dc:dc:82:29:f6:b6:b1:e5:8f:44:c2:a6:b5:62: 4b:9c:5f:92:0d:0f:1e:08:5a:27:09:0b:5f:0a:0b:17:20:ff: b8:21:6e:20:93:cc:24:00:df:84:5b:72:e6:4e:64:9f:f3:64: b9:4c:f1:31:0a:f4:3a:37:f3:c4:01:9f:46:fd:0f:5c:5d:07: dc:fb:bc:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui15fZ2Hdu3fK3AOTwhgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5 NzEwYTcwHhcNMjUxMjE3MjMwMDQ0WhcNMjUxMjE4MjMwMDQ0WjAzMTEwLwYDVQQD EyhlMzg5MWU3ZGI3ZTIzN2Q5NGEyNDlkMGFiNDczYzczYmE5MmJmOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAK/TKGuVz1tU63eZsYwcRW/gACd mqWyF8O/EgttZwtIa5XsET9t1c5ro3+cOH5t9rFSlZov50DnRillW375hYJnaTRa btvIDideAbWDDgJqQsXOwCDuoOmauIR0ifLzeFtKfHymziebXaus4znmfy3gXcry 4EkYzfjWnj4hp3BIIvqyLIwU+r9HS7tKQSMjJYNfIwDxDB9pHt0kEkwMjvPAJBxU i9c5v+iEW7hqDu5zDQ2liVVVTd0uIh0JjMCm3x+cXzd3EopOrE+MxZ+SPPhQcTF6 5HargHy/c1tXkouwx6/IWiP/ssZEKx1ORSryr004FXV5ugBrsOSsd+0mUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOJHn234jfZSiSdCrRzxzupK/n1MB8GA1UdIwQY MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQuTTIL6/ amSuUK6aaYB0s+x6lO31SsWaA4b/QHZhkoQBnnMAGVltMPZn50JrodOpZkeHr/3j ClB/x6hWmj9BKxzFWeas5p7KPjGHNPLk96hCPEIORfVt7gltFExxyV52YJLvlAzf Bt9wNY2nFH6DG6dr85wje3bm/L3Xc65LeYNRLpra86lesxRP/fy3KEetI+K6P8Ao pYSWAM9tJOfwHuXRYKE/g548vIH9Fne0hw4878CZVPNRNtzcgin2trHlj0TCprVi S5xfkg0PHghaJwkLXwoLFyD/uCFuIJPMJADfhFty5k5kn/NkuUzxMQr0OjfzxAGf Rv0PXF0H3Pu8hA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:57 2025 by rpki-client