This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json) Hash identifier: vb3Sx/3+2rvpP0zmDtgZ/n17FWSwZj2E3AhYe4I7wJs= Subject key identifier: 57:19:E7:26:81:D1:0A:B3:C2:AC:E2:23:7B:09:B8:A9:88:82:31:ED Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Certificate serial: 019AF31B6F8A1A0BC369D75BB228AFD87799 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft Manifest number: 0347 Signing time: Sat 06 Dec 2025 10:00:52 +0000 Manifest this update: Sat 06 Dec 2025 10:00:52 +0000 Manifest next update: Sun 07 Dec 2025 10:00:52 +0000 Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=) 2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: TqAYf3WWqRx1BbXfh9qpOMD6eIDy9yUGwnasJVkU2L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6f:8a:1a:0b:c3:69:d7:5b:b2:28:af:d8:77:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Validity Not Before: Dec 6 10:00:52 2025 GMT Not After : Dec 7 10:00:52 2025 GMT Subject: CN=5719e72681d10ab3c2ace2237b09b8a9888231ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fc:a7:41:f8:ed:60:98:c4:b3:65:36:fa:04: a2:77:73:23:e5:a2:eb:e9:0f:dc:7d:38:72:b1:6b: b2:f6:ef:9e:aa:81:96:32:87:6e:15:2f:ee:28:f0: 21:da:9e:dd:e1:a4:4d:6c:54:57:8c:ac:04:76:41: ba:2f:8d:66:1f:db:2d:c8:c6:96:db:2b:c7:e9:10: ed:ee:e4:1c:c6:cc:9b:e2:39:8f:30:da:e9:e8:78: 29:7c:3d:de:d6:cf:b8:70:8c:f2:f7:ec:54:08:7b: 35:8b:5c:e7:6f:7d:bd:0c:68:bf:96:16:75:6c:90: 83:d3:11:0a:96:3f:d1:f2:79:42:36:23:b4:03:72: 50:43:a7:3c:eb:6a:2b:0a:81:1d:20:5c:b8:3f:3f: e4:0b:d4:bc:49:f0:97:ae:e3:0c:d2:ec:7b:01:11: e8:07:b4:65:90:a1:6c:4e:cb:63:e5:e7:63:b2:34: 3b:60:c1:c9:05:42:7f:61:6b:19:81:0b:ba:d3:be: 17:b1:cb:ba:67:e2:85:b5:35:fb:48:0e:e9:fe:ab: ac:4b:f2:6f:1b:e7:b2:43:cf:d6:b1:8b:93:61:d8: b6:86:ae:21:7d:a6:85:89:1c:79:66:47:3b:c4:80: 88:4c:ac:7c:b4:dc:b0:e0:8a:c6:17:77:0d:a1:82: 7a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:19:E7:26:81:D1:0A:B3:C2:AC:E2:23:7B:09:B8:A9:88:82:31:ED X509v3 Authority Key Identifier: keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:78:44:59:48:08:f0:f1:92:db:55:6a:2b:05:ac:f3:22:e8: 98:10:9c:e4:02:87:57:05:05:54:41:38:8e:36:3b:a7:a2:ed: 3e:ec:97:61:49:99:98:4d:41:a3:22:e8:64:bb:67:fe:a4:74: c4:e1:8f:00:f9:8d:a7:8f:e3:80:47:a1:2b:b6:e3:77:ff:eb: 32:f0:af:01:5b:77:d7:de:06:ee:3a:07:42:8e:f2:5a:bb:af: 23:47:f8:8b:3d:0b:64:bc:69:97:d8:f7:8c:26:44:eb:4e:38: c2:f3:f4:8b:c4:21:af:52:b2:c8:fb:66:a3:17:0c:f5:11:2a: d1:8a:fd:8b:5b:b6:6f:20:01:95:39:46:69:fb:09:26:9a:14: 15:a7:58:fc:67:0a:a2:9b:1e:79:72:0b:bf:3d:47:dd:7c:77: f4:0b:2d:64:76:73:62:f4:96:a6:a9:d9:33:49:1a:dd:cf:cc: 25:96:a1:d6:36:38:5f:4d:3e:27:d7:de:c0:a0:0e:23:71:78: c9:8c:e8:9c:7b:59:8c:ca:8c:9b:c7:ec:46:85:5d:d5:5b:e1: 66:c3:08:f8:d2:00:57:cd:18:4a:9c:bf:46:14:8e:1b:61:17: f2:ea:23:13:10:23:e8:12:e5:5a:56:f4:af:14:89:74:17:b3: a2:57:6e:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2+KGgvDaddbsiiv2HeZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy ZTJlM2QwHhcNMjUxMjA2MTAwMDUyWhcNMjUxMjA3MTAwMDUyWjAzMTEwLwYDVQQD Eyg1NzE5ZTcyNjgxZDEwYWIzYzJhY2UyMjM3YjA5YjhhOTg4ODIzMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vynQfjtYJjEs2U2+gSid3Mj5aLr 6Q/cfThysWuy9u+eqoGWModuFS/uKPAh2p7d4aRNbFRXjKwEdkG6L41mH9styMaW 2yvH6RDt7uQcxsyb4jmPMNrp6HgpfD3e1s+4cIzy9+xUCHs1i1znb329DGi/lhZ1 bJCD0xEKlj/R8nlCNiO0A3JQQ6c862orCoEdIFy4Pz/kC9S8SfCXruMM0ux7ARHo B7RlkKFsTstj5edjsjQ7YMHJBUJ/YWsZgQu6074Xscu6Z+KFtTX7SA7p/qusS/Jv G+eyQ8/WsYuTYdi2hq4hfaaFiRx5Zkc7xICITKx8tNyw4IrGF3cNoYJ6mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcZ5yaB0QqzwqziI3sJuKmIgjHtMB8GA1UdIwQY MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2 LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnhEWUgI 8PGS21VqKwWs8yLomBCc5AKHVwUFVEE4jjY7p6LtPuyXYUmZmE1BoyLoZLtn/qR0 xOGPAPmNp4/jgEehK7bjd//rMvCvAVt3194G7joHQo7yWruvI0f4iz0LZLxpl9j3 jCZE6044wvP0i8Qhr1KyyPtmoxcM9REq0Yr9i1u2byABlTlGafsJJpoUFadY/GcK opseeXILvz1H3Xx39AstZHZzYvSWpqnZM0ka3c/MJZah1jY4X00+J9fewKAOI3F4 yYzonHtZjMqMm8fsRoVd1VvhZsMI+NIAV80YSpy/RhSOG2EX8uojExAj6BLlWlb0 rxSJdBezolduFw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:36:48 2025 by rpki-client