This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json) Hash identifier: VaucBbXcID4FjmDlmKFeFylZ1+A8aF7pJrb9IbUX0ys= Subject key identifier: A9:04:30:85:8F:28:93:A5:9A:4A:6B:83:1F:30:53:7D:F4:11:95:CE Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Certificate serial: 019AF2AD4F0992BD9F17D35D06DC0AA8B739 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft Manifest number: 1301 Signing time: Sat 06 Dec 2025 08:00:35 +0000 Manifest this update: Sat 06 Dec 2025 08:00:35 +0000 Manifest next update: Sun 07 Dec 2025 08:00:35 +0000 Files and hashes: 1: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: fk1baoL8lDOVRhOI5Wihpkh4sj+Tyoi4Hpw+0IWIbks=) 2: tcVBxEoI8K26M5HUmpNDgzDsjFI.roa (hash: pBhVA7X+K6W5y7S3g4l8PMvEmZqEr0C1POlQ37i6fpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:4f:09:92:bd:9f:17:d3:5d:06:dc:0a:a8:b7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Validity Not Before: Dec 6 08:00:35 2025 GMT Not After : Dec 7 08:00:35 2025 GMT Subject: CN=a90430858f2893a59a4a6b831f30537df41195ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6c:96:49:c7:3d:75:00:c9:4f:2e:9e:ed:d5: 06:05:ec:a3:bc:54:04:84:e4:f9:41:2e:41:70:f3: 44:c7:48:81:76:4e:70:50:ae:dd:37:e3:13:a5:1c: f5:7f:da:fc:b9:4e:7e:c3:e2:ca:15:a4:19:02:68: ee:58:29:cf:f3:78:38:f5:c2:7b:60:03:19:e8:c7: e5:0b:64:87:7e:7b:a4:63:b9:e2:ab:ef:fe:c0:f7: 1e:06:d1:6e:ba:54:dc:ce:3a:5c:d3:05:21:5e:fb: a4:32:b1:4a:a1:b0:2b:19:ba:58:9c:b8:50:37:f6: f3:8d:75:49:98:73:0e:60:7d:e3:c8:20:84:75:22: 48:6e:1e:f0:7d:00:f8:87:98:e8:79:b1:b9:90:70: cc:87:a5:2d:79:ad:97:b6:53:bd:f1:0b:cf:c0:0d: b2:ad:4e:65:d6:9f:95:ac:16:01:04:f7:eb:5c:c8: 60:da:3c:d2:60:f1:fa:a9:31:92:b6:37:18:ef:3c: 78:81:88:07:d6:4c:ef:48:d8:6c:54:b5:42:fc:6c: 7c:61:ff:c7:46:98:b9:8d:d2:bd:61:2a:df:71:e4: 7c:d6:8c:a3:9e:e1:12:e8:64:03:56:b6:78:7b:ce: 01:09:c0:4f:f1:98:f9:ed:c0:7e:f0:17:bd:ac:cd: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:04:30:85:8F:28:93:A5:9A:4A:6B:83:1F:30:53:7D:F4:11:95:CE X509v3 Authority Key Identifier: keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:43:7b:b8:02:92:08:e3:99:ac:56:02:1f:07:d3:f7:92:ea: 89:d1:1d:25:84:d0:d7:41:aa:39:49:4b:05:50:95:b0:b7:d9: 66:c7:1c:ef:2a:5b:38:21:67:64:66:ee:f8:38:08:9a:7f:00: c7:ab:6c:e3:28:37:a6:84:4f:1b:3a:9b:b5:14:38:c0:01:6c: b0:f6:89:a9:24:48:26:80:ab:7e:64:6d:3b:b3:e2:8b:e7:ec: 3b:9c:17:c9:96:91:1d:ce:0b:bf:ea:df:f0:71:9f:9b:a3:7e: 50:7f:3f:55:f1:80:6c:62:ca:d1:c2:0b:2a:08:c4:50:3a:a0: 62:e9:91:cd:b4:cd:7a:45:e4:09:65:52:fd:7d:49:88:4a:5d: 5b:7b:fe:8c:27:99:8a:5f:5b:0a:bd:e3:bb:cc:db:4a:37:83: f9:ca:e7:54:e5:d2:a6:bd:f1:1c:db:69:ef:5a:cc:72:0f:60: c5:5d:4b:62:1a:3e:96:59:32:c5:ad:da:f2:99:9a:fc:1a:ec: 5f:83:29:04:bb:8c:1d:d8:fd:40:c1:05:56:96:3f:24:b6:97: 99:f5:88:3e:05:ef:44:ea:97:9a:12:53:1b:1a:d1:d2:42:9f: c6:ca:e5:fc:05:3e:ab:eb:45:74:9f:c6:30:b6:8a:93:45:15: 54:2a:93:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrU8Jkr2fF9NdBtwKqLc5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2 ZTJmMDgwHhcNMjUxMjA2MDgwMDM1WhcNMjUxMjA3MDgwMDM1WjAzMTEwLwYDVQQD EyhhOTA0MzA4NThmMjg5M2E1OWE0YTZiODMxZjMwNTM3ZGY0MTE5NWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGyWScc9dQDJTy6e7dUGBeyjvFQE hOT5QS5BcPNEx0iBdk5wUK7dN+MTpRz1f9r8uU5+w+LKFaQZAmjuWCnP83g49cJ7 YAMZ6MflC2SHfnukY7niq+/+wPceBtFuulTczjpc0wUhXvukMrFKobArGbpYnLhQ N/bzjXVJmHMOYH3jyCCEdSJIbh7wfQD4h5joebG5kHDMh6Utea2XtlO98QvPwA2y rU5l1p+VrBYBBPfrXMhg2jzSYPH6qTGStjcY7zx4gYgH1kzvSNhsVLVC/Gx8Yf/H Rpi5jdK9YSrfceR81oyjnuES6GQDVrZ4e84BCcBP8Zj57cB+8Be9rM3dmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkEMIWPKJOlmkprgx8wU330EZXOMB8GA1UdIwQY MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt NDU3OWEzOGY2ZDA4LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4 LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmEN7uAKS COOZrFYCHwfT95LqidEdJYTQ10GqOUlLBVCVsLfZZscc7ypbOCFnZGbu+DgImn8A x6ts4yg3poRPGzqbtRQ4wAFssPaJqSRIJoCrfmRtO7Pii+fsO5wXyZaRHc4Lv+rf 8HGfm6N+UH8/VfGAbGLK0cILKgjEUDqgYumRzbTNekXkCWVS/X1JiEpdW3v+jCeZ il9bCr3ju8zbSjeD+crnVOXSpr3xHNtp71rMcg9gxV1LYho+llkyxa3a8pma/Brs X4MpBLuMHdj9QMEFVpY/JLaXmfWIPgXvROqXmhJTGxrR0kKfxsrl/AU+q+tFdJ/G MLaKk0UVVCqTuA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:11 2025 by rpki-client