This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft File: xqbiL04jll9sSgJcbJLvwLZi55M.mft (raw, json) Hash identifier: KPl1119ALGrhCSicVWT5nPwwOGbqpdxh1jvpv1fANyM= Subject key identifier: 5F:A0:2E:35:F8:85:6D:96:E7:48:11:06:F7:D0:B5:13:31:EA:B5:31 Authority key identifier: C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93 Certificate issuer: /CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793 Certificate serial: 019B2E1D9C40E28C59916337CE677FFA6A21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 21:00:50 +0000 Manifest this update: Wed 17 Dec 2025 21:00:50 +0000 Manifest next update: Thu 18 Dec 2025 21:00:50 +0000 Files and hashes: 1: hk7Zcb_ZvfQWRDY4fRe9DXiUweg.roa (hash: fltvYaRZ7mr1q9gGvd2bmlkOO/Gg3BH7WVe78pSz7SA=) 2: xqbiL04jll9sSgJcbJLvwLZi55M.crl (hash: NyX0JWR7TFHn06G4m/lTWHi2Ls/htCJU7aWOxAs5q0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:9c:40:e2:8c:59:91:63:37:ce:67:7f:fa:6a:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a6e22f4e23965f6c4a025c6c92efc0b662e793 Validity Not Before: Dec 17 21:00:50 2025 GMT Not After : Dec 18 21:00:50 2025 GMT Subject: CN=5fa02e35f8856d96e7481106f7d0b51331eab531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:f8:4d:e1:f8:d7:47:8e:02:49:fd:f1:be: 5b:10:ba:84:c0:a3:ea:02:41:be:fd:c8:c3:c5:11: 67:f0:ac:24:bd:d5:dd:54:a7:62:7f:16:85:8c:e7: 2a:7f:24:bc:61:c3:9e:63:8a:00:b0:5a:15:3e:03: e8:c9:1d:60:48:f3:0d:d1:68:49:dd:45:25:fa:3b: 12:f1:c3:3f:69:d9:85:84:ff:f4:40:00:5b:66:f9: 89:0e:63:0c:18:5e:c1:97:58:c1:02:d9:e2:b5:bd: 3b:73:cd:8a:92:f2:72:05:0f:c1:6d:39:bb:eb:5a: 5c:90:61:93:c4:8b:17:a5:39:4f:de:62:93:5c:b1: 42:1b:04:9f:67:11:05:94:33:21:26:9d:3d:5c:7b: ed:7c:00:3d:b2:89:8f:ce:d8:ed:d7:61:dc:06:7c: 0e:50:ab:96:43:26:f6:8b:5b:7e:69:66:07:20:57: 94:f5:d6:70:7c:9d:6d:c0:4d:93:74:bc:c8:2f:56: d3:1b:ae:38:70:9d:05:05:c2:fc:66:1b:04:49:9b: f3:f5:7f:3d:41:7a:e4:78:ce:97:18:48:e5:88:51: d0:5d:cb:5a:5e:ef:57:5a:44:65:48:5c:8d:13:03: e1:08:8c:78:db:65:07:46:70:f7:b7:1f:9d:84:d4: dc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A0:2E:35:F8:85:6D:96:E7:48:11:06:F7:D0:B5:13:31:EA:B5:31 X509v3 Authority Key Identifier: keyid:C6:A6:E2:2F:4E:23:96:5F:6C:4A:02:5C:6C:92:EF:C0:B6:62:E7:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqbiL04jll9sSgJcbJLvwLZi55M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d334ed-36bd-4170-b4d6-06af6dba34f7/1/xqbiL04jll9sSgJcbJLvwLZi55M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:fe:6f:c2:9a:d0:b4:14:db:a5:71:0b:3e:66:25:9a:66: