This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft File: xVqjXdtQyQQ17M-VH024QHtsnJE.mft (raw, json) Hash identifier: 8L/k05UhRdp9fJY29uR4Img1WmoYuG+tXm0VhjodAPc= Subject key identifier: 20:76:24:42:FA:37:72:92:0F:CF:2C:D2:14:CB:63:11:D7:F2:0B:1D Authority key identifier: C5:5A:A3:5D:DB:50:C9:04:35:EC:CF:95:1F:4D:B8:40:7B:6C:9C:91 Certificate issuer: /CN=c55aa35ddb50c90435eccf951f4db8407b6c9c91 Certificate serial: 019AF0885F9385CFAC357678A99F06FE201A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft Manifest number: 78 Signing time: Fri 05 Dec 2025 22:01:00 +0000 Manifest this update: Fri 05 Dec 2025 22:01:00 +0000 Manifest next update: Sat 06 Dec 2025 22:01:00 +0000 Files and hashes: 1: TPncixwYmIuz9n6NlFCy5PBctYI.roa (hash: bqnMZCbxZe22sZEzFpGwkUovZ3/EHTx4NnFW3vAG4K4=) 2: xVqjXdtQyQQ17M-VH024QHtsnJE.crl (hash: SQna29r0wh6/H8ylqMNdEbcHIiSM5uOsDNTviwkTnV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5f:93:85:cf:ac:35:76:78:a9:9f:06:fe:20:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c55aa35ddb50c90435eccf951f4db8407b6c9c91 Validity Not Before: Dec 5 22:01:00 2025 GMT Not After : Dec 6 22:01:00 2025 GMT Subject: CN=20762442fa3772920fcf2cd214cb6311d7f20b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:c2:de:22:f3:48:a9:86:99:27:70:8e:4e: 80:e8:f0:9f:f1:23:59:d2:bb:28:b8:6f:dc:1f:15: a9:dd:66:63:b3:12:5f:0e:66:ad:b3:20:99:cb:40: 04:55:c3:e1:38:04:d7:6a:b6:1a:db:29:04:c3:9a: 02:c3:1e:1d:65:db:74:9c:86:18:38:06:30:c4:78: 8e:d3:ff:25:c2:1d:d7:c7:b6:03:a3:63:13:39:13: c4:fb:95:1b:2e:df:6d:6a:1a:c8:85:b4:75:a6:45: fc:36:81:56:0d:0b:be:58:5c:e4:07:16:b1:55:76: 81:4f:45:ce:2b:30:2a:f4:33:cf:7f:b2:e7:25:ac: 2d:a5:46:d7:07:37:da:08:50:d0:86:9f:d2:eb:12: e1:e9:6e:73:bc:be:91:aa:4d:e6:82:d1:ac:e5:56: f0:de:f8:83:a1:a2:75:c1:18:a8:ad:f0:62:68:37: 04:e2:02:0c:d5:fa:68:2f:e9:59:99:8c:3c:83:2a: fb:9d:d3:32:9c:a7:cb:fb:1f:de:9b:4d:89:92:b7: fe:a6:26:d0:79:bf:e1:b1:7c:a5:42:58:98:2e:23: 2e:72:23:7c:4a:68:5b:8e:d6:eb:02:5c:10:94:37: 2d:dd:33:f8:97:53:9a:a3:b7:8d:b3:e5:53:fe:3c: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:76:24:42:FA:37:72:92:0F:CF:2C:D2:14:CB:63:11:D7:F2:0B:1D X509v3 Authority Key Identifier: keyid:C5:5A:A3:5D:DB:50:C9:04:35:EC:CF:95:1F:4D:B8:40:7B:6C:9C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVqjXdtQyQQ17M-VH024QHtsnJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/b5670f-e44b-43c5-ab87-45dd9369f9b3/1/xVqjXdtQyQQ17M-VH024QHtsnJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a6:c9:1c:4e:b8:5c:98:eb:d7:37:ec:a5:b1:b2:15:e8:fc: