This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json) Hash identifier: ux/1ISNpqcsC/1qkeocRQZu6iqby0URY1fyzaO0KU0c= Subject key identifier: 73:14:FD:60:56:9E:1A:EE:DE:9A:79:2B:9E:E0:7B:25:80:C0:A2:AA Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0 Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0 Certificate serial: 019B2C6683E16CA26C928A46AE3605138929 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 13:01:14 +0000 Manifest this update: Wed 17 Dec 2025 13:01:14 +0000 Manifest next update: Thu 18 Dec 2025 13:01:14 +0000 Files and hashes: 1: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: y0Q4cTogHz4S0sv8GOca6Vj4cIFv8SdmXOxhzvAi87c=) 2: icvpeXMS_uKCnWLkyn6UUzwB7s8.roa (hash: Pp8lAhzmfS4jEBp01ZDfntlHhIVBCiJ5if9qUkUVyk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:83:e1:6c:a2:6c:92:8a:46:ae:36:05:13:89:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0 Validity Not Before: Dec 17 13:01:14 2025 GMT Not After : Dec 18 13:01:14 2025 GMT Subject: CN=7314fd60569e1aeede9a792b9ee07b2580c0a2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:eb:f4:54:5a:1d:13:52:24:9e:f1:ab:08:d2: 80:1b:b8:61:7a:2c:7d:de:8e:dc:55:d7:6c:95:a1: 83:63:6e:1c:de:2a:cc:c2:ba:02:cd:04:96:23:f4: 6d:d3:7d:1a:50:5f:e8:45:05:87:f1:04:06:9c:8d: be:1f:e1:7f:a9:c2:e1:31:ce:67:28:9a:80:b4:13: 1f:0c:08:c8:45:da:1c:83:01:1e:bc:7b:10:b8:a0: 03:8c:97:73:c9:2c:91:f4:12:96:6f:d0:bd:20:4b: 7b:cb:e4:e2:0b:11:c1:2d:aa:ed:95:0d:9b:80:65: d1:ea:a5:ce:18:d8:aa:21:33:d8:c0:4c:83:a5:ef: de:50:13:41:bc:7f:38:38:e1:60:9c:c6:2a:7c:f0: 63:58:30:cd:cd:3e:d3:b5:ba:66:f8:30:77:d5:4b: 0f:76:6b:b1:10:e9:e4:26:10:30:dc:44:fa:58:ae: 7d:c8:07:99:fe:0d:c4:9a:36:a6:2b:43:44:3a:a8: 58:7c:d4:7a:bb:a8:54:9d:c6:1f:c4:5b:41:1a:03: c0:fb:20:fa:09:96:08:66:ba:b5:bd:6a:d1:01:4f: 9b:6f:70:8a:28:7a:6a:ff:5f:46:94:84:32:a0:b2: df:9b:03:59:3b:c7:2f:0a:3e:94:05:38:3d:8b:00: d5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:14:FD:60:56:9E:1A:EE:DE:9A:79:2B:9E:E0:7B:25:80:C0:A2:AA X509v3 Authority Key Identifier: keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:76:af:38:ae:f3:a5:71:d3:30:88:ea:6c:20:28:59:67:9c: 86:78:5a:68:92:72:74:8f:d9:ca:ce:69:53:e1:cc:b9:24:0f: f0:51:c3:ad:85:15:1e:3d:e5:f2:da:79:17:19:64:18:36:86: 27:9e:08:55:f4:dd:93:20:d7:14:ee:78:2e:d6:bf:b5:7b:c3: c4:0c:67:87:ad:7a:13:f3:0f:50:2d:64:91:e9:c9:d8:fd:ab: 23:81:29:8b:14:9c:37:cc:50:7f:94:27:c1:02:60:1f:28:c8: 29:99:9d:e5:66:14:56:0c:78:47:b5:72:16:1f:e1:e8:54:e9: 19:94:98:d9:98:4f:f5:60:4b:2f:09:8e:94:a4:fd:77:dc:14: a3:dc:5c:a0:99:95:b5:de:d1:25:fd:85:04:f0:fd:d0:86:bb: 83:d5:f2:63:9f:91:03:f0:3d:ef:30:1a:42:b9:f8:cb:46:8f: e0:92:1c:6d:2e:74:af:fb:41:39:71:70:57:a9:64:b2:08:da: d9:5a:59:a6:fc:71:7c:bd:87:cc:02:4f:d3:b3:45:c4:66:73: a3:f7:3c:46:91:0c:5e:b3:8b:11:76:05:1c:30:1e:05:82:76: c6:ef:3d:19:bf:d8:b3:32:37:06:f1:05:26:92:60:b5:08:bc: f0:8a:76:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZoPhbKJskopGrjYFE4kpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlYWZjNjBmNGQzNDA5ZmI0NmM4YTViZjk1ZDM5ODFmMTRh MTQzYjAwHhcNMjUxMjE3MTMwMTE0WhcNMjUxMjE4MTMwMTE0WjAzMTEwLwYDVQQD Eyg3MzE0ZmQ2MDU2OWUxYWVlZGU5YTc5MmI5ZWUwN2IyNTgwYzBhMmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruv0VFodE1IknvGrCNKAG7hheix9 3o7cVddslaGDY24c3irMwroCzQSWI/Rt030aUF/oRQWH8QQGnI2+H+F/qcLhMc5n KJqAtBMfDAjIRdocgwEevHsQuKADjJdzySyR9BKWb9C9IEt7y+TiCxHBLartlQ2b gGXR6qXOGNiqITPYwEyDpe/eUBNBvH84OOFgnMYqfPBjWDDNzT7Ttbpm+DB31UsP dmuxEOnkJhAw3ET6WK59yAeZ/g3EmjamK0NEOqhYfNR6u6hUncYfxFtBGgPA+yD6 CZYIZrq1vWrRAU+bb3CKKHpq/19GlIQyoLLfmwNZO8cvCj6UBTg9iwDVcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMU/WBWnhru3pp5K57geyWAwKKqMB8GA1UdIwQY MBaAFF6vxg9NNAn7Rsilv5XTmB8UoUOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUt YmU4ZTY1MWM1MWY2LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82Mjg1ZjEtOGMxZC00ODQ0LWJlMGUtYmU4ZTY1MWM1MWY2 LzEvWHFfR0QwMDBDZnRHeUtXX2xkT1lIeFNoUTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3avOK7z pXHTMIjqbCAoWWechnhaaJJydI/Zys5pU+HMuSQP8FHDrYUVHj3l8tp5FxlkGDaG J54IVfTdkyDXFO54Lta/tXvDxAxnh616E/MPUC1kkenJ2P2rI4EpixScN8xQf5Qn wQJgHyjIKZmd5WYUVgx4R7VyFh/h6FTpGZSY2ZhP9WBLLwmOlKT9d9wUo9xcoJmV td7RJf2FBPD90Ia7g9XyY5+RA/A97zAaQrn4y0aP4JIcbS50r/tBOXFwV6lksgja 2VpZpvxxfL2HzAJP07NFxGZzo/c8RpEMXrOLEXYFHDAeBYJ2xu89Gb/YszI3BvEF JpJgtQi88Ip2Ew== -----END CERTIFICATE-----Generated at Wed Dec 17 19:09:38 2025 by rpki-client