This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json) Hash identifier: x0xz/TSksJ02RKo4p4xTl4jd1UY4Kp6Q7Cxf1Spbc68= Subject key identifier: 2B:8A:DE:F7:3A:93:8F:51:FC:69:52:DA:F9:A2:BC:9A:1E:C6:26:28 Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542 Certificate serial: 019AF164465C7280E2DF3E46FE2221D54762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft Manifest number: 06AE Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=) 2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: emEu/XjMGcJbzHEN1aKTkGxVkviWAMai4m3v5c9NFoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:46:5c:72:80:e2:df:3e:46:fe:22:21:d5:47:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542 Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=2b8adef73a938f51fc6952daf9a2bc9a1ec62628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:4a:d5:97:51:64:f7:9c:d7:ce:b9:0c:db: f4:57:50:37:df:8c:fd:a0:e5:a8:a3:80:fb:35:23: a1:0e:0a:f5:36:55:9a:6c:ae:03:a8:e9:eb:be:1f: 20:21:d4:aa:78:67:fc:8d:e3:e7:13:c2:a0:8c:ba: 0a:df:9c:28:dc:34:fc:83:eb:fb:80:d2:3f:64:4e: fd:9a:6c:77:4a:38:2a:20:6b:9c:4a:13:76:19:06: 83:ae:b0:d7:67:61:31:8c:be:24:00:ca:7b:ce:a2: 38:f0:3f:66:73:7c:76:f3:c4:4d:b9:1a:7f:af:97: 59:ff:a6:92:4c:5c:90:d9:af:da:72:d3:41:25:cb: 98:ae:f1:e9:96:45:76:b5:87:b4:fa:37:20:04:fa: 50:56:b4:8b:8d:3d:2a:df:c3:e0:45:ac:e2:37:e0: cb:29:39:47:21:8b:07:10:b5:54:4c:e9:04:87:02: cb:d2:30:d4:68:b0:bf:29:6a:e3:b4:3b:ed:5f:aa: e7:7b:52:66:0d:74:20:4f:11:74:bb:89:7d:da:05: a2:87:85:d8:dd:68:c2:38:51:a4:67:de:a8:78:9b: df:75:25:4f:d7:e7:08:85:a9:78:68:07:89:99:31: 0c:8f:90:8f:23:ba:56:c4:7a:66:aa:04:ae:15:ae: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:DE:F7:3A:93:8F:51:FC:69:52:DA:F9:A2:BC:9A:1E:C6:26:28 X509v3 Authority Key Identifier: keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:db:c0:61:c6:6e:74:86:74:81:13:cc:8c:7c:87:b9:a9:fb: 58:c4:5e:34:e3:21:c3:f1:7f:39:de:0a:84:98:2b:59:25:5a: b4:6c:1f:ac:f4:35:c6:e0:24:fd:eb:75:57:9f:4e:e5:04:cf: 87:06:ec:92:a7:75:d2:fd:54:4e:eb:33:cc:ad:bd:17:b9:c9: 04:dd:98:e4:40:03:9c:5f:11:ce:a2:56:7d:56:bc:ae:64:97: dd:62:a1:6b:b1:43:08:79:17:1b:4f:27:39:16:0b:90:48:72: da:25:ce:7e:86:e8:22:c7:6b:6b:16:69:46:7a:37:36:7d:e2: e7:8b:52:be:49:85:bb:c7:a5:af:b1:5c:a5:27:43:cd:76:7a: 6b:24:2e:f4:62:27:d0:8d:a0:4e:0c:a9:3a:62:be:67:a8:8a: cf:bf:5c:70:5f:b0:f3:13:5e:04:e1:31:0f:97:29:77:a7:39: be:46:e0:8a:d9:9e:72:a8:25:fa:e4:9b:ba:6d:4d:ac:5c:0a: da:5b:ee:b2:93:d5:b1:4c:5d:f2:de:f1:80:50:b4:70:84:db: b4:d9:68:91:da:30:ec:79:bb:37:51:8e:f1:bc:4a:56:aa:8d: 47:31:d7:27:73:3f:59:ba:48:6c:bb:23:0e:a0:de:9a:4b:8d: 70:e6:33:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEZccoDi3z5G/iIh1UdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi MmE1NDIwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EygyYjhhZGVmNzNhOTM4ZjUxZmM2OTUyZGFmOWEyYmM5YTFlYzYyNjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzdK1ZdRZPec1865DNv0V1A334z9 oOWoo4D7NSOhDgr1NlWabK4DqOnrvh8gIdSqeGf8jePnE8KgjLoK35wo3DT8g+v7 gNI/ZE79mmx3SjgqIGucShN2GQaDrrDXZ2ExjL4kAMp7zqI48D9mc3x288RNuRp/ r5dZ/6aSTFyQ2a/actNBJcuYrvHplkV2tYe0+jcgBPpQVrSLjT0q38PgRaziN+DL KTlHIYsHELVUTOkEhwLL0jDUaLC/KWrjtDvtX6rne1JmDXQgTxF0u4l92gWih4XY 3WjCOFGkZ96oeJvfdSVP1+cIhal4aAeJmTEMj5CPI7pWxHpmqgSuFa4p5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuK3vc6k49R/GlS2vmivJoexiYoMB8GA1UdIwQY MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNvAYcZu dIZ0gRPMjHyHuan7WMReNOMhw/F/Od4KhJgrWSVatGwfrPQ1xuAk/et1V59O5QTP hwbskqd10v1UTuszzK29F7nJBN2Y5EADnF8RzqJWfVa8rmSX3WKha7FDCHkXG08n ORYLkEhy2iXOfoboIsdraxZpRno3Nn3i54tSvkmFu8elr7FcpSdDzXZ6ayQu9GIn 0I2gTgypOmK+Z6iKz79ccF+w8xNeBOExD5cpd6c5vkbgitmecqgl+uSbum1NrFwK 2lvuspPVsUxd8t7xgFC0cITbtNlokdow7Hm7N1GO8bxKVqqNRzHXJ3M/WbpIbLsj DqDemkuNcOYz3A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:12 2025 by rpki-client