This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json) Hash identifier: Bsk9WneZafnec8Sf77rG4pLotW7sqhr7ZkzyQ0yqN+8= Subject key identifier: D5:B8:20:9E:51:CB:EB:40:4B:87:11:F8:F4:E6:65:29:CF:45:FA:D6 Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Certificate serial: 019B225061CBF7351B0A4A04407C3721077F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft Manifest number: 04DD Signing time: Mon 15 Dec 2025 14:00:51 +0000 Manifest this update: Mon 15 Dec 2025 14:00:51 +0000 Manifest next update: Tue 16 Dec 2025 14:00:51 +0000 Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=) 2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=) 3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: yw82b4zrNmRmw4wT6+CoBQ7VI5hJ2RlvFZhVURppujk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:50:61:cb:f7:35:1b:0a:4a:04:40:7c:37:21:07:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Validity Not Before: Dec 15 14:00:51 2025 GMT Not After : Dec 16 14:00:51 2025 GMT Subject: CN=d5b8209e51cbeb404b8711f8f4e66529cf45fad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:f0:05:4c:16:5a:2e:ac:0d:9b:ad:67:36: f0:9b:e1:b4:c8:b6:58:26:1c:c7:ef:76:0e:cc:72: 69:82:9f:83:05:83:d2:31:cc:67:d9:d2:85:bd:2a: a0:a4:7e:0e:f1:94:cd:73:b6:b7:55:da:65:9e:7a: 56:66:93:a0:d5:e0:88:4a:09:c7:d0:0f:4f:ab:ea: 21:51:3e:ef:0a:c3:3a:3f:9c:f4:06:43:45:63:4d: 2d:e3:a8:9a:04:00:9e:cd:0c:3f:5d:e5:ec:15:2a: bb:a4:5b:23:72:9c:98:e5:49:94:19:7e:01:02:e5: 2c:35:65:b7:78:c7:ff:82:76:f2:dd:77:61:dd:a1: 70:ab:a3:8f:3c:18:f8:38:af:29:6a:10:80:9f:0c: 55:e0:85:84:1e:6d:1e:a9:9c:af:2b:bc:39:75:27: 92:e6:a5:d3:06:6b:77:78:2c:d9:e0:4e:5d:db:dd: 3a:03:a5:72:89:95:d7:00:65:33:47:87:27:c3:04: 70:6b:29:89:0c:e6:87:34:68:0d:c0:e8:e3:70:5f: 6f:fe:97:62:00:bb:09:11:59:2d:10:7a:9d:2b:25: 0e:6f:ef:a3:c6:b3:12:d8:c8:c0:f1:59:fb:34:08: b9:be:db:d0:3a:58:a6:13:8e:93:df:78:32:dd:d3: f5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B8:20:9E:51:CB:EB:40:4B:87:11:F8:F4:E6:65:29:CF:45:FA:D6 X509v3 Authority Key Identifier: keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:81:d8:03:55:9f:b2:25:64:28:c4:8f:97:2f:6d:be:8d:2f: 53:9a:45:f3:25:0a:3c:8d:10:93:cc:8e:97:72:e4:8f:d8:f6: f3:f9:cc:db:8c:c6:ca:55:15:08:64:84:0a:4e:17:4d:02:90: 04:a1:a3:e9:9e:2f:18:7e:ce:e8:1c:49:d2:44:ca:0a:c6:df: b4:be:8d:cf:eb:23:f7:8a:21:c8:65:0e:a1:5c:a5:be:33:bd: fc:a0:ea:37:fe:9b:6d:7b:cd:8e:e1:b6:92:e8:fc:4d:57:ff: 28:e7:a6:8d:8b:0e:97:c0:50:01:c4:36:7c:8f:96:cb:60:6a: 32:5f:de:01:7d:9c:3b:f2:eb:d5:c7:d9:de:ea:5c:dd:e8:12: 31:7a:f8:b6:34:e5:9f:51:78:f3:e4:0b:a6:55:96:cd:a2:a7: 4b:61:fc:78:91:cb:f7:8f:5b:3b:01:03:d4:ba:1c:07:38:8d: 65:94:e7:3f:ce:39:f6:3e:62:cf:4c:f1:11:0a:7c:c0:e2:2c: 4b:d5:ae:68:52:e7:0e:f9:a5:b1:c5:17:eb:3f:db:50:73:a5: 54:43:c7:96:ef:b0:9e:b0:01:fe:7a:42:f9:0f:de:6b:bd:b5: 0c:36:98:67:a3:8a:42:02:e7:7e:64:9b:7b:66:f5:9d:22:ad: 62:2c:db:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiUGHL9zUbCkoEQHw3IQd/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl YWM2YjAwHhcNMjUxMjE1MTQwMDUxWhcNMjUxMjE2MTQwMDUxWjAzMTEwLwYDVQQD EyhkNWI4MjA5ZTUxY2JlYjQwNGI4NzExZjhmNGU2NjUyOWNmNDVmYWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBXwBUwWWi6sDZutZzbwm+G0yLZY JhzH73YOzHJpgp+DBYPSMcxn2dKFvSqgpH4O8ZTNc7a3VdplnnpWZpOg1eCISgnH 0A9Pq+ohUT7vCsM6P5z0BkNFY00t46iaBACezQw/XeXsFSq7pFsjcpyY5UmUGX4B AuUsNWW3eMf/gnby3Xdh3aFwq6OPPBj4OK8pahCAnwxV4IWEHm0eqZyvK7w5dSeS 5qXTBmt3eCzZ4E5d2906A6VyiZXXAGUzR4cnwwRwaymJDOaHNGgNwOjjcF9v/pdi ALsJEVktEHqdKyUOb++jxrMS2MjA8Vn7NAi5vtvQOlimE46T33gy3dP1xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW4IJ5Ry+tAS4cR+PTmZSnPRfrWMB8GA1UdIwQY MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2 LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4HYA1Wf siVkKMSPly9tvo0vU5pF8yUKPI0Qk8yOl3Lkj9j28/nM24zGylUVCGSECk4XTQKQ BKGj6Z4vGH7O6BxJ0kTKCsbftL6Nz+sj94ohyGUOoVylvjO9/KDqN/6bbXvNjuG2 kuj8TVf/KOemjYsOl8BQAcQ2fI+Wy2BqMl/eAX2cO/Lr1cfZ3upc3egSMXr4tjTl n1F48+QLplWWzaKnS2H8eJHL949bOwED1LocBziNZZTnP8459j5iz0zxEQp8wOIs S9WuaFLnDvmlscUX6z/bUHOlVEPHlu+wnrAB/npC+Q/ea721DDaYZ6OKQgLnfmSb e2b1nSKtYizblg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:11 2025 by rpki-client