This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json) Hash identifier: D40PoCeo6h2sNh1V+wv/NMSOvDokvExc8Net3SAoBgA= Subject key identifier: 30:7F:2D:C3:B5:90:03:38:EC:6E:81:90:24:89:51:D6:83:6B:DA:F2 Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Certificate serial: 019B35A0432A839EAC3C7AA8C26D074DB979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft Manifest number: 04E7 Signing time: Fri 19 Dec 2025 08:00:53 +0000 Manifest this update: Fri 19 Dec 2025 08:00:53 +0000 Manifest next update: Sat 20 Dec 2025 08:00:53 +0000 Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=) 2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=) 3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: LwVeaxDzZRm3OtYdOud6qaviGeko/n+3sB3HYylcEzM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:43:2a:83:9e:ac:3c:7a:a8:c2:6d:07:4d:b9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0 Validity Not Before: Dec 19 08:00:53 2025 GMT Not After : Dec 20 08:00:53 2025 GMT Subject: CN=307f2dc3b5900338ec6e8190248951d6836bdaf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:74:2b:ca:e4:6d:af:cd:13:2e:c7:ee:f7:96: 62:bb:48:90:6c:12:44:af:e3:3e:22:b0:eb:d1:57: 58:48:a0:da:c8:79:ca:a8:5e:09:0a:bd:ff:c3:d4: 42:cd:96:1c:36:bb:18:1d:51:6e:ad:90:b0:e0:ae: 6f:fe:19:00:e3:5d:d8:56:f9:8c:36:d2:eb:e4:31: d4:4b:f6:16:69:31:bf:9a:71:bd:68:59:58:16:60: 1b:b3:fa:27:7b:dd:e1:dc:85:2f:f9:36:29:d6:fe: 5b:b9:fe:f1:33:cf:e0:c8:01:13:c5:cb:e1:8c:fd: b9:1b:bf:5d:78:b1:47:cb:30:a0:66:02:7c:b8:7b: 1b:e4:02:c3:a0:db:80:9d:f0:29:6c:0a:09:99:f9: d5:2e:b9:f7:e6:93:af:bf:ab:d8:5d:91:92:ba:a7: 6e:7d:71:f0:39:c7:63:81:6c:67:fa:38:eb:e2:22: cb:2a:2e:a0:0a:7a:c3:06:e7:1e:73:9c:a1:a8:bc: d3:e0:73:32:9b:8e:da:78:55:6e:a1:fc:39:f1:15: 5a:ad:54:46:33:14:70:e2:a5:f7:58:d6:d7:d9:84: ba:d2:06:54:d3:5a:65:e5:88:de:fe:26:8b:48:2a: 96:c7:71:f3:80:0e:92:09:f8:e5:0b:8c:4b:14:5d: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:2D:C3:B5:90:03:38:EC:6E:81:90:24:89:51:D6:83:6B:DA:F2 X509v3 Authority Key Identifier: keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c1:0f:fa:2a:59:44:d2:94:c4:2f:29:60:c9:1e:04:f5:44: bf:ee:53:b7:de:ad:43:bd:3d:e8:f9:13:96:78:31:5b:96:89: 00:f9:7f:24:cb:7c:53:4a:4a:aa:fe:e3:84:33:15:d2:53:33: 43:61:12:12:3c:ce:08:7f:d9:62:4b:5f:9d:ac:d2:e1:8a:9e: 57:ee:80:0c:a1:20:92:e2:33:d2:28:9f:b8:33:fc:51:54:82: 99:b6:6e:d7:ff:e2:97:5f:bb:b7:dc:e6:59:41:94:05:1d:95: 72:84:9f:53:0e:60:9b:1a:fa:75:f5:a8:9f:7c:15:d2:14:64: 8a:b8:46:23:cc:18:e0:81:05:51:19:07:ac:df:c9:df:fc:f4: 7a:24:51:8d:1c:de:02:09:e2:5b:33:b4:cc:98:53:fb:5e:d4: 51:fa:c6:ed:93:97:a5:2b:e6:1d:87:13:04:f1:c8:e9:f9:d2: b1:0e:c2:ba:da:37:4c:a0:2a:30:99:72:55:fd:36:86:98:ea: 04:64:6b:e4:d6:78:97:e5:06:50:8a:6a:70:46:09:40:f3:7f: 15:76:8a:b7:0b:89:49:93:5e:61:8d:62:92:78:38:b9:d6:3a: ec:d0:fd:90:9a:fb:a8:e5:22:0a:e4:77:6c:a6:99:2c:f9:57: 75:9b:32:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEMqg56sPHqowm0HTbl5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1MGVlYTEzMDcyMWU5Y2QxOTc2ZmQ3ZTBmMzRjOTZkZjZl YWM2YjAwHhcNMjUxMjE5MDgwMDUzWhcNMjUxMjIwMDgwMDUzWjAzMTEwLwYDVQQD EygzMDdmMmRjM2I1OTAwMzM4ZWM2ZTgxOTAyNDg5NTFkNjgzNmJkYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXQryuRtr80TLsfu95Ziu0iQbBJE r+M+IrDr0VdYSKDayHnKqF4JCr3/w9RCzZYcNrsYHVFurZCw4K5v/hkA413YVvmM NtLr5DHUS/YWaTG/mnG9aFlYFmAbs/one93h3IUv+TYp1v5buf7xM8/gyAETxcvh jP25G79deLFHyzCgZgJ8uHsb5ALDoNuAnfApbAoJmfnVLrn35pOvv6vYXZGSuqdu fXHwOcdjgWxn+jjr4iLLKi6gCnrDBucec5yhqLzT4HMym47aeFVuofw58RVarVRG MxRw4qX3WNbX2YS60gZU01pl5Yje/iaLSCqWx3HzgA6SCfjlC4xLFF2RwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB/LcO1kAM47G6BkCSJUdaDa9ryMB8GA1UdIwQY MBaAFMUO6hMHIenNGXb9fg80yW326sawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQt NjNmNWZlMTEwZTc2LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84Yjc4NjctMGE3MC00NGNhLTgxZmQtNjNmNWZlMTEwZTc2 LzEveFE3cUV3Y2g2YzBaZHYxLUR6VEpiZmJxeHJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8EP+ipZ RNKUxC8pYMkeBPVEv+5Tt96tQ7096PkTlngxW5aJAPl/JMt8U0pKqv7jhDMV0lMz Q2ESEjzOCH/ZYktfnazS4YqeV+6ADKEgkuIz0iifuDP8UVSCmbZu1//il1+7t9zm WUGUBR2VcoSfUw5gmxr6dfWon3wV0hRkirhGI8wY4IEFURkHrN/J3/z0eiRRjRze AgniWzO0zJhT+17UUfrG7ZOXpSvmHYcTBPHI6fnSsQ7Cuto3TKAqMJlyVf02hpjq BGRr5NZ4l+UGUIpqcEYJQPN/FXaKtwuJSZNeYY1ikng4udY67ND9kJr7qOUiCuR3 bKaZLPlXdZsyoA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:15 2025 by rpki-client