This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft File: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft (raw, json) Hash identifier: sb134kknwMHtzjQCRuF9h0vJLBdKY6sV4iuEtmEdf7o= Subject key identifier: 4B:BA:6F:11:BB:83:7A:71:DE:79:EC:A7:8C:00:10:D2:41:84:BB:0B Authority key identifier: 5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 Certificate issuer: /CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Certificate serial: 019AF1D221D2D1A6E3AB90268F66708967A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft Manifest number: 0425 Signing time: Sat 06 Dec 2025 04:01:11 +0000 Manifest this update: Sat 06 Dec 2025 04:01:11 +0000 Manifest next update: Sun 07 Dec 2025 04:01:11 +0000 Files and hashes: 1: Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl (hash: zstskSMNBcggtj2VAu4yLMSs1rlCn3z6Hrj3jiGKZZs=) 2: psFfy-RTu56maJeiy5fjnXb37D8.roa (hash: 3U2SBcmftDHrB6XiY4p/PlT03VqxC3zPorxDZ3WPMsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:21:d2:d1:a6:e3:ab:90:26:8f:66:70:89:67:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ea9fffaf09249b20cf7f567c3ccb9958b4f3110 Validity Not Before: Dec 6 04:01:11 2025 GMT Not After : Dec 7 04:01:11 2025 GMT Subject: CN=4bba6f11bb837a71de79eca78c0010d24184bb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:da:31:c2:12:5a:de:d7:cb:3a:71:f7:69: 3b:3d:6a:49:88:da:60:fa:b5:aa:34:28:9d:f0:37: ba:ae:f0:77:d0:6d:7c:80:d6:f5:55:bd:cb:bc:c4: e6:73:16:d5:73:a6:5e:f9:37:e2:8b:0a:93:06:b0: d0:34:45:62:3f:57:42:74:91:ae:69:43:4c:9f:ce: da:ca:70:2f:38:0c:cb:61:9d:1b:fa:55:f0:e3:08: 48:f5:42:43:1b:43:3d:f8:20:6d:56:b3:b5:71:6d: a5:5d:09:5d:fa:75:24:88:8a:c4:f5:18:d4:31:0e: 01:85:27:9f:9f:ad:f9:c8:58:98:b0:b3:42:ea:85: 6d:e4:29:b7:21:59:5d:6c:6a:f2:07:96:4e:26:f0: 07:35:81:42:4c:b5:ec:08:d0:42:6f:7d:a1:89:ef: a7:62:2b:e7:84:5b:0d:59:fe:8e:f7:3a:3c:0d:b2: dd:85:1c:5a:4a:0e:a6:fe:ea:7b:cc:f9:ac:08:7d: 2a:31:df:77:86:ba:53:12:72:ae:c4:4b:58:70:a0: 6b:da:5f:b5:dd:e7:11:77:62:aa:92:6f:ef:66:8f: de:1c:73:f4:52:b8:d8:69:61:75:69:e6:38:d9:a9: 13:0a:20:cb:ba:8a:e5:f3:d0:46:ec:91:d6:78:89: 26:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BA:6F:11:BB:83:7A:71:DE:79:EC:A7:8C:00:10:D2:41:84:BB:0B X509v3 Authority Key Identifier: keyid:5E:A9:FF:FA:F0:92:49:B2:0C:F7:F5:67:C3:CC:B9:95:8B:4F:31:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/61ed42-f722-4ba0-bd89-b549ffa04046/1/Xqn_-vCSSbIM9_Vnw8y5lYtPMRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d5:81:51:80:bc:6a:a6:e3:03:25:6e:8f:f0:13:5a:78:25: