This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft (raw, json) Hash identifier: H6kHQoZq1PCoNnIqj0H1lcX6iTLZaWNlVwderiVhbQw= Subject key identifier: 51:5F:81:7F:91:08:F3:B4:46:2B:90:EA:BD:EC:EA:D0:8D:E5:7B:8B Authority key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D Certificate issuer: /CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Certificate serial: 019B217490413C603952547BA0558E3EB850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft Manifest number: 035F Signing time: Mon 15 Dec 2025 10:00:45 +0000 Manifest this update: Mon 15 Dec 2025 10:00:45 +0000 Manifest next update: Tue 16 Dec 2025 10:00:45 +0000 Files and hashes: 1: UTJh4MdSXt43NfiQTTlDvj1k9rY.roa (hash: N+wxIM6737IrF1om020wGAk+mgn7C7h6YeyPjzTJ2mQ=) 2: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl (hash: pAcQQvcCfQ+o8Sc5aAYkwdyhQv1Ze8NMKeNuFdSE0Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:90:41:3c:60:39:52:54:7b:a0:55:8e:3e:b8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d Validity Not Before: Dec 15 10:00:45 2025 GMT Not After : Dec 16 10:00:45 2025 GMT Subject: CN=515f817f9108f3b4462b90eabdecead08de57b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:b3:b8:6d:68:e2:d4:fd:09:75:61:2e:27: 02:79:35:ee:ba:a2:1f:a1:8c:aa:f5:1a:97:50:6d: 2c:16:fe:d2:57:37:91:48:b3:a8:66:9e:0a:db:47: f2:3e:75:78:7c:79:e6:5e:8d:04:28:31:da:c9:eb: f4:12:a6:cd:18:2a:af:b2:98:98:3e:76:b9:a3:b5: b4:3f:e3:f5:bc:3d:5b:b4:ea:2c:26:ac:45:bf:c1: f2:88:6e:a2:a2:25:7e:64:50:ad:4b:ae:1d:24:d9: 14:45:92:36:76:ef:5c:27:f3:58:3a:4f:a0:0d:f5: 5f:a8:cb:f8:8e:4a:80:5c:41:8e:90:8c:13:c9:32: 53:d8:ba:f4:36:bb:d8:f1:68:f3:43:fd:76:c3:cd: 67:c9:1e:0a:d9:b6:62:30:fc:dd:52:23:94:aa:ae: 9a:87:3d:48:22:11:27:96:7d:20:82:9d:89:38:de: 01:3c:6f:24:1b:f3:da:45:bf:e2:f8:bb:ec:b4:0a: 97:0c:ec:af:3c:0d:af:ed:57:25:aa:78:f5:f1:22: 4b:04:15:25:46:aa:d4:e4:80:0f:b9:45:68:3d:0b: 20:dc:88:01:56:61:45:15:7b:38:57:1c:96:0f:3e: 6f:11:67:ca:7a:5d:ca:1d:e5:3f:ec:86:3f:67:9a: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:5F:81:7F:91:08:F3:B4:46:2B:90:EA:BD:EC:EA:D0:8D:E5:7B:8B X509v3 Authority Key Identifier: keyid:C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1e:f2:8d:c9:6f:3a:40:61:52:29:9d:e3:e9:96:b6:44:b5: 28:51:9b:20:d7:70:09:cd:ce:2c:ab:3c:6b:f3:51:a5:29:53: bb:ec:7b:11:82:93:56:8f:e4:58:c4:37:0e:79:c1:4c:f8:c0: 94:a8:c1:5e:6a:87:76:07:7b:d8:e0:6d:ce:41:5e:d6:ea:8e: 79:37:59:c9:b7:f3:96:b5:79:47:80:bf:50:84:98:ca:0f:9f: ef:36:d4:81:52:58:1e:79:4b:46:39:49:03:a9:39:e7:74:cd: 87:e7:78:77:8e:2b:ce:cc:f6:a9:b1:f3:3c:fd:dc:99:77:24: f3:8a:3f:bc:d9:3f:68:cd:14:26:f3:56:e5:ea:70:39:90:20: bf:aa:f8:b8:e9:e8:25:49:4f:00:f2:39:46:c7:15:25:c3:90: 4d:b8:b6:a5:c1:4c:29:5f:67:e1:49:6b:81:7a:f8:56:3b:65: 70:22:e5:e1:30:94:7e:36:46:f9:ca:00:3e:01:81:5a:aa:f2: 4c:2d:47:b9:8c:42:02:ab:0d:f1:89:79:6b:0b:4b:39:86:92: e4:69:b1:1f:6b:23:a5:ac:b1:96:4f:1a:34:0c:53:51:9b:40: cc:ab:a7:c8:68:4e:db:b4:92:dd:3d:d1:a8:ec:af:68:26:26: 12:a4:35:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJBBPGA5UlR7oFWOPrhQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGU3MjM3ZjE0NTlhZmY0ZDVhZTA5NGJkMmM4NTI1NmUy ZTJlM2QwHhcNMjUxMjE1MTAwMDQ1WhcNMjUxMjE2MTAwMDQ1WjAzMTEwLwYDVQQD Eyg1MTVmODE3ZjkxMDhmM2I0NDYyYjkwZWFiZGVjZWFkMDhkZTU3YjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RCzuG1o4tT9CXVhLicCeTXuuqIf oYyq9RqXUG0sFv7SVzeRSLOoZp4K20fyPnV4fHnmXo0EKDHayev0EqbNGCqvspiY Pna5o7W0P+P1vD1btOosJqxFv8HyiG6ioiV+ZFCtS64dJNkURZI2du9cJ/NYOk+g DfVfqMv4jkqAXEGOkIwTyTJT2Lr0NrvY8WjzQ/12w81nyR4K2bZiMPzdUiOUqq6a hz1IIhEnln0ggp2JON4BPG8kG/PaRb/i+LvstAqXDOyvPA2v7Vclqnj18SJLBBUl RqrU5IAPuUVoPQsg3IgBVmFFFXs4VxyWDz5vEWfKel3KHeU/7IY/Z5rXSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFfgX+RCPO0RiuQ6r3s6tCN5XuLMB8GA1UdIwQY MBaAFMUOcjfxRZr/TVrglL0shSVuLi49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAt NTBkMDE4YmIwYmY2LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wMzY1MGMtZDdiYi00ZjEzLWIyMDAtNTBkMDE4YmIwYmY2 LzEveFE1eU5fRkZtdjlOV3VDVXZTeUZKVzR1TGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACh7yjclv OkBhUimd4+mWtkS1KFGbINdwCc3OLKs8a/NRpSlTu+x7EYKTVo/kWMQ3DnnBTPjA lKjBXmqHdgd72OBtzkFe1uqOeTdZybfzlrV5R4C/UISYyg+f7zbUgVJYHnlLRjlJ A6k553TNh+d4d44rzsz2qbHzPP3cmXck84o/vNk/aM0UJvNW5epwOZAgv6r4uOno JUlPAPI5RscVJcOQTbi2pcFMKV9n4UlrgXr4VjtlcCLl4TCUfjZG+coAPgGBWqry TC1HuYxCAqsN8Yl5awtLOYaS5GmxH2sjpayxlk8aNAxTUZtAzKunyGhO27SS3T3R qOyvaCYmEqQ1kw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:07:17 2025 by rpki-client