This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft File: XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft (raw, json) Hash identifier: YeuyY8dBbJddAwaXY5GWgmYsBjc9fekNHONFCSsQfZ8= Subject key identifier: F6:13:F7:FE:BC:03:08:CB:10:93:36:E4:0A:DE:DE:08:31:05:9C:0C Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Certificate serial: 019B3EDB013046D3108443917DA4A13C039F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft Manifest number: 1793 Signing time: Sun 21 Dec 2025 03:01:38 +0000 Manifest this update: Sun 21 Dec 2025 03:01:38 +0000 Manifest next update: Mon 22 Dec 2025 03:01:38 +0000 Files and hashes: 1: B4B8AwhPN8nqkqsJIWnt25RI8P4.roa (hash: tKZvSD+J2/9HuzhNNVSD82woMs4APG13o6f6vUOg094=) 2: XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl (hash: xLm/GnjOHyuEX6j1KPstdfLTGSSxDH3MXMx9wABFw3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:db:01:30:46:d3:10:84:43:91:7d:a4:a1:3c:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6 Validity Not Before: Dec 21 03:01:38 2025 GMT Not After : Dec 22 03:01:38 2025 GMT Subject: CN=f613f7febc0308cb109336e40adede0831059c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:c6:17:33:f2:ed:d6:dc:31:e3:cb:2c:2c: 3d:12:da:1f:97:32:91:59:b9:a9:e5:7d:be:84:93: 6c:9c:89:ec:d9:a1:eb:89:71:41:df:46:97:96:d4: 8a:56:8a:22:3c:a0:74:e5:3d:24:cc:7d:3c:45:33: 58:4b:2c:14:35:a6:3d:72:f6:d9:69:85:bc:d6:46: 42:25:63:80:0b:98:80:b6:72:37:5c:43:90:9f:d4: 42:d2:ea:d3:4a:ad:a8:84:71:cc:a7:6c:1a:88:58: ed:80:e5:52:71:6d:73:14:60:4b:83:25:5e:5a:26: 79:56:b5:57:4e:70:21:f1:66:06:58:1d:44:d4:16: 56:0a:25:5a:9e:f9:8a:5f:f8:74:ce:f8:a1:5f:2a: f8:6b:c7:03:74:8c:4c:59:0e:b7:8b:f5:cb:0c:e5: a7:98:9a:bd:80:cc:60:00:1b:09:8b:8f:58:71:56: 12:94:6b:82:c5:a0:29:1e:78:24:2d:29:85:87:59: 52:97:4c:00:62:a8:eb:d1:a7:a9:24:19:d1:74:a3: f1:61:c1:e4:dd:7e:ab:45:71:58:ac:18:c3:d4:3e: 21:2b:ed:3b:88:55:1a:bb:96:fc:93:f1:4e:6c:f4: 5f:04:97:68:19:49:ac:cf:9b:68:71:06:cb:11:6b: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:13:F7:FE:BC:03:08:CB:10:93:36:E4:0A:DE:DE:08:31:05:9C:0C X509v3 Authority Key Identifier: keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1f:6d:29:82:af:dd:2d:2d:b0:c7:8e:b4:43:88:27:4f:44: 47:9c:17:b7:9e:fd:20:83:f0:c7:d1:54:d9:a1:d0:b1:24:14: a7:61:c8:93:17:fb:ec:df:b2:30:17:22:b3:96:a3:23:68:eb: f5:63:13:d2:2e:1e:83:9d:8f:79:55:0b:36:dd:43:95:73:c9: a5:17:a4:a9:16:71:90:a8:0a:92:53:96:89:b2:9e:fd:a9:fb: 36:85:8a:fd:05:c1:bc:a3:a2:de:68:d8:24:20:b7:eb:29:6c: 9c:21:30:a0:23:fd:4e:06:7f:3e:0d:7f:6d:4f:b0:57:62:f4: 9c:39:47:7d:fe:f7:85:96:c0:bd:52:31:75:de:ce:2c:6d:11: b2:6c:c2:b9:96:ee:c1:b8:f1:5a:d0:67:b3:99:40:e9:85:29: 7a:d7:73:8b:21:52:1f:0c:b2:80:8e:12:71:1e:0f:28:0d:e8: 53:8a:b4:1d:1f:a0:d8:07:6c:a5:1a:43:05:c8:7e:69:8c:18: 7e:e8:23:17:d3:68:17:0b:5c:a3:04:51:cb:ad:5f:27:6a:c7: f7:de:67:fb:67:e9:42:d3:b6:04:56:05:47:d4:cb:0e:5a:1b: 6a:15:6e:fc:ac:55:5b:a8:3c:3f:01:73:ef:44:af:38:79:2d: c1:43:45:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2wEwRtMQhEORfaShPAOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk YzRhYzYwHhcNMjUxMjIxMDMwMTM4WhcNMjUxMjIyMDMwMTM4WjAzMTEwLwYDVQQD EyhmNjEzZjdmZWJjMDMwOGNiMTA5MzM2ZTQwYWRlZGUwODMxMDU5YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1fGFzPy7dbcMePLLCw9EtoflzKR Wbmp5X2+hJNsnIns2aHriXFB30aXltSKVooiPKB05T0kzH08RTNYSywUNaY9cvbZ aYW81kZCJWOAC5iAtnI3XEOQn9RC0urTSq2ohHHMp2waiFjtgOVScW1zFGBLgyVe WiZ5VrVXTnAh8WYGWB1E1BZWCiVanvmKX/h0zvihXyr4a8cDdIxMWQ63i/XLDOWn mJq9gMxgABsJi49YcVYSlGuCxaApHngkLSmFh1lSl0wAYqjr0aepJBnRdKPxYcHk 3X6rRXFYrBjD1D4hK+07iFUau5b8k/FObPRfBJdoGUmsz5tocQbLEWt9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYT9/68AwjLEJM25Are3ggxBZwMMB8GA1UdIwQY MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt NzczYzBiM2M4OTM1LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1 LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbR9tKYKv 3S0tsMeOtEOIJ09ER5wXt579IIPwx9FU2aHQsSQUp2HIkxf77N+yMBcis5ajI2jr 9WMT0i4eg52PeVULNt1DlXPJpRekqRZxkKgKklOWibKe/an7NoWK/QXBvKOi3mjY JCC36ylsnCEwoCP9TgZ/Pg1/bU+wV2L0nDlHff73hZbAvVIxdd7OLG0RsmzCuZbu wbjxWtBns5lA6YUpetdziyFSHwyygI4ScR4PKA3oU4q0HR+g2AdspRpDBch+aYwY fugjF9NoFwtcowRRy61fJ2rH995n+2fpQtO2BFYFR9TLDlobahVu/KxVW6g8PwFz 70SvOHktwUNFbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:19:34 2025 by rpki-client