b4:dd:8b:b1:ae:76:c5:8c:dd:2e:f8:6f:b8:e1:63:6c:35:31: 0d:5a:09:c3:43:b2:0f:f6:b7:68:56:d1:85:a5:12:42:49:d8: d1:02:0f:d6:33:bd:54:2f:1f:79:bb:65:25:1d:85:58:01:07: 3f:90:25:97:19:7f:bb:9e:2d:4b:86:b4:42:d2:9a:d7:ad:5e: e1:ce:d7:1a:b6:9e:9d:60:5a:07:7e:da:d3:84:ea:9c:a2:31: 96:34:e3:23:ab:e0:15:e4:a4:82:84:cb:2f:ff:d3:ae:63:63: 3a:bb:b6:60:99:d5:7e:97:14:e9:9c:d6:ff:b0:e4:3e:9c:fd: 50:e3:a8:06:39:12:fc:80:fb:5a:f6:d9:7d:d2:a0:40:4b:f8: f1:c7:ad:f5:ba:7f:41:cc:73:0e:8f:2a:f6:d9:b5:78:77:50: 28:da:ee:b6:5d:6c:dc:98:7a:fd:9b:57:0a:83:58:6f:63:a6: 93:cc:97:d5:e3:d4:ba:ec:26:f7:67:e1:83:b5:33:6a:7c:e5: 50:9e:08:2e:1f:2e:ff:b0:21:3a:ec:a6:7d:61:e4:7a:56:8e: 6b:e1:94:1c:1b:ca:51:1b:fc:f0:b3:68:18:3d:96:c3:79:e5: 88:6c:2d:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiF+Thc+sNXZ4qZ8G/iAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NWFhMzVkZGI1MGM5MDQzNWVjY2Y5NTFmNGRiODQwN2I2 YzljOTEwHhcNMjUxMjA1MjIwMTAwWhcNMjUxMjA2MjIwMTAwWjAzMTEwLwYDVQQD EygyMDc2MjQ0MmZhMzc3MjkyMGZjZjJjZDIxNGNiNjMxMWQ3ZjIwYjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTrC3iLzSKmGmSdwjk6A6PCf8SNZ 0rsouG/cHxWp3WZjsxJfDmatsyCZy0AEVcPhOATXarYa2ykEw5oCwx4dZdt0nIYY OAYwxHiO0/8lwh3Xx7YDo2MTORPE+5UbLt9tahrIhbR1pkX8NoFWDQu+WFzkBxax VXaBT0XOKzAq9DPPf7LnJawtpUbXBzfaCFDQhp/S6xLh6W5zvL6Rqk3mgtGs5Vbw 3viDoaJ1wRiorfBiaDcE4gIM1fpoL+lZmYw8gyr7ndMynKfL+x/em02Jkrf+pibQ eb/hsXylQliYLiMuciN8SmhbjtbrAlwQlDct3TP4l1Oao7eNs+VT/jwCMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB2JEL6N3KSD88s0hTLYxHX8gsdMB8GA1UdIwQY MBaAFMVao13bUMkENezPlR9NuEB7bJyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9iNTY3MGYtZTQ0Yi00M2M1LWFiODct NDVkZDkzNjlmOWIzLzEveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9iNTY3MGYtZTQ0Yi00M2M1LWFiODctNDVkZDkzNjlmOWIz LzEveFZxalhkdFF5UVExN00tVkgwMjRRSHRzbkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6bJHE64 XJjr1zfspbGyFej8tN2Lsa52xYzdLvhvuOFjbDUxDVoJw0OyD/a3aFbRhaUSQknY 0QIP1jO9VC8febtlJR2FWAEHP5Allxl/u54tS4a0QtKa161e4c7XGraenWBaB37a 04TqnKIxljTjI6vgFeSkgoTLL//TrmNjOru2YJnVfpcU6ZzW/7DkPpz9UOOoBjkS /ID7WvbZfdKgQEv48cet9bp/QcxzDo8q9tm1eHdQKNrutl1s3Jh6/ZtXCoNYb2Om k8yX1ePUuuwm92fhg7UzanzlUJ4ILh8u/7AhOuymfWHkelaOa+GUHBvKURv88LNo GD2Ww3nliGwtOg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:58 2025 by rpki-client