b0:07:6a:3a:4e:5e:39:cf:4a:5d:22:da:75:55:27:dc:34:96: 1e:1a:32:20:7c:3f:e0:06:f5:95:90:c6:84:c2:d5:ff:b6:2e: d5:3c:6f:07:40:ca:6d:05:03:b7:7c:10:0c:3e:7d:20:57:9e: b9:39:a9:90:44:c4:90:5f:05:89:55:a1:c2:7d:fa:d4:d6:ff: 40:ee:32:c8:d8:10:6d:e6:51:6c:88:91:7c:28:79:18:69:b1: 63:6e:ff:7b:e6:df:c4:de:84:27:85:87:90:51:b3:e0:4d:ec: 3d:ef:36:6f:95:98:a8:0e:fa:e8:f6:5a:c1:0e:e7:11:62:46: cd:f4:d5:53:e4:a4:58:0a:5d:87:07:3a:09:7a:99:36:48:94: 38:df:ff:ab:3a:0b:28:a7:21:77:96:1a:a8:0c:49:16:b9:68: 7d:47:5e:1c:6f:b1:8b:47:2c:dc:4b:b7:b4:2e:ef:24:a1:01: a6:d4:f1:0c:d9:79:e7:56:f8:49:99:1f:25:7e:7a:84:19:f8: 26:a7:4c:80:95:ec:d1:99:9c:68:49:7e:1f:9f:c1:6c:ae:d7: d2:c6:31:f4:dc:eb:34:6e:7f:08:0a:c1:3d:7f:71:b5:bc:73: 28:3a:68:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iHS0abjq5Amj2ZwiWejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYTlmZmZhZjA5MjQ5YjIwY2Y3ZjU2N2MzY2NiOTk1OGI0 ZjMxMTAwHhcNMjUxMjA2MDQwMTExWhcNMjUxMjA3MDQwMTExWjAzMTEwLwYDVQQD Eyg0YmJhNmYxMWJiODM3YTcxZGU3OWVjYTc4YzAwMTBkMjQxODRiYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5naMcISWt7Xyzpx92k7PWpJiNpg +rWqNCid8De6rvB30G18gNb1Vb3LvMTmcxbVc6Ze+TfiiwqTBrDQNEViP1dCdJGu aUNMn87aynAvOAzLYZ0b+lXw4whI9UJDG0M9+CBtVrO1cW2lXQld+nUkiIrE9RjU MQ4BhSefn635yFiYsLNC6oVt5Cm3IVldbGryB5ZOJvAHNYFCTLXsCNBCb32hie+n YivnhFsNWf6O9zo8DbLdhRxaSg6m/up7zPmsCH0qMd93hrpTEnKuxEtYcKBr2l+1 3ecRd2Kqkm/vZo/eHHP0UrjYaWF1aeY42akTCiDLuorl89BG7JHWeIkm6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu6bxG7g3px3nnsp4wAENJBhLsLMB8GA1UdIwQY MBaAFF6p//rwkkmyDPf1Z8PMuZWLTzEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODkt YjU0OWZmYTA0MDQ2LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82MWVkNDItZjcyMi00YmEwLWJkODktYjU0OWZmYTA0MDQ2 LzEvWHFuXy12Q1NTYklNOV9Wbnc4eTVsWXRQTVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAptWBUYC8 aqbjAyVuj/ATWnglsAdqOk5eOc9KXSLadVUn3DSWHhoyIHw/4Ab1lZDGhMLV/7Yu 1TxvB0DKbQUDt3wQDD59IFeeuTmpkETEkF8FiVWhwn361Nb/QO4yyNgQbeZRbIiR fCh5GGmxY27/e+bfxN6EJ4WHkFGz4E3sPe82b5WYqA766PZawQ7nEWJGzfTVU+Sk WApdhwc6CXqZNkiUON//qzoLKKchd5YaqAxJFrlofUdeHG+xi0cs3Eu3tC7vJKEB ptTxDNl551b4SZkfJX56hBn4JqdMgJXs0ZmcaEl+H5/BbK7X0sYx9NzrNG5/CArB PX9xtbxzKDpoZA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:50 2025 by rpki-client