b0:3d:44:ea:1a:47:33:5b:65:67:f0:a0:33:4d:d7:21:0d:a2: b0:94:6c:66:6b:8c:64:52:0e:d5:c6:e4:1e:d7:35:73:64:4a: 54:79:1f:ee:ed:4f:f4:e0:fe:d2:b9:4e:ff:7a:5e:3e:cd:b5: 4e:72:30:ee:3b:a4:77:54:f0:d5:39:3d:09:7b:0e:45:a2:49: b6:1f:30:69:f2:e5:34:43:1e:b9:af:5c:33:8f:64:b4:6f:5e: da:c6:ba:af:ad:1d:05:ef:bb:e3:ae:1c:77:ab:5c:aa:6a:30: 75:f5:13:70:38:8f:f1:b8:91:1d:d9:bd:26:55:18:9a:92:8a: fd:09:94:9a:c6:0f:f0:90:24:0e:7a:8c:7b:21:7b:1d:12:0f: ee:3b:0c:07:ea:2e:37:c4:e6:0c:72:1f:09:e9:00:8b:98:e6: 88:c8:4c:70:85:c8:00:cc:60:7e:de:b4:dd:a8:67:cd:2a:07: 77:b4:a6:9d:cc:4e:03:d5:a6:9a:81:4e:63:3d:84:a9:21:04: e0:4f:96:90:ca:3a:5c:74:c7:c0:bf:cb:5a:c2:6b:74:e9:b1: 34:78:21:78:ab:58:8c:6e:4a:02:dd:26:fe:a2:ae:51:4d:de: 1f:84:6e:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHZxA4oxZkWM3zmd/+mohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTZlMjJmNGUyMzk2NWY2YzRhMDI1YzZjOTJlZmMwYjY2 MmU3OTMwHhcNMjUxMjE3MjEwMDUwWhcNMjUxMjE4MjEwMDUwWjAzMTEwLwYDVQQD Eyg1ZmEwMmUzNWY4ODU2ZDk2ZTc0ODExMDZmN2QwYjUxMzMxZWFiNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfX4TeH410eOAkn98b5bELqEwKPq AkG+/cjDxRFn8KwkvdXdVKdifxaFjOcqfyS8YcOeY4oAsFoVPgPoyR1gSPMN0WhJ 3UUl+jsS8cM/admFhP/0QABbZvmJDmMMGF7Bl1jBAtnitb07c82KkvJyBQ/BbTm7 61pckGGTxIsXpTlP3mKTXLFCGwSfZxEFlDMhJp09XHvtfAA9somPztjt12HcBnwO UKuWQyb2i1t+aWYHIFeU9dZwfJ1twE2TdLzIL1bTG644cJ0FBcL8ZhsESZvz9X89 QXrkeM6XGEjliFHQXctaXu9XWkRlSFyNEwPhCIx422UHRnD3tx+dhNTcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+gLjX4hW2W50gRBvfQtRMx6rUxMB8GA1UdIwQY MBaAFMam4i9OI5ZfbEoCXGyS78C2YueTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYt MDZhZjZkYmEzNGY3LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9kMzM0ZWQtMzZiZC00MTcwLWI0ZDYtMDZhZjZkYmEzNGY3 LzEveHFiaUwwNGpsbDlzU2dKY2JKTHZ3TFppNTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7z+b8Ka 0LQU26VxCz5mJZpmsD1E6hpHM1tlZ/CgM03XIQ2isJRsZmuMZFIO1cbkHtc1c2RK VHkf7u1P9OD+0rlO/3pePs21TnIw7jukd1Tw1Tk9CXsORaJJth8wafLlNEMeua9c M49ktG9e2sa6r60dBe+7464cd6tcqmowdfUTcDiP8biRHdm9JlUYmpKK/QmUmsYP 8JAkDnqMeyF7HRIP7jsMB+ouN8TmDHIfCekAi5jmiMhMcIXIAMxgft603ahnzSoH d7SmncxOA9WmmoFOYz2EqSEE4E+WkMo6XHTHwL/LWsJrdOmxNHgheKtYjG5KAt0m /qKuUU3eH4RuIg== -----END CERTIFICATE-----Generated at Thu Dec 18 00:23:42 2025 by rpki-client