This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft File: XQoNOW92k2k2XyuYPFMa_sqXEKc.mft (raw, json) Hash identifier: d1NXL4hxkhr9vg1i4AyGT/Q+8smmNrZq74tM+zxn01U= Subject key identifier: EF:49:FB:57:83:04:73:31:FF:8A:D0:61:28:09:77:9B:51:62:D7:E8 Authority key identifier: 5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 Certificate issuer: /CN=5d0a0d396f769369365f2b983c531afeca9710a7 Certificate serial: 019AF2AD873034C5DF5BAF9A8F3B9FBF1819 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft Manifest number: 062A Signing time: Sat 06 Dec 2025 08:00:49 +0000 Manifest this update: Sat 06 Dec 2025 08:00:49 +0000 Manifest next update: Sun 07 Dec 2025 08:00:49 +0000 Files and hashes: 1: 4qFSko06M6ldKhEnW5jCnn4ySD4.roa (hash: 9ZDGMUNQVPx9Ca0E8soIFoMtBGmde/WvzWxmQVvH3aE=) 2: ODlja_b59i-133EBdAMvNxg_FGs.roa (hash: BeeBcCK5yZ18C4O3Tfyd1bLor0is1i1bKSBKlJMjrjE=) 3: XQoNOW92k2k2XyuYPFMa_sqXEKc.crl (hash: iJ/iHLK+k4iUevFFiL2k5yHh12Fl3+iYxIiJew10yo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:87:30:34:c5:df:5b:af:9a:8f:3b:9f:bf:18:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d0a0d396f769369365f2b983c531afeca9710a7 Validity Not Before: Dec 6 08:00:49 2025 GMT Not After : Dec 7 08:00:49 2025 GMT Subject: CN=ef49fb5783047331ff8ad0612809779b5162d7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:6d:d0:47:fa:5d:08:c0:d5:c4:c0:55:0f: a8:87:5c:7f:52:d6:6c:8a:ba:3c:b9:13:b8:68:b0: c1:f3:24:07:e5:85:05:fc:af:00:62:1c:5c:76:84: ff:d0:2e:1d:61:7a:a3:73:1b:0c:d3:98:30:3e:ce: 1c:f2:64:17:2c:91:35:ba:36:20:f6:78:9a:08:e6: b4:dd:be:c9:09:c0:59:dc:1b:f5:cf:d6:4d:df:36: fa:27:8a:74:ca:d0:3a:3c:61:3f:36:10:b9:0b:17: 87:58:9a:f2:68:1f:de:e2:58:74:36:a1:b6:49:12: 94:b5:c2:72:66:b3:5d:67:22:29:44:70:4b:17:9c: 30:f1:f5:55:af:c3:92:ef:5a:41:2c:0a:b2:24:85: 52:31:cc:3f:f2:eb:ac:e0:9a:53:46:b0:10:fc:60: 04:4d:34:c8:aa:b5:fe:28:d7:15:b9:9e:3d:4c:36: 9b:2b:63:b3:f1:0c:fe:5d:bf:f4:78:95:02:81:d7: a8:dd:67:a2:82:b0:d0:24:37:71:65:88:47:e7:3e: c1:9b:40:cb:ba:8f:06:86:32:82:a0:a9:ff:c2:38: e9:72:98:0d:a3:5b:1c:94:0d:11:87:0d:a6:a4:ec: c5:d4:46:55:3d:8b:90:d6:73:3e:c8:a0:b6:35:47: 47:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:49:FB:57:83:04:73:31:FF:8A:D0:61:28:09:77:9B:51:62:D7:E8 X509v3 Authority Key Identifier: keyid:5D:0A:0D:39:6F:76:93:69:36:5F:2B:98:3C:53:1A:FE:CA:97:10:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQoNOW92k2k2XyuYPFMa_sqXEKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/223d8f-58ac-4df7-bf1e-442010b579ef/1/XQoNOW92k2k2XyuYPFMa_sqXEKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:c0:97:02:0a:8d:92:17:09:27:d3:65:f4:96:c4:e3:05: 6a:79:af:56:b9:d6:0d:ea:8f:1e:25:3e:7d:4a:cc:07:04:a1: 4c:c9:0f:ad:88:df:f3:cc:4f:77:9c:e4:72:7b:2a:26:66:a6: 54:4a:9d:cc:6e:a5:89:2f:b3:5c:f6:f0:67:53:98:4a:9a:25: 5a:b5:f4:4a:ce:81:ea:e8:2e:29:46:f0:af:6a:4d:0f:1f:59: f7:21:a0:14:46:f1:ec:05:8c:a1:99:f8:6a:ff:2d:53:59:b3: 63:d5:af:78:0c:70:6b:37:b1:76:ce:14:c1:af:43:e8:54:0c: 78:69:fb:76:b0:12:91:07:52:41:77:db:92:bd:8d:98:70:0c: d1:13:54:14:b8:31:14:62:44:50:18:55:f6:ae:c4:b0:6e:90: 86:47:22:14:ca:3b:59:ca:6a:15:3e:c7:6e:03:bb:1a:fc:82: 9d:f1:31:1c:bd:1a:10:f0:1f:d9:0d:29:eb:f0:17:2e:9d:c9: b7:42:39:ef:49:df:01:93:88:7e:67:94:27:3b:75:77:ed:77: e9:1f:14:c6:5b:49:f3:ae:5e:2f:70:5c:0b:30:ef:2e:3d:4e: 1e:84:a2:80:5f:b2:02:4f:a2:60:8b:68:6d:6a:8f:86:92:bb: ba:e9:fc:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYcwNMXfW6+ajzufvxgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMGEwZDM5NmY3NjkzNjkzNjVmMmI5ODNjNTMxYWZlY2E5 NzEwYTcwHhcNMjUxMjA2MDgwMDQ5WhcNMjUxMjA3MDgwMDQ5WjAzMTEwLwYDVQQD EyhlZjQ5ZmI1NzgzMDQ3MzMxZmY4YWQwNjEyODA5Nzc5YjUxNjJkN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhztt0Ef6XQjA1cTAVQ+oh1x/UtZs iro8uRO4aLDB8yQH5YUF/K8AYhxcdoT/0C4dYXqjcxsM05gwPs4c8mQXLJE1ujYg 9niaCOa03b7JCcBZ3Bv1z9ZN3zb6J4p0ytA6PGE/NhC5CxeHWJryaB/e4lh0NqG2 SRKUtcJyZrNdZyIpRHBLF5ww8fVVr8OS71pBLAqyJIVSMcw/8uus4JpTRrAQ/GAE TTTIqrX+KNcVuZ49TDabK2Oz8Qz+Xb/0eJUCgdeo3WeigrDQJDdxZYhH5z7Bm0DL uo8GhjKCoKn/wjjpcpgNo1sclA0Rhw2mpOzF1EZVPYuQ1nM+yKC2NUdHhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9J+1eDBHMx/4rQYSgJd5tRYtfoMB8GA1UdIwQY MBaAFF0KDTlvdpNpNl8rmDxTGv7KlxCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUt NDQyMDEwYjU3OWVmLzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yMjNkOGYtNThhYy00ZGY3LWJmMWUtNDQyMDEwYjU3OWVm LzEvWFFvTk9XOTJrMmsyWHl1WVBGTWFfc3FYRUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaDAlwIK jZIXCSfTZfSWxOMFanmvVrnWDeqPHiU+fUrMBwShTMkPrYjf88xPd5zkcnsqJmam VEqdzG6liS+zXPbwZ1OYSpolWrX0Ss6B6uguKUbwr2pNDx9Z9yGgFEbx7AWMoZn4 av8tU1mzY9WveAxwazexds4Uwa9D6FQMeGn7drASkQdSQXfbkr2NmHAM0RNUFLgx FGJEUBhV9q7EsG6QhkciFMo7WcpqFT7HbgO7GvyCnfExHL0aEPAf2Q0p6/AXLp3J t0I570nfAZOIfmeUJzt1d+136R8UxltJ865eL3BcCzDvLj1OHoSigF+yAk+iYIto bWqPhpK7uun8hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:43 2025 by rpki-client